×
INTELLIGENT WORK FORUMS
FOR ENGINEERING PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you an
Engineering professional?
Join Eng-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Eng-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

hide IP addresses

hide IP addresses

hide IP addresses

(OP)
Not sure if this is the right location for this, or if there is an appropriate forum on this site... I'm pretty new to industrial networking concepts, if there's a better forum or site for this let me know!

I have a machine that uses 2 IP addresses (PLC and HMI) to communicate. These come into an unmanaged switch which also connects these devices to the plant network. The customer wants to see only one IP on their network though. Initially we thought a managed switch would do the trick, but it looks like even if communication is prevented the blocked IP will still be visible to the network. Speaking with a technical expert at one of our vendors pointed us to a Hirschmann EAGLE One, which will work, but has a lot of features we will not utilize, and is pretty expensive.

Are there any other options out there to hide an IP address from one device (the network) while allowing communication with another device?

RE: hide IP addresses

Maybe put a cheap router between your machine and the network. Then turn on its IP filtering and or DMZ permissions to allow the rest of the network to only reach the one IP.

I'd ask this question in Eng-Tips sister site Tek-Tips. Bunch of very smart computer nerds there.

Keith Cress
kcress - http://www.flaminsystems.com

RE: hide IP addresses

(OP)
Thanks Keith, I posed the question over there, we'll see how they respond. In the meantime, anyone one else feel free to chime in!

RE: hide IP addresses

Another vote for a cheap router.

Mike Halloran
Pembroke Pines, FL, USA

RE: hide IP addresses

Could you elaborate a little on the network nodes? When you say machine "uses" 2 addresses, do you mean it has 2 addresses or it communicates with 2 other nodes? Are the two addresses on one node (ie. one MAC address with 2 IP addresses) or are they two different nodes? If the machine needs to communicate with these two addresses, how do you suppose it will communicate if one is hidden? I'm sure I'm missing something, but as it stands it sounds like you're asking how to prevent the machine from working...

RE: hide IP addresses

(OP)
LiteYear, you reveal my ignorance on the issue! smile

The machine has two nodes, two addresses. These need to communicate with each other, and do so currently through an unmanaged switch. When the system is then attached to the network only one of the two IP addresses should be visible.

So the two nodes need to communicate with each other, but only one of the nodes is visible and can communicate with the outside network.

RE: hide IP addresses

The only way to do this is to use either a router or a firewall. I do not believe that it can be done with a managed switch. The reason being is that IP addresses are layer 3 while managed and unmanaged switches are layer 2 (for the most part). The router would probably be the least expensive route.

RE: hide IP addresses

Ah, gotcha, then yes I concur with the other suggestions.

I think the neatest way would be to have a simple dedicated router that the two nodes plug in to so they can talk to each other. The uplink port of the router would be connected to the switch. The router could be configured to be a "transparent bridge" for the node you want visible. That means that as far as the visible node and all the nodes on the wider network are concerned, there's only one network. Quietly though, the router is forwarding packets back and forth for the visible node.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Eng-Tips Forums free from inappropriate posts.
The Eng-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Eng-Tips forums is a member-only feature.

Click Here to join Eng-Tips and talk with other members! Already a Member? Login



News


Close Box

Join Eng-Tips® Today!

Join your peers on the Internet's largest technical engineering professional community.
It's easy to join and it's free.

Here's Why Members Love Eng-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close