Building a Resilient EtherNet/IP DLR Ring with Allen-Bradley ControlLogix and Stratix 5700 Switches
Media redundancy without a managed switch fabric — field-proven DLR topology from cabinet to skid
What DLR Really Buys You
EtherNet/IP Device Level Ring (DLR) is a layer-2 ring protocol standardized by ODVA. A single break in the cable — a backhoe through a conduit, a failed connector, a yanked patch cord — is detected and the ring heals in under 3 milliseconds for a 50-node ring, far faster than Spanning Tree or PRP. The cost is a strict topology rule: exactly one ring supervisor, the rest are beaconing nodes, and the physical cable must form a closed loop. No spurs off the ring, no branching.
This makes DLR ideal for linear process skids — a pump skid, a filter skid, a chemical dosing skid — daisy-chained around a tank farm, where one cable cut must not stop the plant.
Step 1 — Choose and Place the Ring Supervisor
Pick one and only one ring supervisor. The Rockwell-recommended choice is a Stratix 5700 or 8300 configured in "Supervisor" mode, or a ControlLogix 5380/5580 EtherNet/IP module that supports the supervisor role. The supervisor's job is to monitor beacon frames, detect a break, and instruct the two nodes adjacent to the break to wrap their secondary ports back into the ring.
Place the supervisor physically near the controller, not at the far end of the ring. A supervisor at the end wastes half the recovery budget on the longest path.
Step 2 — Configure Ports and Topology in Studio 5000
In Studio 5000 Logix Designer, open the EN2TR module under the ControlLogix chassis. Under the Port Configuration tab, confirm both Ethernet ports (A1, A2) have DLR enabled and that Advanced DLR settings are left at defaults unless you have a specific reason to tune them. Each POINT I/O block (1734-AENTR) likewise has a single DLR-capable port pair — primary and secondary.
Cable it: the supervisor's Port 2 to Node 1 Port 1, Node 1 Port 2 to Node 2 Port 1, all the way around, and the last node's Port 2 back to the supervisor's Port 1. That closed loop is the ring.
Step 3 — Validate Ring Health and Fault Detection
With the network online, open RSLinx or the Stratix web interface and look for the DLR status. A healthy ring shows "Normal" and the supervisor's Active Ring Supervisor bit is set. Pull one patch cord at the cabinet to simulate a break — the supervisor should report a "Partial Fault" within milliseconds, and the I/O connection should NOT go faulted. CIP connections ride the recovered path without dropping.
Restore the cable and confirm the ring returns to "Normal" automatically. If it does not, you likely have a non-DLR-aware device (an unmanaged switch, a third-party gateway) in the path.
Step 4 — CIP Safety and QoS over DLR
CIP Safety over EtherNet/IP rides on the same DLR infrastructure. The safety connection's TUNID and SNN must be assigned to each GuardLogix safety module in the ring. Use a CIP Safety connection timeout of at least 4x the RPI, and never bridge DLR traffic through an unmanaged switch — it silently breaks the safety time budget.
Common DLR Pitfalls to Avoid
- More than one supervisor: Exactly one active ring supervisor is allowed. A second one causes beacon conflicts and unstable recovery.
- Spurs or branches off the ring: DLR requires a true closed loop. Any tap or branch breaks the protocol.
- Unmanaged switches in the path: A non-DLR-aware device stops the ring from healing and silently breaks CIP Safety timing.
- Supervisor at the far end: Placing it away from the controller wastes recovery budget. Keep it near the CPU.
- Skipping the cable-pull test: Always simulate a break before commissioning to confirm sub-3 ms recovery and no I/O fault.
Conclusion & Action Advice
DLR is the simplest way to make an EtherNet/IP skid survive a single cable cut. The discipline is strict: one supervisor, a true closed loop, no unmanaged switches. Validate the ring by physically pulling a cable before commissioning is complete, and document the supervisor location in the network drawing. If a future maintenance contractor adds a "convenient" Ethernet tap off the ring, DLR will silently stop working — a labeled ring drawing on the cabinet door prevents that.