Industrial Networking Solutions for OEMs: How Network Address Translation (NAT) Switches Work

The adoption of 1:1 Network Address Translation (NAT) switches by OEMs (Original Equipment Manufacturers) is becoming increasingly popular, and their power and benefits are becoming more evident to control engineers. Although network and architect engineers have been aware of their capabilities for quite some time, control engineers are starting to experience the benefits firsthand. Today, I’ll review 1:1 NAT switches, exploring their definition, functionality, and why they have become crucial for OEMs - and stay tuned to discover the transformative Phoenix Contact technologies driving this revolution. Let's get started!

Jump to a Section

What is Network Address Translation (NAT)? | How does Network Address Translation (NAT) work? | Advantages of NAT |  What are 1:1 NAT Switches? |  How do 1:1 NAT Switches Work? | Are 1:1 NAT Switches The Solution to My Problem? | How to Choose a Switch for Your Business: | Phoenix Contact Solutions | How to Use Phoenix Contact MGuard Software | Support and Expertise | Resources

1. What is Network Address Translation (NAT)?
   

2. 
   NAT changes one IP address to another (or several IP addresses to several IP addresses) so two network devices can talk without any IP address conflicts. 
3.  
4.  
5.  

6. How does Network Address Translation (NAT) work?

7. When a device on a network wants to communicate with another device outside of its network, it needs to have a unique IP address. However, not all devices on a network can have their own unique IP addresses due to limitations in the number of available IP addresses. This is where NAT comes into play. It assigns a single public IP address to the machine and uses internal private IP addresses for individual devices or machines within the network. When an internal device wants to communicate with an external device, NAT translates the private IP address to the public one and vice versa.
   
   

Advantages of NAT 

NAT offers numerous advantages worth considering. First up, 1:1 NAT switches facilitate seamless integration of a machine's network into a corporate or factory network. By changing IP addresses, NAT eliminates conflicts and ensures uninterrupted communication between devices from different networks. This becomes especially crucial when avoiding IP address clashes between machines and devices on plant networks. Most importantly, NAT contributes to network security by acting as a firewall, concealing private IP addresses behind a single public IP address. This added firewall layer of protection shields machines from direct attacks and unauthorized access attempts.

Also, NAT routers enhance network performance by optimizing IP address translation at the network sub-level. This optimization effectively reduces network traffic and latency, resulting in a smoother experience, particularly when multiple machines access external resources at the same time. But at the end of the day, I’d argue scalability and simplicity are the most profitable benefits of NAT routers, making IP address management more efficient. When expanding factories, NAT simplifies adding devices to the network by assigning private IP addresses without requiring additional public IP addresses - eliminating the need for manual IP address reconfiguration and simplifying device connectivity.

What are 1:1 NAT Switches?

1:1 NAT switches are essential network devices that seamlessly integrate a machine's network into a corporate or factory network. NAT eliminates conflicts between devices across different networks by translating internal IP addresses into external ones. This ensures flawless machine delivery to the end user without any IP address clashes on the plant network. In essence, 1:1 NAT switches act as mediators, enabling smooth and harmonious communication between diverse networks.

How do 1:1 NAT Switches Work?

Upon delivery, the OEM's machine network is configured properly. However, it is the end user's responsibility to integrate the network where the machine will operate alongside other devices. This is where 1:1 NAT switches come into play, serving a crucial purpose. Their primary function is to prevent IP address conflicts between the machine and the plant network. By translating internal IPs to external ones, visible to the plant network, 1:1 NAT switches seamlessly bridge the gap between different networks, ensuring smooth information flow. They are necessary for your network infrastructure to maintain efficiency and reliability.

Are 1:1 NAT Switches The Solution to My Problem?

The rise of Industry 4.0 and the Industrial Internet of Things (IIoT) is propelling the merging of industrial networks. As an example, factory floors today are experiencing a revolutionary shift as machines and devices seamlessly integrate into a unified network under the centralized control of a management system. Making necessary a departure from isolated networks for OEMs.

