Energy & Industrial Cyber Security

Transcription

1 Energy & Industrial Cyber Security Energy Management and Industrial Cyber Security Solutions Volume

2 2

3 Innovating Solutions for Smart Grid, Smart Energy & Industrial Cyber Security Lanner has long tradition and well-established expertise in networking and cyber security solutions. For the past decades, we have developed state-ofthe-art quality platforms for enterprises and industries to prove our longlasting dedication and commitments and earn strong patronage from our partners and clients. With the trend of Internet of Things (IoT), we have expanded our business operations into ICS Cyber Security, Smart Grid and Smart Energy Management. Based on our technological experience and expertise, we have developed successful projects in China, USA and Europe. With dedicated investments in these fields, we design and manufacture robust industrial computing systems that save your development costs and time and meet mission-critical application requirements. Our industrial-grade systems demonstrate the smooth integration of computing power, suitable form factors, variety of I/O configurations and environmental reliability. As a global leader in manufacturing and designing quality platforms, Lanner specializes in hardware customizations. We can customize your hardware platforms and implement value-added software based on your technological requirements and physical environments. Lanner offers a wide variety of solutions for your applications in smart grid connectivity, energy management as well as industrial cyber security. Spencer Chou Senior Director Product Development Division 3

4 Energy & Industrial Cyber Security Solution Nowadays the ecosystem of power and energy industries is going on an unprecedented transformation where assets, infrastructures and facilities are highly interconnected to improve productivity and agility. In this era of rapid evolution, critical infrastructures demand scalable and highly-integrated solutions that optimize network interconnection, compatibility, reliability, and most importantly cyber security while maintenance costs are minimized. As a global leader in industrial cyber security, Lanner offers a wide range of industrial-grade hardware solutions built in open architecture to ensure wide compatibility, intelligent communications and security measures as firewall, intrusion prevention and deep packet inspection. 4

5 Smart Grid Lanner s rackmount appliances for substation automation offer high level of integration and interoperability with automation devices and sensors for control consolidation, infrastructure monitoring and data transmission to achieve the highest stability and productivity. Power SCADA Automation Platform Power SCADA Communication Gateway Automation Platform for Substation IED Communication Gateway Smart Energy We have robust Box PCs and management system for collecting and monitoring data from meters and sensors deployed at energy generating sites. Our computing systems are innovated to optimize performance and efficiency of energy generation and usages in the following applications. Solar PV Energy Monitoring Building Energy Management Wind Turbine Energy Monitoring Greenhouse Management Industrial Cyber Security Our rugged industrial cyber security platforms provide the needed network security protection for harsh, unmanned environments in critical infrastructures. Our platforms are designed to conduct protocol filtering, packet inspection, white-listing and network traffic monitoring for the following applications. Power Plant Cyber Security Factory ICS Cyber Security Industrial UTM / Firewall Oil & Gas Security Gateway SCADA Network Security 5

6 Industrial Cyber Security Emerging Cybersecurity Threats in Industrial IoT Networks The risk of cyber threats in the Industrial control systems (ICS) has escalated in a historical pace as critical infrastructures, like nuclear plants, smart grids, oil refinery, renewable energy plants, and wind turbines are connected by mainstream network protocols. The consequences of cyber attacks cannot be underestimated, as seen from major incidents in recent years worldwide. Today, the malicious attacks have evolved to be even more destructive than ever, namely Stuxnet worms, ransomware, Trojan and other breaching methods and these can penetrate into ICS networks from multiple paths on the interconnected networks. Therefore, critical infrastructures are urging comprehensive cybersecurity measures to protect both the IT and OT (Operating Technologies) of ICS networks. 6

