Overview of Industrial Ethernet Ring Redundancy
Ring topology is widely adopted in industrial automation because it provides a single deterministic reconfiguration path when a link or switch fails. Unlike star topologies where a single cable break isolates downstream devices, a ring interconnects every switch such that traffic can travel in two directions. A redundancy protocol detects a break and instructs the ring to "close" by activating a previously blocked port, restoring connectivity within a bounded time. The general concept is described in the Ring network entry and in vendor guides such as the Schneider redundancy backbone article.
Industrial Ethernet protocols — PROFINET, EtherNet/IP, and Modbus TCP — are tolerant of cable breaks, but only when the recovery time is shorter than the application's watchdog. For PROFINET, the typical update time of 1–10 ms requires a reconfiguration time well under 200 ms. This requirement is the primary reason unmanaged switches are excluded from redundant rings: they cannot signal the break and cannot close the loop, so a single break partitions the ring into isolated segments. The recovery-time discipline is also discussed in HMS Networks' Ethernet Ring Redundancy technical note.
Ring Redundancy Protocols: MRP, HRP, HSR, and PRP
Four redundancy mechanisms dominate industrial networking. Each has a defined reconfiguration time and topology.
| Protocol | Standard | Max Reconfiguration Time | Topology | Siemens SCALANCE Support |
|---|---|---|---|---|
| MRP (Media Redundancy Protocol) | IEC 62439-2 | ≤ 200 ms (typical 25 ms) | Single ring, one RM + N clients | All managed SCALANCE X (X-100, X-200, X-300, X-400, X-500, XC-200, XF-200, XR-500) |
| MRPD (MRP with PROFINET Dynamic Frame Packing) | IEC 62439-2 + PROFINET | Same as MRP, no IRT restart | Single ring with IRT devices | IRT-capable SCALANCE (X-200 IRT, X-300, X-400) |
| HRP (High-speed Redundancy Protocol) | Siemens proprietary | ≤ 300 ms | Single ring with optional standby coupling | Older SCALANCE X-400, X-300 |
| HSR (High-availability Seamless Redundancy) | IEC 62439-3 | 0 ms (zero-loss) | Doubly-attached ring nodes | SCALANCE XR-500, RUGGEDCOM RS950G |
| PRP (Parallel Redundancy Protocol) | IEC 62439-3 | 0 ms (zero-loss) | Two physically separate LANs | SCALANCE XR-500, S615 |
For most plant-floor installations, MRP remains the baseline. It specifies a single Redundancy Manager (RM) per ring; all other switches operate as MRP Clients that forward test frames on both ring ports but do not block traffic. MRP test frames use EtherType 0x88E3 with default destination MAC 01:15:4E:00:00:01; the RM sends these on its primary ring port and expects to see them reappear on its secondary ring port within the configured test interval (default 20 ms).
HRP is Siemens' legacy ring protocol. It is functionally similar to MRP but supports Standby Manager coupling between redundant rings. New deployments should use MRP for interoperability with non-Siemens devices and for compliance with IEC 62439-2.
HSR and PRP are zero-loss protocols used in substation automation (IEC 61850) and motion-safety applications. They require every node to be doubly attached, which doubles port count and cabling. They are outside the scope of typical PROFINET cells but are available on the SCALANCE XR-500 family and the IEC 62439-3 standard.
SCALANCE X Switch Family and Ring Capability Matrix
Siemens categorizes SCALANCE switches by ring capability. The matrix below summarizes the most common families; firmware versions and exact article numbers are documented in the SCALANCE X-200 Operating Instructions and the Siemens IA&DT catalog IK PI.
