Moxa
EDR-G9004-VPN-2MGTXSFP-T

EDR-G9004-VPN-2MGTXSFP-T

EDR-G9004 Series

2 Gigabit copper + 2 Gigabit copper/SFP combo port industrial secure routers

  • 4-port Gigabit all-in-one firewall/NAT/VPN/router
  • Gen3 LAN Bypass for system fault tolerance
  • Dual WAN redundant interfaces through public networks
  • Next-generation industrial firewall with Intrusion Prevention/Detection System (IPS/IDS)
  • Visualize OT security with the MXsecurity management software
  • Secure remote access tunnel with VPN
  • Examine industrial protocol data with Deep Packet Inspection (DPI) technology
  • Easy network setup with Network Address Translation (NAT)
  • -40 to 75°C operating temperature range (-T model)

Certifications Iec61850 3 Ieee1613 Black · DNV · ATEX · NEMA TS2

Ships from and sold by A5 IT, an authorized Moxa reseller.

Specifications

Input/Output Interface

Alarm Contact Channels
Resistive load: 1 A @ 24 VDC
Buttons
Reset button
Digital Input Channels
+13 to +30 V for state 1 -30 to +3 V for state 0 Max. input current: 8 mA

Ethernet Interface

10/100/1000BaseT(X) Ports (RJ45 connector)
2 (with Gen3 LAN Bypass)
Combo Ports (10/100/1000BaseT(X) or 1000/2500BaseSFP)
2
DMZ
Supports DMZ port
Standards
IEEE 802.3 for 10BaseT IEEE 802.3u for 100BaseT(X) IEEE 802.3ab for 1000BaseT(X) IEEE 802.3z for 1000BaseSX/LX/LHX/ZX IEEE 802.3x for flow control

Ethernet Software Features

Management
Back Pressure Flow Control DDNS DHCP Server/Client Web Console (HTTP/HTTPS) LLDP SNMPv1/v2c/v3 Telnet TFTP HTTPS SSH
Routing Throughput
Max. 350K packets per second / 2 Gbps (based on RFC 2544)
Routing Table
Max. 4K routing rules
Concurrent Connections
Max. 400K (based on RFC 3511)
Connections Per Second
Max. 20K (based on RFC 3511)
Routing Redundancy
VRRP
Security
Secure Boot IPsec L2TP (server) RADIUS TACACS+ Trust access control SCP SFTP NTP authentication Syslog Authentication
Time Management
NTP Server/Client SNTP
Multicast Routing
Static Route
Unicast Routing
OSPF RIPV1/V2 Static Route

LED Interface

LED Indicators
PWR1, PWR2, STATE, BYPASS, WAN/DMZ, VRRP/HA, VPN, USB

DoS and DDoS Protection

Technology
ARP-Flood FIN Scan ICMP Flood TCP Sessions Without SYN NMAP-ID Scan NMAP-Xmas Scan Null Scan SYN/FIN Scan SYN/RST Scan SYN-Flood Xmas Scan

Firewall

Filter
DDoS Ethernet protocols ICMP IP address MAC address Ports
Stateful Inspection
Router firewall Transparent (bridge) firewall
Deep Packet Inspection
Modbus TCP Modbus UDP DNP3 IEC 60870-5-104 IEC 61850 MMS EtherNet/IP MELSEC Omron FINS OPC UA Siemens S7 Comm. Siemens S7 Comm. Plus Additional protocols will be supported through future firmware updates.
Intrusion Prevention System
Requires an additional license.
Throughput
Firewall: Max. 350K packets per second / 2 Gbps (based on RFC 2544) IPS: Max. 200K packets per second / 2 Gbps (based on RFC 2544)

IPsec VPN

Authentication
MD5 and SHA (SHA-512) RSA (key size: 1024-bit, 2048-bit) X.509 v3 certificate
Concurrent VPN Tunnels
Max. 250 IPsec VPN tunnels
Encryption
DES 3DES AES-128 AES-192 AES-256 AES-256-GCM
Protocols
IPsec L2TP (server) PPTP (client)
Throughput
Conditions: AES-256, SHA-256 Max. 100K packets per second / 800 Mbps (based on RFC 2544)

NAT

Features
1-to-1 N-to-1 NAT loopback Port forwarding

Real-Time Firewall / VPN Event Log

Event Type
Firewall event VPN event
Media
Local storage SNMP Trap Syslog server

Serial Interface

Console Port
RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)
Connector
USB Type-C

Power Parameters

Connection
Removable terminal block
Input Voltage
12/24/48 VDC, redundant dual inputs (DNV-certified for 24 VDC)
Operating Voltage
9.6 to 60 VDC
Input Current
1.01 A @ 12 VDC 0.51 A @ 24 VDC 0.27 A @ 48 VDC
Reverse Polarity Protection
Supported

Physical Characteristics

Housing
Metal
IP Rating
IP40
Dimensions
45 x 135 x 105 mm (1.77 x 5.31 x 4.13 in)
Weight
800 g (1.76 lb)
Installation
DIN-rail mounting (DNV-certified) Wall mounting (with optional kit)

Environmental Limits

Operating Temperature
-40 to 75°C (-40 to 167°F) DNV-certified for -25 to 70°C (-13 to 158°F)
Storage Temperature (package included)
-40 to 85°C (-40 to 185°F)
Ambient Relative Humidity
5 to 95% (non-condensing)

Standards and Certifications

Safety
IEC 62368-1 UL 62368-1
EMC
EN 55032/35
EMI
CISPR 32, FCC Part 15B Class A
EMS
IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV IEC 61000-4-6 CS: 10 V IEC 61000-4-8 PFMF
Railway
EN 50121-4
Traffic Control
NEMA TS2
Maritime
DNV IEC 60945
Power Substation
IEEE 1613 IEC 61850-3 Edition 2.0
Hazardous Locations
ATEX Class I Division 2 IECEx
Shock
IEC 60068-2-27
Freefall
IEC 60068-2-32
Vibration
IEC 60068-2-6

MTBF

Time
1,876,185 hrs
Standards
Telcordia (Bellcore), GB

Warranty

Warranty Period
5 years
Details
See www.moxa.com/warranty

Documentation

NameTypeVersionDate
SNMP MIB file for EDR-G9004 Series208.5 KBSoftware Packagev3.28Jul 17, 2026 Jul 17, 2026 Release notes
Firmware for EDR-G9004 Series77.1 MBFirmwarev3.28Jul 16, 2026 Jul 16, 2026 Release notes
Network Security Package for EDR-G9004 Series8.4 MBSoftware Packagev17.0.17May 13, 2026 May 13, 2026 Release notes
Software Package for MXview One Series (Linux version)552.6 MBSoftware Packagev1.7.2May 08, 2026 May 08, 2026 Release notes
Software Package for MXview One Series (Windows version)249.1 MBSoftware Packagev1.7.2May 08, 2026 May 08, 2026 Release notes
CLI Manual for MX-ROS V36.9 MBManualv1.12Aug 31, 2026
Manual for MX-ROS V333.0 MBManualv1.16Jul 16, 2026
FOSS Statement for MX-ROS products1.6 MBDeclarationv3.24Apr 28, 2026
Datasheet for EDR-G9004 Series1.6 MBDatasheetv1.5Jul 31, 2025
Manual for MX-ROS V331.0 MBManualv1.12Jul 31, 2025
QIG for EDR-G9004 Series2.6 MBQIGv2.0Apr 29, 2025
Declaration of Conformity (EU/UK) for EDR-G9004 Series312.5 KBDeclarationv1.0Sep 26, 2024