7 Lanner Industrial Cyber Security Solutions To fully protect critical infrastructures from advanced cyber malwares, it is necessary to establish multi-layer protections covering both IT and OT networks. In a common digitalized setting for critical infrastructures, OT controls and manages Industrial Zone (Layer 0~3) like instrumentation bus, controller LAN and supervisory HMI and SCADA systems, whereas the IT monitors and authenticates Enterprise Zone (Layer 4~5) like web server, server, FTP server and enterprise servers. In a more advanced model, an Industrial DMZ Zone (Layer 3.5) is established as an additional layer of protection towards externally interfaced services. Lanner, the leading hardware solution providers for network security, offers wide-range, customizable hardware platforms designed to protect the communication protocols in both IT and OT domains for critical infrastructures including energy, power, oil and gas industries. IIoT Network Security Gateway - Antivirus/Malware - SCADA Encryption - Virtualization Security Layer 4~5 Enterprise Zone Enterprise Firewall - DLP/SIEM - IDS/IPS/IAM - DDoS Protection Layer 3.5 Industrial DMZ Zone NCA-4210 Internet Layer 3 Industrial Zone Mail Server App. Server Industrial Firewall NCA-4010 NCA-2510 LEC-3231 Layer 0~2 Cell/Area Zone Rugged Firewall LEC-6032 SCADA HMI PLC HMI LEC-6032 IED RTU 7

8 Connectivity Robust Design Ruggedness Key Features & Benefits LAN Bypass Offer advanced bypass functionality which allows uninterrupted network traffic by providing low latency recovery. Excellent Network Design Provide more than 4.8Gbps throughput at UDP, 1518 bytes. BIOS Lockup & Secure Boot BIOS Lockup to prevent appliances from being accessed by unauthorized individuals to tamper platform configurations. Secure Boot is a new feature of the UEFI BIOS that helps a computer resist attacks and infections from malware. Trusted Platform Module (TPM) TPM protects the intelligent property (IP) of the software developer. It prevents someone from stealing or tampering the software intelligence from hardware change. High-Performance CPU Utilize latest Intel Atom (BayTrail) processors, delivering high performance and power efficiency. Dual Power Input with Trigger Alarm Support power input options of 12V~48Vdc. Our systems adopt terminal blocks to connect two power inputs for backup supply with triggering alarm. Fanless Design Without the most frequently replaced parts, the systems can be widely deployed in various environments. Versatile I/O Design Various communication interface options, including multiple Copper, Fiber LAN ports and serial ports. Various Mounting Majority of our industrial platforms are designed with DIN-Rail and wall mounting options for multiple installation purposes in industrial environments. Wide Temperature Range Withstanding and thriving in harsh conditions with extreme temperatures from as low as -40 C to as high as 70 C. IEC The coming LEC-6041 will be compliant with IEC certification. The test certifies electrostatic discharge, fast transient (burst immunity), surge immunity, radiated RF susceptibility, and other criteria. Certified Reliability and Quality CE/FCC class A certification, tested and certified for harsh conditions. Without any mechanical rotation parts, our systems provide 20+ years MTBF and keep very high quality. 8

9 IT/OT Cyber Security Application Most critical infrastructure operators have addressed the importance on IT infrastructures, but OT technology has not received as much attention. Despite the same purposes: access control, network monitoring, and appropriate responsive actions, IT is more oriented to open architecture while OT is highly isolated and cyber-physical due to the uses of proprietary protocols and air gaps. Thus, less attention had been paid towards OT security due to limited exposure and high maintenance costs, which make OT a less favorite option in budgeting process. Thus, the vulnerability was revealed when Blackenergy hacked Ukrainian power grid in 2015 and Stuxnet attacked Iranian nuclear plant in One of the well-known European IT/OT security providers selected Lanner appliances as their CIP security gateways deployed in both IT and OT network environments. The integrated and converged solution pack includes the LEC-6032 as the rugged industrial UTM in OT and NCA-4210 as the next generation firewall in IT. Target Applications: - Industrial UTM - Security Gateway - Industrial Firewall - SCADA Network Security Appliance Integrated Solutions for OT/IT Security NCA Support Intel 7th Gen Core i7/i5/i3 with H110 or C236-6x GbE RJ45 (SKU A), 2x GbE SFP (SKU B/C) or 8x GbE RJ45 (SKU C) - 2x 288-pin DIMM DDR4 at 2400MHz, Max 32GB - 2x 2.5" HDD/SSD Drive Bays - 1x PCIE*8 Default, 2x PCIE*4 Optional LEC Fanless DIN Rail Box PC - Intel Atom E3845 SoC CPU - 1 x Serial Ports with ESD and Surge Protection - 3 or 5 x GbE LAN with LAN Bypass - 2 or 4 x GbE SFP Ports 9