| Family | Models (examples) | Managed | MRP Client | MRP Manager | IRT Capable | IP Rating |
|---|---|---|---|---|---|---|
| SCALANCE X-000 | X005, X005TS | No | No | No | No | IP30 |
| SCALANCE X-100 | X108, XB108 | Yes (Web) | Yes | Yes | No | IP30 |
| SCALANCE X-200 | X208, XC208, XF208, X204-2, X204-2 IRT, X204-2 IRT PRO | Yes | Yes | Yes | Some (IRT suffix) | IP30 / IP65 (PRO) |
| SCALANCE XC-200 | XC206-2, XC216-4C | Yes | Yes | Yes | No | IP20 |
| SCALANCE XB-200 | XB208 | Yes (Web only) | Yes | Yes | No | IP20 |
| SCALANCE X-300 | X308-2M, X310, X320 | Yes | Yes | Yes | Yes | IP30 |
| SCALANCE X-400 | X408-2, X414-3E | Yes | Yes | Yes | Yes | IP30 |
| SCALANCE XR-500 | XR528-6M, XR552-12M | Yes | Yes (HSR/PRP) | Yes (HSR/PRP) | Yes | IP30 |
When planning a new ring or refurbishing an existing one, choose the lowest-cost managed switch that supports the required PROFINET conformance class. The X-200 family is the workhorse for cabinets and field segments. The XF-200 and X204-2 IRT PRO target cabinet-less installations with IP65 sealing.
SCALANCE X005 Limitations in Redundant Rings
The SCALANCE X005 and X005TS are unmanaged, plug-and-play 5-port switches with no configuration interface. The Operating Instructions explicitly state, in section 2.1, that the X005 cannot be used in a redundant ring because it does not support the redundancy function. Siemens publishes this restriction across all firmware variants and has not relaxed it across the product life cycle.
The technical reason is straightforward: an MRP Client must pass MRP test frames (EtherType 0x88E3, destination MAC 01:15:4E:00:00:01) through both ring ports, detect their absence on a link failure, and report link-down/up events. The X005 has no firmware hook to do this — it forwards frames by MAC table only and ignores frame EtherType filtering rules. Inserting an X005 between two managed switches breaks the test-frame loop and prevents the RM from ever detecting a fault, leaving the ring permanently in a partitioned state when a single break occurs.
Field reports sometimes describe X005 rings that "appear to work" because they are effectively passive bus segments (a ring of stars), but the moment a single link breaks, isolated devices go offline. This is not a redundant ring — it is a degraded star with shared cabling risk.
SCALANCE X204-2 IRT PRO vs X208 as Redundancy Manager
Both switches can serve as Ring Manager. The choice depends on the application, not on MRP capability, because both fully implement IEC 62439-2 RM functionality.
| Criterion | X204-2 IRT PRO (6GK5204-2AH00-2BA6) | X208 (6GK5208-0BA10-2AA3) |
|---|---|---|
| Ports | 4 × 10/100 RJ45 + 2 × 100 FX (SC) | 8 × 10/100 RJ45 |
| IP rating | IP65 | IP30 |
| MRP Manager | Yes | Yes |
| IRT | Yes (cut-through, deterministic) | No (store-and-forward) |
| Cut-through latency | < 5 µs | N/A (store-and-forward only) |
| PROFINET conformance class | Class C (IRT-ready) | Class B |
| Configuration interface | Web, Telnet, SNMP, TIA, STEP 7 | Same |
| Typical use | Cabinet-less field installation, motion + ring | Control cabinet, mixed data + ring |
| Approx. price (relative) | Higher (~2.5×) | Lower |
If the ring carries PROFINET IRT traffic (e.g., SINAMICS drives with isochronous mode, SIMOTION, or ET 200SP motor starters requiring deterministic update), the X204-2 IRT PRO is justified because IRT frames must be cut-through forwarded. If the ring is purely standard PROFINET RT or TCP/IP, the X208 provides the same MRP functionality at lower cost and with more ports.
Ring Topology Design Rules and Constraints
The following rules apply to any MRP ring on SCALANCE hardware. They are derived from the SCALANCE Operating Instructions and the IEC 62439-2 conformance test plan.
- Exactly one Redundancy Manager (RM). Two RMs in the same ring will generate contradictory test-frame results and the ring will thrash between "closed" and "open" states every test interval.
- All other switches in the ring must be MRP Clients. They pass MRP test frames transparently and forward configuration changes; they do not make blocking decisions.
- Maximum of 50 switches per ring (Siemens specification; smaller rings reconfigure faster because fewer switches have to forward the topology-change propagation).
- Maximum 50 devices in standby coupling across two rings.
- Ring ports must be physically identified in each switch's configuration. By default, the two lowest-numbered gigabit ports are used; this can be overridden in WBM under Layer 2 > Ring Redundancy > Port assignment.
