GE PACSystems* RX3i, Secure Deployment Manual

Page: 19 / 35

Chapter 3. Communication Requirements
12 PACSystems PROFINET IO Devices Secure Deployment Guide GFK-2904D
3.4
Ethernet Firewall Configuration
Network-based and host-based firewalls should be configured to only allow expected and required network
traffic. This section identifies the EtherTypes and the TCP/UDP ports used by the protocols supported on
PROFINET I/O Devices.
This information should be used to help configure network firewalls, in order to support only the required
communications paths for any particular installation.
Note: Refer to Figure 1 for a diagram showing firewall placement.
Lower-Level Protocols
Ethernet communication is typically described using four layers, each with its own set of protocols. At the top
of that hierarchy is the Application layer. Below the Application layer are the Transport, Internet, and Link
layers.
Information on the supported protocols from these three lower layers is summarized here.
Link Layer Protocols
Protocol ETHERNET Type
ARP 0x0806
LLDP 0x88cc
Internet Layer Protocols
Protocol ETHERNET Type IP Protocol #
IPv4 0x0800 (n/a)
ICMP 0x0800 1
IGMP 0x0800 2
Transport Layer Protocols
Protocol ETHERNET Type IP Protocol #
TCP 0x0800 6
UDP 0x0800 17
Each of these lower-level protocols is required by one or more of the Application protocols supported on the
PROFINET products.