Reference design · NPL-FAC-004-R1

Factory · industrial zone and office network

Separate office access, warehouse mobility and production telemetry around four industrial network zones, with explicit PoE and environmental limits.

H3C equipment · NexPro-Link design, selection & project supply

Factory networking application environment
H3C IEF4320-8T2P2XR-PWR-EI — official hardware drawing
H3C IEF4320-8T2P2XR-PWR-EI · Official product source ↗

Point-to-point optical Ethernet

A defined starting point for technical review.

This is an illustrative reference design, not a completed installation or a final site quotation. Quantities and capacities follow the assumptions below.

Scale & assumptions

  • One office block, one warehouse and four production/security zones. Existing machine-control networks remain outside this reference supply boundary.
  • Four IEF4320 industrial nodes each serve two cameras, one AP and three non-PoE telemetry gateway connections; two spare copper ports per node.
  • An illustrative 400m longest optical run, local 52–57V DC available in each industrial enclosure and protected indoor AP locations.
  • Two additional office APs and up to 20 office/phone connections on one PoE switch. RF coverage, EMI, surge conditions and actual cabinet temperature must be surveyed.

Why this architecture

IEF4520 aggregation and IEF4320-PWR industrial access are selected by their documented port, temperature and supply characteristics. Four GE optical combo ports on IEF4520 serve the four GE industrial links; their copper combo mates are not extra usable ports.

When to choose another approach

A standard office Ethernet or PON room network can serve clean offices and dormitories. It does not automatically meet production cabinet, vibration, temperature, timing or hazardous-area requirements. Redundant industrial rings require an approved protocol, port map and failure test.

Compare the three architecture families →

Office IT

Business applications, two WLAN APs and up to 20 user/phone ports.

Service boundary: Staff/guest/voice policies; no unrestricted office-to-machine route.

Production telemetry

Read-only collection through approved telemetry gateways.

Service boundary: PLC, safety and deterministic control networks retain their validated architecture. Gateway allow-lists require plant approval.

Warehouse & security

Four sample APs for mobility and eight camera streams.

Service boundary: RF roaming through metal racks, scanner clients and CCTV storage are separate design checks.

New construction

Provide industrial enclosures, earthing, environmental clearance, local DC supplies and fiber routes before line installation. Allocate cable paths away from power drives according to the plant's installation requirements.

Upgrade / retrofit

Inventory each machine/OT boundary with the plant team, preserve working control links and add telemetry through approved gateways. Pilot an off-line or noncritical zone before moving warehouse/security traffic.

Factory · industrial zone and office network

Physical connections
Factory · industrial zone and office networkReference design. Device IDs match the BOM. Connection IDs match the HTML link schedule. Each industrial node uses rated local 52–57V DC. Its maximum total PoE output is 60W, despite eight 30W-capable ports. IEF4520's 370W remote output is unused in this baseline. UPS/DC backup, earthing and surge protection follow the actual plant conditions.Factory · industrial zone and office networkNPL-FAC-004-R1 · Reference design · 11 Oct 2026 · See link schedule for speeds, interfaces and module conditionsL11GEL21GEL310GEL44 × 1GEL51GEL61GEL71GEL81GEL910GEWAN-01 · ×1ISP handoffProject-specific selectionCarrier equipmentFW-01 · ×1Security gatewayF1000-AI-15Dual AC / UPSCORE-01 · ×1Campus aggregationS5560X-30C-EILocal AC / UPSIAGG-01 · ×1Industrial opticalaggregationIEF4520-24P4TP4X-GLocal AC / UPSIACC-01–04 · ×4Industrial zone switchesIEF4320-8T2P2XR-PWR-EI4 × local 52–57V DCIAP-01–04 · ×4Warehouse / zone APsWA6120802.3af from IACCOT-01–04 · ×4Telemetry / camera groupsProject-specific selectionDC / budgeted PoEOACC-01 · ×1Office PoE switchS5130S-28P-HPWR-EI-ACAC / local UPSOAP-01–02 · ×2Office APsWA6120802.3af from OACCSRV-01 · ×1MES gateway / VMS servicesProject-specific selectionLocal AC / UPSBlue solid: optical Ethernet · Purple dashed: shared PON · Slate dotted: copper · Amber dash-dot: fiber data + separate copper power
Reference design · NPL-FAC-004-R1 · Device IDs match the BOM. Link IDs match the connection schedule below. Scroll horizontally or open the SVG for a larger view.

