Ločitev omrežja informacijske in operativne tehnologije

ŽIDANEK, KRISTJAN (author), Kos, Andrej (mentor)

Diplomsko delo se osredotoča na prikaz načina postavitve ločenega IT in OT omrežja. V uvodnem delu sta razložena pojma informacijske in operativne tehnologije ter nekateri protokoli, s katerimi se srečamo pri omenjenih tehnologijah. Omrežje je postavljeno v virtualnem okolju s programom GNS3, ki spada med omrežne emulatorje. Opisan je namen – zakaj izbrati tako postavitev, shema postavitve in prednosti le-te. Predstavljeno je delovanje omrežja, ki zajema segmentacijo, politike, usmerjanje in povezanost z drugim omrežjem. V zaključnem delu je ponazorjeno upravljanje omrežja v ExtremeCloud IQ Site Engine, kjer je opisan koncept dodajanja naprav v Site Engine in prikaz mape naprav, ki jo zgenerira le-ta na podlagi protokola LLDP. Namen diplomske naloge je prikazati pravilen pristop k postavitvi ločenega IT in OT omrežja ter prikazati, kako tak sistem deluje. Prav tako pa je cilj bralce bolj seznaniti z omenjenim pristopom.

• Language: Slovenian
• Keywords: OT, IT, omrežje, ločevanje, redundanca, varnost
• Work type: Bachelor thesis/paper
• Typology: 2.11 - Undergraduate Thesis
• Organization: FE - Faculty of Electrical Engineering
• Year: 2024
• PID: 20.500.12556/RUL-159430
• COBISS.SI-ID: 201414915
• Publication date in RUL: 10.07.2024

Secondary language

• Language: English
• Title: Separation of the information and operational technology network

Abstract

The thesis focuses on demonstrating the method of setting up a separate IT and OT network. The introductory part explains the concepts of information and operational technology, as well as some protocols encountered in these technologies. The network is set up in a virtual environment using GNS3, which is a network emulator. The purpose, why such a setup is chosen, the setup scheme, and its advantages are described. The network operation, including segmentation, policies, routing, and connectivity with another network, is presented. The final part illustrates network management in ExtremeCloud IQ Site Engine, describing the concept of adding devices to Site Engine and displaying the device map generated by Site Engine based on the LLDP protocol. The purpose of the thesis was to demonstrate the correct approach to setting up a separate IT and OT network and to show how such a system operates. Additionally, the aim was to familiarize readers more with the mentioned approach.

• Keywords: OT, IT, network, separation, redundancy, security