Data Sheet

ManualsBrandsComnet ManualsNetworkEthernet L2 Managed Switch / L3 Router

FEATURES

› Fully compliant with the requirements of IEC 61850-3 and

IEEE 1613 Class 2, for use in electrical utility substations; and

NEMA TS-1/TS-2 for Traffic Signal Control Equipment

› For NERC-CIP-5 and NERC-CIP-014 compliance, or any network

application demanding effective cyber-security protection

› Up to (16) 10/100 Mbps Ethernet RJ-45 communications

ports, with (2) 100/1000 Mbps SFP uplink ports. Available

with optional (8) 100 Mbps SFP ports for network aggregation

applications, or where it is desirable to provide optical

connectivity directly to the switch/router or in electrically

noisy environments.

› Optional internal 2G/3G/4G LTE GPRS/UMTS cellular radio

modem with 2 SIM card slots, for maximum network reliability

and availability

› Optional serial interface supports 4 ports of RS-232 serial

data, with serial gateway and serial tunneling

› Optional PoE+: 30 watts per port, 8 ports max.

› Highly advanced and sophisticated security suite: Per Port

Deep Packet Inspection (DPI) SCADA-aware firewall supports

DNP-3, ModBus, IEC 104/101, and IEC 61850 protocols for

NERC-CIP-5 compliance

› Network Learning allows the user to easily create secure and

highly effective SCADA firewall rules

› Supports IEEE 1588v2 Precision Timing Protocol, Transparent

Clock (TC), 10/100 Mbps communications ports only. (Gigabit

uplink ports to be supported in future firmware release.)

› IEEE 802.1X Port-based network access control

› L-2/3/4 ACL for incoming traffic, and layer 2/layer 3 VPN

with IPsec

› The user APA (Authentication Proxy Access) controls remote

access and communications to end-point/edge of network

devices by all users, with extreme granularity across the

users, time, physical Ethernet or serial data ports, TCP ports,

and SCADA protocols. It also provides PCAP for the entire

allowed maintenance or access session.

› IPsec VPN with X.509 certificates, for use over any cellular or

fiber-optic network

› Ethernet layer 2 switching & layer 3 IP routing with integrated

VPN and link protection per ITU-T G.8032

› Fault/event notification provided through Syslog and SNMP

traps

› Environmentally hardened for deployment in difficult

unconditioned out-of-plant installations: Extended ambient

operating temperature range of -40˚ C to +85˚ C, for use in

virtually any environment. Conformal coating is optionally

available for humidity with condensation or airborne

particulate matter environments.

› Rugged metal housing. DIN-rail mountable & rated for IP-30

ingress protection

› Internal/self-contained universal power supply: Available in

operating voltage ranges from 9 to 270 VDC, or 90 to 250 VAC.

› Redundant power supply input capability significantly reduces

the possibility of a single-point-of-failure, for the highest

possible system and network reliability (DC-powered units only)

› No fans or forced-air cooling; cooling via natural convection

eliminates unreliable and troublesome fans/moving parts,

with no periodic maintenance requirements

ComNet product series RLGE2FE16R are substation-rated and industrially

hardened layer 2 managed switches/layer 3 routers, with a unique and highly

robust packet processing SCADA-aware security firewall for the most mission-

critical and demanding cyber-security applications. The RLGE2FE16R is intended

for deployment in environments where high levels of electromagnetic noise and

interference (EMI) and severe voltage transients and surges are routinely encountered,

such as electrical utility substations and switchyards, heavy manufacturing facilities,

track-side electronic equipment, and other difficult out-of-plant installations.

Layer 3 routing functionality allows for the participation and foundation of a core

network infrastructure.

The RLGE2FE16R is an ideal platform for deploying a secure communications

and networking gateway for remote electrical utility sites, and other critical

infrastructure applications.

RLGE2FE16R

Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed

Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link,

Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports

216

-40º TO

85ºCSUBSTATION LAYER 3

UPLINKS

DIN RAIL FIREWALLFLEXIBILITY

* Small Form-Factor Pluggable Module. Sold separately.

