Experion

Control Firewall
User's Guide
EP-DCX574
R300.0
10/05
 Notices and Trademarks

Copyright 2005 by Honeywell International Inc.

Release 300.0 October 31, 2005

While this information is presented in good faith and believed to be accurate, Honeywell disclaims
the implied warranties of merchantability and fitness for a particular purpose and makes no
express warranties except as may be stated in its written agreement with and for its customers.

In no event is Honeywell liable to anyone for any indirect, special or consequential damages. The
information and specifications in this document are subject to change without notice.

Honeywell, PlantScape, Experion PKS, and TotalPlant are registered trademarks of Honeywell
International Inc.

Experion is a trademark of Honeywell International Inc.

Other brand or product names are trademarks of their respective owners.

Honeywell International
Process Solutions
2500 West Union Hills
Phoenix, AZ 85027
1-800 343-0228

ii Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 About This Document
This document describes the installation, operation and maintenance of the Series C Control
Firewall (CF9).

Release Information
Document Name Document ID Release Publication
Number Date

Control Firewall User's Guide - cf9ug EP-DCX574 300.0 10/05

References
The following list identifies all documents that may be sources of reference for material discussed
in this publication.

Document Title

Contacts
World Wide Web
The following Honeywell web sites may be of interest to Process Solutions customers.

Honeywell Organization WWW Address (URL)

Corporate http://www.honeywell.com

Honeywell Process Solutions http://hpsweb.honeywell.com

R300.0 Experion Control Firewall User's Guide iii

10/05 Honeywell
Contacts

Telephone
Contact us by telephone at the numbers listed below.

Location Organization Phone

United States Honeywell IAC Solution 1-800-822-7673

and Canada Support Center

Europe Honeywell TAC-EMEA +32-2-728-2704

Pacific Honeywell Global TAC - 1300-300-4822

Pacific (toll free within Australia)
+61-8-9362-9559
(outside Australia)

India Honeywell Global TAC - +91-20-2682-2458

India

Korea Honeywell Global TAC - +82-2-799-6317

Korea

Peoples Honeywell Global TAC - +86-10-8458-3280 ext. 361

Republic of China
China

Singapore Honeywell Global TAC - +65-6580-3500

South East Asia

Taiwan Honeywell Global TAC - +886-7-323-5900

Taiwan

Japan Honeywell Global TAC - +81-3-5440-1303

Japan

Elsewhere Call your nearest

Honeywell office.

iv Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Symbol Definitions

Symbol Definitions
The following table lists those symbols used in this document to denote certain conditions.

Symbol Definition

ATTENTION: Identifies information that requires special

consideration.

TIP: Identifies advice or hints for the user, often in terms of

performing a task.

REFERENCE -EXTERNAL: Identifies an additional source of

information outside of the bookset.

REFERENCE - INTERNAL: Identifies an additional source of

information within the bookset.

CAUTION Indicates a situation which, if not avoided, may result in equipment

or work (data) on the system being damaged or lost, or may result in
the inability to properly operate the process.

CAUTION: Indicates a potentially hazardous situation which, if not

avoided, may result in minor or moderate injury. It may also be used
to alert against unsafe practices.

CAUTION symbol on the equipment refers the user to the product

manual for additional information. The symbol appears next to
required information in the manual.

WARNING: Indicates a potentially hazardous situation, which, if not

avoided, could result in serious injury or death.

WARNING symbol on the equipment refers the user to the product

manual for additional information. The symbol appears next to
required information in the manual.

R300.0 Experion Control Firewall User's Guide v

10/05 Honeywell
Symbol Definitions

Symbol Definition

WARNING, Risk of electrical shock: Potential shock hazard where

HAZARDOUS LIVE voltages greater than 30 Vrms, 42.4 Vpeak, or
60 VDC may be accessible.

ESD HAZARD: Danger of an electro-static discharge to which

equipment may be sensitive. Observe precautions for handling
electrostatic sensitive devices.

Protective Earth (PE) terminal: Provided for connection of the

protective earth (green or green/yellow) supply system conductor.

Functional earth terminal: Used for non-safety purposes such as

noise immunity improvement. NOTE: This connection shall be
bonded to Protective Earth at the source of supply in accordance
with national local electrical code requirements.

