Comnet RLGE2FE16R-S-12-288P Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With 8x10/100 BaseT PoE, 8x 100FX SFPs, 2xGE SFP, 12V DC PSU

The Comnet product series RLGE2FE16R are substation-rated and industrially hardened layer 2 managed switches/layer 3 routers, with a unique and highly robust packet processing SCADA-aware security firewall for the most mission critical and demanding cyber-security applications. The RLGE2FE16R is intended for deployment in environments where high levels of electromagnetic noise and interference (EMI) and severe voltage transients and surges are routinely encountered, such as electrical utility substations and switchyards, heavy manufacturing facilities, track-side electronic equipment, and other difficult out-of-plant installations. Layer 3 routing functionality allows for the participation and foundation of a core network infrastructure. The RLGE2FE16R-S-12-288P is an ideal platform for deploying a secure communications and networking gateway for remote electrical utility sites, and other critical infrastructure applications.

Features

• Fully compliant with the requirements of IEC 61850-3 and IEEE 1613 Class 2, for use in electrical utility substations; and NEMA TS-1/TS-2 for Traffic Signal Control Equipment
• For NERC-CIP-5 and NERC-CIP-014 compliance, or any network application demanding effective cyber-security protection
• Up to (16) 10/100 Mbps Ethernet RJ-45 communications ports, with (2) 100/1000 Mbps SFP uplink ports. Available with optional (8) 100 Mbps SFP ports for network aggregation applications, or where it is desirable to provide optical connectivity directly to the switch/router or in electrically noisy environments
• Optional internal 2G/3G/4G LTE GPRS/UMTS cellular radio modem with 2 SIM card slots, for maximum network reliability and availability
• Optional serial interface supports 4 ports of RS-232 serial data, with serial gateway and serial tunneling
• Optional PoE+: 30 watts per port, 8 ports max.
• Highly advanced and sophisticated security suite: Per Port Deep Packet Inspection (DPI) SCADA-aware firewall supports DNP-3, ModBus, IEC 104/101, and IEC 61850 protocols for NERC-CIP-5 compliance
• Network Learning allows the user to easily create secure and highly effective SCADA firewall rules
• Supports IEEE 1588v2 Precision Timing Protocol, Transparent Clock (TC), 10/100 Mbps communications ports only
• IEEE 802.1X Port-based network access control
• L-2/3/4 ACL for incoming traffic, and layer 2/layer 3 VPN with IPsec
• The user APA (Authentication Proxy Access) controls remote access and communications to end-point/edge of network devices by all users, with extreme granularity across the users, time, physical Ethernet or serial data ports, TCP ports, and SCADA protocols. It also provides PCAP for the entire allowed maintenance or access session
• IPsec VPN with X.509 certificates, for use over any cellular or fiber-optic network
• Ethernet layer 2 switching & layer 3 IP routing with integrated VPN and link protection per ITU-T G.8032
• Fault/event notification provided through Syslog and SNMP traps
• Environmentally hardened for deployment in difficult unconditioned out-of-plant installations: Extended ambient operating temperature range of -40˚ C to +85˚ C, for use in virtually any environment. Conformal coating is optionally available for humidity with condensation or airborne particulate matter environments
• Rugged metal housing. DIN-rail mountable & rated for IP-30 ingress protection
• Internal/self-contained universal power supply: Available in operating voltage ranges from 9 to 270 VDC, or 90 to 250 VAC
• Redundant power supply input capability significantly reduces the possibility of a single-point-of-failure, for the highest possible system and network reliability (DC-powered units only)
• No fans or forced-air cooling; cooling via natural convection eliminates unreliable and troublesome fans/moving parts, with no periodic maintenance requirements

Downloads

The Comnet product series RLGE2FE16R are substation-rated and industrially hardened layer 2 managed switches/layer 3 routers, with a unique and highly robust packet processing SCADA-aware security firewall for the most mission critical and demanding cyber-security applications. The RLGE2FE16R is intended for deployment in environments where high levels of electromagnetic noise and interference (EMI) and severe voltage transients and surges are routinely encountered, such as electrical utility substations and switchyards, heavy manufacturing facilities, track-side electronic equipment, and other difficult out-of-plant installations. Layer 3 routing functionality allows for the participation and foundation of a core network infrastructure. The RLGE2FE16R-S-12-288P is an ideal platform for deploying a secure communications and networking gateway for remote electrical utility sites, and other critical infrastructure applications.

Features

• Fully compliant with the requirements of IEC 61850-3 and IEEE 1613 Class 2, for use in electrical utility substations; and NEMA TS-1/TS-2 for Traffic Signal Control Equipment
• For NERC-CIP-5 and NERC-CIP-014 compliance, or any network application demanding effective cyber-security protection
• Up to (16) 10/100 Mbps Ethernet RJ-45 communications ports, with (2) 100/1000 Mbps SFP uplink ports. Available with optional (8) 100 Mbps SFP ports for network aggregation applications, or where it is desirable to provide optical connectivity directly to the switch/router or in electrically noisy environments
• Optional internal 2G/3G/4G LTE GPRS/UMTS cellular radio modem with 2 SIM card slots, for maximum network reliability and availability
• Optional serial interface supports 4 ports of RS-232 serial data, with serial gateway and serial tunneling
• Optional PoE+: 30 watts per port, 8 ports max.
• Highly advanced and sophisticated security suite: Per Port Deep Packet Inspection (DPI) SCADA-aware firewall supports DNP-3, ModBus, IEC 104/101, and IEC 61850 protocols for NERC-CIP-5 compliance
• Network Learning allows the user to easily create secure and highly effective SCADA firewall rules
• Supports IEEE 1588v2 Precision Timing Protocol, Transparent Clock (TC), 10/100 Mbps communications ports only
• IEEE 802.1X Port-based network access control
• L-2/3/4 ACL for incoming traffic, and layer 2/layer 3 VPN with IPsec
• The user APA (Authentication Proxy Access) controls remote access and communications to end-point/edge of network devices by all users, with extreme granularity across the users, time, physical Ethernet or serial data ports, TCP ports, and SCADA protocols. It also provides PCAP for the entire allowed maintenance or access session
• IPsec VPN with X.509 certificates, for use over any cellular or fiber-optic network
• Ethernet layer 2 switching & layer 3 IP routing with integrated VPN and link protection per ITU-T G.8032
• Fault/event notification provided through Syslog and SNMP traps
• Environmentally hardened for deployment in difficult unconditioned out-of-plant installations: Extended ambient operating temperature range of -40˚ C to +85˚ C, for use in virtually any environment. Conformal coating is optionally available for humidity with condensation or airborne particulate matter environments
• Rugged metal housing. DIN-rail mountable & rated for IP-30 ingress protection
• Internal/self-contained universal power supply: Available in operating voltage ranges from 9 to 270 VDC, or 90 to 250 VAC
• Redundant power supply input capability significantly reduces the possibility of a single-point-of-failure, for the highest possible system and network reliability (DC-powered units only)
• No fans or forced-air cooling; cooling via natural convection eliminates unreliable and troublesome fans/moving parts, with no periodic maintenance requirements

Downloads