IPv4 subnet planning for OT networks: CIDR, VLANs and address plans
A practical method for sizing OT subnets: how CIDR maps to host counts, how to leave room to grow, how to align subnets with cells and zones and how to document the plan.
· 4 minFrom the production line to business systems: implementation steps, design decisions and commissioning checks.
10 articles · ot
A practical method for sizing OT subnets: how CIDR maps to host counts, how to leave room to grow, how to align subnets with cells and zones and how to document the plan.
· 4 minThe playbook that protects office PCs does not transfer to controllers. What ransomware actually does to OT and where the defenses belong.
· 2 minOT logging is hard because devices log poorly and clocks drift. A practical baseline that satisfies both engineers and auditors.
· 2 minUnmanaged switches are cheaper; managed switches are controllable. When the difference matters - and when it doesn't.
· 2 minHardening a controller is different from hardening a server. Practical, low-risk measures for PLCs and their networks.
· 2 minYou cannot protect what you cannot see. How to build and keep an asset inventory that security and maintenance can both use.
· 2 minRemovable media bypasses every network control you can build. How to manage USB use in OT with a clean station, port control and an audit trail, without crippling workflows.
· 2 minThe Purdue reference model is the backbone of industrial network design. Here is how to map your plant to levels and where the DMZ belongs.
· 2 minIEC 62443 is the reference framework for industrial cybersecurity. Here is a plain-language map of its parts and how to start applying it.
· 2 minHow to apply zero trust principles to OT networks without breaking production: start with visibility, segment by zone, broker remote access and verify continuously, within the limits of legacy devices.
· 3 minLet’s look at your machine, your data flow or your production goal together. Describe your situation in a few sentences and the ASP Dijital team will reply by email.