10 Selection Guide Model Name LEC-3030 LEC-3031 LEC-6021A CPU LEC-3030A: Intel Celeron N2807 LEC-3030T: Intel Atom E3815 Intel Atom E3825 Intel Atom N2600 Processor System Frequency 1.58Ghz / 1.46Ghz 1.33Ghz 1.6Ghz Core Number 2C / 1C 2C 2C BIOS AMI Flash BIOS AMI SPI Flash BIOS AMI SPI Flash BIOS Chipset SoC SOC Intel NM10 Fanless Yes Yes Yes Technology DDR3L 1333/1066 MHz DDR3L 1066MHz DDR3 800 MHz Memory Max. Capacity 4GB / 8GB 8GB 4GB Socket 1x 204-pin SODIMM 1x 204-pin SODIMM 1x 204-pin SODIMM Graphic Controller Intel HD Graphics Intel HD Graphics Intel Integrated VGA 1x VGA 1x VGA Internal pin header Controller Intel i210 Intel i210 Intel i210 Speed 10/100/1000 Mbps 10/100/1000 Mbps 10/100/1000Mbps Ethernet Interface 2x GbE RJ45 2 or 4x GbE RJ45 5x GbE RJ45, 1 pair LAN Bypass 2x GbE SFP ports Magnetic Isolation Protection 1.5KV magnetic isolation protection 1.5KV magnetic isolation protection 1.5KV build-in Type - m-sata mini CompactFlash socket Storage Installation - m-sata mini connector Type I/II x1 Type SATA II SATA II SATA II Installation 1x 2.5 Drive Bay 1x 2.5 Drive Bay 1x 2.5 Drive Bay (Optional) Serial Port 2x Isolation RS-232/RS422/RS x RS-232 pin header LEC-3031-A4/A6/A8: 4/6/8 x RS232/422/485 LEC-3031-I4: 4 isolated RS-485 LEC-3031-I10: 8 isolated RS485, 2 x isolated RS-232/485 LEC-3031-DI4: 4 isolated RS-232/485 1x DB9 for RS-232, Internal pin-header x 1 ESD Protection 15KV ESD protection 15KV ESD protection 15KV for all signals Isolation Protection 2KV Digital Isolation 2KV Digital Isolation Digital isolation protection I/O Digital I/O 1x 2x5 Pin terminal block for 4x DI/DO (without isolation) LEC-3031-DI4: 4x DI/ 4x DO (without isolation) - USB 2.0 1x Type A, 1 x internal pin header 1 or 3 x Type A 2x Type A USB 3.0 1x Type A 1x Type A - Power On/Off/Reset Button - / 1x Reset - / 1x Reset - / 1x Reset LED PWR, Storage, RX/TX PWR, Storage, RX/TX PWR, Storage, Run(User defined), 5 x LAN, 2 x SFP Expansion Interface Mini-PCIe / PCIe Watchdog Timer Watchdog Timer 1~255 Level Time Interval System Reset, Software Programmable Watchdog Timer 1~255 Level Time Interval System Reset, Software Programmable Watchdog Timer 1~255 Level Time Interval System Reset, Software Programmable Power Supply Voltage Vdc Vdc 12-48Vdc Power Connector 2-pin connector Terminal Block 2-pin connector Terminal Block 6-Pin Terminal Block Power Consumption (Idle) LEC-3030A: 6.16W, LEC-3030T: 6.36W 7.5W 16.82W Power Consumption (Full Load) LEC-3030A: 8.79W, LEC-3030T: 8.65W 10.13W 19.63W Environment Operating Temperature LEC-3030A: -20~55 C ( F) LEC-3030T:-40~70 C ( F) -40 C~70 C ( F) -40~75 C (-40~176 F) Storage Temperature -40~85 C (-40~185 F) -40~85 C (-40~185 F) -40~85 C (-40~185 F) Relative Humidity 5% - 95% non-condensing 5%~95%, Non-condensing 5%~95%, Non-condensing Dimension (W x H x D) LEC-3030A: 52x 130x127mm LEC-3030T 57.5x 130 x 127mm 69x169.5x127 mm (2.71"x 6.67"x 5.00") 53.5x186x160 mm (2.11"x 7.32"x 6.30") Mechanical Construction LEC-3030A: Steel, LEC-3030T: Aluminum + Steel Aluminum + Steel Aluminum Weight 1Kg 1.2Kg 2,2Kg Mounting DIN rail, Wallmount DIN rail, Wallmount DIN rail, Wallmount Driver Support Microsoft Windows Windows 7 Embedded Windows 7 Embedded Windoows 7 Embedded Linux Kernel 3.X Kernel 3.X Kernel 3.X Certification EMC CE,FCC Class A CE,FCC Class A CE,FCC Class A Compliance RoHS RoHS RoHS, IEC Ordering Information LEC-3030A/T LEC-3031-A4/A6/A8/I4/I10/DI4 LEC-6021A 10

