Comnet RLGE2FE16R-S-11-28P-CGU RLGE2FE16R with 2 × 100/1000 FX SFP, 8 × 10/100 TX PoE+, 2G/3G GPRS/UMTS Cellular Modem

Comnet RLGE2FE16R-S-11-28P-CGU is substation-rated and industrially hardened layer 2 managed switches/layer 3 routers, with a unique and highly robust packet processing SCADA-aware security firewall for the most missioncritical and demanding cyber-security applications. It is intended for deployment in environments where high levels of electromagnetic noise and interference (EMI) and severe voltage transients and surges are routinely encountered, such as electrical utility substations and switchyards, heavy manufacturing facilities, track-side electronic equipment, and other difficult out-of-plant installations. Layer 3 routing functionality allows for the participation and foundation of a core network infrastructure. It is an ideal platform for deploying a secure communications and networking gateway for remote electrical utility sites, and other critical infrastructure applications.

Features

• Fully compliant with the requirements of IEC 61850-3 and IEEE 1613 Class 2, for use in electrical utility substations; and NEMA TS-1/TS-2 for Traffic Signal Control Equipment
• For NERC-CIP-5 and NERC-CIP-014 compliance, or any network application demanding effective cyber-security protection
• Up to (16) 10/100 Mbps Ethernet RJ-45 communications ports, with (2) 100/1000 Mbps SFP uplink ports. Available with optional (8) 100 Mbps SFP ports for network aggregation applications, or where it is desirable to provide optical connectivity directly to the switch/router or in electrically noisy environments
• Highly advanced and sophisticated security suite: Per Port Deep Packet Inspection (DPI) SCADA-aware firewall supports DNP-3, ModBus, IEC 104/101, and IEC 61850 protocols for NERC-CIP-5 compliance
• Network Learning allows the user to easily create secure and highly effective SCADA firewall rules
• Supports IEEE 1588v2 Precision Timing Protocol, Transparent Clock (TC), 10/100 Mbps communications ports only. (Gigabit uplink ports to be supported in future firmware release.)
• IEEE 802.1X Port-based network access control
• L-2/3/4 ACL for incoming traffic, and layer 2/layer 3 VPN with IPsec
• The user APA (Authentication Proxy Access) controls remote access and communications to end-point/edge of network devices by all users, with extreme granularity across the users, time, physical Ethernet or serial data ports, TCP ports, and SCADA protocols. It also provides PCAP for the entire allowed maintenance or access session
• IPsec VPN with X.509 certificates, for use over any cellular or fiber-optic network
• Ethernet layer 2 switching & layer 3 IP routing with integrated VPN and link protection per ITU-T G.8032
• Fault/event notification provided through Syslog and SNMP traps
• Environmentally hardened for deployment in difficult unconditioned out-of-plant installations: Extended ambient operating temperature range of -40˚ C to +85˚ C, for use in virtually any environment. Conformal coating is optionally available for humidity with condensation or airborne particulate matter environments
• Rugged metal housing. DIN-rail mountable & rated for IP-30 ingress protection
• Internal/self-contained universal power supply: Available in operating voltage ranges from 9 to 270 VDC, or 90 to 250 VAC
• No fans or forced-air cooling; cooling via natural convection eliminates unreliable and troublesome fans/moving parts, with no periodic maintenance requirements