Our Solution Areas
Industrial Communication Systems
Industrial networking, IoT, data communication and remote access systems.
An industrial network is not an office network moved onto the factory floor: here a late packet is not a slow-loading spreadsheet, it is an axis losing synchronisation. We design for two things at once — determinism that stays inside the cycle time budget, and a zone structure that separates the production network from the outside world. Solve them separately and you end up with a network that looks fine until it is loaded.
Where it pays off
Communication work reaches us in one of two ways: either a new line needs its network built from scratch, or a network that has run for years has started producing downtime nobody can explain. The second case is more common, and the symptoms are always similar — a drive that drops out once a week, a remote I/O station that occasionally raises a “communication lost” alarm, an operator panel that freezes at shift change. None of these looks like a fault on its own; together they destroy the line’s credibility.
The work we see most often:
- New line networks. Carrying control traffic, camera streams and reporting data over the same physical infrastructure without them colliding.
- Network troubleshooting. Narrowing down the source of dropouts in a running plant — cabling, switch configuration, addressing or load.
- Segmentation and security structure. Breaking a flat single network into zones and separating production traffic from office traffic.
- Remote sites. Bringing pump stations, wells, tank farms and energy sites — anywhere a cable cannot reach — back to a central system over cellular links.
- Legacy device integration. Moving meters, scales and drives that speak over serial links up to the higher layers through gateways.
How we work
We start with a cycle time budget. Which device has to be updated every few milliseconds, which data is fine once a second — without that distinction, a topology choice cannot be fixed later by adding switches. A motion control axis typically needs a sub-millisecond cycle with low jitter, while a temperature reading destined for a report is comfortable with several seconds. Carrying both on the same network without separating them means putting the critical traffic at risk for no gain.
Next comes the addressing plan and device naming. Profinet device names, EtherNet/IP addresses, Modbus slave IDs — all in one table, printed inside the panel and version-controlled in the file set. One of the biggest time sinks on site is not knowing what address a replacement part should be given.
Segmentation builds on that. Cell zones on their own VLANs; camera and vision streams on a separate segment with multicast traffic contained by IGMP snooping; a single defined conduit between production and office. Access between zones is opened as far as it needs to be and no further — the reverse approach, opening everything and closing it down later, never actually gets finished.
Redundancy is built with a ring topology where the process needs it, and delivered measured: we physically pull the cable and record the recovery time. Redundancy that has not been measured is an assumption, not redundancy.
The last step is commissioning tests: packet loss under load, multicast behaviour, ring failover and a check of the remote access path. Every topology works on an idle network; the differences appear when the line runs at full capacity.
What we watch for
Office switches do not belong on the floor. An unmanaged switch cannot contain multicast traffic, cannot prioritise and offers no diagnostics — and its lifetime inside a panel, at panel temperatures and with vibration, is short. A device that cannot answer “what is passing through which port” during a fault makes the network invisible.
Shielding and grounding are part of the network. A cable whose shield is connected at one end only, or not at all, raises the error counters the moment a drive starts. Faults of this kind are found in the cable route and the ground bar connection, not in the switch configuration.
Address conflicts are silent. Giving two devices the same IP does not bring the network down; it produces intermittent, non-reproducible behaviour. In plants without an addressing plan this is usually the root cause, and it is usually looked for somewhere else for weeks.
One-way data flow is preferred wherever it is possible. If only data needs to leave for the upper layers, opening write access in the return direction requires a justification. Reporting and monitoring need read access, nothing more.
How this connects to the other areas
The network is the infrastructure the control layer stands on: a correctly written PLC program still produces downtime on a poorly designed network, which is why we produce the network diagram as part of the industrial automation project rather than after it. Above the control layer the network is the carrier of data — every record flowing over OPC UA or MQTT becomes an input to the data acquisition and analytics layer. The physical side, meaning cable routing, shielding and panel layout, is planned together with electrical and electronics work.
Frequently asked questions
Does the production network really have to be separated from the office network? One network is easier to manage.
Easier to manage, not easier to live with. On a single network a broadcast storm or a backup job on the office side eats into the cycle time budget on the floor and starts producing PLC communication faults. The security side is even clearer: an office network is unavoidably exposed to the internet, to email and to USB media, and there is no technical reason for the production network to share that surface. This is exactly what the IEC 62443 zones and conduits model describes — divide the network into zones by function and route every crossing between zones through a defined, monitored conduit.
Can we not just forward a port to the PLC for remote access?
No. Direct port forwarding exposes a control device with weak or no authentication straight to the internet; most industrial protocols were designed without encryption or authorisation, so whoever reaches the port reaches the device. The correct setup is a VPN router that establishes the connection outbound from the site, with an access list behind it that permits only the devices actually needed. Being able to physically break the link with a key switch outside maintenance windows is a common request too, and a reasonable one to build in.
We want the line to keep running when the network breaks somewhere. How is that achieved?
With a ring topology. Switches form a closed loop, and when a single cable or a single device is lost traffic keeps flowing the other way around. What matters is the recovery time: classic STP takes seconds, which is far longer than a Profinet cycle, so the line stops anyway. That is why we use the vendor's fast ring protocols (MRP and equivalents), measure the actual recovery time, and then tune the communication fault tolerance on the control side to match that measurement.
We have legacy serial (RS-485) devices. Do they all have to be replaced?
Usually not. A meter, drive or weighing unit speaking Modbus RTU can be carried upward as Modbus TCP or OPC UA through a gateway. What needs attention is the limits of the serial link itself: baud rate, the number of devices on the same segment and the polling cycle set an upper bound on how fresh the data can be. If a measurement point genuinely needs sub-second resolution, replacing the device is worth discussing; for a meter read for reporting purposes it is not.
Related Solution Areas
-
Artificial Intelligence & Machine Learning
Data analytics, forecasting, computer vision and intelligent decision support systems.
-
Industrial Automation
We optimise your processes with PLC, SCADA, HMI and DCS systems.
-
Robotic Systems
Maximum production efficiency through industrial robot applications.
-
Machine Vision & Camera Systems
Quality control, measurement and automated inspection solutions.
-
Data Acquisition & Analytics
Real-time data acquisition, reporting and advanced analytics.
-
Electrical & Electronics
Control panel design, electrical engineering, circuit design and implementation.
-
Software & Application Development
Custom software development, mobile and web applications, system integration.
-
R&D & Consultancy
Innovative projects, technical consultancy and turnkey engineering.
Smart solutions, secure tomorrows
Let us carry your production into the future
Tell us about the bottleneck on your line and we will come back with a measurable improvement plan. Write to us for an initial discussion and requirement analysis.