Here, utilizing 1:1 NAT switches presents an elegant solution to this challenge, offering OEMs the opportunity to effortlessly integrate their machines into plant networks with minimal complexity. Additionally, these switches empower OEMs with the flexibility to deliver machines to customers utilizing internal IP addresses, thereby mitigating any potential conflicts. With these advancements, industry professionals find themselves at the threshold of unlocking unprecedented efficiency and operational excellence.

As the benefits of network unification become more widely recognized, interconnectivity between machines has never been easier. By utilizing virtual local area networks (VLANs) in conjunction with 1:1 NAT switches, OEMs can segment and manage individual machines within their network. This capability not only provides superior control over machine access but allows for a greater degree of scalability and expansion. 

How to Choose a Switch for Your Business: 

When choosing the optimal 1:1 NAT switch for an OEM's machine, it is crucial to assess the factors carefully. These might include:

• Types of devices that need to be connected: port counts, WLAN, etc. 
• Network topology
  
• VPN considerations 
  
  

It is worth noting that many OEM machine manufacturers provide recommendations on NAT switches that have undergone extensive testing with their products. In deploying 1:1 NAT switches, OEMs should thoroughly evaluate the specific integration needs of both their machines and their customers. By doing so, they can ensure seamless performance and customer satisfaction.

Phoenix Contact Solutions 

At Airline, we recommend the MGuard product line, which includes the FL MGUARD 1100 series for NAT/Routing/Firewall needs. However, if you require more comprehensive features such as a virtual private network (VPN), mGuard Secure Cloud, and Device Manager software applications, the FL MGUARD 2100 series is a suitable choice. The VPN feature enables secure, encrypted connections for technicians to troubleshoot, modify code, and update firmware. Additionally, the mGuard Secure Cloud and Device Manager applications further support the hardware. It's worth noting that the SD card slot on the device allows for swift configuration of your preconfigured settings.

To access the settings/configurator of your MGuard, follow these simple steps: 

1. 1. Connect an ethernet cable from your computer's ethernet port to the LAN port on your MGuard (the bottom port on your two-port router).

2.  

3. 2. Open a browser and type in the default IP address (192.168.1.1). Please note that you might face difficulties accessing the web-based server (WBS) due to corporate network restrictions. If this happens, try restarting your computer and ensuring that you are not connected to a corporate VPN.
   
   

4.  
5. 

3. When accessing the web-based server, use the default login credentials "admin" for the username and "MGuard" for the password. For added security, it is recommended to change these credentials later.

4. Once you gain access, navigate to the left-hand menu column and click on Network<NAT to configure your NAT scheme based on your existing network.

5. If you need to establish rules for filtering incoming and outgoing data, you can do so at Network Security<Packet Filter. The provided screenshots will guide you to the firewall ruleset page.

6. You can use this device in “stealth mode,” preserving the existing network from changes. If the mGuard is in Stealth network mode, it is inserted into the existing network (see figure below) without changing the existing network configuration of the connected devices. Example Application: Activate stealth mode and set up a firewall to block all incoming and outgoing data with the exception of "MODBUS TCP" data. That way, the device is unrecognized on the network, only transmitting the needed communication protocol while filtering out unneeded information.

Support and Expertise

For comprehensive network support and expertise, you can always reach out to your Airline representative. Or Phoenix Contact can take complete ownership of your plant network with the “Network Engineering Service” team. Network Engineering Service (NES) specializes in the assessment, design, configuration, documentation, support, and training of your staff for your industrial network. 

Resources 

• FL mGuard by Phoenix Contact | How to Establish & Secure a Remote Network
• mGuard Manual
• Shop MGuard by Phoenix Contact
• mGuard Tutorial 2019: How to set up your mGuard w/ remote connectivity
•  Fl mGuard - Five Minute overview - Phoenix Contact 
• mGuard Testimonial: Applied in a High Production Work Cell
• How the mGuard saved Thanksgiving! 
• Phoenix Contact mGuard overview & best practices 
• mGuard Tutorial: configuration for Remote Connectivity Airline YouTube Channel Technically Speaking Blog