11 LEC-6032 LEC-6032E LEC-6033 LEC-6040H/M Intel Atom E3845 Intel Atom E3845 Intel Celeron N2807 LEC-6040H: Intel Core i5-4402e LEC-6040M: Intel Core i3-4102e 1.91 Ghz 1.91 Ghz 1.58Ghz 2.5Ghz / 1.6Ghz 4C 4C 2C 2C AMI SPI Flash BIOS AMI SPI Flash BIOS AMI Flash BIOS AMI SPI Flash BIOS SoC SoC SoC Intel QM87 Yes Yes Yes Yes DDR3L 1333 MHz DDR3L 1333 MHz DDR3L 1333 MHz DDR3L 1333/1600 MHz 8GB 8GB 4GB 8GB 1x 204-pin SODIMM 1x 204-pin SODIMM 1x 204-pin SODIMM 1x 204-pin SODIMM Intel HD Graphics Intel HD Graphics Intel HD Graphics Intel HD Graphics 4600 Internal pin header Internal pin header 1x VGA Internal pin header Intel i210 Intel i210 Intel i210 Intel I210 10/100/1000Mbps 10/100/1000Mbps 10/100/1000 Mbps 10/100/1000Mbps 6032B: 5 x GbE RJ-45, 2 pairs Bypass 6032C: 5 x GbE RJ-45, 1 pair Bypass, 2 x SFP GbE ports 6032D: 5 x GbE RJ-45, 1 pair Bypass 6032F: 3 x GbE RJ-45, 1 pair Bypass, 4 x SFP GbE ports 2 x GbE RJ-45, 1 pairs LAN Bypass 4 x PoE ports (IEEE 802.3af) 6033A: 4 x GbE RJ B: 4 x GbE RJ-45, 1 x SFP GbE ports 6033C: 5 x GbE RJ-45, 1 x SFP GbE ports, 1 pair Bypass B1: 4x GbE RJ-45 B2: 6x GbE RJ-45, 2x SFP ports B3: 8x GbE RJ KV build-in 1.5KV build-in 1.5KV magnetic isolation protection 1.5KV build-in msata mini msata mini connector SATA II SATA II SATA II SATA II 1x 2.5 Drive Bay Optional 1x 2.5 Drive Bay 1x 2.5 Drive Bay 1x 2.5 Drive Bay 1x DB9 for RS-232 (6032D only), Internal pin-header x 1 Internal pin-header x 1 (RS232 only) - 1x DB9 support RS-232, Internal pin-header x 1 15KV for all signals 15KV for all signals 15KV ESD protection 15KV for all signals Digital isolation protection x Type A 1x Type A 1x Type A, 1 x internal pin header 1x internal pin header 1x Type A 1x Type A 1x Type A 2x Type A - / 1x Reset - / 1x Reset - / 1x Reset - / 1x Reset Storage, RUN, PWR, LAN LEC-6032 C/F: SFP Storage, RUN, PWR, LAN PWR, Storage, Run 1x PWR, 1x Storage, 1 x COM 16x double stack LED for Ethernet 4x double stack LED for Programmable - - 1x Full-sized mini PCIe and 1x Half-Sizd mini-pcie 1x Full-sized mini PCIe and 1x Half-Sizd mini-pcie Watchdog Timer 1~255 Level Time Interval System Reset, Software Programmable Watchdog Timer 1~255 Level Time Interval System Reset, Software Programmable Watchdog Timer 1~255 Level Time Interval System Reset, Software Programmable Watchdog Timer 1~255 Level Time Interval System Reset, Software Programmable 12-36Vdc 24-48Vdc Vdc 12Vdc 6-pin Phoenix Contact Connector 2-pin Phoenix Contact Connector Phoenix contact 2-pin connector 2-pin Phonex Contact Connector 10.62W 10.2W 11.02W 17.79W 14.63W 42.12W 12.93W 26.84W -40~75 C (-40~176 F) -20~55 C ( F) 0~40 C (32~104 F) -20~55 C ( F) -40~85 C (-40~185 F) -40~85 C (-40~185 F) -40~85 C (-40~185 F) -40~85 C (-40~185 F) 5%~95%, Non-condensing 5%~95%, Non-condensing 5% - 95% non-condensing 5%~95%, Non-condensing 78x146x127 mm (3.07"x 5.75"x 5.00") 78x146x127 mm (3.07"x 5.75"x 5.00") 170 x 138 x x210x190 mm (2.68"x 8.27"x 7.84") Aluminum Aluminum Steel Steel + Aluminum 2.2Kg 1.25Kg 1.2Kg 2.5Kg DIN rail, Wallmount DIN rail, Wallmount DIN rail, Wallmount DIN rail, Wallmount Windoows 7 Embedded Windoows 7 Embedded Windows 7 Embedded Windoows 7 Embedded Kernel 3.X Kernel 3.X Kernel 3.X Kernel 3.X CE,FCC Class A CE,FCC Class A CE,FCC Class A CE,FCC Class A RoHS RoHS RoHS RoHS, IEC , IEEE 1613 LEC-6032B/C/D/F LEC-6032E LEC-6033A/B/C LEC-6040H-B1/B2/B3 LEC-6040M-B1/B2/B3 11

