RuggedRouter™ RX1000

Industrially Hardened Cyber Security Appliance

The RuggedRouter™ RX1000 is an industrially hardened „. Failsafe Output Relay: For critical failure or error alarming
cyber security appliance with integrated router, firewall, and VPN „. 18 AWG galvanized steel enclosure and 19" rack-mount adapter
functionality. The RX1000 can be used to establish an electronic
Physical Ports
security perimeter around critical cyber assets found in control and
„. Ethernet Options:
automation systems, in order to prevent the disruption of operations
z. 10/100BaseTX, 100BaseFX
by accidental or malicious acts. Ideally suited for electric power
z. Multiple configurations, up to 4 ports
utilities, the industrial plant floor, and traffic control systems, the
„. WAN Port Options:
RX1000 is designed to protect and secure SCADA system networks
z. T1/E1
connected directly to the Internet, or within a company's Wide
Area Network (WAN) or Local Area Network (LAN). - channelized and unchannelized
- supports 2Mbps G.703 with 120 ohm balanced connections
The RX1000 includes security functions such as full IPSec Virtual z. 56 Kbps DDS and DSL

Private Networking (VPN), and firewall capabilities with the capacity z. Multiple configurations, up to 8 ports

to securely connect hundreds of other remote sites over Frame „. Embedded Modem Port
Relay and PPP. The modular architecture allows customization of the „. GPS IRIG-B Time Sync (coming soon)
number and types of Ethernet and WAN ports. Integrated modem
and GPS time synchronization options are also available. Protocols
„. WAN
z. Frame Relay RFC 1490 or RFC 1294
The RX1000 is hardened to the RuggedRated™ specification which
[Link] RFC 1661, 1332, 1321, 1334, PAP, CHAP Authentication
provides a high level of immunity to electromagnetic interference (EMI)
z. PPPoE over DSL
and heavy electrical surges typical of the harsh environments found
in many industrial applications. An operating temperature range of -40 „. IP
z. Routing
to +85°C (-40 to +185°F) allows the RX1000 to be placed in almost
z. VRRP, OSPF, DHCP Agent
any location.
z. Traffic prioritization, NTP Host (Stratum 2)
For applications requiring high availability, the RX1000 provides the
option for integrated dual redundant power supplies each capable Frame Relay Support
„. ISO and ITU compliant, network certified.
of accommodating a wide range of input voltages for worldwide
„. ANSI T1.617 Annex D, Q.933 or LMI Local Signaling
operability. Also unique is the ability to have each power supply fed
from different voltage levels and/or sources thereby providing great Management Tools
flexibility in creating high availability systems. „. Web-based, SSH, CLI management interfaces
„. SNMP v2/v3
Key Features and Benefits
„. Remote Syslog
„. Rich set of diagnostics with logging and alarms
Security Appliance Functions
„. WAN tools for engineering level debugging
„. Integrated Router/Firewall/VPN
„. Raw and interpreted real time line traces
„. Stateful Firewall with NAT
„. Full IPSec Virtual Private Networking Universal Power Supply Options
„. VPN with 3DES, DES and AES support „. Fully integrated power supplies (no external adaptors)
„. Input voltage range of 9-59VDC, 88-300VDC, and
RuggedRated™ for Reliability in Harsh Environments 85-264VAC for worldwide operability
„. Immunity to EMI and high voltage electrical transients „. Optional dual redundant, parallel load-sharing power supplies
z. Meets IEEE 1613 (electric utility substations)
for increased network availability
z. Exceeds IEC 61850-3 (electric utility substations)
„. Can be powered from different sources for ultimate redundancy
z. Exceeds IEEE 61800-3 (variable speed drive systems)
„. CSA/UL 60950 safety approved
z. Exceeds IEC 61000-6-2 (generic industrial environment)
to +85°C RUGGEDCOM
z. Exceeds NEMA TS-2 (traffic control equipment)
„. -40°C to +85°C operating temperature (no fans) Warranty ISO 9001:2000
„. 5 Year Warranty CERTIFIED

[Link] RuggedRouterTM RX1000 1

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

RuggedRouter™ RX1000

Multiple Ethernet Ports:

Multiple WAN Ports:
X Up to 4 100 Mbps ports
X Up to 8 T1/E1 Modular HMI
X Fiber or Copper
X Dual DSL X Front or Rear Mount
X LC, ST, MTRJ, SC
X Dual DDS 56/64kbps

