EDR-G9010-VPN-2MGSFP-HV, 8 GbE + 2 GbE industrial secure router with Firewall/NAT/VPN, 120/220 VDC/VAC, -10 to 60°C
EDR-G9010-VPN-2MGSFP-HV
8 GbE + 2 GbE industrial secure router with Firewall/NAT/VPN, 120/220 VDC/VAC, -10 to 60°C
SPEDIZIONE GRATUITA
Certificati
Introduction
The EDR-G9010 Series is a set of highly integrated industrial multi-port secure routers with firewall/NAT/VPN and managed Layer 2 switch functions. These devices are designed for Ethernet-based security applications in critical remote control or monitoring networks. These secure routers provide an electronic security perimeter to protect critical cyber assets including substations in power applications, pump-and-treat systems in water stations, distributed control systems in oil and gas applications, and PLC/SCADA systems in factory automation. Furthermore, with the addition of IDS/IPS, the EDR-G9010 Series is an industrial next-generation firewall, equipped with threat detection and prevention capabilities to further protect critical infrastructure from cybersecurity attacks.
Features and Benefits
- 10-port Gigabit all-in-one firewall/NAT/VPN/router/switch
- Industrial-grade Intrusion Prevention/Detection System (IPS/IDS)
- Visualize OT security with the MXsecurity management software
- Secure remote access tunnel with VPN
- Examine industrial protocol data with Deep Packet Inspection (DPI) technology
- Easy network setup with Network Address Translation (NAT)
- RSTP/Turbo Ring redundant protocol enhances network redundancy
- Security features based on IEC 62443/NERC CIP
- Supports secure boot for checking system integrity
- -40 to 75°C operating temperature range (-T model)
Specifications
Input/Output Interface
Alarm Contact Channels: Resistive load: 1 A @ 24 VDC
Buttons: Reset button
Digital Input Channels: +13 to +30 V for state 1, -30 to +3 V for state 0, Max. input current: 8 mA
Ethernet Interfac
10/100/1000BaseT(X) Ports (RJ45 connector): 8
1000BaseSFP Slots: 2
Standards
IEEE 802.1Q for VLAN Tagging
IEEE 802.3 for 10BaseT
IEEE 802.3ab for 1000BaseT(X)
Static Port Trunk
IEEE 802.3u for 100BaseT(X)
IEEE 802.3x for flow control
IEEE 802.3z for 1000BaseSX/LX/LHX/ZX
Ethernet Software Features
Broadcast Forwarding: IP directed broadcast, broadcast forwarding
Management: Back Pressure Flow Control, DDNS, DHCP Server/Client, Web Console (HTTP/HTTPS), LLDP, QoS/CoS/ToS, SNMPv1/v2c/v3, Telnet, TFTP, HTTPS, SSH
Redundancy Protocols: RSTP, STP, Turbo Ring v2
Routing: Throughput: 350K packets per second (max. 1500 Mbps)
Routing Table: Max. 4K routing rules
Concurrent Connections: Max. 400K
Connections Per Second: Max. 20K
Routing Redundancy: VRRP
Security: Secure Boot, IPsec, L2TP (server), RADIUS, Trust access control
Time Management: NTP Server/Client, SNTP
Unicast Routing: OSPF, RIPV1/V2, Static Route
Multicast Routing: Static Route
Filter: IGMP v1/v2/v3
Switch Properties
VLAN ID Range: VID 1 to 4094
IGMP Groups: 256
Max. No. of VLANs: 16
LED Interface
LED Indicators: PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB
DoS and DDoS Protection
Technology: ARP-Flood, FIN Scan, ICMP-Death, NEWWithout-SYN Scan, NMAP-ID Scan, NMAP-Xmas Scan, Null Scan, SYN/FIN Scan, SYN/RST Scan, SYN-Flood, Xmas Scan
Firewall
Filter: DDoS, Ethernet protocols, ICMP, IP address, MAC address, Ports
Stateful Inspection: Router firewall, Transparent (bridge) firewall
Deep Packet Inspection:
Modbus TCP
Modbus UDP
DNP3
IEC 60870-5-104
IEC 61850 MMS
Additional protocols will be supported through future firmware updates.
Intrusion Prevention System: Requires an additional license.
Throughput: Max. 350K packets per second (max. 1500 Mbps)
IPsec VPN
Authentication: MD5 and SHA (SHA-256), RSA (key size: 1024-bit, 2048-bit), X.509 v3 certificate
Concurrent VPN Tunnels: Max. 250 IPsec VPN tunnels
Encryption: DES, 3DES, AES-128, AES-192, AES-256
Protocols: IPsec, L2TP (server), PPTP (client)
Throughput: Max. 300 Mbps (Conditions: AES-256, SHA-256)
NAT
Features: 1-to-1, N-to-1, Port forwarding
Real-Time Firewall / VPN Event Log
Event Type: Firewall event, VPN event
Media: Local storage, SNMP Trap, Syslog server
Serial Interface
Console Port: RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)
Connector: USB Type-C
Power Parameters
Connection: Removable terminal block
Input Voltage: 120/240 VDC/VAC
Input Current:
0.28 A @ 120 VAC
0.18 A @ 240 VAC
0.15 A @ 120 VDC
0.08 A @ 240 VDC
Reverse Polarity Protection: Supported
Physical Characteristics
Housing: Metal
Dimensions: 64 x 135 x 105 mm (2.52 x 5.31 x 4.13 in)
Weight: 1150 g (2.54 lb)
Installation: DIN-rail mounting (DNV-certified), Wall mounting (with optional kit)
Environmental Limits
Operating Temperature: -10 to 60°C (14 to 140°F)
Storage Temperature (package included): -40 to 85°C (-40 to 185°F)
Ambient Relative Humidity: 5 to 95% (non-condensing)
Standards and Certifications
Safety: IEC 62368-1, UL 62368-1, IEC 60950-1, UL 60950-1
EMC: EN 55032/35
EMI: CISPR 32, FCC Part 15B Class A
EMS:
IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV
IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m
IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV
IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV
IEC 61000-4-6 CS: 10 V
IEC 61000-4-8 PFMF
Railway: EDR-G9010-VPN-2MGSFP(-T) models: EN 50121-4
Traffic Control: EDR-G9010-VPN-2MGSFP(-T) models: NEMA TS2
Maritime: EDR-G9010-VPN-2MGSFP(-T) models: IEC 60945, DNV
Power Substation: IEEE 1613, IEC 61850-3 Edition 2.0
Hazardous Locations: EDR-G9010-VPN-2MGSFP(-T) models: ATEX, Class I Division 2
Shock: IEC 60068-2-27
Freefall: IEC 60068-2-32
Vibration: IEC 60068-2-6
MTBF
Time: 509,714 hrs
Standards: Telcordia (Bellcore), GB
Warranty
Warranty Period: 5 years