12 Selection Guide Feature Description NCI-200 NCA-2510 NCA-4010 NCA-4210 Form Factor Fanless Desktop 1U 19 Rackmount 1U 19 Rackmount 1U 19 Rackmount Processor Options Intel Atom C2308/C2508 (Rangeley) Intel Atom C3000, 4~8~16 Cores (Denverton) Intel Xeon D ~16 Cores (Broadwell-DE) The 6/7th Intel Core i7/i5/i3 or Pentium or Celeron (Skylake/Kaby Lake) Platform CPU Socket onboard onboard onboard 1 x LGA1151 Chipset SoC SoC SoC Intel H110 or C236 Security Acceleration Intel QuickAssist Technology Intel QuickAssist Technology N/A N/A BIOS AMI SPI Flash BIOS AMI SPI Flash BIOS AMI SPI Flash BIOS AMI SPI Flash BIOS System Memory Technology DDR3 1333MHz ECC DIMM DDR4 2400MHz ECC or non-ecc UDIMM DDR4 2400MHz REG, ECC or non-ecc UDIMM Max. Capacity 8 GB 32GB ECC:32GB RDIMM:64GB 32GB DDR4 2400MHz ECC(By CPU for C236 only) or non-ecc UDIMM Socket 1 x 204-pin SODIMM 4 x 288pin DIMM 2 x 288pin DIMM 2 x 288pin DIMM Networking Ethernet Ports 4 x GbE RJ45 Intel SoC Integrated i354; 2 x GbE SFP Intel i210-is (By SKU) 1 x GbE RJ45 Intel i210 4 x GbE RJ-45 Intel i350-am4 4 SFP+ Intel Denverton Integrated (By SKU) 8 x GbE RJ45 Intel i210 8 x GbE RJ45 Intel i350-am4 (By SKU) 2 x 10G SFP+ Broadwell-DE SOC (By SKU) 6 x GbE RJ45 Intel i210 2 x GbE SFP Intel i210-is (SKU B/C) 8 x GbE RJ45 Intel i210 (SKU C) Bypass 2 pair Gen3 (By SKU) 2 pairs Gen3 (By SKU) 3 pairs Gen3 (By SKU) 2 pairs Gen3 (By SKU) NIC Module Slot N/A LOM I/O Interface N/A 1 x RJ45 (By SKU) 1 x RJ45 (By Project) *Share with ETH0 1 x RJ45 (Optional) *Share with ETH0 OPMA Slot N/A Yes Yes (By Project) Yes Reset Button LED Power/Status/Storage 3x SW Programable LED Power/Status/Storage Power/Status/Storage Power/Status/Storage Power Button 1 1 x ATX Power switch 1 x ATX Power switch 1 x ATX Power switch I/O Interface Console 1 x DB9 1 x RJ45 1 x RJ45 1 x RJ45 USB 2 x USB x USB x USB x USB 