Data Sheet

RLGE2FE16R
Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed
Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link,
Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports
PRODUCT DESCRIPTION
Seamless & Reliable Connection to Any Network
The RLGE2FE16R provides connectivity to any copper, fiber optic, or cellular radio-based Ethernet network. Fiber optic networks
are supported by the use of two 100/1000FX SFP uplink ports. The optional highly resilient 2G/3G/4G LTE cellular radio uplink with
2 SIM card slots for network redundancy, is ideal where fiber optic infrastructure is not available, and may be used as a back-up link
for those applications where interruption of service is not tolerable. The 8 optional 100 Mbps SFP communications ports provide a
simple to implement aggregation capability to the user’s network.
Extremely Effective Network Security
The RLGE2FE16R is available with two different levels of network security software: Standard Security; or Enhanced Security, for the
most mission-critical applications.
Standard Security Software Package Version:
Service Gateway
The RLGE2FE16R service gateway includes a highly robust application layer, and provides legacy support, an enterprise-class
firewall, serial tunnelling, protocol gateway, and extremely effective encryption technologies. The service gateway offers a
uniquely capable feature set which may serve as the hardware foundation to a secure industrial controls network, and includes
Protocol Gateway, VPN, and IPsec features.
Protocol Gateway
Gateway functionality between a DNP3 TCP client (master) and a DNP3 Serial RTU, IED, PLC, or other compatible device is
supported. This same functionality is supported across MODBUS TCP to MODBUS RTU, and IEC 61850 101/104 TCP to IEC 61850
101/104 RTU. This level of protocol conversion allows legacy protocols to be secured by enterprise and industry best practice
level encryption across a TCP IP-based network.
VPN
VPN tunnels are included for secure inter-site connectivity with IPsec, DM-VPN, and VPN GRE tunnels with key management
certificates. The supported VPN modes allow both layer-2 and layer-3 services, to best suit the user’s application-specific cyber-
protection needs.
IPSec
Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and/
or encrypting each IP packet of a communication session. IPsec-VPN as well as IPsec encryption are supported over other VPN
technologies. By implementing this level of industry-accepted encryption, data may traverse the network in a guaranteed
delivery method, as well as providing a cohesive and secure methodology for network communication across legacy and
modern networks.
Enhanced Security Software Version:
Includes all of the security features of the Standard Security version, plus:
Identity Management and Authentication Proxy Access (APA)
NERC-CIP-5 defines the important requirement for network security protection of remote and unattended facilities. The
capability of identifying the user and creating specific network privileges per identified and authenticated user prior to granting
the user access to the network therefore becomes critical
The Authentication Proxy Access (APA) is a highly sophisticated security feature, which allows the network operator to manage
the substation or any other facility maintenance process. This feature gives full control of the maintenance process to the operator
by granting the capability to create dynamic policies to specific tasks within an explicitly defined time window. Following this time
window, operators receive reporting on activities performed during the task. This audit trail comes in the form of an overview log,
and a full packet capture (PCAP) of the session.
Before a user is allowed access to the network, they must log in to ComNet’s internal authentication process with their unique
user name and password. Upon validation of the user profile, specific access is granted to predefined devices and functions, and
each operation is logged. Multi-factor authentication is available when combined with the Cyber-Physical Integration feature.
LIFETIME WARRANTY WWW.COMNET.NET TECH SUPPORT: 1.888.678.9427