Industrial Security Servers
6+3G Port Din Rail Industrial
Agate7306 Security Ethernet Gateway
ȕ Support data packets forwarding in a line rate with a tiny
Preliminary latency (under 20 us).
ȕ Support data packet filter based on 5-tuples, 7-tuples,
12-tuples.
ȕ Support data packet filter based on user-defined rules.
ȕ Support Deep Packet Inspection(DPI), up to 250 bytes.
ȕ Support white list or black list.
ȕ Support Virtual Private Networks(VPN), including IPSec VPN \
SSL VPN \ L2TP VPN.
ȕ Support secondary development interface to protect private
protocol against leakage.
ȕ Supporting session based traffic statistics and traffic anomaly
detection.
ȕ Supporting redundant ring protocol: DRP, DT-ring.
Supporting Radius
Overview Supporting Tacacs+
Support Multi-level user passwords secures
Agate7306 is an Industrial Security Ethernet Gateway with 3 gigabit
Supporting white list
ports and 6 fast thernet ports. It is positioned in the Industrial Control
Supporting black list
Networks under Industrial Control Systems (ICS) to provide a Cyber
Supporting IP Address and MAC Address Binding
Security Solution in Utility, Steel, Oil & Gas and many other industrial
Supporting MAC Address Binding
applications. A wide variety of security features are supported on
Supporting Deep Packet Inspection(DPI)
Agate7306 to protect ICS from source address cheat, DOS and many
ȏ Supporting data packet filter based on 5-tupls
other attacks. As it supports “Deep Packet Inspection (DPI)”, Agate7306
ȏ Supporting data packet filter based on 7-tupls
can work as an Industrial Firewall thereby recognizing industrial protocol
ȏ Supporting data packet filter based on 12-tupls
frames and forward them safely . Agate series Industrial Ethernet
ȏ Supporting data packet filter based on user-defined rules
Security Gateway design is based on high performance FPGAs. Up to
ȏ Supporting built-in industrial protocols
1K data packet filtering rules can be executed in parallel, and the data
Č Modbus TCP
packets can be handled at line rate with a negligible latency of under
Č IEC61850 (GOOSE \ SV \ MMS)
20us. The requirements of ICS in both real time and security can be met
Č ETHERNET/IP
at the same time by deploying Agate series Industrial Security Ethernet
Č ETHERCAT
Gateway
Č POWERLINK
Č PROFINET
Č OPC
Software Functions Č IEC-104
Č DNP3
Redundancy Supporting session based traffic statistics and traffic anomaly detection
Supporting DT-Ring protocol family Supporting IP Sec VPN
Supporting DRP protocol family Supporting SSL VPN
Supporting link aggregation control protocol (LACP) Supporting L2TP VPN
Multicast Administration
Supporting IGMP snooping Supporting to be managed via console,telnet,WEB,SNMPv1/v2c/v3
Supporting static multicast Supporting upgrading via FTP / TFTP
Supporting alarm output triggered by IP/MAC conflict, power failure,
temperature, port link down
Security
Supporting System logging
Supporting IEEE 802.1x Supporting secondary development interface
Supporting HTTPs/SSL Supporting link layer topology discovery via LLDP
Supporting SSH Supporting port mirror
272 [Link] Version: 2015V1.0
18
Protection for reverse connection Supported
Product Specifications
* OEVT U S J BM 4 FD VS J U Z 4 FS W FS T
Redundancy protection Supported
Technical Specifications
Physical Characteristics
Standards
ȏ IEEE 802.3i (10Base-T)
Shell Metal material
ȏ IEEE 802.3u (100Base-TX)
Heat dissipation mode Natural cooling, Fanless design
ȏ IEEE 802.3ab (1000Base-T)
Protection grade IP40
ȏ IEEE 802.3x (Flow Control)
Dimensions 92mm×135mm×137mm(W×H×D)
ȏ IEEE 802.1p
Weight < 1.25Kg
ȏ IEEE 802.1D (LAN)
Installation mode DIN rail mounting
ȏ IEEE 802.1x
ȏ IEEE802.1Q(VLAN) Environmental Limits
ȏ IEEE802.1AB(LLDP)
Operating temperature -40°C-+85°C
ȏ IEEE802.3ad(LACP)
Storage temperature -40°C-+85°C
ȏ IEC62439-6(DRP)
Relative humidity 5%-95% (non-condensing)
Switch Properties Quality Assurance
Packet buffer 8 Mbit MTBF 300,000 hrs
Packet forwarding rate 4.91Mpps Warranty period 5 years
Switching delay < 20 μs
Approvals
Interface
CE (Pending)
Console port Mini USB FCC(Pending)
Alarm port 5-Pin 5.08 mm-spacing Evaluation Assurance Level - EAL3 (Pending)
plug-in terminal block For the latest dynamics of the product, visit the website of Kyland.
Outband Management Port 10/100/1000Base-T(x) RJ45 Port
Industry Standard
Indicator
EMI
LED ȏ FCC CFR47 Part 15, EN55022/CISPR22, Class A
ȏ Alarm indicator: Alarm
EMS
ȏ Run indicator: Run
ȏ IEC61000-4-2(ESD) ±8 kV (contact), ±15 kV(air)
ȏ Power indicator: PWR1, PWR2
ȏ IEC61000-4-3(RS) 10 V/m (80 MHz-2 GHz)
ȏ Interface indicator: Link/ACT
ȏ IEC61000-4-4(EFT) Power Port: ±4 kV; Data Port: ±2 kV
ȏ Interface rate indicator: Speed
ȏ IEC61000-4-5(Surge) Power Port: ±2 kV/DM, ±4 kV/CM; Data Port: ±2
kV
Power Requirements ȏ IEC61000-4-6(CS) 3 V (10 kHz-150 kHz); 10 V (150 kHz-80 MHz)
ȏ IEC61000-4-8 (power frequency magnetic field) 100 A/m(cont.), 1000
Input voltage
ȏ 24DC (18-36 VDC)
A/m(1s-3s)
ȏ IEC61000-4-9 (pulse magnetic field) 1000 A/m
ȏ 48DC (36-72 VDC)
ȏ IEC61000-4-10 (damped oscillation) 100 A/m
ȏ 220AC/DCW (85-264 VAC/77-300 VDC)
ȏ IEC61000-4-12 (oscillatory wave) 2.5 kV/CM, 1 kV/DM
Access terminal 5-Pin 5.08 mm-spacing
ȏ IEC61000-4-16 (common-mode conduction) 30 V(cont.), 300 V(1s)
plug-in terminal block
Power < 15W Mechanical standards
ȏ IEC60068-2-6 (vibration),
Overload protection Supported
ȏ IEC60068-2-27 (impact),
ȏ IEC60068-2-32 (free fall)
Mechanical Drawing
Version: 2015V1.0 [Link] 273
Industrial Security Servers
Ordering Information
Agate7306-PS1-PS2
PS1
HV 220AC/DCW (85-264 VAC/77-300 VDC)
L1 48DC(36-72VDC)
L3 24DC(18-36VDC)
PS2
HV 220AC/DCW (85-264 VAC/77-300 VDC)
L1 48DC(36-72VDC)
L3 24DC(18-36VDC)
None No secondary power supply
Accessories
Accessory Model Accessory Description
DT-FCZ-RJ45-01 Single-port RJ45 dust plug
DT-XL- Mini USB-USB-2m USB management cable, Mini USB to USB, 2m
274 [Link] Version: 2015V1.0