Logical services & boundaries

Keep office IT, guest WLAN, warehouse clients, CCTV, management and production telemetry in separate service zones. An approved industrial firewall/DMZ is required where traffic crosses the OT boundary; this reference does not replace a control/safety network design.

Electrical power path

Each industrial node uses rated local 52–57V DC. Its maximum total PoE output is 60W, despite eight 30W-capable ports. IEF4520's 370W remote output is unused in this baseline. UPS/DC backup, earthing and surge protection follow the actual plant conditions.

Link schedule — interfaces, bandwidth and components
Link / endpointsSpeed / sharingPhysical path & interfacesModules / configuration conditions
L1
WAN-01 → FW-01
1GE
Dedicated link / channels
Reference 1GE ISP handoff. Actual contracted bandwidth may be lower.Carrier CPE and copper patch lead; change optics/ports if the actual handoff differs.
L2
FW-01 → CORE-01
1GE
Dedicated link / channels
Dedicated GE connection to the core. Review WAN demand before retaining this reference speed.Cat6 patch lead. The 1GE boundary is an explicit capacity limit.
L3
CORE-01 → IAGG-01
10GE
Dedicated link / channels
Core SFP+ to industrial aggregation SFP+.2 supported 10G optics and OS2 pair with appropriate temperature rating.
L4
IAGG-01 → IACC-01–04
4 × 1GE
Dedicated link / channels
Four dedicated GE links using IEF4520 GE optical combo ports; exclude their copper mates.4 compatible GE optical pairs, industrial-temperature variants as required; local power independent.
L5
IACC-01–04 → IAP-01–04
1GE
Dedicated link / channels
One af-powered AP per industrial switch; survey roaming and interference.4 protected copper channels and mounting accessories.
L6
IACC-01–04 → OT-01–04
1GE
Dedicated link / channels
Five links per zone: 3 telemetry gateways + 2 cameras. Telemetry and surveillance separated by policy.20 copper channels; approved gateways and camera models selected separately.
L7
CORE-01 → OACC-01
1GE
Dedicated link / channels
Core GE combo optical port to office GE SFP. Reserve its copper combo mate.One compatible GE optical pair and labeled fiber route.
L8
OACC-01 → OAP-01–02
1GE
Dedicated link / channels
Two office AP connections; user outlets occupy separate access ports.Cat6 channels; office endpoint schedule confirmed by drawings.
L9
CORE-01 → SRV-01
10GE
Dedicated link / channels
Approved IT-side application/recording service uplink.Matched 10G pair/DAC and service NIC; no implicit bridge to control networks.

Declared inputs · reviewable calculations

Capacity and power, with their limits visible.

Planning allocations are assumptions, not measurements of unselected endpoints. Reconcile them with the final device classes, configuration and site tests.

Industrial ports

4 × 8 = 32 copper ports; 4 × 6 = 24 assigned; 8 spare.

One GE fiber uplink per node is dedicated. Test burst traffic from telemetry, cameras and scanners against that GE uplink.

Industrial PoE

Per node: 1 AP at 16W + 2 cameras at 15W = 46W. With 20% planning reserve: 55.2W.

Below 60W, subject to actual PSE allocation and startup load. Adding one more 15W camera would exceed the budget with this reserve.

Office power

2 APs at 16W + an assumed 10 phones at 8W =112W; 20% reserve gives 134.4W.

Below 370W. Actual user/phone point count and endpoint models still need a port schedule.

Video traffic

8 cameras at assumed 8Mb/s =64Mb/s before overhead/playback.

Size VMS ingestion, retention and storage separately; industrial switching does not determine recorder channel limits.

NPL-FAC-004-R1 · preliminary purchasing basis

The same device IDs. A complete BOM scope.