- Mixing HRP and MRP in the same ring is forbidden. Both protocols use the same EtherType but have incompatible state machines.
- Ring ports must match speed and duplex. A 100 Mbit/s port connected to a 1 Gbit/s port will fall back to 100 Mbit/s but must be configured for full duplex to avoid late collisions. Disable autonegotiation on ring ports when both ends are known.
- Do not enable Spanning Tree (STP/RSTP) on ring ports. STP and MRP conflict because both protocols manipulate the forwarding state of the same port. Disable RSTP on the switch if the only role for STP would be on ring ports.
- Avoid daisy-chained hubs or media converters inside the ring. They extend the link-down detection window and break deterministic reconfiguration.
- Verify maximum cable length. Copper (10/100): 100 m segment. Fiber: 2 km (multi-mode 100 Mbit/s SC) up to 70 km (single-mode 1 Gbit/s LX). Longer runs increase link-down detection time.
Multi-Ring Topologies: Standby Coupling and Dual Homing
Larger plants use multiple rings coupled together. Siemens supports two patterns:
- Standby Coupling (HRP): two rings share a redundant link through two switches acting as Standby Master and Standby Slave. The standby link is normally blocked; one of the two rings can fail and the standby opens. Reconfiguration time is comparable to MRP (≤ 300 ms). Configure under Layer 2 > Standby Coupling on X-300 / X-400 switches.
- Dual Homing (MRP): a device with two ports attaches to two different rings (typically a controller or a redundant gateway). This provides path redundancy beyond a single ring. The controller's PROFINET stack must support AR (Application Relationship) to both rings.
When designing multi-ring networks, keep the diameter (number of switches between any two devices) under 50 switches and avoid crossing the same physical cable tray through both rings — a single physical incident (fire, fork-lift) could sever both rings.
PROFINET Stack Classes and Reconfiguration
PROFINET devices are conformance-tested against classes that determine how they behave during network changes:
| Class | Update Time Range | Behavior on Link Loss | Typical Devices |
|---|---|---|---|
| A | 100 ms – 1 s | AR abort, reconnect after link up | Older IO, simple sensors |
| B | 1 – 10 ms | AR retained, brief data loss during reconfiguration | Standard ET 200S, S7-300/400 |
| C (IRT) | 31.25 µs – 4 ms | MRPD — frame-packing resumes without AR abort | SINAMICS, ET 200SP HF, S7-1500 |
With MRPD, the PROFINET controller re-routes the IRT frames around the broken segment using the recovered ring path. The IO device never sees an AR abort; the visible effect is a single dropped sample. This is why modern SIMATIC installations pair an X-200 IRT ring with an S7-1500 CPU and ET 200SP HF IO.
Configuring MRP in Web Based Management (WBM)
The WBM is accessible at the switch's IP address on port 80/443 (HTTPS recommended). Default credentials are admin / admin on legacy firmware or admin / (initial password printed on device label) on firmware 4.x and later.
Step 1: Assign IP and PROFINET name
Navigate to System > General > Device and configure:
IP address: 192.168.0.100
Subnet mask: 255.255.255.0
PROFINET name: rm-switch-1
The PROFINET name must be unique within the cell. Use a naming convention such as <cell>-rm-<number> for the manager and <cell>-sw-<number> for clients.
Step 2: Enable MRP and designate as Manager
Navigate to Layer 2 > Ring Redundancy. Set the role of the switch to Manager. Choose the ring ports (default Port 1 + Port 2). For SCALANCE X204-2 IRT PRO, ring ports are typically Port 1 and Port 2 (RJ45) — the fiber ports can serve as uplink to a control room. For X208, use Port 7 and Port 8 to free up Port 1–6 for IO devices and HMIs.
Step 3: Configure clients
On every other switch in the ring, navigate to Layer 2 > Ring Redundancy and set role to Client. Assign the same two physical ports as ring ports. Confirm that MRP is selected (not HRP).
Step 4: Verify topology
From the RM, open Information > Ring Redundancy. The current ring state should report Ring closed with one of the two ring ports in Blocking state. If both ports show Forwarding, the RM has not received its own test frames — check that the ring is physically a closed loop and that no client is incorrectly set as RM.
