STAGE ONE GOLDEN EGGS Visual Automation Configurations Stage One Computing Laurentsvej 27 DK-2880 Bagsværd Denmark +45 47382038 DISCLAIMER This document represents the current thaughts of Stage One Computing. Some of the configurations are tested at multible sites, and some configurations demonstrates concepts only, and have not been thorroughly tested in the specifically shown configuration in live applications. This document can be used for inspiration but does not serve the purpose of final documentation or validation documentation.
Overview Visual Automation Configurations, version 00c Main topic Drawing spcifics Dwg no. Version Safe external SattLine connection Data access via Internet 0001 0a Safe external SattLine connection Support setup via dial-up modem 0002 0a Safe external SattLine connection Support setup via dial-up router 0003 0a SattLine in a virtual environment Single machine installation 0004 0a SattLine in a virtual environment Single ESX server setup 0005 0a SattLine in a virtual environment Large plant installation 0006 0a SattLine in a virtual environment Multi plant installation 0007 0a Thin clients - 0008 0a SAP interface to automation systems - 0009 0a Clean room monitoring Concept 0010 0a Clean room monitoring Detailed concept 0011 0a Interface from SattLine 2.2 to Profibus 0012 0a Stage One Computing Laurentsvej 27 DK-2880 Bagsværd Denmark +45 47382038
Company Network Server in DMZ Firewall with DMZ Internet VPN Ipsec and i.e. SecurID Automation Network CNST 2008.11.15 Safe external SattLine connection Data access via Internet 0001
PCAnywhere PCAnywhere RS232 GSM Dial-up modem Westermo GDW-11 POTS Telephone network V56 Modem CNST 2008.11.15 Safe external SattLine connection Support setup via dial-up modem 0002
PCAnywhere GSM dial-up router Rockwell 9300 RADES POTS Telephone network PCAnywhere GSM dial-up router Rockwell 9300 RADES CNST 2008.11.15 Safe external SattLine connection Support setup via dial-up router 0003
SattLine Windows XP (or other) VPC Explorer.exe Windows XP SattLine Windows XP (or other) VPC Windows XP Hardware Hardware VPC is a type 2 hypervisor (requires a host operating system) CNST 2008.11.15 SattLine in a virtual environment Single machine installation 0004
One or more physical network interfaces Virtual Cisco switch A number of virtual computers ESX ESX are a type 1 hypervisor that runs on bare metal... CPU1 Hardware iscsi SAN CPU N RAM Other physical interfaces PRN, LPT1, COM1, COM2 Disk interface via common access SAN CNST 2008.11.15 SattLine in a virtual environment Single ESX server setup 0005
Thin clients Production Central Server room Control room - Min. 100Mbit fiber or cobber Fiber Fiber Fiber Fiber ESX CPU1 CPU2 Hardware 32 Mb RAM Vmotion ESX SattLine owner CPU1 CPU2 Hardware 32 Mb RAM iscsi SAN VirtualCenter HotPlug disks CNST SattLine in a virtual environment Large plant installation 2008.11.20 0006
Plant 1 Plant 3 Communication lines must be separated in order tosecure communication. Also switch equipment and cable ducts must be separated. 1 1 1 3 3 3 By dividing the virtual machines on several separated servers, a failure on a server or a cluster of servers has limited impact on production in a plant 1 2 3 1 2 3 1 2 3 Central server room Plant 2 2 2 2 Multible servers for High Availability failover CNST 2008.11.15 SattLine in a virtual environment Multi plant installation 0007
USB usage is restricted by own domain covering security policies for thin clients XP embedded Fiber and/or cobber connection xxx CNST 2008.11.17 Thin clients 0008
Production (Examples) OSI soft PI Corporate Integration SattLine C IF TEXT FILE C IF C interface developed by SOC partner SAP Procos II C/SQL Gateway Firewall ODBC IF SAP database e.g. MS SQL CNST 2008.11.20 SAP interface to automation systems 0009
Clean room site Central site Transmitter PLC When alarm sounds, horn can be shut off via button. The PLC is a standardized unit with 16 channels. Data are logged on the server. Deviation is generated automatically on the server based on pre-defined criterias. Operator The automaticly generated deviation is approved (ES) by user via ordinary IE browser. This also signs off the alarm. Administrative site IP65 11 touch PC in PLCcabinet Advantages All log data are collected in one place Required deviations are automatically generated (better compliance) Users have a standard user friendly browser interface for approval processes Relevant data can be sent to reports(batch wize, weekly basis etc.) Log data can be approved via electronic signature [ES] in IE browser CNST 2008.11.17 Clean room monitoring Concept 0010
CNST 2008.11.17 Clean room monitoring Detailed concept 0011
Fail Power Clock Power fail RESET Fail Power TD Mod RD Net RD x 1000 x 100 x 10 DIAL x 1 200-PSMG Power supply 24V DC Galvanic Separated 200-C 40/120 COM AUI 200-CIE Communication Interface CNST 2008.11.17 Interface from SattLine 2.2 to Profibus 0012
PAM access to Procos I/O ABB PINGE C CNST 2008.11.27 Interface to PROCOS PAM bus 0013