Download BOM · CSV

Quantities below follow the stated reference assumptions. “To confirm” identifies configuration or survey work still needed before a firm equipment order. Optional resilience is separate from the baseline.

ID / roleModel / itemQty / scopePower / configuration / open items
FW-01
Security gateway
F1000-AI-15
Official source ↗
1 units / sets
Required
Dual AC / UPS
Candidate only: size enabled security services, VPN and sessions before approval.
CORE-01
Campus aggregation
S5560X-30C-EI
Official source ↗
1 units / sets
Required
Local AC / UPS
Single core in this baseline. A second PSU is not device redundancy.
IAGG-01
Industrial optical aggregation
IEF4520-24P4TP4X-G
Official source ↗
1 units / sets
Required
Local AC / UPS
One 10G uplink and four GE optical combo ports used. No hybrid remote power in baseline.
IACC-01–04
Industrial zone switches
IEF4320-8T2P2XR-PWR-EI
Official source ↗
4 units / sets
Required
4 × local 52–57V DC
60W total PoE each; −40 to 70°C and IP51 for this PWR model. Cabinet suitability remains a site check.
IAP-01–04
Warehouse / zone APs
WA6120
Official source ↗
4 units / sets
Required
802.3af from IACC
Protected indoor placement only. The AP is not made industrial by its upstream switch.
OT-01–04
Telemetry / camera groups
Project-specific selection4 units / sets
Required
DC / budgeted PoE
Per group: 3 approved non-PoE telemetry gateways, 2 cameras. Control systems excluded.
OACC-01
Office PoE switch
S5130S-28P-HPWR-EI-AC
Official source ↗
1 units / sets
Required
AC / local UPS
GE fiber uplink; 24 copper ports, 370W total PoE.
OAP-01–02
Office APs
WA6120
Official source ↗
2 units / sets
Required
802.3af from OACC
Two AP ports plus up to 20 office/phone ports; two spare.
SRV-01
MES gateway / VMS services
Project-specific selection1 units / sets
Required
Local AC / UPS
Segregated service interfaces/hosts as required. No direct unapproved PLC access.
A-PWR
Core/gateway power configuration, cords and fan sets
Core/gateway power configuration, cords and fan sets1 engineered set
Required
Per approved configuration
Select compatible supplies and airflow for the listed devices. Confirm mains, plugs, loading and service availability; no unlisted PSU is assumed included.
A-LIC
Management, security and WLAN licenses / support
Management, security and WLAN licenses / support1 scope
Required
Per approved configuration
Quote controller or cloud mode, AP capacity, security subscriptions, country codes and support term explicitly. Final SKUs remain subject to configuration review.
A-RACK
Racks, PDU, UPS, earthing and patch management
Racks, PDU, UPS, earthing and patch managementTo confirm surveyed scope
Required
Per approved configuration
Size actual equipment depth, ventilation, total input load, autonomy, outlets and grounding. UPS kVA and battery runtime are not inferred from floor count.
A-HA
Redundant core / gateway and diverse routes
Redundant core / gateway and diverse routesTo confirm option
Optional
Per approved configuration
Add devices, interconnect ports, independent paths and licenses after agreeing the failure scenario and recovery target. Not included in the single-path baseline.
A-DC
Industrial DC supply / distribution sets
Industrial DC supply / distribution sets4 sets
Required
Per approved configuration
52–57V rated input for the selected PWR model; current, startup, grounding and enclosure conditions must be designed.
A-1G
GE optical pairs
GE optical pairs5 pairs
Required
Per approved configuration
Four industrial links + one office link; select temperature rating, wavelength, connector and fiber consistently.
A-10G
10G core / service optical pairs
10G core / service optical pairs2 pairs
Required
Per approved configuration
Core–industrial aggregation and core–service links.
A-ENC
Industrial enclosures, rails and fiber termination
Industrial enclosures, rails and fiber termination4 zone sets
Required
Per approved configuration
IP51 device rating does not mean outdoor/weatherproof or hazardous-area suitability.
A-OT
OT firewall/DMZ and telemetry gateway scope
OT firewall/DMZ and telemetry gateway scopeTo confirm approved scope
Required
Per approved configuration
Define actual trust boundaries with the plant owner; no unverified security appliance SKU or protocol guarantee is assumed.

