www.industryemea.com
22
'13
Written on Modified on
Weidmüller
Gigabit Security Router
Weidmüller Gigabit Security Router: Secure communication between Ethernet networks with integrated VPN remote warning functions in industrial networks.
The Weidmüller Security Routers are ideally suited for this task. They offer the ultimate in performance thanks to the Gigabit technology on both Ethernet ports. Thanks to the integrated "stateful inspection" firewall and additional security functions (e.g. masquerading), the connected machine components are reliably protected against unauthorised access. They also incorporate additional features such as the prioritisation and channeling of network data traffic, IP address mapping to reduce IP addresses and the adjustment of IP address areas.
Furthermore, the integrated VPN remote maintenance functions provide users with secure Internet-based remote access to components and systems on the LAN network - either through wired access via the WAN port or wirelessly via the UMTS interface. The "OpenVPN" open source technology and "IPsec“ encryption can also be used for secure VPN connections, for both the client and server function.
If users require reliable and secure access to your machines and systems from any location, the router is ideally suited as the VPN access point for accessing the target network. Routers only disclose "legitimate" data for the accessing of industrial networks. The new Weidmüller Gigabit Industrial Security Router incorporates the benefits of Ethernet communication in industrial automation technology. This means that the vertical networking of data and information, as seen in Ethernet communication in office environments, can also be used in industrial automation technology in terms of its standardisation and simplicity. Users benefit from vertical data integration from the production level, over the office network, through to the Internet. However, automation environments are extremely sensitive areas that have additional and specific security requirements. Industrial routers with integrated firewall and security functions are ideally suited for this purpose.
The Industrial Security Routers with 2 Gigabit ports (LAN/WAN) by Weidmüller offer static or dynamic routing and support RIPv2/OSPF. The routers forward the data traffic in a controlled manner between "switched" Ethernet networks (IP routing). They reduce network loads by distributing to separate networks (broadcast limitation) and offer protection against unauthorised access – thanks to the firewall and masquerading function. The devices implement other functions such as the prioritisation and channeling of network traffic. Other functions include the reduction of IP addresses and the adaptation of IP addresses through IP address mapping.
Weidmüller routers with integrated VPN remote maintenance functions allow for secure remote access to components and systems on the LAN network. Remote access – on-site and off-site diagnosis and error correction – can take place either via a wired connection or mobile Internet connection. The router variants with integrated 3G/UMTS modem offer universal availability. A firewall integrated into the router with variable and comprehensive filter functions recognises verified messages and lets them through. Unauthorised data is blocked from accessing the network.
Secure VPN connections can be established via OpenVPN and IPsec encryption. The VPN connection is activated and deactivated via a digital input (key-switch function), which enables control over access to the machine network. Alternatively a pre-configured VPN connection can be activated and deactivated through either software or the integrated modbus TCP server. An additional security "Add-On" is available, enabling the user to disconnect the WAN port, which is typically connected to a higher-level network, as and when required, such as in the case of a service incident via VPN dial-up by UMTS. This function can be controlled on the hardware side via a digital input (e.g. by key-switch) and also on the software side via a modbus TCP register.
In addition to the integrated configuration in the non-volatile Flash memory, the filing and recovery of the device configuration can also be done via an external SIM memory card.
The compactly designed Security Routers (35 mm x 159 mm x 134 mm (W x H x D) without antenna) have two RJ45 ports and one USB port, an SCM card reader for SIM memory cards, various LED displays for status indicators, as well as digital inputs/outputs and a factory reset button. The operating temperature range meets industrial requirements: It ranges from –20°C to +70°C.
Fig. 1: Weidmüller Gigabit Security Router: Secure communication between Ethernet networks with integrated VPN remote maintenance functions in industrial networks. Detail 1: A pre-configured VPN connection can be activated or deactivated and connections to the WAN port disconnected using a digital input on the router or, using software, via the integrated modbus TCP server. Detail 2: The Gigabit technology on both Ethernet ports facilitates the greatest data transmission, even with encrypted VPN transmissions.
Fig. 2: Weidmüller Gigabit Security Router: The router variant with integrated 3G/UMTS modem grants wireless access to machinery and systems without the need for a landline connection.
Fig. 3: Weidmüller Gigabit Security Router: Remote access via secure VPN connections to machinery and systems facilitates diagnosis and error correction from any location. In many cases, you don't even need a service technician to be deployed on-site.
