PROFINET-Switch FLEXtra

The FLEXtra PROFINET-Switch connects the control world with PROFINET according to Conformance Class B and the IT world with up to 1GBit Ethernet.

Request a Quote
SKU: N/A Categories: , , Brand:

Additional information

Number of Ports

16x RJ45, 12x RJ45 / 4x SFP, 8x RJ45, 2x SFP

Power over Ethernet

yes, without

Download

Technical Documentation
Name Version Size
PROFINET-Switch, FAQ 2 180 KB
Advantages of a PROFINET-Switch 4 2 MB
FLEXtra PROFINET-Switch 16-port, PROFINET-Certificate 82 KB
FLEXtra PROFINET-Switch 16-Port, Quick Start Guide 2 685 KB
FLEXtra PROFINET-Switch 16-port, Manual 3 2 MB
Flyers
Name Version Size
FLEXtra-PROFINET-Switch – Connect the Automation and IT worlds with just one device 10-2023 1 MB
Innovatively networking automation – PROFINET and Ethernet-Switches 10-2023 2 MB
License Agreements
Name Version Size
IPSet, OpenSource license terms 25 KB
Software
Name Version Size
IPSet 1.04.016 23 MB
FLEXtra PROFINET-Switch 16-Port, GSDML File 20211020 8 KB
FLEXtra PROFINET-Switch 16-port, Firmware V1.10.016 17 MB
FLEXtra PROFINET-Switch 16-port, Firmware History V1.10.016 3 KB
Planning Tools
Name Version Size
FLEXtra PROFINET-Switch, 16-port, STEP files 19 MB
FLEXtra PROFINET-Switch 16-Port, STEP files 31 MB

 

PROFINET-Switch FLEXtra 12x RJ45 / 4x SFP, managed, 1GBit

 

PROFINET-Switch FLEXtra 8x RJ45 / 2x SFP, managed, 1GBit

FAQ & SUPPORT

Background
Under certain circumstances, if an attacker with direct (physical) access to the PROFINET network attacks the devices using the DCP services of the PROFINET protocol, this can lead to a permanent loss of communication capability between the PROFINET controller and the PROFINET device. The reason for this lies in the nature of the DCP service provided by the PROFINET protocol. This DCP service can be used to change or reset device parameters via DCP command. Examples of this are DCP-Set (NameOfStation) or DCP-Set (Reset-to-Factory). No safety functions are provided for the use of DCP in the existing PROFINET specification.
Impact
Under certain conditions, an attacker – with direct access to the OT network – can prevent the PROFINET controller from establishing communication with a PROFINET device and thus disrupt the operation of the device. Manual intervention by the user is required. The device is not destroyed by an attack, it is simply no longer accessible to the CPU. A new assignment of the PROFINET name or IP address can restore device operation.
Measures
Helmholz recommends that its customers introduce or review a strict access policy for the network. Access from other zones to the PROFINET network must be restricted, in particular DCP services must be blocked. This can be achieved using a firewall or a suitable VLAN configuration.

Newer versions of the PROFINET specification address this problem by introducing PROFINET security in security class 1. Helmholz will successively implement PROFINET security class 1 for all active PROFINET components and make new firmware versions available.

Further Information
PROFINET Security Advisory: Improper Access Control for DCP Services (PNO Identifier: PISA-001).

Reviews

There are no reviews yet.

Be the first to review “PROFINET-Switch FLEXtra”

Your email address will not be published. Required fields are marked *

Discover