2.0 LCD Module N/A 2x20 character LCM 4 x keypads 2x20 character LCM 4 x keypads 2x20 character LCM 4 x keypads Display N/A From OPMA slot (Optional) From OPMA slot (By Project) From OPMA slot (Optional) Power Input 1 x 4P Phoenix Contact Connector AC power inlet on PSU AC power inlet on PSU AC power inlet on PSU Storage Expansion HDD/SSD Support 1 x 2.5 Bay - SSD Only (Optional) 2 x 2.5 bays 2 x 2.5 bays 2 x 2.5 bays Onboard Storage 1 x msata 1 x msata 1 x msata 1 x msata PCIe N/A 1 x PCI-E*8 HH/HL (Optional) 1 x PCI-E*8 FH/HL (Optional) 1 x PCI-E*8 FH/HL (By Project) mini-pcie 1 x Mini-PCIe (PCIe/USB2.0) N/A N/A N/A Watchdog Yes Yes Yes Yes Miscellaneous Internal RTC with Li Battery Yes Yes Yes Yes TPM Yes Yes (optional) Yes (optional) Yes (optional) Cooling Processor Passive CPU heatsink Passive CPU heatsink Passive CPU heatsink Passive CPU heatsink System Fanless 2 x cooling fans with smart fan 2 x cooling fans with smart fan 2 x cooling fans with smart fan Environmental Parameters Temperature Humidity (RH) -20~55ºC Operating -20~70ºC Non-Operating 5~90% Operating 5~ 95%, Non-Operating 0~40ºC Operating -20~70ºC Non-Operating 5~90% Operating 5~95% Non-Operating 0~40ºC Operating -20~70ºC Non-Operating 5~90% Operating 5~95% Non-Operating 0~40ºC Operating -20~70ºC Non-Operating 5~90% Operating 5~95% Non-Operating System Dimensions Package Dimensions Power (WxDxH) 230 x 65 x 170 mm 438 x 321 x 44 mm 438 x 321 x 44 mm 438 x 321 x 44 mm Weight 2.5 kg 4.4 kg 7.5 kg 7.5 kg (WxDxH) 388 x 197 x 282 mm 540 x 500 x 230 mm 540 x 500 x 230 mm 540 x 500 x 230 mm Weight 3 kg 8 kg 8.5 kg 8.5 kg Type / Watts Dual power input over phoenix connector 150W ATX Single PSU 220W ATX Single PSU 220W ATX Single PSU Input 12 ~ 36 VDC AC 47~63Hz AC 47~63Hz AC 47~63Hz Approvals and Compliance RoHS RoHS RoHS, CE/FCC Class A, UL RoHS, CE/FCC Class A, UL 12

