Mobile communication | |
---|---|
Frequency bands, data rate | 4G/LTE*: 700, 800, 900, 1.800, 2.100, 2.600 MHz (Bänder 1, 3, 7, 8, 20, 28A); 3G/UMTS/HSPA: 900, 2.100 MHz (Bänder 1,8), HSDPA/HSUPA (DL: max.42 Mbps, UL: max.5,7 Mbps) LTE Cat. 1 (DL: max. 10 Mbps, UL: max. 5 Mbps) |
Antenna connection | 1x SMA female |
SIM | Slot for 1 Mini-SIM card (2FF), locked Provider redundancy with multi-roaming SIM cards (see section Suitable accessories) |
Cellular Status | Signal field strength, RSSI, RSCP / Ec/No, RSRP / RSRQ, Cell-ID, Location-ID |
Hardware interfaces | |
Ethernet ports / functions | 1 x RJ45 shielded, 10/100 MBit/s, Full/half duplex, Auto MDI-X, 1.5 kV isolation voltage / link up/down detection |
I/Os | 1 digital input or output, configurable: Input low active (contact input) or output open drain (24 V / 50 mA) |
Displays (LEDs) | Power, WAN (Internet connection), Info (configurable), Signal (mobile communication) |
Network | |
Network functions | 5 local IP networks, IP static/DHCP,TCP, UDP, IPv4, IPv6, NTP, DHCP, DNS, HTTP/S, ARP, SSH, 802.1Q VLAN incl. tags and trunk ports |
Service | DHCP Server v4/v6 per IP network, DHCP relay, NTP server, DNS, DynDNS, IPv6 Router Advertiser |
Routing | Static routing, routing priority, RSTP, dynamic routing (OSPF, BGP, RIPv1, RIPv2, RIPng) |
Connection check /DSL | Periodic, ping/icmp, DNS request, link up/down / external DSL modems: PPPoE |
NAT / PAT | SNAT/DNAT (masquerade, netmapping, port forwarding, IP forwarding) unlimited number of rules |
VPN | |
icom Connectivity Suite | Supports VPN service for remote maintenance, remote access and M2M-communication |
OpenVPN | Client/server, several parallel tunnels, server with up to 20 clients, tls-auth/tls-crypt, dead peer detection (DPD) |
Open VPN encryption | Blowfish 128 Bit, DESX 192 Bit, DES 64 Bit, DES EDE 128 Bit, DES EDE3 192 Bit, AES 128-256 Bit, RC2 40-128 Bit, IDEA 128, CAST5 128 Bit, SHA1, SHA 224-512 |
IPsec | IKEv1, IKEv2 (automatic, fix), several parallel tunnels, pre-shared keys, certificates, tunnel mode, transport mode, dead peer detection (DPD) |
IPsec encryption | DES EDE3 192 Bit, AES 128-256 CBC/GCM, SHA1, MD5, SHA 256-512, DH-Group 1-31 (Diffie-Hellman 768 - 25519), ChaCha20-Poly1305 |
GRE | GRE via IPsec, point-to-point, multipoint |
PPTP / Dynamic VPN | PPTP client/server; PAP/CHAP/MS CHAP/MS CHAP V2; MPPE 40-128 / Dynamic multipoint VPN (GRE, IPsec, NHRP, EIGRP, OSPF, RIPv1/v2, BGP) |
IT security | |
Authentication | Pre-shared key, X.509 certificates, RADIUS, access rights (read, write, status) |
Firewall / netfilter | IP filters (stateful firewall) also in VPN tunnel; packet filter: TCP, UDP, ICMP, ESP, AP, GRE; MAC filter; pre-defined firewall rules can be activated |
Security | Booting signed firmware, HTTP/HTTPS attack prevention; response upon events: configuration change, link up/down, restart, login attempt, netfilter violation, password hashing |
Events & Actions | |
Event & Action Handler | Notification, alarming, diagnosis, attack detection, fault handling, operation and commissioning logic |
Events / alarms (selection) | Change: digital input, Ethernet port, WAN chain, profile status, supply input (with MRX), cellular field strength; timer expired, firewall violation, login attempt detection, pulse sequence on digital input, counter, netfilter rule |
Event-triggered actions (selection) | Messages via e-mail, SMS (only cellular variants), SNMP traps, MCIP; switch profile, switch connection, change modem state, start timer, switch output or pulse sequence, activate firmware, reset |
Monitoring and Management | |
Monitoring / Certificate management | SNMP traps and agent, configurable system logs, remote syslog, link up/down detection, netfilter violation / SCEP, CRL |
icom Router Management | Supports central router management for FW updates, configuration management, connection monitoring mass rollout, certificate management, available as public/private cloud (server) installation or onPremises |
Administration | |
Configuration | Web Interface HTTP(S) with session management, command line interface (CLI), Telnet, SSH, configuration profiles as ASCII and binary file, ample configuration profiles event-triggered, REST API |
Diagnosis tools | Ping / icmp, tcpdump, traceroute, DNS lookup, AT commands, port mirroring |
FW update | Inkrementell, fail save, update server (HTTP, FTP, HTTPS, FTPS), icom Router Management (WebSocket) |
Help / System time | Web interface: inline help, online help; example profiles, plausibility check, Configuration Guides / NTP client and server, buffered real time clock |
Supply | |
Voltage / Power consumption | 12 ... 24 V DC (± 20% 9,6-28,8V) / Typical approx. 1,5 W, max. 5,0 W |
Dimensions /Weight | 26 x 77 x 99 mm (W x D x H) / 91g |
Mounting | DIN rail mounting, division units on DIN rail mounting: screw mounting via holes in the housing / module |
Ambient conditions | |
Operating temperature / Humidity | -40 . +75°C 1) / 0 95% (non-condensing) |
Protection class | Housing: IP40 |
Certifications / EMV / Safety | CE / Emission: EN 55032 Class B, EN 61000-6-3; Immunity: EN 55024, EN 61000-6-2 / IEC/EN 62368-1 |
Environmental | Vibration/shock as per PLC standard DIN EN 61131-2 Temperature tests as per EN 60068-2-1, EN 60068-2-2, EN 60068-2-14, EN 60068-2-30 |
Operating time | MTBF > 1.000.000 h (25°C), according to SN 29500 (according to IEC 61709) 1) +70°C +75 °C: erweiterter Temperaturbereich (siehe www.insys-icom.com/de-erweitert/) |