Public and private sector

Switching station with SCADA release

Measurements must leave the station without opening a way back in.

Area
Fiber & OT
Architecture patterns
1
Products used
7

The problem

What makes it hard

The control centre needs measurements and alarms from the substation. The substation’s control system must not be reachable from the office network. Fiber provides both the galvanic barrier against the switchgear and the carrier for a one-way release.

The diode card and the converter card share a chassis. That is convenient and it is a risk: an unplanned copper patch between two cards in the same rack can bypass the entire one-way barrier. The pattern below sets out how the room is arranged so that it cannot happen.

How it is built

One-way release from OT, with a controlled return

Out is the default. Anything coming back is a separate link with its own approval.

See the full pattern
Control system and historian on the inside, a diode out to reporting — and nothing back.OTITControl systemHistorianData diodeReporting and analysisreleaseno way in
Control system and historian on the inside, a diode out to reporting — and nothing back.OTITControl systemHistorianData diodeReporting andanalysisreleaseno way in
  • One-way path
  • Data path
  • Path that does not exist
Control system and historian on the inside, a diode out to reporting — and nothing back.

In the catalogue

Equipment from the catalogue

Built from: Data Diode Secure 1 Gbit SM 60-00-8362, Data Diode Secure 100 Mbit SM 60-00-8363, Ethernet Fiber Optical Dual Converter 100 Mbit 60-00-7423 and 4 more below.

Standard

Data Diode Secure 1 Gbit SM

Data rate
1 Gbps
Wavelength
Singlemode 1310 nm
Input, LC
1000 BaseLX

Product no 60-00-8362

Standard

Data Diode Secure 100 Mbit SM

Data rate
100 Mbps
Wavelength
Singlemode 1310 nm

Product no 60-00-8363

Standard

Ethernet Fiber Optical Dual Converter 100 Mbit

Secure rack-mounted module featuring two fully independent channels, specifically designed to prevent…

Product no 60-00-7423

Standard

Single Slot Unit AC

Fibersystem’s new enterprise-class 50-502 Rack System is engineered to deliver a flexible and easily…

Product no 60-00-6406

Standard

Single Slot Unit DC

Fibersystem’s new enterprise-class 50-502 Rack System is designed to provide a flexible, manageable system…

Product no 60-00-7231

Standard

Rack 19" 3 HU 16 Slots

Fibersystem’s enterprise-class 50-502 Rack System for 1-16 card modules is designed to provide a flexible…

Product no 60-00-6944

Standard

Ethernet Fiber Optical Dual Converter 1 Gbit

Secure rack-mounted module featuring two fully independent channels, specifically designed to prevent…

Product no 60-00-7425

Reading and references

Explained in

Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.

Sector

Environments

Environments with the same problem

The technology is the same; the buying process usually is not.

Hands soldering a circuit board under a work lamp

Next step

Describe your environment

If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.

Verified credentials

All certifications