13 X ok 22 ºC 22 ºC Smart Grid Smart grid cyber-security must be addressed towards risks such as deliberate malicious attacks, man-made errors or external factors. Since critical infrastructures today are relying on smart grids in providing the services, the status must be securely and reliably monitored and controlled by a highly integrated hardware platform. As a global leader in network security, Lanner provides a wide product line of IEC compliant industrial communication systems that integrate control, automation, monitoring and protection in one device for smart grids, while interoperability is ensured as Lanner s devices are built in open architectures. Enterprise Systems Power Substation Applications Devices/Controllers Communication Gateway Gateway Substation Automation Cyber Security Gateway IED, RTU, Controller - Control monitoring - Protection Substation Automation Application Target Applications: - Power SCADA System Communication Gateway - Automation Platform for Substation - IED Communication Gateway LEC-3231 Operating Center - Fanless Rack Mounting Box PC for Power Substation - IEC and IEEE-1613 Compliance - Intel Celeron 847E, Core i3-3217ue or i7-3517ue CPU - Up to 10/18 Isolated Serial Ports and 4/8 Magnetic Isolated LAN ports LEC Redundant Power Supply Options : 36~48Vdc or [90~246Vac and Vdc] IED RTU 13

14 Key Features & Benefits Lanner s communication gateways for critical infrastructures are purposely designed for various environments including substations, energy plants and smart grids. Our solutions have expanded to cover all the sectors of network protocols in both OT and IT domains of ICS systems and are built in open architectures to ensure compatibility in most applicable environments. Lanner offers wide range of solutions to delivery, highperformance, ruggedness, reliability, power-efficiency and the right form factors. Key features of Lanners industrial communication gateways are illustrated as followed: LEC-3231 IEC :2013 IEEE 1613:2009 Compliance Isolated/Surge/ESD protected I/O ports ESD:Air,15kV, contact 8kV Phoenix Contact Serial Connectors Wide Temperature -40~70ºC RPS/Dual power PW1:36~48Vdc, PW2:90-264Vac/ Vdc Testing Standards Test Category Summary Applicable Standard Electrostatic Discharge Electromagnetic Compatibility Immunity Electromagnetic Compatibility Emissions Insulation ESD, Contact ±2, ±4, ±6,±8Kv, Air ±2, ±4, ±8,±15Kv Radiated, Radio-Frequency Electromagnetic Field Severity Level:20V/m ( C ) Fast Transient/Burst, 4kV, 5kHz on AC/DC power supply *4kV,5KHz on communication line *Surge 1.2/50 us - 2kV line to line, 4kV line to ground, AC power supply - 1kV line to line, 2kV line to ground, DC power supply -2kV, line to line, 4kV line to ground, communication ports Conduced Disturbances, induced by Radiofrequency Fields - Severity Level: 10V, 80%AM(1kHz) - Power Line Conducted Emission - Telecommunication ports Conducted Emission - Radiated Emission Below/Above 1GHz Dielectric Strength - Power supply input 2.0kV(rms) - Signal port 0.5kV(rms) Impulse Voltage - Severity Level: - 5kV power supply, communication ports IEC :2013, IEC , IEEE C IEC :2013, IEC , IEEE C IEC :2013, IEC , IEEE C IEC :2013, IEC IEC :2013, IEC CISPR22 IEEE C37.90 Mechanical Performance Environment Tests Vibration Response and Endurance Test IEC : 2013, IEC Shock Response Withstand and Bump Test IEC : 2013, IEC Cost Test IEEE , IEC , IEC Dry Heat Test IEEE , IEC , IEC Damp Heat Cyclic Test IEEE , IEC , IEC Change of Temperature Test IEC , IEC

