EDR-8010-VPN-2GSFP-T - 8 FE copper and 2 GbE SFP multiport industrial secure router with firewall/NAT/VPN, 12/24/48 VDC
by MOXA

EDR-8010-VPN-2GSFP-T - The EDR-8010 Series is a set of highly integrated industrial multi-port secure routers with firewall/NAT/VPN and managed Layer 2 switch functions. These devices are designed for Ethernet-based security applications in critical remote control or monitoring networks. These secure routers provide an electronic security perimeter to protect critical cyber assets including substations in power applications, pump-and-treat systems in water stations, distributed control systems in oil and gas applications, and PLC/SCADA systems in factory automation.

Input/Output Interface

• Alarm Contact Channels

  • Resistive load: 1 A @ 24 VDC

• Buttons

  • Reset button

• Digital Input Channels

  • +13 to +30 V for state 1
    -30 to +3 V for state 0
    Max. input current: 8 mA

Ethernet Interface

• 10/100BaseT(X) Ports (RJ45 connector)

  • 8

• 1000BaseSFP Slots

  • 2

• Standards

  • IEEE 802.3 for 10BaseT
    IEEE 802.3u for 100BaseT(X)
    IEEE 802.3z for 1000BaseSX/LX/LHX/ZX
    IEEE 802.3x for flow control
    IEEE 802.1Q for VLAN Tagging
    IEEE 802.1X for authentication
    Static Port Trunk

• DMZ

  • User-configurable DMZ ports

Ethernet Software Features

• Broadcast Forwarding

  • IP directed broadcast, broadcast forwarding

• Management

  • Back Pressure Flow Control
    DDNS
    DHCP Server/Client
    Web Console (HTTP/HTTPS)
    LLDP
    QoS/CoS/ToS
    SNMPv1/v2c/v3
    Telnet
    TFTP
    HTTPS
    SSH

• Redundancy Protocols

  • RSTP
    STP
    Turbo Ring v2

• Routing Throughput

  • Max. 50K packets per second / 500 Mbps (based on RFC 2544)

• Routing Table

  • Max. 4K routing rules

• Concurrent Connections

  • Max. 120K (based on RFC 3511)

• Connections Per Second

  • Max. Max. 6K (based on RFC 3511)

• Routing Redundancy

  • VRRP

• Security

  • Secure Boot
    IPsec
    L2TP (server)
    RADIUS
    Trust access control

• Time Management

  • NTP Server/Client
    SNTP

• Unicast Routing

  • OSPF
    RIPV1/V2
    Static Route

• Multicast Routing

  • Static Route

• Filter

  • IGMP v1/v2/v3

Switch Properties

• VLAN ID Range

  • VID 1 to 4094

• IGMP Groups

  • 256

• Max. No. of VLANs

  • 16

LED Interface

• LED Indicators

  • PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB

DoS and DDoS Protection

• Technology

  • ARP-Flood
    FIN Scan
    ICMP-Death
    NEWWithout-SYN Scan
    NMAP-ID Scan
    NMAP-Xmas Scan
    Null Scan
    SYN/FIN Scan
    SYN/RST Scan
    SYN-Flood
    Xmas Scan

Firewall

• Filter

  • DDoS
    Ethernet protocols
    ICMP
    IP address
    MAC address
    Ports

• Stateful Inspection

  • Router firewall
    Transparent (bridge) firewall

• Deep Packet Inspection

  • Modbus TCP
    Modbus UDP
    DNP3
    IEC 60870-5-104
    IEC 61850 MMS
    EtherNet/IP
    Omron FINS
    Siemens S7 Comm.
    Additional protocols will be supported through future firmware updates.

• Intrusion Prevention System

  • Requires an additional license.

• Throughput

  • Firewall:
    Max. 50K packets per second / 500 Mbps (based on RFC 2544)

IPsec VPN

• Authentication

  • MD5 and SHA (SHA-256)
    RSA (key size: 1024-bit, 2048-bit)
    X.509 v3 certificate

• Concurrent VPN Tunnels

  • Max. 50 IPsec VPN tunnels

• Encryption

  • DES
    3DES
    AES-128
    AES-192
    AES-256

• Protocols

  • IPsec
    L2TP (server)
    PPTP (client)

• Throughput

  • Conditions: AES-256, SHA-256
    Max. 25K packets per second / 200 Mbps (based on RFC 2544)

NAT

• Features

  • 1-to-1
    N-to-1
    Port forwarding
    NAT loopback

Real-Time Firewall / VPN Event Log

• Event Type

  • Firewall event
    VPN event

• Media

  • Local storage
    SNMP Trap
    Syslog server

Serial Interface

• Console Port

  • RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)

• Connector

  • USB Type-C

Power Parameters

• Connection

  • Removable terminal block

• Operating Voltage

  • 9.6 to 60 VDC

• Input Voltage

  • 12/24/48 VDC, redundant dual inputs (DNV-certified for 24 VDC)

• Input Current

  • 0.53 A @ 12 VDC
    0.26 A @ 24 VDC
    0.14 A @ 48 VDC

• Reverse Polarity Protection

  • Supported

Physical Characteristics

• Housing

  • Metal

• Dimensions

  • 45 x 135 x 105 mm (1.77 x 5.31 x 4.13 in)

• Weight

  • 520 g (1.15 lb)

• Installation

  • DIN-rail mounting (DNV-certified)
    Wall mounting (with optional kit)

Environmental Limits

• Operating Temperature

  • -40 to 75C (-40 to 167F)

• Storage Temperature (package included)

  • -40 to 85C (-40 to 185F)

• Ambient Relative Humidity

  • 5 to 95% (non-condensing)

Standards and Certifications

• Safety

  • IEC 62368-1
    UL 62368-1

• EMC

  • EN 55032/35

• EMI

  • CISPR 32, FCC Part 15B Class A

• EMS

  • IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV
    IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m
    IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV
    IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV
    IEC 61000-4-6 CS: 10 V
    IEC 61000-4-8 PFMF

• Railway

  • EN 50121-4

• Traffic Control

  • NEMA TS2

• Maritime

  • IEC 60945
    DNV

• Shock

  • IEC 60068-2-27

• Freefall

  • IEC 60068-2-32

• Vibration

  • IEC 60068-2-6

• Power Substation

  • IEC 61850-3 Edition 2.0
    IEEE 1613

• Hazardous Locations

  • ATEX
    Class I Division 2
    IECEx

MTBF

• Time

  • 1,347,225 hrs

• Standards

  • Telcordia (Bellcore), GB

EDR-8010-VPN-2GSFP-T.pdf

1,340 K