Shared with the topology and BOM

Review the selected H3C candidates.

Compare specifications & configure quantities →
H3C IEF4520-24P4TP4X-G — official hardware drawing

Industrial optical aggregation

IEF4520-24P4TP4X-G

Industrial distribution using the documented environmental limits.

370W total PoE; full load 478W.

Model, source & quote selection →
H3C IEF4320-8T2P2XR-PWR-EI — official hardware drawing

Industrial zone access

IEF4320-8T2P2XR-PWR-EI

DIN-rail access for separated telemetry, surveillance or local industrial services.

60W total PoE from DC or PoE IN; full device load 80W.

Model, source & quote selection →
H3C S5130S-28P-HPWR-EI-AC — official product photograph

Copper PoE access

S5130S-28P-HPWR-EI-AC

Small or medium local PoE access with GE fiber uplinks.

370W total; official full-load examples: 24 af ports or 12 at ports.

Model, source & quote selection →
H3C S5560X-30C-EI — official product photograph

Compact campus core / aggregation

S5560X-30C-EI

Modest routed networks with a checked uplink and service port plan.

Published maximum dual AC consumption 91W for listed configuration; recalculate with expansion/optics.

Model, source & quote selection →
H3C WA6120 — official hardware drawing

Indoor Wi-Fi 6 AP

WA6120

Indoor access with a GE wired connection and low power demand.

Operating consumption ≤12.95W; reserve 15.4W at an af PSE before cable loss assumptions.

Model, source & quote selection →
H3C F1000-AI-15 — official hardware drawing

Enterprise security gateway

F1000-AI-15

A candidate WAN / policy boundary, sized after enabled-service throughput review.

Hardware guide lists 48W device power consumption.

Model, source & quote selection →

Next useful inputs

Turn this example into your project.

  • Plant/warehouse drawings, machine zones and existing OT boundary diagram
  • Cabinet temperatures, dust/water, EMI/surge conditions and DC power
  • Scanner/client models, roaming behavior and concurrent traffic
  • Approved outage windows, control exclusions and required failure recovery
Download the input checklist

NexPro-Link support scope

From selection to coordinated supply.

  • Industrial/office boundary and point schedule
  • Port, PoE, environment and uplink review
  • Pilot and phased replacement plan
  • Industrial switches, office WLAN, CCTV, servers and power supply coordination

Detailed deliverables, design fees where applicable, site survey, installation and acceptance responsibilities are agreed for the project stage. Local statutory and specialist system approvals remain with the appointed teams.

Your next step

Start with the information you have.

Send a short requirement, drawings, an existing BOQ or the exact H3C models you need. We will identify the selection and supply scope.

The page, architecture and reference equipment are included automatically. Your selected quote-list quantities can be edited before sending.

Add project details, if known

One attachment up to 3 MB, or a shared-file link. Unknown engineering fields can be confirmed later.

Send a quick inquiry

A short message is enough to get started.

Contact and inquiry details
I’m interested in
Page details included with your inquiry

Request: Network design from drawings · Reference design: NPL-FAC-004-R1 · Architecture: Point-to-point optical Ethernet · Reference equipment (subject to review): FW-01: F1000-AI-15 ×1; CORE-01: S5560X-30C-EI ×1; IAGG-01: IEF4520-24P4TP4X-G ×1; IACC-01–04: IEF4320-8T2P2XR-PWR-EI ×4; IAP-01–04: WA6120 ×4; OACC-01: S5130S-28P-HPWR-EI-AC ×1; OAP-01–02: WA6120 ×2

Add company details or a file (optional)

PDF, DWG, Excel, CSV, JPG, PNG or Word · up to 3 MB.

We use these details to respond to your inquiry. Privacy policy

Prefer a conversation? WhatsApp us or send an email.

Catalog Chat