15 Modular Industrial Communication Device With the trend of automation, the demand for efficient power equipments is increasing by multiples. Communication management is one of the main concerns for automation as it often attracts cyber threats. To enhance communication and cyber security in automation, Lanner introduces the industrialgrade, rackmount Box PC LEC-3231, designed for power substation deployment. The rugged, fanless box PC is driven by processor choices of Intel Celeron 847E, Core i3-3217ue or Core i7-3517ue, depending on the SKU selected, and also supports up to 10 isolated COM ports, 8 magnetic isolated LAN ports, and redundant power supplies. To function as a safe and secured platform, LEC-3231 is compliant with IEC and IEEE 1613 for the energy sector. Processor Options LEC-3 Series LEC-3230 LEC-3231 Intel Celeron 847E, Core i3-3217ue/i7-3517ue Intel Celeron 847E, Core i3-3217ue/i7-3517ue Chipset Intel HM65 Intel HM65 BIOS AMI Flash BIOS AMI Flash BIOS Sockets 1 x 204-pin DDR3 1 x 204-pin DDR3 System Memory Technology DDR3 SO-DIMM x1 DDR3 SO-DIMM x1 Max. Capacity Up to 8 GB Up to 8 GB USB USB2.0 compliant, 2x Type A connector,1x internal Type A connector, 3x internal pin header USB2.0 compliant, 2x Type A connector,1x internal Type A connector, 3x internal pin header Expansion Bus PCIe expansion slot PCIe expansion slot OS Support Windows 7,Windows 7 Embedded, Linux Windows 7,Windows 7 Embedded, Linux 8 x 10/100/1000 Mbps Autosensing, RJ45 8 x 10/100/1000 Mbps Autosensing, RJ45 LAN Networking Magnetic Isolation Protection 1.5 KV built-in 1.5 KV built-in Serial Standard 2 x DB9 & 2x2x10pin terminal block for 10 x RS-232/422/485 2 x DB9 & 2x2x10pin terminal block for 10 x RS-232/422/485 Serial Interface ESD Protection 15 KV for all signals 15 KV for all signals Isolation Protection 2 KV digital isolation 2 KV digital isolation Display Display Interface DB15 x1 for VGA DB15 x1 for VGA Weight 5.8 kg 6 kg Dimensions (W x H x D) 440 x 89 x mm (17.32 x3.50 x13.84 ) 440 x 88 x mm (17.32 x3.46 x11.85 ) Operating Temperature -20~55 C -40~70 C Environment Storage Temperature -40~80 C -40~85 C Input Voltage AC power input/100~240vac 36~48Vdc or 90~264Vac/100~300Vdc Power Redundant PSU - Yes Alter tool Built-in buzzer and RTC (real-time clock) with battery lithium backup Built-in buzzer and RTC (real-time clock) with battery lithium backup Reliability Automatic Reboot Trigger Watchdog Timer 1~255 level Watchdog Timer 1~255 level Ordering Information LEC-3230B, LEC-3230C, LEC-3230D LEC-3231B/LEC-3231C/ LEC-3231D: withoout PSU, LEK-3231-PW1: 36~48 Vdc LEK-3231-PW2: 90~264 Vac/ Vdc Part Number LEK-2G2F: 4x Gigabit Ethernet module LEK-EN1: 4x Gigabit Ethernet module LEK-8GE: 8x Gigabit Ethernet module LEK-2GE2MM: Ethernet module w/ Gigabit and 100M MM optic fiber LEK-2GE2MMA: Ethernet module w/ Gigabit and 100M SM optic fiber LEK-COM8A: Isolated RS- 232/422/485 module Feature Intel i210t/i210is 2 x RJ45, 2 x SFP Windows 7/Linux driver Intel 82583V 4 x RJ45 Windows/Linux driver Intel 82583V 8 x RJ45 Windows/Linux driver Intel 82583V / VIA VT6105M controller 2 x RJ45, 2 x multi-mode ST Windows/Linux driver Intel 82583V / VIA VT6105M controller 2 x RJ45, 2 x single-mode ST Windows/Linux driver EXAR 17B358 8 x RS-232/422/485 Windows/Linux driver 15

16 Corporate Lanner Electronics Inc. 7F, No.173, Sec.2, Datong Rd. Xizhi District, New Taipei City 221, Taiwan T: F: E: USA Lanner Electronics Inc Westinghouse Drive Fremont, CA T: F: E: China 立华科技北京市海淀区农大南路 33 号厢黄旗东路兴天海园一层 T: F: E: Canada LEI Technology Canada Ltd 3160A Orlando Drive Mississauga, ON L4V 1R5 Canada T: F: E: Taiwan 立端科技股份有限公司 221 新北市汐止區大同路二段 173 號 7 樓 T: F: E: contact@lannerinc.com Please verify specifications before quoting. All product specifications are subject to change without notice. No part of this publication may be reproduced in any form or by any means, electronic, photocopying or otherwise without prior written permission of Lanner Electronics Inc. All brand names and product names are the trademarks or registered trademarks of their respective companies. Lanner Electronics Inc.,