Earth Ground: Functional earth connection. NOTE: This

connection shall be bonded to Protective Earth at the source of
supply in accordance with national and local electrical code
requirements.

Chassis Ground: Identifies a connection to the chassis or frame of

the equipment shall be bonded to Protective Earth at the source of
supply in accordance with national and local electrical code
requirements.

vi Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Contents

INTRODUCTION .....................................................................................1
About this guide......................................................................................................... 1
Intended audience..................................................................................................................1
Prerequisite skills ...................................................................................................................1
How to use this guide .............................................................................................................1
Related Documents................................................................................................................1

CONTROL FIREWALL OVERVIEW .......................................................3

About CF9 ................................................................................................................... 3

CONTROL FIREWALL PLANNING AND DESIGN ................................5

General Planning References ................................................................................... 5
Identifying Control Firewall Components ............................................................... 5

CONTROL FIREWALL INSTALLATION AND UPGRADES ..................7

Installation Declarations ........................................................................................... 7
Installing CF9 Input/Output Termination Assembly CC-TCF901 .......................... 8
Prerequisites ..........................................................................................................................8
Considerations .......................................................................................................................8
Fiber media reference specifications....................................................................................10
To mount CF9 IOTA.............................................................................................................11
To wire CF9 IOTA ................................................................................................................12
Installing Control Firewall CC- PCF901 ................................................................. 14
Prerequisites ........................................................................................................................14
Considerations .....................................................................................................................14
To install CF9 .......................................................................................................................14
Upgrading Control Firewall Firmware.................................................................... 14

CONTROL FIREWALL CONFIGURATION ..........................................15

Adding CF9 to network............................................................................................ 15

R300.0 Experion Control Firewall User's Guide vii

10/05 Honeywell
Contents
Symbol Definitions

CONTROL FIREWALL OPERATION................................................... 17

Control Firewall Startup...........................................................................................17
CF9 LED Descriptions..............................................................................................18

CONTROL FIREWALL MAINTENANCE ............................................. 21

Periodic Checks........................................................................................................21
Recommended Spare Parts.....................................................................................21
Replacing Failed Control Firewall...........................................................................22

viii Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Contents
Tables

Tables

R300.0 Experion Control Firewall User's Guide ix

10/05 Honeywell
Contents
Figures

Figures
Figure 1 Control Firewall (CF9) and IOTA ......................................................................3
Figure 2 Typical Cable Connections in Series C Cabinet for CF9s, C300s and Series C
I/O Modules...............................................................................................................9
Figure 3 Mounting Dimensions for CF9 IOTA CC-TCF901 ..........................................12
Figure 4 Typical Connector Locations on CF9 IOTA ....................................................13
Figure 5 LEDs on CF9 ..................................................................................................18

x Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Introduction
About this guide
Intended audience
Personnel who are responsible for integrating Series C form-factor components with the
Experion system.

Prerequisite skills
Basic mechanical skills.
Familiar with using this Experion application:
Configuration Studio

How to use this guide

This guide is primarily a hardware reference for installing the Control Firewall in a
Series C cabinet and interpreting the light emitting diode (LED) indications.

Related Documents
For information about related functions and tasks, see:
Configuration Studio Overview
Fault Tolerant Ethernet Status Display User's Guide
Control Hardware Planning Guide

R300.0 Experion Control Firewall User's Guide 1

10/05 Honeywell
Introduction
0About this guide

2 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Overview
About CF9
The nine-port, Control Firewall (CF9) serves as the Fault Tolerant Ethernet (FTE)
communications center for a given Series C control network. It consists of a Control
Firewall module that plugs into its associated CF9 input/output termination assembly
(IOTA) as shown in the following figure.

Figure 1 Control Firewall (CF9) and IOTA

R300.0 Experion Control Firewall User's Guide 3
10/05 Honeywell
Control Firewall Overview
0About CF9

The CF9 provides eight ports for FTE connections to C300s and Series C FIMs within a
Series C cabinet as well as FTE Bridge modules (FTEB) in a Series A Chassis I/O
chassis. It has a ninth port for an uplink connection to the supervisory FTE network and
level 2 control area. It provides network security by
Rejecting all Ethernet messages not needed for control,
Giving priority to traffic on downlink ports over ingress traffic on the uplink port, if
the fabric becomes saturated, and
Allowing only valid C300-compliant messages to pass on to the C300 domain.

