Data Sheet

RLGE2FE16R
Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed
Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link,
Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports
APPLICATIONS
› NERC-CIP-5 compliance for electrical substation automation
& SCADA networks; protective relaying systems; power
transmission & distribution systems; remote/unattended wind
farm, hydroelectric, and solar/photovoltaic power generation
facilities; and other electrical utility-specific applications
› NERC-CIP-014 compliance for perimeter security,
surveillance monitoring, and controlled access to electrical
substations and power generating facilities, and other critical
infrastructure/high value, mission-critical sites and assets
› Distribution Automation: Status indication, monitoring, and
control of reclosers and other remotely-located electrical
utility-specific equipment, via the internal cellular radio link.
› Industrial/Factory Automation & Process Control SCADA
Networks
› Chemical and petrochemical refining and processing
facilities, oil and gas pipelines/transmission systems, and
mining installations
› Food processing/pharmaceutical manufacturing facilities›
Wastewater treatment plants, and suppliers of potable
drinking water
› ITS/transportation closed-loop signalization and VMS/VDS/
surveillance/incident detection systems
› Railway/trackside control and monitoring systems
› City center security and surveillance monitoring
› Military, government, and defense communications networks
› Integrated IP-Video, VOIP, and Data Transmission Networks
› Cellular telephony and wireless backhaul networks
SPECIFICATIONS
Security
Distributed DPI Firewall Profile based firewall
Security rules planning per service group
Firewall monitoring mode
Firewall enforcement mode
Firewall Learning Mode
IEC 101 DPI Firewall
IEC 104 DPI Firewall
IEC 61850 mms DPI Firewall
Modbus RTU DPI Firewall
Modbus TCP DPI Firewall
DNP3 RTU Firewall
DNP3 TCP Firewall
VPN IPsec Certificates X.509
IPsec CRL server
IPsec CA server
IPsec Dynamic Key Exchange
IPsec encryption AES
IPsec encryption 3DES
L3 IPsec VPN policy based
L3 IPsec VPN route based
L3 mGRE DM-VPN
L2 VPN GRE
Access control SNMPv1/v2/v3 Enable/Disable port
Port access filter per MAC / IP addresses
IEEE 802.1x port-based authentication
local APA (Authentication Proxy Access)
User activity report (under local APA)
Access Lists L2/L3/L4 Radius
TACACS NAT - traversal
VRF RMON
Interface 2 × 100/1000 SFP¹ ports
8 × 10/100Base-T(X) ports (Optional 30 W PoE)
8 × 10/100Base-T(X) ports (Optional, No PoE)
8 × 100FX SFP ports (Optional)
4 × RS-232 ports (Optional)
(600 - 115.2 Kbps Support)
2G/3G/4G cellular modem (Optional)
Management Console serial port
Port management speed, auto-negotiation and Duplex
Backup/Restore running config
Conditioned/scheduled system reboot
Remote management-(SSHv2,CLI/HTTPS/Telnet)
Software upgrade via TFTP/ SFTP
TFTP/ SFTP Client Syslog Port mirroring
Local Operation Local USB port for emergency boot
Discrete outputs reporting system-alarms
Failsafe output relay reporting critical alarm
Networking
Advanced Layer 2 feature-set ITU-T G.8032v2 Ethernet ring
IEEE 802.1s MSTP
IEEE 802.1w RSTP, enhanced RSTP
IEEE 802.3ad LAG with LACP
IEEE 802.1q VLAN segregation
IEEE 802.1p per port queues
IEEE 802.3p
IEEE 802.3x.
DHCP Client, Server and Relay
QOS Prioritization, shaping, Scheduling
QOS functions: 8 queues tag, switch ports
OAM EFM IEEE 802.3ah
OAM CFM ITU-T Y.1731/IEEE 802.1ag
1588v2 PTP Transparent Clock
SNTP
Layer 3 feature-set Static routing; OSPF, RIPv2 Routing;
VRRP redundancy scheme
SCADA protocol handling Transparent tunneling of serial streams
SCADA gateway for IEC101/104, ModBus RTU/TCP
and DNP3
Terminal Server Byte/Frame mode
Terminal Server TCP/UDP
Cellular Modem (Optional) GPRS/UMTS or HSPA/EVDO/LTE cellular modem
(cellular interface requires sold separately antennas)
2 × SIM cards
LIFETIME WARRANTY WWW.COMNET.NET TECH SUPPORT: 1.888.678.9427