EXCLUSIVE

LIFETIME WARRANTY WWW.COMNET.NET TECH SUPPORT: 1.888.678.9427

Summary of content (10 pages)

PAGE 1
Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports RLGE2FE16R EXCLUSIVE SUBSTATION DIN RAIL FLEXIBILITY -40º TO +85ºC LAYER 3 FIREWALL UPLINKS 16 2 ComNet product series RLGE2FE16R are substation-rated and industrially hardened layer 2 managed switches/layer 3 routers, with a unique and highly robust packet processing SCADA-aware secu
PAGE 2
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports PRODUCT DESCRIPTION Seamless & Reliable Connection to Any Network The RLGE2FE16R provides connectivity to any copper, fiber optic, or cellular radio-based Ethernet network. Fiber optic networks are supported by the use of two 100/1000FX SFP uplink ports.
PAGE 3
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports PRODUCT DESCRIPTION (Cont’d) Event logger The event logger feature allows the operator to receive events and logs from any number of remote OT devices.
PAGE 4
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports DETAILED PRODUCT DESCRIPTION (Cont’d) Recommended firewall rules are then suggested to the user; the implementation of these rules is optional, and they can be easily edited using the Configuration Utility. OAM (IEEE 802.3-2005 & IEEE 802.1ag) and QoS are also supported.
PAGE 5
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports APPLICATIONS ›› NERC-CIP-5 compliance for electrical substation automation & SCADA networks; protective relaying systems; power transmission & distribution systems; remote/unattended wind farm, hydroelectric, and solar/photovoltaic power generation facilities; and other electrical ut
PAGE 6
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports SPECIFICATIONS, CONT’D System Performance Line rate L2/L3 switching throughput Switching latency <10 μSec 16K MAC addresses 4K VLANs with port affiliation & tagging Multicast L2 Multicast IGMP snooping for traffic optimization Mechanical Indicating LEDs PWR Port Activity/Speed RU
PAGE 7
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports ORDERING INFORMATION, CONT’D Part Number Description RLGE2FE16R/S/XX/28P/S22/CEU³ RLGE2FE16R with 2 × 100/1000 FX SFP, 8 × 10/100 TX PoE+, 4 × RS-232, 4G LTE Cellular Modem (EU Bands) RLGE2FE16R/S/XX/216³ RLGE2FE16R with 2 × 100/1000 FX SFP, 16 × 10/100 TX RLGE2FE16R/S/XX/216P³
PAGE 8
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports TYPICAL APPLICATIONS Automated/Smart Grid Substation with Redundant Cellular Radio Links Enterprise Engineering Access Access Protective Relay Protective Relay Primary Cellular Backup Link Secondary Cellular Backup Link IED RLGE2FE16R RLGE2FE16R Layer 2 Switch/ Layer 3 Router C
PAGE 9
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports TYPICAL APPLICATIONS (CONT’D) ITS/Traffic Signalization System Over Cellular Radio Managed Switch RLGE2FE16R RLGE2FE16R Managed Switch Secure TOC Network Internet Securing Remote Access Managed Switch RLGE2FE16R Internet Managed Switch Secure Network Securing A Wireless Radio
PAGE 10
RLGE2FE16R Substation-Rated, Enhanced Security SCADA-Aware Ethernet Layer 2 Managed Switch/Layer 3 Router With Optional 2G/3G & 4G LTE Cellular Radio Link, Enhanced Network Security, Terminal Server, PoE+, and 100FX SFP Ports TYPICAL APPLICATIONS (CONT’D) Securing Devices on an Unsecure Network RLGE2FE16R Managed Switch Managed Switch Managed Switch Managed Switch RLGE2FE16R Unsecure Network RLGE2FE16R Securing Exterior Sites Managed Switch RLGE2FE16R RLGE2FE16R Managed Switch Secure Network 3