Honeywell CC‐PCF901

Product Introduction CC-PCF901 is the hardware control firewall module for Honeywell Experion PKS Fault Tolerant Ethernet FTE network. It is installed on matching CC-TCF901 CF9 IOTA base. It provides hardware layer traffic filtering and network isolation for C300 controller FTE control network. It blocks unauthorized non-control network traffic, suppresses broadcast storm and multicast storm, and protects the deterministic scan cycle of C300 control logic. It is the core network security component for critical process control network segmentation.

Category:

Description

Honeywell CC‐PCF901

Technical Specifications

  • Port Configuration: 8 × 10/100Mbps FTE RJ45 ports, 1 × 10/100/1000Mbps uplink RJ45 port
  • Network Protocol: FTE, IEEE 802.3, ISA Secure CSA L2
  • Port Auto Negotiation: 10/100Mbps full/half duplex
  • Working Temperature: 0°C to +60°C
  • Storage Temperature: -40°C to +85°C
  • Relative Humidity: 5% to 90% RH non-condensing
  • Isolation Voltage: 1500VAC between control network and uplink network
  • Power Consumption: 7.2 W maximum
  • Mounting: Plug-in on CC-TCF901 IOTA rack base
  • Certification: UL, C-UL, CE, ISA99 cybersecurity compliance

Functional Features Hardware-level layer 2 traffic filtering without CPU software delay. It suppresses broadcast storm and multicast storm automatically. It supports FTE redundant network communication. It classifies and forwards control protocol packets and discards invalid non-control packets. It supports hot swap replacement. It provides port status LED for each RJ45 port. It supports network fault diagnostic and port link alarm upload to Experion PKS. It prevents IT network traffic from interfering real-time control network.

Application Scenarios Petrochemical plant Experion PKS FTE control network segmentation Refinery critical process control network security isolation Chemical plant DCS control network and office network boundary protection Power plant boiler control FTE network firewall Offshore platform process control network security Experion PKS C300 cabinet network spare replacement

Performance Parameters

  • Forwarding Latency: less than 8 microseconds per packet
  • Insulation Resistance: greater than 1000 MΩ
  • Mean Time Between Failures: 660000 hours
  • Maximum Packet Filtering Rate: 148800 packets per second
  • Link Fault Detection Time: less than 10ms

Material Composition FR4 flame retardant PCB with conformal coating Industrial hardened layer 2 switching ASIC Isolation network transformers for each RJ45 port TVS surge protection components for each network port ABS flame retardant front panel Bi-color link / activity LED indicators Metal locking buckle for IOTA base

Structural Features Standard CF9 plug-in module form factor. Front panel exposes all 9 RJ45 ports and port LED indicators. Side anti-misalignment key prevents installation on non-CF9 IOTA. Rear gold finger connector mates with CC-TCF901 IOTA base backplane. Internal circuit is separated into FTE port zone and uplink port zone. Lock clip secures module on IOTA base.

Working Principle All incoming Ethernet packets enter the hardware ASIC chip. The ASIC identifies packet protocol and MAC address. It forwards valid FTE control packets to designated ports and discards non-allowed IT network packets. It monitors broadcast packet density and blocks storm traffic when threshold is exceeded. It detects link loss and port error, and sends network fault alarm to Experion system. It maintains FTE redundant network heartbeat communication normally.

Installation Requirements Install CC-TCF901 IOTA base on rack carrier first and tighten fixing screws. Power off IOTA base before inserting CC-PCF901 module. Align notch and insert module into IOTA, lock buckle. Connect FTE control network cable to 8 FTE ports, connect uplink cable to gigabit port. Configure network filter rule in Experion network configuration tool. Power on and verify port link status. Use shielded CAT5e industrial Ethernet cable.

Usage Notes This module cannot be replaced by ordinary commercial Ethernet switch. Do not connect internet or office network directly to FTE ports. Keep network cable away from high voltage inverter cable. Static protection must be taken during module replacement. Do not modify hardware filter rules without Honeywell engineering approval.