Cutting down network noise on an industrial control network

I have an automation controller that has built in 10/100 networking and uses TCP or UDP for communication with its operator interface, monitoring, data logging and programming. I had a lot of problems with the controller becoming unresponsive to any of its IP services (telnet, ftp, monitoring, HMI, etc.). I found out from the manufacturer that a busy network with PC's, printers and servers will overwhelm the simple TCP/IP stack of the controllers RTOS which causes the IP thread to hang (the CPU is only 62MHz). The controller keeps its critical threads running so its not dangerous to the machines function but without the IP interface, the operator interface is non functional and the machine cant be controlled.

I was told a managed switch would solve the problem as they only direct the packets to their intended destination instead all over the place. But I also see smart switches which advertise similar functionality at a lower cost.

So my question is can a smart switch cut down the network noise as well? I was looking at the specs on Netgear fully managed layer 2 switches as well as smart switches. From what I see, the fully managed switches have larger buffer memory. I have always liked Netgear and I can pickup a GS108T at my local Staples. Or should I opt for a real fully managed layer 2 switch?

What is a good brand of switch these days? I want to be sure that if the switch dies, I call someone to get one delivered next day.

And as a side note: the building network is connected through two 24 port dumb switches. I was told the entire building network should be upgraded to Layer 2 switches as well. Is it worth it?


If the devices are somehow to traffic caused by a busy network, then I think the switch feature you probably most need is support for VLANs. Put all the controllers on a completely separate VLAN and with the proper configuration they will not see traffic from anything on a different VLAN.

If you have a good core router, that supports VLAN trunking they you probably don't really need a very advanced switch, just support for VLANs, and VLAN trunking. If you don't have a router that can do VLANs, then you may need at least one layer 3 switch to do the routing and filtering of traffic between the networks.

There are a large number of switches that should work, I tend to prefer HP these days, since they seem to be relatively inexpensive, and easy to use. But I am sure many other vendors offer similar options.

Take a look at this question for more details on the common switch features that you should be looking for when making a buying decision.


From the way the question is posted I'm worried the answers given have not given a high enough overview to allow you to understand what they're recommending.

An Ethernet Hub broadcasts all traffic it receives on one port onto every other port. This means one computer communicating burdens the whole network. Summary: All traffic will be sent to all end points.

A Switch checks each packet and only forwards the packet to the port (or segment) on which the destination is located. This means that all other ports are free to simultaneously send/receive data and massively improves network speed. These are cheap now so no-one should ever use a hub. Summary: Most traffic will be sent directly to the destination, broadcasts and MAC discovery means some traffic will be sent to all end points

A Smart Switch is a switch with a web interface and a few Managed Switch features thrown in. This may include VLANS, basic QoS, Port Trunking and perhaps Spanning Tree. These are a cost effective way to get some Enterprise features into a small/medium business. Summary: Unless you set up VLANs this will behave exactly the same as a Switch.

A Managed Switch will usually have a full array of enterprise features inc Security, Port Mirroring, VLAN, IGMP snooping etc. Can get expensive quickly. Summary: Unless you set up VLANs, this will behave exactly the same as a Switch.

VLANs are a way of creating virtual LANs over common infrastructure. This way you can virtually segment the networks while running on the same physical hardware. Smart and Managed switches will have VLAN functions.

A Layer 2 switch (Unmanaged, Smart and some Managed Switches) process packets based on the MAC address. This means VLANs are the only way of fully segmenting some machines from receiving broadcasts from the other network. Summary: You set VLAN IDs on Devices or in the Switch on Ports and you define (virtually) which devices are (Virtually) connected to each other.

A Layer 3 switch (some Smart and some Managed Switches - price goes up steeply here!) can switch based on IP address, and act like a router. I've never used one but I assume this means you can segment networks using IP Subnets and Routing rules to prevent subnet traffic from reaching unintended machines. Summary: You contain most broadcast packets to individual subnets that won't be on-forwarded to non-relevant subnets.

Otherwise the simplest solution suggested above is physical separation, which is often easier than advanced configuration if you have enough cabling already to support it. Just install a separate switch for the network that's going to be separated.