4 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Planning and Design
General Planning References
Please refer to the following Knowledge Builder publications for planning and design
details for the Experion system in general and the Fault Tolerant Ethernet supervisory
network. For the sake of brevity, this Guide does not repeat the applicable general
guidelines, considerations, cautions, and so on that are covered in these other Guides.
Control Hardware Planning Guide
Server and Client Planning Guide
Fault Tolerant Ethernet Overview and Implementation Guide

Identifying Control Firewall Components

The following table identifies the Control Firewall components that will be needed to
provide a FTE interface with a Series C control system. The CC prefix in a model
number means the components printed wiring boards are coated to provide additional
protection from the environment and the CU prefix means the boards are uncoated.

Component Description Honeywell Model

Number

Control Firewall Module mounts on CF9 Input/Output CC-PCF901

Module (CF9) Termination Assembly (IOTA).

CF9 Input/Output Provides physical connection to Control CC-TCF901

Termination Firewall module and FTE cables. Mounts
Assembly (IOTA) on carrier in Series C cabinet.

Ethernet Cables Please see Planning Your Series C

Control System In Control Hardware
Planning Guide for information about
Ethernet cables.

Single Mode Fiber FTE Single-Mode Fiber Module that CC-FSMC01

Module (SMFIO) plugs into one port of IOTA.

Multi-Mode Fiber FTE Multi-Mode Fiber Module that plugs CC-FMMC01

Module (MMFIO) into one port of IOTA.

R300.0 Experion Control Firewall User's Guide 5

10/05 Honeywell
Control Firewall Planning and Design
0Identifying Control Firewall Components

6 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Installation and Upgrades
Installation Declarations
ATTENTION
This equipment shall be installed in accordance with the requirements of the
National Electrical Code (NEC), ANSI/NFPA 70, or the Canadian Electrical
Code (CEC), C22.1. It is intended to be mounted within an enclosure or
suitable environment acceptable to the local authority having jurisdiction, as
defined in the NEC, or authorized person as defined in the CEC.

ESD HAZARD
Electrostatic discharge can damage integrated circuits or semiconductors if
you touch connector pins or tracks on a printed wiring board. Follow these
guidelines when you handle any electronic component:

Touch a grounded object to discharge static potential,

Wear an approved wrist-strap grounding device,
Do not touch the wire connector or connector pins,
Do not touch circuit components inside a component,

If available, use a static safe workstation,

When not in use, keep the component in its static shield box or bag.

WARNING
Unless the location is known to be non-hazardous, do not:

connect or disconnect cables,

install or remove fuses, terminal blocks, and so on,

while the component is powered.

R300.0 Experion Control Firewall User's Guide 7

10/05 Honeywell
Control Firewall Installation and Upgrades
0Installing CF9 Input/Output Termination Assembly CC-TCF901

Installing CF9 Input/Output Termination Assembly CC-

TCF901
Prerequisites
Carrier channel assembly (CCA) for mounting IOTA is installed in a cabinet.
Series C power supply is installed.
All wiring and pre-fabricated cables are available and labeled as applicable.
You have the mounting hardware supplied with the components.

Considerations
Be sure the enclosure is connected to a protective earth ground using #8 AWG solid
copper wire. There should be metal to metal contact between the grounding bus bar
and the enclosure as well as the carrier.
You are responsible for observing all local ordinances governing the wiring and
installation of electrical equipment.
The default location for the two (redundant) Control Firewalls is the top two
locations on the left most carrier channel assembly (CCA) in the Series C cabinet, as
shown in the following figure. It is more convenient to make Ethernet connections to
vertically adjacent CF9 IOTAs.

8 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Installation and Upgrades
Installing CF9 Input/Output Termination Assembly CC-TCF901

Figure 2 Typical Cable Connections in Series C Cabinet for CF9s, C300s

and Series C I/O Modules

Do not mix FTE A link cables (yellow) and FTE B link cables (green) on the
same IOTA, since this will cause erroneous communications
The nine FTE ports on the CF9 IOTA are standard RJ-45 type jacks, each of which
accepts an 8-pin Ethernet shielded twisted pair (STP) cable with an RJ-45 plug.
Do not use the 30-pin connector on the IOTA. It is for factory use only.

