Skip to product information
1 of 1

Moxa

MOXA EDR-G9010-VPN-2MGSFP-CT-T Industrial Secure Router

MOXA EDR-G9010-VPN-2MGSFP-CT-T Industrial Secure Router

Regular price $4,842.00 CAD
Regular price Sale price $4,842.00 CAD
Sale Sold out

Features and Benefits

  • 8 x 10/100/1000BaseT(X) Ports (RJ45 connector)
  • 2 x 1000/2500BaseSFP Ports
  • Metal body design
  • DIN-Rail and Wall mounting
  • 12 to 48 VDC Redundant dual power inputs
  • -40 to 75°C operating temperature
View full details

Description

The EDR-G9010 Series is a set of highly integrated industrial multi-port secure routers with firewall/NAT/VPN and managed Layer 2 switch functions. These devices are designed for Ethernet-based security applications in critical remote control or monitoring networks. These secure routers provide an electronic security perimeter to protect critical cyber assets including substations in power applications, pump-and-treat systems in water stations, distributed control systems in oil and gas applications, and PLC/SCADA systems in factory automation. Furthermore, with the addition of IDS/IPS, the EDR-G9010 Series is an industrial next-generation firewall, equipped with threat detection and prevention capabilities to further protect critical infrastructure from cybersecurity attacks.

Specification

Input/Output Interface
Alarm Contact Channels: Resistive load: 1 A @ 24 VDC
Buttons: Reset button

Digital Input Channels
+13 to +30 V: State 1
-30 to +3 V: State 0
Max. input current: 8 mA

Ethernet Interface
10/100/1000BaseT(X) Ports (RJ45 connector): 8
1000/2500BaseSFP Ports: 2

Standards
IEEE 802.1Q: VLAN Tagging
IEEE 802.3: 10BaseT
IEEE 802.3ab: 1000BaseT(X)
Static Port Trunk: Yes
IEEE 802.3u: 100BaseT(X)
IEEE 802.3x: Flow control
IEEE 802.3z: 1000BaseSX/LX/LHX/ZX
IEEE 802.1X: Authentication

DMZ
User-configurable: DMZ ports

Ethernet Software Features
Broadcast Forwarding: IP directed broadcast, broadcast forwarding
Management: Back Pressure Flow Control, DDNS, DHCP Server/Client, Web Console (HTTP/HTTPS), LLDP, QoS/CoS/ToS, SNMPv1/v2c/v3, Telnet, TFTP, HTTPS, SSH
Redundancy Protocols: RSTP, STP, Turbo Ring v2, Turbo Chain
Routing Throughput: Max. 350K packets per second / 2 Gbps (based on RFC 2544)
Routing Table: Max. 4K routing rules
Concurrent Connections: Max. 400K (based on RFC 3511)
Connections Per Second: Max. 20K (based on RFC 3511)
Routing Redundancy: VRRP
Security: Secure Boot, IPsec, L2TP (server), RADIUS, Trust access control, TACACS+, SCP, SFTP, NTP authentication, Syslog Authentication
Time Management: NTP Server/Client, SNTP
Unicast Routing: OSPF, RIPV1/V2, Static Route
Multicast Routing: Static Route
Filter: IGMP v1/v2/v3

Switch Properties
VLAN ID Range: VID 1 to 4094
IGMP Groups: 256
Max. No. of VLANs: 32

LED Interface
LED Indicators: PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB

DoS and DDoS Protection
Technology: ARP-Flood, FIN Scan, ICMP Flood, TCP Sessions Without SYN, NMAP-ID Scan, NMAP-Xmas Scan, Null Scan, SYN/FIN Scan, SYN/RST Scan, SYN-Flood, Xmas Scan

Firewall
Filter: DDoS, Ethernet protocols, ICMP, IP address, MAC address, Ports
Stateful Inspection: Router firewall, Transparent (bridge) firewall
Deep Packet Inspection: DNP3, EtherNet/IP, IEC 60870-5-104, IEC 61850 MMS, MELSEC, Modbus TCP, Modbus UDP, Omron FINS, OPC UA, Siemens S7 Comm., Siemens S7 Comm. Plus. Additional protocols will be supported through future firmware updates.