Configuring MRP via TIA Portal / STEP 7
TIA Portal and STEP 7 V5.5+ provide a graphical ring editor that pushes the configuration to every device via PROFINET DCP. This is the preferred path for new installations because it bundles ring, IO, and HMI configuration into one project.
- Open the project, switch to Devices & Networks.
- Drag SCALANCE switches from the catalog into the network view. Assign PROFINET names and IP addresses.
- Right-click each switch > Properties > PROFINET interface > Ring redundancy.
- Select Manager on one switch only. For all others, select Client.
- Assign ring ports under Port assignment. TIA validates that both ring ports are members of the same MRP domain.
- Compile and download to all devices.
- Observe online diagnostics: Online & diagnostics > Ring redundancy > Status.
For older STEP 7 installations without TIA, configure via the WBM or use the SIMATIC Automation Tool for batch deployment across hundreds of switches.
Integrating CP443-1 as MRP Client
The S7-400 communications processor CP443-1 (6GK7443-1EX11-0XE0 with firmware V3.x or newer) supports MRP Client mode. When the CP is in MRP Client mode, two of its PROFINET ports are assigned as ring ports and the S7-400 participates directly in the ring rather than sitting behind a single switch. This reduces switch count and provides a second path between the PLC and IO devices.
Configuration steps:
- In HW Config (STEP 7), open CP443-1 properties > PROFINET interface > Operating mode.
- Set MRP Client and assign ring ports (typically Port 1 and Port 2).
- Ensure the CP's MAC addresses are unique; the CP does not perform blocking but must transparently forward MRP test frames.
- Verify in the S7-400 diagnostic buffer: the event Ring redundancy state change appears with new state "Ring closed" after each link event.
- If the CP443-1 is replaced with a CP443-1 Advanced (6GK7443-1GX30-0XE0), the same procedure applies but with a higher port count (four instead of two) and additional security features.
Benefits: reduces the number of managed switches in the ring (cost saving) and centralizes the PLC on the same physical ring as the IO devices. Caveats: the CP cannot be the Ring Manager, so a separate managed switch must serve as RM. The CP443-1 also reserves one port for PROFINET IO, leaving only one spare for non-ring use; plan accordingly.
Verification and Diagnostics
After configuration, perform the following checks. All are non-disruptive except the final cable-pull, which should be coordinated with operations.
| Check | Expected | Command / Location |
|---|---|---|
| RM ring state | Ring closed, one port blocked | WBM > Information > Ring Redundancy |
| Client ring state | Ring closed, both ring ports forwarding | WBM > Information > Ring Redundancy |
| MRP test frames | Observed on both ring ports | Wireshark on port mirror; filter on EtherType 0x88E3 |
| Topology discovery | LLDP neighbors match design | WBM > Information > LLDP |
| Reconfiguration time | < 200 ms | Disable one ring port; ping PLC > HMI; observe gap |
| PROFINET diagnostics | No "Network fault" alarms | TIA Portal > Online & diagnostics |
| Spanning tree | Disabled on ring ports | WBM > Information > Spanning Tree |
| Port counters | No CRC errors, no late collisions | WBM > Information > Port statistics |
To measure reconfiguration time precisely, use the PROFINET controller's diagnostic buffer. With an S7-1500, the event Network fault (IO device) and the corresponding Network fault resolved timestamps are logged with millisecond resolution. Subtract the two; the difference is the ring reconfiguration time. Validate against the IEC 62439-2 test report values shipped with the switch.
Reconfiguration Time Calculation
MRP recovery time is the sum of three components. Engineers sizing watchdog timers should add a 50% margin for stack variance and broadcast handling.
- Link-down detection time: < 10 ms for fiber (Loss of Light, no autonegotiation), < 50 ms for copper (PHY autonegotiation pause and link pulse).
- RM reaction time: RM detects missing test frames and unblocks its secondary port. Typical 10–25 ms. Configurable via WBM under Layer 2 > Ring Redundancy > Test interval.
- PROFINET stack restart: On Class C controllers (S7-1500, ET 200SP HF) using MRPD, this is zero. On Class A/B devices, the controller re-issues AR (Application Relationship) which can add 50–100 ms.
