3180 Compact Service-Aware Industrial Ethernet Switch

Size: px

Start display at page:

Download "3180 Compact Service-Aware Industrial Ethernet Switch"

Brent Booth
6 years ago
Views:

3180 Compact Service-Aware Industrial Ethernet Switch Secure Industrial Ethernet Solution Compact switch with up to 16x10/100 and 2x100/1000 SFP ports Optional 8 Multi-Mode or Single Mode ports

1 3180 Compact Service-Aware Industrial Ethernet Switch Secure Industrial Ethernet Solution Compact switch with up to 16x10/100 and 2x100/1000 SFP ports Optional 8 Multi-Mode or Single Mode ports Optional 8 PoE ports Advanced Ethernet switching and IP routing feature-set Application-aware firewall per port Integrated VPN agent for inter-site connectivity or remote user access Optional RS-232 ports with protocol gateway functionality Optional cellular 2G/3G modem with 2 SIM cards for operator redundancy Wide range of power input options AC/DC Fit to harsh industrial environment Combined with the 3700 modular systems for a large-scale network Supported by RADiFlow industrial service management tool (isim)

General The RADiFlow Service-aware Industrial Ethernet switches combine a ruggedized Ethernet platform with a unique strong packet processing application-aware engine to fit the mission-critical

2 General The RADiFlow Service-aware Industrial Ethernet switches combine a ruggedized Ethernet platform with a unique strong packet processing application-aware engine to fit the mission-critical industrial applications. RUGGEDIZED COMPACT SYSTEM The 3180 switch is a compact switch with multiple interface types. The switch is designed for installation in harsh industrial applications including DIN-rail mount, IP30 protection level, -40 to +75 operating temperature with no fans, EMI immunity according to IEC , IEEE1613 and EN , etc. MULTI-SERVICE GATEWAY The 3180 switch is a compact switch with 2xGE SFP ports, up to 16xFE copper or fiber ports and a variety of multi-service interfaces such as serial ports, cellular and more. The 3180 multi-service package together with its comprehensive packet processing capability provides a unique solution for remote site gateway applications. NETWORK RESILIENCY The RADiFlow switches support Ethernet rings according to the ITU-T G.8032 standard ensuring fast failure detection and switchover at large scale of the network. Traditional resiliency protocols such as LAG, RSTP and MSTP are also supported for treebased networks. APPLICATION-AWARE SECURITY The optional support of an integrated firewall on each port of the 3180 provides a network-based distributed security. The firewall implemented is "application-aware", meaning it validates the content of the data packets to meet the rules of the industrial protocol used. The switch also contains a VPN gateway with 2 operation modes: Inter-site connectivity using IPSec tunnels and remote user access using SSH. Inter-site VPN based on GRE tunnels over an IPSec encrypted link ensuring with L2/L3 transparent connection of the Ethernet networks sites. For remote access the switch uses a SSHencrypted tunnel, with user authentication and specific access authorizations. SMART GRID INFRASTRUCTURE The compact 3180 switch is designed to optimize the network infrastructure of a distributed application environment such as the Smart Grid. It is a natural fit for installation at the MV/LV Transformation Sites acting as the secure access point for the Distributed Automation control at these remote sites. UTILITY INFRASTRUCTURE National utility infrastructure topologies are usually characterized with remote distributed sites connected to the SCADA control center. The 3180, acting as a secure gateway for Ethernet, IP and Serial services is an optimized platform for servicing these needs over the network core. Such communication between distributed utility sites must be served using highly integrated switches for cost and space savings while ensuring a reliable and secure operation. SERVICE MANAGEMENT TOOL The isim presents the network topology in a graphical map view enabling the monitoring and provisioning of service connections between the industrial end-devices with detailed security rules. Simple yet secure connection for Smart-Grid secondary sub-stations using the 3180 switch

