GE PACSystems RX3i - Ethernet Firewall Configuration; Lower-Level Protocols

Chapter 3. Communication Requirements
12 PACSystems PROFINET IO Devices Secure Deployment Guide GFK-2904D
3.4 Ethernet Firewall Configuration
Network-based and host-based firewalls should be configured to only allow expected and required network
traffic. This section identifies the EtherTypes and the TCP/UDP ports used by the protocols supported on
PROFINET I/O Devices.
This information should be used to help configure network firewalls, in order to support only the required
communications paths for any particular installation.
Note: Refer to Figure 1 for a diagram showing firewall placement.
Lower-Level Protocols
Ethernet communication is typically described using four layers, each with its own set of protocols. At the top
of that hierarchy is the Application layer. Below the Application layer are the Transport, Internet, and Link
layers.
Information on the supported protocols from these three lower layers is summarized here.
Link Layer Protocols
Protocol
ETHERNET Type
ARP
0x0806
LLDP
0x88cc
Internet Layer Protocols
Protocol
ETHERNET Type
IP Protocol #
IPv4
0x0800
(n/a)
ICMP
0x0800
1
IGMP
0x0800
2
Transport Layer Protocols
Protocol
ETHERNET Type
IP Protocol #
TCP
0x0800
6
UDP
0x0800
17
Each of these lower-level protocols is required by one or more of the Application protocols supported on the
PROFINET products.