Rockwell Automation Publication 1783-UM010C-EN-P - June 2019 99
Firewall Modes Chapter 8
Redundant Star Cell/Area Zone Protection
When a redundant star network configuration is required to meet redundancy
requirements, the IFW can have an architecture that supports redundant
Layer 2 EtherChannel links.
In Figure 27
, the IFW is placed between the distribution switch and the plant
floor equipment.
Figure 27 - Industrial Firewall Placement for Redundant Star Cell/Area Zone Protection
This architecture is typically used when the IFW monitors or blocks traffic at a
higher level in the network architecture and a redundant star network is
designed or deployed.