Is it possible to find out the ip address of a device on a poppy in a huge network?

Question

Automation

Good mood and good day to all.
I work in a federal university swimming pool.
In the water treatment system, everything is controlled from the Siemens Panel TP1200 comfort touch panel .
The brain of the entire water treatment controller is SIMATIC S7 and ET200S .
The bottom line is that, as I understand it, the panel and the controller communicate with each other using their PROFINET IO protocol. But there after all too there are ip addresses?
Is it possible to find the ip address of the controller by its poppy written on the case?
The controller has 3 pcs. RJ45 connector. A panel is connected to one, ASD is written on the other cable and it looks like it goes to the server and to the general network.
The problem is that the network is university and really huge.
Does this controller have a built-in web server? Is it possible to somehow control the controller remotely or monitor the status? Judging by the fact that you can both monitor and control from the panel, I think it will be possible to do the same from a PC if you have software. The question is what kind of software is needed.

Answer 1

The bottom line is that, as I understand it, the panel and the controller communicate with each other using their PROFINET IO protocol. But there after all too there are ip addresses?

is not a fact. see https://ru.wikipedia.org/wiki/PROFINET
words about

In PROFINET, there are two perspectives PROFINET CBA and PROFINET IO. PROFINET CBA is suitable for component based communication via TCP/IP and PROFINET IO is used for real-time communication with requirements in modular engineering systems. Both communication options can be used in parallel.

make me think that your assumptions may not be fundamentally correct
initial educational program here - https://ru.wikipedia.org/wiki/%D0%A1%D0%B5%D1%82%D
... 3 (and all the main protocols are generally 4), and the poppy is 2. which means the ability to build your own network logic. and for Siemens, this is quite expected
further .. for such a system, delivery to operation .. without documentation? .. and without access to the support service?...
hmm ... you want to hack your university for free? that case .. (and if that one, then with some probability it falls under the Criminal Code)
it is unlikely that you should seek help here
ps does not remind you of anything? ;))) https://ru.wikipedia.org/wiki/Stuxnet.. yes yes .. centrifuges were from Siemens

Answer 2

Your best bet is to get in touch with the people who designed this thing, without a project, it's like looking at a closed safe. If it was so easy to connect to it and change whatever you want, it wouldn't be on sale or mom's hackers would break everything.
Yes, these systems have software on the computer and they can even be controlled via the Internet.