Experimental Physics and
Industrial Control System

Bill McDowell <[email protected]> · Fri, 22 Jan 1999 13:47:24 -0600 (CST)

APS uses router technology to protect the control system from the
outside. The control system network is a separate subnet. Collaborative
Action Teams (Experimenters) assess EPICS data through a Channel Access
Gateway machine which is connected to the controls subnet as well as a
separate gateway subnet separate from all other subnets in the
facility. Software development is done  on a subnet which is separate
from both the controls subnet and the general office subnets. Access to
the control system from the offices is also done through the Channel
Access gateway machine(s). The Cisco IOS permits the use of access
control lists that allow filters to be constructed using the following
criteria:

Source IP address
destination IP address
transport layer type (TCP,UDP,ICMP)
source port
destination port

Outgoing telnet, ftp, rlogin, web, nntp, finger, real audio and video,
secure http, ssh and gopher are permitted.

There is a description of our 1997 network at:

http://www.aps.anl.gov/icalepcs97/schedual.html

Paper W3B-5

This network is being upgraded to a fully switched system with gigaabit
uplinks.

Bill McDowell

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System