Moxa’s EDR series industrial security routers protect the control networks of critical equipment while ensuring fast data transmission. Designed specifically for automation networks, they are integrated cybersecurity solutions that combine an industrial firewall, VPN, router and L2 switching capabilities in a single product that protects the integrity of remote access and critical equipment.

8 FE copper and 2 GbE SFP multiport industrial secure router with firewall/NAT/VPN, 12/24/48 VDC input voltage, -10 to 60°C operating temperature, conformal coating

input/output interface
– Alarm contact channels: Resistive load: 1 A @ 24 VDC
– Buttons: Reset button
– Digital input channels: +13 to +30 V for state 1, -30 to +3 V for state 0, Max. Input current: 8 mA

Ethernet interface
– 10/100BaseT(X) ports (RJ45 connection): 8
– 1000BaseSFP slots: 2
– Standards
IEEE 802.3 for 10BaseT
IEEE 802.3u for 100BaseT(X)
IEEE 802.3z for 1000BaseSX/LX/LHX/ZX
IEEE 802.3x for flow control
IEEE 802.1Q for VLAN tagging
IEEE 802.1X for authentication
– Static port trun: DMZ
– User-configurable DMZ ports

Ethernet software features
– Broadcast Forwarding: IP directed broadcast, Broadcast Forwarding
– Management: Back Pressure Flow Control
– DDNS, DHCP Server/Client: Web Console (HTTP/HTTPS), LLDP, QoS/CoS/ToS, SNMPv1/v2c/v3, Telnet, TFTP, HTTPS, SSP, Redundancy Protocols, RSTP, STP, Turbo Ring v2, Turbo Chain
– Routing Throughput: Max. 50K packets per second / 500 Mbps (based on RFC 2544)
– Routing table: Max. 4K routing rules
– Simultaneous connections: Max. 120K (based on RFC 3511)
– Connections per second: Max. Max. 6K (based on RFC 3511)
– Routing redundancy: VRRP
– Security: Secure Boot: IPsec, L2TP (Server)
– RADIUD: Trust access control
– TACACS+: Time management: NTP server/client, SNTP, Unicast routing: OSPF, RIPV1/V2, static route, Multicast routing: Static route, Filter: IGMP v1/v2/v3

Switch properties
– VLAN ID range: VID 1 to 4094
– IGMP groups: 256
– Max. Max. number of VLANs: 16

LED interface
– LED indicators: PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB

DoS and DDoS protection
– Technology
ARP flood
FIN scan
ICMP flood
TCP sessions without SYN
NMAP-ID scan
NMAP-Xmas scan
Null scan
SYN/FIN scan
SYN/RST scan
SYN-Flood
Xmas Scan

Firewall
– Filter
DDoS
Ethernet protocols
ICMP
IP address
MAC address
Ports

– Stateful Inspection, Router Firewall, Transparent (Bridge) Firewall: Deep Packet Inspection
Modbus TCP
Modbus UDP
DNP3
IEC 60870-5-104
IEC 61850 MMS
EtherNet/IP
– Omron FINS, Siemens S7 Comm.Further protocols will be supported by future firmware updates.
– Intrusion Prevention System: Requires an additional licence.
– Throughput: Firewall: Max. 50K packets per second / 500 Mbps (based on RFC 2544)

IPsec VPN
– Authentication: MD5 and SHA (SHA-256), RSA (key size: 1024-bit, 2048-bit), X.509 v3 certificate
– Simultaneous VPN tunnels: Max. 50 IPsec VPN tunnels
– Encryption: DES, 3DES, AES-128, AES-192, AES-256
– Protocols: IPsec, L2TP (server), PPTP (client)
– Throughput: Conditions: AES-256, SHA-256, Max. 25K packets per second / 200 Mbps (based on RFC 2544)

NAT
– Functions: 1-to-1, N-to-1, port forwarding, NAT loopback

Real-.Time Firewall / VPN Event Log
– Event type: Firewall event, VPN event
– Media: Local memory, SNMP trap, syslog server

Serial interface
– Console connection: RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)
– Connection: USB Type-C

Performance parameters
– Connection: Detachable terminal strip
– Operating voltage: 9.6 to 60 VDC
– Input voltage: 12/24/48 VDC, redundant dual inputs (DNV-certified for 24 VDC)
– Input current: 0.53 A @ 12 VDC, 0.26 A @ 24 VDC, 0.14 A @ 48 VDC
– Reverse polarity protection: Supports

Physical properties
– Housing: Metal
– Dimensions: 45 x 135 x 105 mm (1.77 x 5.31 x 4.13 in)
– Weight: 520 g (1.15 lb)
– Installation: DIN rail mounting (DNV certified), wall mounting (with optional kit)

Environmental conditions
– Operating temperature: -10 to 60°C (14 to 140°F)
– Storage temperature (including packaging): -40 to 85°C (-40 to 85°C) -40 to 85°C (-40 to 185°F)
– Relative humidity: 5 to 95% (non-condensing)

Standards and certifications
– Safety: IEC 62368-1, UL 62368-1
– EMC: EN 55032/35
– EMI: CISPR 32, FCC Part 15B Class A
– EMS
IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV
IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m
IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV
IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV
IEC 61000-4-6 CS: 10 V
IEC 61000-4-8 PFMF
– Railway: EN 50121-4
– Traffic control: NEMA TS2
– Marine: IEC 60945, DNV
– Shock: IEC 60068-2-27
– Free fall: IEC 60068-2-32
– Vibration: IEC 60068-2-6
– Substations: IEC 61850-3 Edition 2.0, IEEE 1613
– Hazardous areas: ATEX, Class I Division 2, IECEx

MTBF
Time: 1,347,225 hours
Standards: Telcordia (Bellcore), GB