R300.0 Experion Control Firewall User's Guide 9

10/05 Honeywell
Control Firewall Installation and Upgrades
0Installing CF9 Input/Output Termination Assembly CC-TCF901

Fiber media reference specifications

Single-Mode Fiber Optic module CC-FSMC01

This module uses a dual-jacketed, dual-fiber cable (yellow) with an LC connector. Its
applicable specifications are as follows.

Medium Single-Mode Glass Fiber 9/125

Wavelength 1300 nm

Maximum Distance 15 km (9 miles)

Connector LC

Voltage 3.3 V

Temperature Industrial -40 C to +85 C (-40 F to +185 F)

Form Factor SFP

Power 1 W Approximately

Multi-Mode Fiber Optic modules CC-FMMC01

This module uses a single-jacketed, dual-fiber cable (Orange) with an MT-RJ connector.
Its applicable specifications are as follows.

Medium Multimode Dielectric Fiber 62.5/125

Wavelength 1300 nm

Maximum Distance 2 km (1 mile)

Connector MT-RJ

Voltage 3.3 V

Temperature Industrial -40 C to +85 C (-40 F to +185 F)

Form Factor SFF

Power 1 W Approximately

10 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Installation and Upgrades
Installing CF9 Input/Output Termination Assembly CC-TCF901

To mount CF9 IOTA

Step Action
1 Select desired mounting location on carrier and align mounting holes in IOTA
with screw hole locations on the carrier. See the following dimension drawing
for details.
2 Be sure component side of IOTA is facing up. Secure IOTA to carrier using
screws, washers and spacers provided. Insert spacers and washers between
bottom of IOTA and top of carrier.

3 Repeat Steps 1 and 2 to mount the second CF9 IOTA immediately below the
one that was just installed.
4 This completes the procedure. Go to To wire CF9 IOTA for connection
details.

R300.0 Experion Control Firewall User's Guide 11

10/05 Honeywell
Control Firewall Installation and Upgrades
0Installing CF9 Input/Output Termination Assembly CC-TCF901

Figure 3 Mounting Dimensions for CF9 IOTA CC-TCF901

To wire CF9 IOTA

Step Action
1 Connect yellow FTE cable from FTE A link, L1/L2 Ethernet switch to the
J3 connector on the Control Firewall (CF9) to be used as the FTE A link
(yellow cable).
Connect green FTE cable from FTE B link, L1/L2 Ethernet switch to the J3
connector on another Control Firewall (CF9) to be used as the FTE B link
(green cable) redundant IOTA.
2 Route yellow cables from four J4 and four J5 connectors on the CF9 for FTE
A links to corresponding FTE A ports on C300s, Series C FIMs, and FTE
Bridge modules, as required.

12 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Installation and Upgrades
Installing CF9 Input/Output Termination Assembly CC-TCF901

Step Action
3 Route green cables from four J4 and four J5 connectors on the other
redundant CF9 IOTA for FTE B links to corresponding FTE B ports on
C300s, Series C FIMs, and FTE Bridge modules, as required.
4 Tighten the screws in terminals 24 Vdc + and COM (logic ground) to the
vertical bus bar to connect to the cabinet resident 24 Vdc power supply to
both CF9s.
9 This completes the procedure. Go to the next section.

Figure 4 Typical Connector Locations on CF9 IOTA

R300.0 Experion Control Firewall User's Guide 13

10/05 Honeywell
Control Firewall Installation and Upgrades
0Installing Control Firewall CC- PCF901

Installing Control Firewall CC- PCF901

Prerequisites
You have installed CF9 IOTA on carrier channel assembly in a cabinet.

Considerations
The IOTA and CF9 module are keyed, so you cannot install any other Series C module
on a CF9 IOTA.

To install CF9

Step Action
1 Align CF9 connector pins over connector/slot on IOTA.
2 Carefully press down on the CF9 module until it is fully seated in the
connector.
3 Use the three screws provided to secure the CF9 module to the IOTA.
4 Repeat Steps 1 to 3 to install other CF9s on their IOTAs, as required
5 This completes the procedure. Go to the next Section.

Upgrading Control Firewall Firmware

You can update CF9 firmware through the Network tree in Configuration Studio. Please
see System Definition and Configuration Help in Configuration Studio for more
information.
Refer to the Software Change Notice (SCN) supplied with your Experion system for the
latest firmware version and file location details.