GPS / IRIG Ports (Optional): Mounting Options

V.90 Modem (Optional);
X Built-in GPS, Antenna Input
X 56kbps X Panel/Din rail
X Multiple IRIG-B Outputs
X 19” Rack Mount
X Manchester, AM, Baseband
IRIG-B Types

Enclosure: Operating Temperature

X IP40 X -40oC to +85oC
X 18 AWG Galvanized Steel X No Fans

Integrated Power Supply: EMI Immunity

X 24VDC (9-36VDC), 48VDC (36-59VDC), X Meets IEEE 1613 (electric utility substations)
X Exceeds IEC 61850-3 (electric utility substations)
or HI (88-300VDC/85-264VAC) power
X Exceeds IEEE 61800-3 (variable speed drive systems)
supply options
X Exceeds IEC 61000-6-2 (generic industrial environment)
X Optional Dual Redundant Power Supply
X Exceeds NEMA TS-2 (traffic control equipment)
with Parallel Load Sharing

[Link] RuggedRouterTM RX1000 2

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

Router Software Features

Frame Relay Central Site Concentration Traffic Prioritization
RuggedRouter Frame Relay provides the ability to inexpensively Traffic shaping is the ability to prioritize the transmission of data over
network a large number of widely separated remote sites via a a network link. Traffic prioritization is used to optimize or guarantee
Frame Relay network provider. A number of remote sites are performance, low-latency, and/or bandwidth. The RuggedRouter
established, using physical interfaces such as 56Kbps DDS, can prioritize based on wide number of criteria, including: type
Fractional or full T1, and in some cases broadband DSL. Remote of protocol, TOS fields in received packets, IP address and
sites may be fully meshed, but typically connect only to a central port numbers.
site. The central site typically employs one or more T1 connections
and routes data between remote sites if required. Data link Automatic Dial Backup (coming soon)
connections are configured to carry traffic from the remote sites to Automatic Dial Backup provides capability to raise a backup
the central site. The maximum traffic rate and traffic bursting connection to a RAS server upon failure of the designated link. The
characteristics can be programmed individually for each connection. RuggedRouter can operate the dynamic link as a stand-alone entity
The connection can then be treated as a routed IP link. Traffic or bond it with a pre-existing Multilink PPP bundle.
shaping policies (see below) can then be applied to the link.
NTP and GPS (coming soon)
PPP Networking The Network Time Protocol allows Intelligent Electronic Devices
Certain remote sites may be located "off" of the Frame Relay (IED) and Remote Terminal Units (RTU) to obtain accurate time
network or may be infrequently used. RuggedRouter supports the information from NTP hosts. The RuggedRouter features a GPS
ability to allocate a portion of the central site channelized T1 line system that obtains timing information from GPS satellites and will
for connection to these remote sites. The T1 link can then act as an NTP host, providing stratum 2 quality resolution.
simultaneously support IP over Frame Relay connections to the Multiple types of IRIG-B outputs are available including AM,
Frame network and PPP connections to off-net devices. PPP can Baseband, and Manchester.
be employed on the embedded modem, over unchannelized T1 lines
or as PPPoE using the broadband DSL card.

Virtual Private Networking

Virtual private networking provides the ability treat your remote sites
as if they are part of a secure private network, by creating secure
tunnels through untrusted networks. All traffic on those tunnels is
encrypted. The RuggedRouter allows you establish a tunnel to each
of your remote sites with strong authentication and encryption.
Tunnels may be constructed to the site as a whole, to specific hosts
on specific ports at the remote site or passed through to the hosts.

Firewalls
Firewalls restrict traffic between specific hosts using specific
services. RuggedCom provides easy to configure, robust firewalls
that operate in conjunction with VPN. Network Address Translation
(NAT), Port Forwarding and message logging are only some of the
features provided by the firewall.