Total worst-case MRP reconfiguration: ≈ 200 ms. Best case with fiber and IRT-aware stack: ≈ 25 ms. These figures are bounded by IEC 62439-2 and verified by Siemens test reports.
Compare to RSTP (Rapid Spanning Tree, IEEE 802.1w), which typically converges in 1–3 seconds because each switch recomputes its own root port. RSTP is acceptable for office networks and non-deterministic HMI traffic; MRP is required when PROFINET IO update times drop below 250 ms or when process safety (PROFIsafe) requires deterministic fault response.
SNMP Monitoring and Fault Traps
SCALANCE switches expose MRP status through standard MIB-II objects and Siemens-specific enterprise MIBs. Configure SNMPv3 traps to forward ring state changes to a central NMS (e.g., SINEC NMS, PRTG, or Nagios).
Engine ID: 0x800072810500abcd
Trap destination: 192.168.0.250:162
Trap OID: 1.3.6.1.4.1.4329.6.3.1.1.3 (rmStateChange)
Trap OID: 1.3.6.1.4.1.4329.6.3.1.1.4 (linkDown)
Trap OID: 1.3.6.1.4.1.4329.6.3.1.1.5 (linkUp)
Trap reception at the NMS should be acknowledged within 30 seconds; a missed trap indicates either NMS downtime or a network segment that has dropped from the ring path. For safety-critical installations, integrate ring traps into a SCADA alarm channel so that operators see "Ring topology degraded" as a banner event.
Migration from HRP to MRP
Plants installed before 2010 often run HRP. Migrating to MRP requires careful staging because HRP and MRP cannot coexist in the same ring.
- Document the current HRP ring topology, including standby coupling and HRP manager switch.
- Identify the new MRP ring manager. The same physical switch can be reused if it supports both protocols.
- Schedule a maintenance window. Both HRP and MRP require a single-ring structure; transitioning one switch at a time will cause the ring to thrash.
- During the window, change all switches to MRP Client first, then change the designated switch to MRP Manager last.
- Verify ring closure with WBM and PROFINET diagnostics before releasing the system to operations.
- If standby coupling exists, retain HRP for the coupled rings until the controller rings are validated, then migrate standby coupling to MRP (Siemens added MRP-based standby on firmware 4.x and later for X-300/X-400).
Cable, Media, and Grounding Considerations
Ring topology is sensitive to physical layer faults because every link is critical. Apply the following cabling rules:
- Use shielded twisted pair (SF/UTP or S/FTP) for copper ring segments. Industrial Cat 6A or Cat 7 cable rated for the installation environment (PVC, PUR, FRNC jacket for drag chains).
- Ground both ends of the shield. In Siemens practice, ring cables use equipotential bonding to a ground bar at each cabinet; the shield is bonded via the M12 or RJ45 connector's drain wire.
- Avoid routing ring segments through the same cable tray. A tray fire or fork-lift strike could sever the entire ring. Place redundant ring cables in physically separated paths.
- Fiber segments must use matched SFP pairs. Mismatched wavelength (e.g., 1310 nm on one end and 1550 nm on the other) will appear as link-down with no diagnostic value. Siemens SFPs (6GK5 991-1Ax00-xAAx) are vendor-locked by firmware on X-300 and XR-500; use Siemens-branded SFPs on those families.
- Bend radius. Maintain ≥ 4× cable diameter for copper and ≥ 10× for fiber. Tight bends degrade bit error rate long before they cause link-down.
- Segment length. Copper ≤ 100 m. Fiber ≤ 2 km (multi-mode 100 Mbit/s SC), ≤ 70 km (single-mode 1 Gbit/s LX). Longer runs degrade link-down detection time.