14 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Configuration
Adding CF9 to network
You can add a CF9 to be visible on the Network Tree in Configuration Studio. Please
refer to the Add Honeywell 9-Port Switch topic in the System Definition and
Configuration Help in Configuration Studio for details.

R300.0 Experion Control Firewall User's Guide 15

10/05 Honeywell
Control Firewall Configuration
0Adding CF9 to network

16 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Operation
Control Firewall Startup
The following table summarizes the stages the CF9 goes through after power is applied
to its IOTA during startup. The CF9 repeats these stages every time power is cycled
Off/On or the pins on its reset pad are shorted.

Stage Description
1 Power Light Emitting Diode (LED) lights (green)
2 Status LED cycles through red, green, and amber while the CF9 runs its
power-on self test (POST).
3 When the CF9 POST completes, the Status LED turns green and the FTE
port LEDs flash green and off for all connected ports. The LEDs for
unconnected FTE ports are off.

R300.0 Experion Control Firewall User's Guide 17

10/05 Honeywell
Control Firewall Operation
0CF9 LED Descriptions

CF9 LED Descriptions

The following illustration and table identify and describe the indications associated with
the LEDs on the CF9.

Figure 5 LEDs on CF9

18 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Operation
CF9 LED Descriptions

LED State

Off Steady Red Blink Off Green

Green Flash

Power No Power Pow10er - - -

On See
Note 1

Status No Power Normal See - See Note 4

Operation Note 2

Downlink No Power Link - See Note 3 Normal Operation

Ports 1 to 8 or Present,
No Cable No Traffic
Connected

Uplink Port No Power Link - See Note 3 Normal Operation

or Present,
No Cable No Traffic
Connected

Notes:

1. The - indicates the LED is never in this state.

2. Cycles through red, green, and amber during POST or cyclic redundancy check (CRC).

3. There is a packet within the last timeout period.

4. The CF9 has detected a soft failure and is working in a diminished state. The typical cause is
a disconnected uplink port cable.

R300.0 Experion Control Firewall User's Guide 19

10/05 Honeywell
Control Firewall Operation
0CF9 LED Descriptions

20 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
 Control Firewall Maintenance
Periodic Checks
The following table identifies checks that you should make periodically (every 3 to 6
months) to keep the CF9 in good working condition.

Check . . . Possible Corrective Action . . .

That all light emitting diodes (LED) are If LED is not lit or has dimmed, you must
working. replace the CF9 module, since LEDs are
not field replaceable.

That all connections are secure. Secure connections, as needed.

That cable insulation is not worn or Replace cables, as required.

cracked.

That IOTA is secure. Tighten mounting screws.

Recommended Spare Parts

The following table provides a list of parts that you may want to keep on hand for
backup.

Part Name Part Number Description Quantity

per 10/100

Control Firewall CC- or CU-PFB401 Series C Control Firewall Module 1/5

CF9 IOTA CC- or CU-TFB401 Nine-Port Ethernet Input/Output 1/2

Terminal Assembly

Fuse 51506348-341 800 mA, quick-acting fuse on Input 4/25

Output Terminal Assembly

SMFIO CC-FSMC01 Single-Mode Fiber Optic Module Optional

MMFIO CC-FMMC01 Multi-Mode Fiber Optic Module Optional

R300.0 Experion Control Firewall User's Guide 21

10/05 Honeywell
Control Firewall Maintenance
0Replacing Failed Control Firewall

Replacing Failed Control Firewall

Just reverse the steps in the previous installation procedures for mounting and wiring the
CF9 and its associated IOTA, as required. You can replace the CF9 module without
removing the IOTA. Please observe the following cautions and warnings.

CAUTION
We recommend that you proceed with extreme caution whenever replacing
any component in a control system. Be sure the system is offline or in a safe
operating mode.

Component replacements may also require corresponding changes in the

control strategy configuration through Control Builder, as well as downloading
appropriate data to the replaced component.

WARNING
Unless the location is known to be non-hazardous, do not:

connect or disconnect cables,

install or remove fuses, terminal blocks, and so on,

while the component is powered.

22 Experion Control Firewall User's Guide R300.0

Honeywell 10/05
R300.0 Experion Control Firewall User's Guide 23
10/05 Honeywell
Honeywell International
Process Solutions
2500 West Union Hills
Phoenix, AZ 85027