[Link] RuggedRouterTM RX1000 3

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

Application Examples
Electric Utility Substation

SCADA
EMS WAN
(Corporate WAN or Internet)
Engineering

T1/E1, DDS, DSL, Ethernet

Substation
10/100Mbps Router, VPN, Firewall
Ethernet RuggedRouter™ - RX1000
Ethernet Switch (Copper or Fiber)
RuggedSwitch™ - RSG2100

Serial Device Server

RuggedServer™ - RS400
10/100/1000Mbps
Ethernet (Copper or Fiber)
RS232, RS485/422 Serial
0.65

0.33
Serial Legacy
Meter Relay Devices
HMI
0.65

RTU 0.33

Relay
Ethernet Enabled IEDs RTU

Legacy Serial IEDs

Industrial Plant Floor

CORPORATE LAN

Factory Floor Router, VPN, Firewall

RuggedRouter™ - RX1000

10/100Mbps
Ethernet
(Copper or Fiber)
Ethernet Switch Ethernet Switch
RuggedSwitch™ - RS900G RuggedSwitch™ - RS900G

10/100/1000Mbps 10/100/1000Mbps
Ethernet Ethernet
(Copper or Fiber) (Copper or Fiber)

3 2 1
6 5 4
9 8 7
# 0 *

PLC PLC
I/O HMI I/O HMI
Cell - 1 Cell - 2

[Link] RuggedRouterTM RX1000 4

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

EMI and Environmental Type Tests

IEC 61850-3 EMI TYPE TESTS
TEST Description Test Levels Severity Levels
Enclosure Contact +/- 8kV 4
IEC 61000-4-2 ESD
Enclosure Air +/- 15kV 4
IEC 61000-4-3 Radiated RFI Enclosure ports 20 V/m x
Signal ports +/- 4kV @ 2.5kHz x

D.C. Power ports +/- 4kV 4

IEC 61000-4-4 Burst (Fast Transient)
A.C. Power ports +/- 4kV 4

Earth ground ports 3 +/- 4kV 4

Signal ports +/- 4kV line-to-earth, +/- 2kV line-to-line 4
IEC 61000-4-5 Surge D.C. Power ports +/- 2kV line-to-earth, +/- 1kV line-to-line 3
A.C. Power ports +/- 4kV line-to-earth, +/- 2kV line-to-line 4
Signal ports 10V 3
D.C Power ports 10V 3
IEC 61000-4-6 Induced (Conducted) RFI
A.C. Power ports 10V 3

Earth ground ports 3 10V 3

IEC 61000-4-8 Magnetic Field Enclosure ports 40 A/m continuous, 1000 A/m for 1 s N/A
D.C. Power ports 30% for 0.1s, 60% for 0.1s, 100% for 0.05s N/A
IEC 61000-4-29
Voltage Dips & Interrupts 30% for 1 period, 60% for 50 periods N/A
A.C. Power ports
IEC 61000-4-11 100% for 5 periods, 100% for 50 periods 2 N/A
Signal ports 2.5kV common, 1kV diff. mode@1MHz 3
IEC 61000-4-12 Damped Oscillatory D.C. Power ports 2.5kV common, 1kV diff. mode@1MHz 3
A.C. Power ports 2.5kV common, 1kV diff. mode@1MHz 3
Signal ports 30V Continuous, 300V for 1s 4
IEC 61000-4-16 Mains Frequency Voltage
D.C. Power ports 30V Continuous, 300V for 1s 4
IEC 61000-4-17 Ripple on D.C. Power Supply D.C. Power ports 10% 3
Signal ports 2kVac (Fail-Safe Relay output) N/A
IEC 60255-5 Dielectric Strength D.C. Power ports 2kVac N/A
A.C. Power ports 2kVac N/A
Signal ports 5kV (Fail-Safe Relay output) N/A
IEC 60255-5 H.V. Impulse D.C. Power ports 5kV N/A
A.C. Power ports 5kV N/A

IEEE 1613 (C37.90.x) EMI IMMUNITY TYPE TESTS

Test Description Test Levels Severity Levels
Enclosure Contact +/- 8kV N/A
IEEE C37.90.3 ESD
Enclosure Air +/- 15kV N/A
IEEE C37.90.2 Radiated RFI Enclosure ports 35 V/m N/A
Signal ports +/- 4kV @ 2.5kHz N/A
D.C. Power ports +/- 4kV N/A
IEEE C37.90.1 Fast Transient
A.C. Power ports +/- 4kV N/A
Earth ground ports3 +/- 4kV N/A
Signal ports 2.5kV common mode @1MHz N/A
IEEE C37.90.1 Oscillatory D.C. Power ports 2.5kV common, 1kV diff. mode@1MHz N/A
A.C. Power ports 2.5kV common, 1kV diff. mode@1MHz N/A
Signal ports 5kV (Fail-Safe Relay output) N/A
IEEE C37.90 H.V. Impulse D.C. Power ports 5kV N/A
A.C. Power ports 5kV N/A
Signal ports 2kVac N/A
IEEE C37.90 Dielectric Strength D.C. Power ports 2kVac N/A
A.C. Power ports 2kVac N/A