3 Specification NETWORKING Advanced Layer 2 feature-set ITU-T G.8032v2 Ethernet ring (<50ms recovery) IEEE 802.1s MSTP IEEE 802.1w RSTP, enhanced RSTP IEEE 802.3ad LAG with LACP IEEE 802.1q VLAN segregation Access Lists according to L2-L4 headers IEEE 802.1p per port queues 802.1x Port based network access control DHCP Client and Relay QOS Prioritization, shaping, Scheduling OAM EFM IEEE 802.3ah OAM CFM ITU-T Y.1731/IEEE 802.1ag 1588v2 PTP Transparent Clock Jumbo frames supported LAYER 3 FEATURE-SET Static routing OSPF, RIPv2 Routing VRRP redundancy scheme SCADA PROTOCOL HANDLING Transparent tunneling of serial streams SCADA Serial to Ethernet Gateway Modbus RTU- Modbus TCP IEC101 - IEC104 DNP3 IP DNP3 RTU Terminal Server CELLULR MODEM GPRS/UMTS cellular modem 2 x SIM cards See 3180 Interfaces DS for more details SYSTEM PERFORMANCE Line rate L2/L3 switching throughput Switching latency <10μSec 16K MAC addresses 4K VLANs MULTICAST L2 Multicast IGMP Snooping for traffic optimization SECURITY ACCESS CONTROL Enable/Disable port Port access filter per MAC / IP addresses IEEE 802.1x port-based authentication Protect against DoS attacks SERVICE VALIDATION Egress filtering per VLAN SCADA service-aware firewall per port INDUSTRIAL VPN AGENT Remote access using SSH tunnel Layer 2 GRE Transparent Ethernet Bridging Layer 3 GRE DM-VPN IPSec encryption User policy for traffic type IKE, AES or 3DES encryption Dynamic key exchange NAT traversal REMOTE ACCESS AGENT Remote access using reverse SSH tunnel Limited access authorizations per user Local and remote user authentication and authorizations Traffic activity log for Trail audit INTERFACES 2 x 100/1000 SFP ports 8 x 10/100BaseT ports Optionally 8xPoE alternative A or 4x PoE alternative A and 4 x alternatives B, max per port is 30w and max for switch is 120w. 8x100FX SFP ports( Optional) 4x RS-232 ports (Optional) 2G/3G cellular modem (Optional) 8x10/100BaseT ports ( Optional) PHYSICAL DESIGN Mmounting: DIN rail (optional wall mount) Eenclosure: Rugged - IP 30 rated, No fans Weight: 1.4Kg (DC) 1.8Kg (AC) Dimensions See mechanical drawings Operating temperature: -40 to 75 C Storage temperature: -40 to 85 C Operating Humidity: 5%-95% ENVIROMENTAL COMPLINCE IEC Electric Utility Substations IEEE1613 EMI - Electric Utility Substations EN Vibration and Shock resistance IEC POWER OPTIONS Dual power inputs DC power supply VDC AC power supply VAC MANAGEMENT TOOLS Command-Line interface over local console or over remote SSH SNMPv1/v2/v3 Local and remote user authentication (RADIUS, TACACS) iems graphical tool isim network management tool Network elements auto-discovery Wizard for Ethernet ring configuration End-to-End service groups provisioning Security rules planning per service group Network performance & diagnostics tools LOCAL OPERATION RS-232 console port Local USB port for emergency boot Discrete inputs for user-defined triggers Discrete outputs reporting system alarms Failsafe output relay reporting critical alarm

4 Specifications are subject to change without prior notice RADiFlow Ltd. 1/1/ Ordering RF-3180<F>-<P>-<T>/<E>/<PE>/<R>/<C> F - Functionality B- Basic (B configuration supports L2/L3 switch/router and PoE ) S - Service-aware (S configuration supports IPsec VPN and SCADA Firewall) ACCESSORIES RF-RM1 Kit for mounting up to 2x3180 switches Into 19-inch rack CBL-RJ45-DB9/Console Console cable (delivered with switch) P Input Power VDC 24-24V DC (range : 18-32v DC) 48-48V DC (range : 36-60v DC) V DC (range : v DC) V DC (range : v DC) AC 230V AC (range : v AC) WDC Wide DC range (range : 18 60v DC) T - Temperature range XT C (extended temperature range) CBL-RJ 45-DB9/null Serial cable, DCE wiring MANAGEMENT RF-ISIM1 Mechanical DC AC E Ethernet interfaces ET28 2xGE SFPs + 8x10/100RJ45 ET216 2xGE SFPs + 16x10/100 RJ45 ET288 2xGE SFPs + 8x10/100 RJ45 + 8x100 SFPs PE PoE ports (PoE ports are out of the total RJ45 ports defined above) 8PE30 8 PoE ports, 30w max per port 8PE302RW 8 PoE ports,2 are mode-b, 30w max per port 8PE304RW 8 PoE ports,4 are mode-b, 30w max per port R* Serial ports 4RS2 4xRS-232 serial ports 4RS2P 4xRS-232 serial ports with enhanced 2KV isolation C* Cellular interface CEL1 dual SIM GPRS/UMTS modem Note:* Not available for ordering with 'B' configurations. Please verify the requested configuration with your local representative Additional ordering codes for bundle offering may be defined for specific customer cases. 31 HaBarzel Street Tel Aviv 69710, Israel info@radiflow.com

Mechanical Drawings The 3180 switch has several variants: - 2xGE SFP + 8x10/100BaseT + Optional 4x Serial + Optional Cellular modem; Various DC power-supply inputs - 2xGE SFP + 8x10/100BaseT +

5 Mechanical Drawings The 3180 switch has several variants: - 2xGE SFP + 8x10/100BaseT + Optional 4x Serial + Optional Cellular modem; Various DC power-supply inputs - 2xGE SFP + 8x10/100BaseT + Optional 4x Serial + Optional Cellular modem; AC power-supply input - 2xGE SFP + 8x10/100BaseT + 8x100 SFP or 8x10/100BaseT; Various DC power-supply inputs All devices have same depth and height but different width, as shown in the mechanical drawings below. The bottom panel contains the following connectors: power, dry contact, alarm, console, USB and optionally the cellular antenna. An example of the bottom panel is shown in the mechanical drawing below. All devices are equipped with a DIN rail clip as shown in the drawing below. The DIN rail clip can be dismantled for installation of the device on a rack-mount adaptor.

SecFlow-2. Data Sheet. Ruggedized SCADA-Aware Ethernet Switch/Router

SecFlow-2. Data Sheet. Ruggedized SCADA-Aware Ethernet Switch/Router Product page > Data Sheet Compact ruggedized Ethernet switch/router with up to 16 10/100BaseT, and 2 100/1000BaseFX with optional PoE for deployment in harsh industrial environments Advanced security package,