Network Transparency via IP Forwarding Using Multiple BMENOP0300 Modules

IP Forwarding Example

You can enable IP forwarding in an M580 system with multiple BMENOP0300 modules.

On network 1 (control network), with the network address of 192.168.1.0/24, the PC (SCADA) configures the following IP addresses in each of the three BMENOP0300 modules:.
- NOP 1 (ETH1): 192.168.1.1
- NOP 2 (ETH2): 192.168.1.2
- NOP 3 (ETH3): 192.168.1.3

Set a Static Route

The PC (host A) resides in network 1, and can communicate with each of the BMENOP0300 modules in the local rack via the module’s network 1 IP address. For the PC to communicate with devices in networks 2, 3, and 4, set the IP address of each respective BMENOP0300 module in each respective network (2, 3, and 4) as the route for traffic.

For the PC (A) to communicate with intelligent electronic devices (IEDs) in network 2, add a static route to the PC:

c:\route ADD 192.168.2.0 mask 255.255.255.0 192.168.1.1
- 192.168.2.0 is network 2.
- 192.168.1.1 is the IP address of the BMENOP0300 module in network 2.
For the PC (A) to communicate with IEDs in network 3, add a static route to the PC:

c:\route ADD 192.168.3.0 mask 255.255.255.0 192.168.1.2
- 192.168.3.0 is network 3.
- 192.168.1.2 is the IP address of the BMENOP0300 module in network 3.
For the PC (A) to communicate with IEDs in network 4, add a static route to the PC:

c:\route ADD 192.168.4.0 mask 255.255.255.0 192.168.1.3
- 192.168.4.0 is network 4.
- 192.168.1.3 is the IP address of the BMENOP0300 module in network 4.

On each of networks 2, 3, and 4, each IED configures the direct connection to each BMENOP0300 module’s IP address as its gateway.

Network	NOP IP Address (ETH2/3)	IED IP Address	IED Gateway IP Address
2	192.168.2.1/24	192.168.2.2/24 – 192.168.2.254/24	192.168.2.1
3	192.168.3.1/24	192.168.3.2/24 – 192.168.2.254/24	192.168.3.1
4	192.168.4.1/24	192.168.4.2/24 – 192.168.2.254/24	192.168.4.1

A BME•58•••• CPU connects the local rack to the main ring.

A BMENOP0300 module is connected to: A) the control network (network 1) via port ETH1 and 6) network 2 via port ETH3.

A BMENOP0300 module is connected to: A) the control network (network 1) via port ETH1 and 7) network 3 via port ETH3.

A BMENOP0300 module is connected to: A) the control network (network 1) via port ETH1 and 8) network 4 via port ETH3.

On network 1 (control network), with the network address of 192.168.1.0, a PC uses the IP address 192.168.1.0/24.

network 2 with the address 192.168.2.0/24

network 3 with the address 192.168.3.0/24

network 4 with the address 192.168.4.0/24