Environmental Type Tests

Test Description Test Levels Severity Levels
IEC 60068-2-1 Cold Temperature Test Ad -40°C, 16 Hours N/A
IEC 60068-2-2 Dry Heat Test Bd +85°C, 16 Hours N/A
95% (non-condensing), 55°C , 6
IEC 60068-2-30 Humidity (Damp Heat, Cyclic) Test Db N/A
cycles
IEC 60255-21-1 Vibration Tests Fc 2g @ (10 - 150) Hz Class 2
IEC 60255-21-2 Shock Tests Ea 30g @ 11mS Class 2

Notes: 1. Only applicable to functional earth connections separated from the safety earth connection.
2. Class 2 refers to "Measuring relays and protection equipment for which a very high security margin is required or where the vibration levels are very high,
( e.g. shipboard application and for severe transportation conditions")

[Link] RuggedRouterTM RX1000 5

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

Mechanical Drawing

[Link] RuggedRouterTM RX1000 6

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

Mounting Options

Slot 1 Slot 3 Slot 5

Slot 2 Slot 4 Slot 6

[Link] RuggedRouterTM RX1000 7

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

Technical Specifications
Power Supply
„. Power Consumption: 25W (MAX)
„. 24VDC: 9-36VDC (MAX) IETF RFC Compliance
„. 48VDC: 36-59VDC (MAX) „. RFC791-IP
„. RFC792-ICMP
„. HI VOLTAGE AC/DC: 88-300VDC, 85-264VAC (MAX)
„. RFC793-TCP
„. RFC783-TFTP
Critical Alarm Relay „. RFC826-ARP
„. Form-C failsafe contact relay: 1A@30VDC „. RFC768-UDP
„. RFC854-Telnet
Physical „. RFC1490-Frame Relay
„. Height: 1.74" „. RFC1294-Frame Relay
„. Width: 17.2" „. RFC1661-PPP
„. Depth: 11.9" „. RFC1332-PPP (IPCP)
„. Weight: 10lbs (4.5 Kg) „. RFC1321-PPP (MD5)
„. Ingress Protection: IP40 (1mm objects) „. RFC1334-PPP Authentication
„. Enclosure: 18 AWG galvanized steel enclosure „. RFC1519-CIDR
„. Mounting: Panel/DIN Rail mount or 19 inch Rack Mount „. RFC1541-DHCP (client)
„. RFC1305-NTP
Approvals „. RFC2068-HTTP
„. ISO: Manufactured in an ISO9001 facility „. RFC2338-VRRP
„. cCSAus: CSA C22.2 No. 60950, UL 60950 (pending) „. RFC2475-Differentiated Services
„. CE Marking (pending)
„. Emissions: FCC Part 15, Class A (pending)
„. Complies with 21 CFR Chapter 1,
Subchapter J. (pending)
„. NEMA TS-2 (pending)

Warranty
„. 5 Years-Applicable to design or manufacturing
related product defects.

Network Management
„. HTTP graphical web-based
„. SNMP v2/v3
„. Command Line Interface (Console and Remotely via SS)
„. Quick setup facility

EMI Immunity and Environmental Compliance

„. IEC 61000-6-2 Industrial (Generic)
„. IEC 61800-3 Industrial (Variable Speed Drive Systems)
„. IEC 61850-3 Electric Utility Substations
„. IEEE 1613 Electric Utility Substations
„. NEMA TS-2 Traffic Control Equipment (pending)

IEEE Compliance
„. 802.3-10BaseT
„. 802.3u-100BaseTX, 100BaseFX
„. 802.3z-1000BaseLX
„. 802.3x-Flow Control
„. 802.3d-MAC Bridges

[Link] RuggedRouterTM RX1000 8

 RuggedRouter™ RX1000
Industrially Hardened Cyber Security Appliance

RX1000 -______ -______ -____ -____ -____ -____ -____ -____ -____ -____ Order Codes
Main Mount PS1 PS2 S1 S2 S3 S4 S5 S6

