Moxa’s EDR series industrial security routers protect the control networks of critical equipment while ensuring fast data transmission. Designed specifically for automation networks, they are integrated cybersecurity solutions that combine an industrial firewall, VPN, router and L2 switching capabilities in a single product that protects the integrity of remote access and critical equipment.

8 FE copper and 2 GbE SFP multiport industrial secure router with firewall/NAT, 12/24/48 VDC input voltage, -40 to 75°C operating temperature, conformal coating

Input/output interface
Alarm contact channels
– Resistive load: 1 A @ 24 VDC
Buttons
– Reset button
Digital input channels
– +13 to +30 V for state 1
– -30 to +3 V for state 0
– Max. input current: 8 mA Ethernet input current: 8 mA Input current: 8 mA

Ethernet interface
10/100BaseT(X) ports (RJ45 connector)
– 8
1000BaseSFP slots
– 2
standards
– IEEE 802.3 for 10BaseT
– IEEE 802.3u for 100BaseT(X)
– IEEE 802.3z for 1000BaseSX/LX/LHX/ZX
– IEEE 802.3x for flow control
– IEEE 802.1Q for VLAN tagging
– IEEE 802.1X for authentication
– Static Port Trunk
DMZ
– User-configurable DMZ ports

Ethernet Software Features
Broadcast Forwarding
– IP directed broadcast, Broadcast Forwarding
Administration
– Back Pressure Flow Control
– DDNS
– DHCP Server/Client
– Web Console (HTTP/HTTPS)
– LLDP
– QoS/CoS/ToS
– SNMPv1/v2c/v3
– Telnet
– TFTP
– HTTPS
– SSH
Redundancy protocols
– RSTP
– STP
– Turbo Ring v2
– Turbo Chain
Routing throughput
– Max. 50K packets per second / 500 Mbps (based on RFC 2544)
Routing table
– Max. 4K routing rules
Simultaneous connections
– Max. 120K (based on RFC 3511)
Connections per second
– Max. Max. 6K (based on RFC 3511)
Routing redundancy
– VRRP
Security
– Secure Boot
– IPsec
– L2TP (Server)
– RADIUS
– Trust access control
– TACACS+
Time management
– NTP Server/Client
– SNTP
Unicast routing
– OSPF
– RIPV1/V2
– Static route
Multicast routing
– Static route
Filter
– IGMP v1/v2/v3

Switch properties
VLAN ID range
– VID 1 to 4094
IGMP groups
– 256
Max. Max. number of VLANs
– 16

LED interface
LED indicators
– PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB

DoS and DDoS protection
Technology
– ARP flood
– FIN scan
– ICMP flood
– TCP sessions without SYN
– NMAP-ID scan
– NMAP-Xmas Scan
– Null Scan
– SYN/FIN Scan
– SYN/RST Scan
– SYN-Flood
– Xmas Scan

Firewall
Filter
– DDoS
– Ethernet Protocols
– ICMP
– IP address
– MAC address
– Ports
Stateful Inspection
– Router Firewall
– Transparent (Bridge) Firewall
Deep Packet Inspection
– Modbus TCP
– Modbus UDP
– DNP3
– IEC 60870-5-104
– IEC 61850 MMS
– EtherNet/IP
– Omron FINS
– Siemens S7 Comm.
– Further protocols will be supported by future firmware updates.
Intrusion Prevention System
– Requires an additional licence.
Throughput
– Firewall: Max. 50K packets per second / 500 Mbps (based on RFC 2544)

IPsec VPN
Authentication
– MD5 and SHA (SHA-256)
– RSA (key size: 1024-bit, 2048-bit)
– X.509 v3 Certificate
Simultaneous VPN tunnels
– Max. 50 IPsec VPN tunnels
Encryption
– DES
– 3DES
– AES-128
– AES-192
– AES-256
Protocols
– IPsec
– L2TP (server)
– PPTP (client)
Throughput
– Conditions: AES-256, SHA-256
– Max. 25K packets per second / 200 Mbps (based on RFC 2544)

NAT
Functions
– 1-to-1
– N-to-1
– Port forwarding
– NAT Loopback

Real-.Time Firewall / VPN Event Log
Event Type
– Firewall Event
– VPN Event
Media
– Local Storage
– SNMP Trap
– Syslog Server

Serial Interface
Console Port
– RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)
Connection
– USB Type-C

Performance parameters
Connection
– Removable terminal strip
Operating voltage
– 9.6 to 60 VDC
Input voltage
– 12/24/48 VDC, redundant dual inputs (DNV-certified for 24 VDC)
Input current
– 0.53 A @ 12 VDC
– 0.26 A @ 24 VDC
– 0.14 A @ 48 VDC
Reverse polarity protection
– Supports

Physical characteristics
Housing
– Metal
Dimensions
– 45 x 135 x 105 mm (1.77 x 5.31 x 4.13 in)
Weight
– 520 g (1.15 lb)
Installation
– DIN rail mounting (DNV certified)
– Wall mounting (with optional kit)

Environmental conditions
Operating temperature
– -40 to 75°C (-40 to 167°F)
Storage temperature (including packaging)
– -40 to 85°C (-40 to 185°F)
Relative humidity
– 5 to 95% (non-condensing)

Standards and certifications
Safety
– IEC 62368-1
– UL 62368-1
EMC
– EN 55032/35
EMI
– CISPR 32, FCC Part 15B Class A
EMS
– IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV
– IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m
– IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV
– IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV
– IEC 61000-4-6 CS: 10 V
– IEC 61000-4-8 PFMF
Railway
– EN 50121-4
Traffic control
– NEMA TS2
Marine
– IEC 60945
– DNV
Shock
– IEC 60068-2-27
Free fall
– IEC 60068-2-32
Vibration
– IEC 60068-2-6
Substations
– IEC 61850-3 Edition 2.0
– IEEE 1613
Hazardous areas
– ATEX
– Class I Division 2
– IECEx

MTBF
Time
– 1,347,225 hours
Standards
– Telcordia (Bellcore), GB