Troubleshooting Matrix
| Symptom | Probable Cause | Diagnostic Step | Resolution |
|---|---|---|---|
| RM reports "Ring open" persistently | Two devices configured as RM; or non-MRP switch breaking ring | WBM on every switch > Ring Redundancy > Role | Demote to Client; replace unmanaged switch with managed |
| Reconfiguration time > 1 s | RSTP enabled on ring ports; duplex mismatch; cable fault causing flapping | WBM > Information > Spanning Tree; check port counters | Disable STP on ring ports; force 100 Mbit/s FDX; replace cable |
| PROFINET IO devices drop on link break but do not reconnect | Controller using Class A stack without MRPD | TIA Portal > PROFINET diagnostics > AR state | Upgrade to MRPD-capable controller (S7-1500/ET 200SP); reduce IO update time |
| Ring flashes every 30–60 s | Loose connector; EMI on copper; or SFP mismatch | WBM > Information > Port statistics > Link flaps | Re-terminate connector; use shielded cabling; replace SFP pair with matched vendor |
| RM shows correct status but PC stations lose connection | PC's network interface not PROFINET-aware; broadcasting storms on non-ring segments | Sniffer on PC port; check for broadcast storm from HMI | Enable multicast filtering; configure IGMP snooping on switch; assign VLAN for PC traffic |
| HRP/MRP mixing warning in TIA Portal | Older SCALANCE X-400 firmware configured as HRP Manager | WBM > Layer 2 > Ring Redundancy > Protocol | Change protocol to MRP; verify ring port consistency |
| RM secondary port stays "Forwarding" (not blocked) | RM in Client mode; configuration not downloaded correctly | WBM > Ring Redundancy > Status; check configuration CRC | Reset to factory defaults; reconfigure as Manager; verify role persistence after reboot |
| Fiber port shows link-down after deployment | SFP not vendor-locked approved; or one TX/RX pair reversed | WBM > Information > SFP inventory; physical inspection | Replace with Siemens SFP; swap TX/RX on SC connectors |
| Ring closes correctly but reconfiguration triggers IO fault | Watchdog timer on IO device shorter than 200 ms | Device diagnostic buffer > watchdog event | Lengthen watchdog or upgrade to Class C/MRPD |
| CP443-1 does not participate in ring | Firmware < V3.x; ring ports not configured | STEP 7 > HW Config > CP443-1 properties | Update CP firmware; assign ring ports; restart CP |
Frequently Asked Questions
Can I use a SCALANCE X005 inside an MRP ring?
No. The X005 is unmanaged and does not forward MRP test frames. The SCALANCE X-200 Operating Instructions explicitly exclude the X005 from redundant rings. Use an X-100, XB-200, XC-200, X-200, X-300, or higher managed switch.
Is SCALANCE X204-2 IRT PRO necessary as the Redundancy Manager, or will an X208 work?
An X208 supports MRP Manager identically to the X204-2 IRT PRO. The PRO variant adds IP65 enclosure, fiber ports, and IRT cut-through. Choose the X204-2 IRT PRO only if you need IRT, fiber uplinks, or IP65; otherwise the X208 is more economical and has more copper ports.
What is the difference between MRP, HRP, and HSR?
MRP (IEC 62439-2) is the standard ring protocol with ≤ 200 ms recovery. HRP is Siemens' legacy protocol with similar performance and optional standby coupling between rings. HSR (IEC 62439-3) is a zero-loss protocol that requires every node to be doubly attached and is used in substation automation.
How many Redundancy Managers can exist in one ring?
Exactly one. Two RMs will issue contradictory test-frame expectations and the ring will not close. If redundant ring managers are required across ring couples, use Standby Manager (HRP) or PRP (IEC 62439-3).
Can the CP443-1 act as an MRP Manager?
No. The CP443-1 supports MRP Client only. It can participate in the ring (reducing switch count) but cannot be the manager. The ring must have one external managed switch acting as RM.
How do I measure MRP reconfiguration time on a live system?
Pull one ring cable while a continuous ping runs between a PLC and HMI across the ring. Capture the ping gap in Wireshark. Alternatively, read the S7-1500 diagnostic buffer timestamps for the "Network fault" and "Network fault resolved" events; subtract to obtain the reconfiguration time in milliseconds.
Why does my RM show "Ring open" after power cycling the entire ring?
Power-on order matters only when the RM takes longer to boot than the clients. The RM's first test frame goes out before any client ring port is up, so the RM concludes that the ring is open and unblocks its secondary port. When clients finish booting, the ring is already closed from the RM's perspective. Verify with WBM after all switches are up; the state should transition to "Ring closed" within one test interval.