S2: Modules for Slot 2

S1 S3 S5
„ XX = Empty
„. M1 = V90 Modem
S2 S4 S6

S3 and S4: Ethernet Modules for Slots 3 and 4

Main: Ethernet and Power Connectors „. XXXX = Empty
„ R = Ethernet on rear; LED panel on front; power connector on rear „. TX01 = 2 x 10/100Tx RJ45
„.F = Ethernet on front; LED panel on front; power connector on rear „. FX01 = 2 x 100FX - Multimode, 1300nm, ST connectors
„. B = Ethernet on rear; LED panel on top; power connector on rear „. FX02 = 2 x 100FX - Multimode, 1300nm, SC connectors
„. T = Ethernet on front; LED panel on top; power connector on rear „. FX11 = 2 x 100FX - Multimode, 1300nm, LC connectors
„. FX03 = 2 x 100FX - Multimode, 1300nm, MTRJ connectors
Mount: Mounting Options „. FX04 = 2 x 100FX - Singlemode, 1300nm, ST connectors, 20km
„. RM = 19" Rack Mount Kit „. FX05 = 2 x 100FX - Singlemode, 1300nm, SC connectors, 20km
„. DP = DIN and Panel Mount Kit „. FX06 = 2 x 100FX - Singlemode, 1300nm, LC connectors, 20km
„. RD = 19" Rack, DIN, and Panel Mount Kit „. FX07 = 2 x 100FX - Singlemode, 1300nm, SC connectors, 50km
„. 00 = No Mounting Option „. FX08 = 2 x 100FX - Singlemode, 1300nm, LC connectors, 50km
„. FX09 = 2 x 100FX - Singlemode, 1300nm, SC connectors, 90km
„. FX10 = 2 x 100FX - Singlemode, 1300nm, LC connectors, 90km
PS1 and PS2: Power Supply 1 and Redundant
Power Supply S5 and S6: RX1000 WAN Modules for Slots 5 and 6
„. 24 = 24VDC (9-36VDC), screw terminal block
„. XXX = Empty
„. 48 = 48VDC (36-59VDC), screw terminal block
„. TU1 = Single T1/E1 Unchannelized
„. HI = 88-300VDC or 85-264VAC, screw terminal block
„. TU2 = Dual T1/E1 Unchannelized
„. 24P = 24VDC (9-36VDC), pluggable terminal block
„. TU4 = Quad T1/E1 Unchannelized
„. 48P = 48VDC (36-59VDC), pluggable terminal block
„. TC1 = Single T1/E1 Channelized
„. HIP = 88-300VDC or 85-264VAC, pluggable terminal block
„. TC2 = Dual T1/E1 Channelized
„. 00 = No Power Supply (PS2 Only)
„. TC4 = Quad T1/E1 Channelized
„. D01 = DSL
S1: Modules for Slot 1 „. D02 = 56 kBbps DDS DSU/CSU (1)
„ XX = Empty „ TS1 = GPS IRIG-B Time Sync (coming soon) (2)

Example Order Codes NOTES:

1 This module has an operating temperature range of -40°C to +50°C.
RX1000-R-RM-24-00-XX-XX-TX01-TX01-TU2-XXX 2 Only one (1) GPS card can be configured per router.

19” Rack mounted, single 24VDC power supply, 4 10/100 RJ45

Ethernet ports, Dual T1 WAN interface, with Ethernet ports
on the rear

RX1000-F-RM-48-48-XX-XX-FL01-FX02-TU4-XXX
19” Rack mounted, dual redundant 48VDC power supply,
2 FL01 Multimode 850nm Fiber and 2 FX02 Singlemode 1300nm RuggedCom Inc.
Fiber Ethernet ports, Quad T1 WAN interface, with Ethernet 30 Whitmore Road
ports on the front Woodbridge, Ontario, Canada L4L 7Z4
Tel: (905) 856-5288 Fax: (905) 856-1995
RX1000-R-RM-24-HI-XX-XX-TX01-FX05-TC2-XXX Toll Free: (888) 264-0006
19” Rack mounted, dual redundant power supply (mixed voltage), Technical Support Center: (866) 922-7975 or (954) 922-7975
2 10/100 RJ45 and 2 1300nm Singlemode Fiber Ethernet ports,
Quad T1 Channelized WAN interface, with Ethernet ports © 2006 RuggedCom Inc.
on the rear RuggedSwitch is a trademark of RuggedCom Inc.
Ethernet is a trademark of the Xerox Corporation.
Patent Pending
All specifications in this document are subject to change without notice.
Accessories
Rev 2-H

42-11-0021 - Cable support brackets (two) For additional information on our products and
43-10-0007 - Power cable (North America three services, please visit our website at: [Link]
prong connector -> beau)

[Link] RuggedRouterTM RX1000 9