Intrusion Prevention System
Requires: Additional license
Throughput: Firewall: Max. 350K packets per second / 2 Gbps (based on RFC 2544)
IPS: Max. 200K packets per second / 2 Gbps (based on RFC 2544)

IPsec VPN
Authentication: MD5 and SHA (SHA-512), RSA (key size: 1024-bit, 2048-bit), X.509 v3 certificate
Concurrent VPN Tunnels: Max. 250 IPsec VPN tunnels
Encryption: DES, 3DES, AES-128, AES-192, AES-256, AES-256-GCM
Protocols: IPsec, L2TP (server), PPTP (client)
Throughput: Conditions: AES-256, SHA-256, Max. 100K packets per second / 800 Mbps (based on RFC 2544)

NAT
Features: 1-to-1, N-to-1, NAT loopback, Port forwarding

Real-Time Firewall / VPN Event Log
Event Type: Firewall event, VPN event
Media: Local storage, SNMP Trap, Syslog server

Serial Interface
Console Port: RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)
Connector: USB Type-C

Power Parameters
Connection: Removable terminal block
Input Voltage: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: 12/24/48 VDC, redundant dual inputs (DNV-certified for 24 VDC)
EDR-G9010-VPN-2MGSFP-HV(-T) models: 120/240 VDC/VAC, redundant dual inputs
Operating Voltage: non-HV(-T) models: 9.6 to 60 VDC, -HV(-T) models: 88 to 300 VDC, 90 to 264 VAC
Input Current: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: 1.51 A @ 12 VDC, 0.70 A @ 24 VDC, 0.35 A @ 48 VDC
EDR-G9010-VPN-2MGSFP-HV(-T) models: 0.28 A @ 120 VAC, 0.18 A @ 240 VAC, 0.15 A @ 120 VDC, 0.08 A @ 240 VDC
Reverse Polarity Protection: Supported

Physical Characteristics
Housing: Metal
IP Rating: IP40
Dimensions: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: 58 x 135 x 105 mm (2.28 x 5.31 x 4.13 in)
EDR-G9010-VPN-2MGSFP-HV(-T) models: 64 x 135 x 105 mm (2.52 x 5.31 x 4.13 in)
Weight: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: 1030 g (2.27 lb)
EDR-G9010-VPN-2MGSFP-HV(-T) models: 1150 g (2.54 lb)
Installation: DIN-rail mounting (DNV-certified), Wall mounting (with optional kit)
Protection: -CT models: PCB conformal coating

Environmental Limits
Operating Temperature: Standard models: -10 to 60°C (14 to 140°F), Wide temp. models: -40 to 75°C (-40 to 167°F), EDR-G9010-VPN-2MGSFP(-T, -CT-, CT-T) models: DNV-certified for -25 to 70°C (-13 to 158°F)
Storage Temperature (package included): -40 to 85°C (-40 to 185°F)
Ambient Relative Humidity: 5 to 95% (non-condensing)

Standards and Certifications
Safety: IEC 62368-1, UL 62368-1, IEC 60950-1, UL 60950-1
EMC: EN 55032/35
EMI: CISPR 32, FCC Part 15B Class A
EMS: IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV, IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m, IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV, IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV, IEC 61000-4-6 CS: 10 V, IEC 61000-4-8 PFMF
Industrial Cybersecurity: IEC 62443-4-1, IEC 62443-4-2
Railway: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: EN 50121-4
Traffic Control: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: NEMA TS2
Maritime: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: DNV, DNV IEC 61162-460 Edition 3.0, DNV security profile 2, IACS UR E27 Rev.1, IEC 60945
Power Substation: IEEE 1613, IEC 61850-3 Edition 2.0
Hazardous Locations: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: ATEX, Class I Division 2
Shock: IEC 60068-2-27
Freefall: IEC 60068-2-32
Vibration: IEC 60068-2-6

MTBF
Time: EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: 1,080,807 hrs
EDR-G9010-VPN-2MGSFP-HV(-T) models: 509,714 hrs
Standards: Telcordia (Bellcore), GB

Warranty
Warranty Period: 5 years