网络
现场常见问题
Office switches put into a plant or mine often don't last a year. The fan pulls in mineral dust, the cabinet runs above 50°C, and power dips every time a large motor starts. Worse, PLCs and SCADA often sit on the same network as office PCs, so one ransomware email can stop the line.
OT networks need different things from IT. They run 24/7, must recover fast from a cut cable and live in hostile conditions. We use fanless DIN-rail industrial switches with wide temperature ratings, dual DC power inputs and an IP rating matched to each location.
Ring redundancy and segmentation
ERPS (ITU-T G.8032) rings are designed to recover in around 50 ms, and several vendor ring protocols are in the same range. Plain RSTP is slower and not a good fit for real-time control.
We separate OT from IT using the IEC 62443 zones-and-conduits model, with an industrial firewall or DMZ in between. Production data the office needs can flow out through the DMZ without anyone getting a direct path to a PLC.
What we do differently on Lao sites
- IP54/IP65 enclosures with filtered fans or cabinet coolers. At dusty mines the filters need cleaning monthly, so it goes into the maintenance plan.
- UPS or battery-backed DC power, because site power dips constantly.
- Fiber between nodes, not copper, so lightning has nothing to follow.
- Spare switches kept on site. Ordering from Thailand and clearing the border can take weeks.
功能
Hardened switches
Fanless, wide-temperature, DIN-rail.
Fast-recovery rings
ERPS or vendor rings. One cut cable doesn't stop the line.
IT/OT separation
Zones and conduits following IEC 62443.
Dual power
Two DC feeds with battery backup.
Industrial PoE
Feeds outdoor cameras and APs from the same cabinet.
IP65 enclosures and cooling
Keeps out mineral dust and rainy-season humidity.
设计与实施
- 1
Survey production areas, PLC/SCADA assets and conditions
- 2
Define zones and conduits; design fiber rings
- 3
Install enclosures, switches and power
- 4
Put the firewall/DMZ between IT and OT
- 5
Test ring failover during a planned shutdown
适用场景
- Gold and copper mines with dust, vibration and distance
- Hydropower plants and substations
- Cement, sugar and agro-processing plants
- Automated lines in special economic zones
常见系统规模
Line
适用于: One line or 1–5 control panels
- Managed industrial switches
- Separate OT VLANs
- Redundant DC power
Plant
适用于: The whole plant
- Fiber ring and industrial core
- IT/OT firewall and DMZ
- IP65 enclosures with cooling
Mine / Utility
适用于: Sites spanning several km
- Multi-tier rings plus radio links
- OT monitoring and alerts
- Spares kit kept on site
我们供货并安装的品牌
所有品牌名称和商标归其各自所有者所有。除非另有明确说明，提及某品牌并不代表与其存在合作关系。产品均通过正规分销渠道采购。
常见问题
Can I use office switches in a plant?
In a clean air-conditioned room, yes. On the plant floor the fan sucks in dust and it was never built for 50°C. We've seen them fail within months.
Why separate IT and OT?
Ransomware that arrives in a staff email can reach HMI PCs and PLCs if they share a network. Separate them and if the office is hit, the plant keeps running.
Do you support Modbus TCP or PROFINET?
The Ethernet network carries them. PROFINET has its own switch and timing requirements, so we work with your automation integrator to get VLANs and QoS right.
相关指南
企业 VLAN 入门：隔离访客、摄像机和员工网络
什么是 VLAN，802.1Q 标签如何工作，100 人办公室的 VLAN/IP 规划示例，以及如何在不停机的情况下改造在用的扁平网络。
网管与非网管交换机：外观相似，差别很大
非网管、智能和全网管交换机有何不同，何时非网管仍够用，二层与三层，以及每台网管交换机都应做的八项设置。
Cat6、Cat6A 还是光纤：哪种线缆用在哪里
墙里的线缆比几代交换机都长寿。Cat6、Cat6A 与光纤的速率、距离和适用位置，用量计算示例，以及如何规范验收布线工程。
凌晨 2 点也能用的网络安全事件响应预案
基于 NIST SP 800-61 的 5–10 页预案结构、职责分工、邮箱被盗处置手册，以及如何用两小时完成演练。
相关解决方案
网络
综合布线Cat6/Cat6A 与光纤，两端贴标签，每条链路逐一测试，并移交竣工图纸。布线一次做对，可用 15 年以上。
企业局域网与交换核心–接入架构的局域网，划分 VLAN，上联冗余，PoE 供电充足。一根插错形成环路的网线，再也不会让整栋楼断网。
企业 Wi-FiWi-Fi 6/6E/7，AP 点位依据实测部署。会议室满员也能用，走动通话不断线，采用 WPA3 加密。
分支机构 SD-WAN外省分支同时使用两条互联网线路，一条故障另一条数秒内接管，全程加密。
光纤骨干与园区互联楼层、楼宇和站点之间 10–100 Gbps 光纤互联。光纤不导电，雷击不会沿线路从一栋楼传到另一栋。
点对点无线链路数公里 PtP/PtMP 无线链路，跨越道路和河流，连接无法布线的楼宇和站点。发给我们建筑平面图或几张现场照片
我们会先询问一些细节，再给出初步设计方案。首次咨询免费，可用老挝语、泰语或英语，通过 WhatsApp 或 Facebook 主页联系。