ETHERNET
|
| WAN |
1x WAN port (can be configured as LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
| LAN |
3x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
WIRELESS
|
|
| Wireless mode |
802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA) |
| WiFi security |
WPA2-Enterprise-PEAP, WPA2-PSK, WPA-PSK, WEP; AES-CCMP, TKIP, Auto Cipher modes, client separation |
| ESSID |
ESSID stealth mode |
| Wireless Hotspot |
Captive portal (Hotspot), internal/external Radius server, built in customizable landing page |
BLUETOOTH
|
|
| Bluetooth 4.0 |
Bluetooth low energy (LE) for short range communication |
NETWORK
|
|
| Routing |
Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP) |
| Network protocols |
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet client, SNMP, MQTT, Wake on LAN (WOL) |
| VoIP passthrough support |
H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
| Connection monitoring |
Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection |
| Firewall |
Port forwards, traffic rules, custom rules |
| DHCP |
Static and dynamic IP allocation, DHCP Relay, Relayd |
| QoS / Smart Queue Management (SQM) |
Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
|
DDNS
|
Supported >25 service providers, others can be configured manually |
| Network backup |
VRRP, Wired and WiFi WAN options, each of which can be used as an automatic Failover |
| SSHFS (optional) |
Possibility to mount remote file system via SSH protocol (not available in standard FW) |
SECURITY
|
|
| Authetication |
Pre-shared key, digital certificates, X.509 certificates |
| Firewall |
Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T |
| Attack prevention |
DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
| VLAN |
Port based and tag based VLAN separation |
| WEB filter |
Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only |
| Access control |
Flexible access control of TCP, UDP, ICMP packets, MAC address filter |
VPN
|
|
| OpenVPN |
Multiple clients and a server can run simultaneously, 12 encryption methods |
| OpenVPN Encryption |
DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC |
| IPsec |
IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256) |
| GRE |
GRE tunnel |
| PPTP, L2TP |
Client/Server instances can run simultaneously |
| Stunnel |
Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code |
| DMVPN |
Method of building scalable IPsec VPNs |
| SSTP |
SSTP client instance support |
MODBUS
|
|
| Modbus TCP slave |
ID range 1-255 |
| Modbus TCP master |
Supported functions 01, 02, 03, 04, 05, 06, 15, 16 Supported data formats 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit float (Big endian, Big endian with byte-swapped, Little endian, Little endian with byte-swapped) |
SYSTEM CHARACTERISTICS
|
|
| CPU |
Quad-core ARM Cortex A7, 717 MHz |
| RAM |
256 MB, DDR3 |
| FLASH memory |
256 MB SPI Flash |
USB
|
|
| Data rate |
USB 2.0 |
| Applications |
Samba share, custom scripts (planned) |
| External devices |
Possibility to connect external HDD, flash drive, additional modem, printer (planned) |
| Storage formats |
FAT, FAT32, NTFS |
INPUT/OUTPUT
|
|
| Input |
1x Digital Input |
| Output |
1x Digital Output |
| Events |
SMS, Email, RMS |
POWER
|
|
| Connector |
4 pin industrial DC power socket |
| Input voltage range |
9 - 50 VDC, reverse polarity protection, voltage surge/transient protection |
| PoE (passive) |
Passive PoE. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards |
| Power consumption |
9 W Max |
PHYSICAL INTERFACES (PORTS, LEDS, BUTTONS)
|
|
| Ethernet |
4x RJ45 ports, 10/100/1000 Mbps |
| I/Os |
1 Digital Input, 1 Digital Output on 4 pin power connector |
| Status LEDs |
8x LAN status LEDs, 1x Power LED, 2.4G and 5G WiFi LEDs |
| Power |
4 pin DC connector |
| Antennas |
2x RP-SMA for WiFi, 1x RP-SMA for Bluetooth |
| USB |
USB A port for external devices |
| Reset |
Factory reset button |
PHYSICAL SPECIFICATION
|
|
| Casing material |
Full aluminium housing |
| Dimensions |
115 mm x 95 mm x 32 mm (H x W x D) |
| Weight |
355 g |
| Mounting options |
DIN rail (can be mounted on two sides), flat surface placement |
OPERATING ENVIRONMENT
|
|
| Operating temperature |
-40 C to 75 C |
| Operating humidity |
10 % to 90 % non-condensing |
| Ingress Protection Rating |
IP30 |
