EDR-G9010-VPN-2MGSFP-CT-T
EDR-G9010 Series8 GbE copper + 2 GbE SFP multiport industrial secure router
- 10-port Gigabit all-in-one firewall/NAT/VPN/router/switch
- Next-generation industrial firewall with Intrusion Prevention/Detection System (IPS/IDS)
- Visualize OT security with the MXsecurity management software
- Secure remote access tunnel with VPN
- Examine industrial protocol data with Deep Packet Inspection (DPI) technology
- Easy network setup with Network Address Translation (NAT)
- RSTP/Turbo Ring redundant protocol enhances network redundancy
- Supports Secure Boot for checking system integrity
- Marine cybersecurity certified (IACS UR E27 Rev.1 & IEC 61162-460 Ed. 3.0), supporting 460-gateway, forwarder and switch roles
- IEC 62443-4-2 Security Level 2 certified
- -40 to 75°C operating temperature range (-T model)
Certifications Iec61850 3 Ieee1613 Black · DNV · ATEX · NEMA TS2
Ships from and sold by A5 IT, an authorized Moxa reseller.
Specifications
Input/Output Interface
- Alarm Contact Channels
- Resistive load: 1 A @ 24 VDC
- Buttons
- Reset button
- Digital Input Channels
- +13 to +30 V for state 1 -30 to +3 V for state 0 Max. input current: 8 mA
Ethernet Interface
- 10/100/1000BaseT(X) Ports (RJ45 connector)
- 8
- 1000/2500BaseSFP Ports
- 2
- Standards
- IEEE 802.1Q for VLAN Tagging IEEE 802.3 for 10BaseT IEEE 802.3ab for 1000BaseT(X) IEEE 802.3ad for Port Trunk with LACP IEEE 802.3u for 100BaseT(X) IEEE 802.3x for flow control IEEE 802.3z for 1000BaseSX/LX/LHX/ZX IEEE 802.1X for authentication
- DMZ
- User-configurable DMZ ports
Ethernet Software Features
- Broadcast Forwarding
- IP directed broadcast, broadcast forwarding
- Management
- Back Pressure Flow Control DDNS DHCP Server/Client Web Console (HTTP/HTTPS) LLDP QoS/CoS/ToS SNMPv1/v2c/v3 Telnet TFTP HTTPS SSH
- Redundancy Protocols
- RSTP STP Turbo Ring v2 Turbo Chain
- Routing Throughput
- Max. 350K packets per second / 2 Gbps (based on RFC 2544)
- Routing Table
- Max. 4K routing rules
- Concurrent Connections
- Max. 400K (based on RFC 3511)
- Connections Per Second
- Max. 20K (based on RFC 3511)
- Routing Redundancy
- VRRP
- Security
- Secure Boot IPsec L2TP (server) RADIUS Trust access control TACACS+ SCP SFTP NTP authentication Syslog Authentication
- Time Management
- NTP Server/Client SNTP
- Unicast Routing
- OSPF RIPV1/V2 Static Route
- Multicast Routing
- Static Route
- Filter
- IGMP v1/v2/v3
Switch Properties
- VLAN ID Range
- VID 1 to 4094
- IGMP Groups
- 1000
- Max. No. of VLANs
- 32
LED Interface
- LED Indicators
- PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB
DoS and DDoS Protection
- Technology
- ARP-Flood FIN Scan ICMP Flood TCP Sessions Without SYN NMAP-ID Scan NMAP-Xmas Scan Null Scan SYN/FIN Scan SYN/RST Scan SYN-Flood Xmas Scan
Firewall
- Filter
- DDoS Ethernet protocols ICMP IP address MAC address Ports
- Stateful Inspection
- Router firewall Transparent (bridge) firewall
- Deep Packet Inspection
- DNP3 EtherNet/IP IEC 60870-5-104 IEC 61850 MMS MELSEC Modbus TCP Modbus UDP Omron FINS OPC UA Siemens S7 Comm. Siemens S7 Comm. Plus Additional protocols will be supported through future firmware updates.
- Intrusion Prevention System
- Requires an additional license.
- Throughput
- Firewall: Max. 350K packets per second / 2 Gbps (based on RFC 2544) IPS: Max. 200K packets per second / 2 Gbps (based on RFC 2544)
IPsec VPN
- Authentication
- MD5 and SHA (SHA-512) RSA (key size: 1024-bit, 2048-bit) X.509 v3 certificate
- Concurrent VPN Tunnels
- Max. 250 IPsec VPN tunnels
- Encryption
- DES 3DES AES-128 AES-192 AES-256 AES-256-GCM
- Protocols
- IPsec L2TP (server) PPTP (client)
- Throughput
- Conditions: AES-256, SHA-256 Max. 100K packets per second / 800 Mbps (based on RFC 2544)
NAT
- Features
- 1-to-1 N-to-1 NAT loopback Port forwarding
Real-Time Firewall / VPN Event Log
- Event Type
- Firewall event VPN event
- Media
- Local storage SNMP Trap Syslog server
Serial Interface
- Console Port
- RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)
- Connector
- USB Type-C
Power Parameters
- Connector
- Removable terminal block
- Input Voltage
- Redundant dual inputs 12/24/48 VDC (DNV-certified for 24 VDC)
- Operating Voltage
- 9.6 to 60 VDC
- Input Current
- 0.70 A @ 24 VDC 0.35 A @ 48 VDC 1.51 A @ 12 VDC
- Reverse Polarity Protection
- Supported
Physical Characteristics
- Housing
- Metal
- IP Rating
- IP40
- Dimensions
- 58 x 135 x 105 mm (2.28 x 5.31 x 4.13 in)
- Weight
- 1030 g (2.27 lb)
- Installation
- DIN-rail mounting (DNV-certified) Wall mounting (with optional kit)
- Protection
- PCB conformal coating
Environmental Limits
- Operating Temperature
- DNV-certified for -25 to 70°C (-13 to 158°F) -40 to 75°C (-40 to 167°F)
- Storage Temperature (package included)
- -40 to 85°C (-40 to 185°F)
- Ambient Relative Humidity
- 5 to 95% (non-condensing)
Standards and Certifications
- Safety
- IEC 62368-1 UL 62368-1 IEC 60950-1 UL 60950-1
- EMC
- EN 55032/35
- EMI
- CISPR 32, FCC Part 15B Class A
- EMS
- IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV IEC 61000-4-6 CS: 10 V IEC 61000-4-8 PFMF
- Cybersecurity
- IEC 62443-4-2 Security Level 2
- Railway
- EN 50121-4
- Traffic Control
- NEMA TS2
- Maritime
- DNV IEC 60945 DNV IEC 61162-460 Edition 3.0 460-gateway, 460-forwarder and 460-switch DNV security profile 2, IACS UR E27 Rev.1 CCS CCS IACS UR E27 Rev.1 KR KR IACS UR E27 Rev.1 CCS Guidelines for Inspection of Ship Network Firewall KR IEC 61162-460 Edition 3.0 460-gateway, 460-forwarder and 460-switch
- Power Substation
- IEEE 1613 IEC 61850-3 Edition 2.0
- Hazardous Locations
- Class I Division 2 ATEX
- Shock
- IEC 60068-2-27
- Freefall
- IEC 60068-2-32
- Vibration
- IEC 60068-2-6
MTBF
- Time
- 1,080,807 hrs
- Standards
- Telcordia (Bellcore), GB
Warranty
- Warranty Period
- 5 years
- Details
- See www.moxa.com/warranty
