RuggedCom Switch RS940G User Guide

RuggedSwitch RS940G

8-Port Managed Gigabit Ethernet Switch

Features and Benefits

Ethernet Ports

ꢀ.6 - 10/100/1000BaseTX Triple Speed Copper Ports Standard

ꢀ.Optional 2 additional 1000LX SFP Pluggable Gigabit Fiber

ꢀ.2 - 10/100/1000BaseTX copper ports

ꢀ.Long haul optics allow Gigabit distances up to 70km

Cyber Security Features

ꢀ.Multi-level user passwords

ꢀ.SSH/SSL encryption

ꢀ.Enable/disable ports, MAC based port security

ꢀ.Port based network access control (802.1x)

ꢀ.VLAN (802.1q ) to segregate and secure network traffic

ꢀ.Radius centralized password management

ꢀ.SNMPv3 encrypted authentication and access security

RuggedRated for Reliability in Harsh Environments

ꢀ.Immunity to EMI and heavy electrical surges

eRSTP

ꢁ

Meets IEEE 1613 (electric utility substations)

Exceeds IEC 61850-3 (electric utility substations)

Exceeds IEC 61800-3 (variable speed drive systems)

Exceeds IEC 61000-6-2 (generic industrial)

ꢁ

The RuggedSwitch™ RS940G is an industrially hardened,

fully managed Ethernet switch providing six or eight ports of

Gigabit Ethernet. Six 10/100/1000BaseTX triple speed copper

ports are standard. An additional two gigabit fiber or copper

ports can be added. The RS940G provides a cost effective

way of connecting a cluster of field devices to a Gigabit

Ethernet backbone.

ꢁ

Exceeds NEMA TS-2 (traffic control equipment)

ꢀ.Hazardous Location Certification: Class 1 Division 2

ꢀ.-40 to +85°C operating temperature (no fans)

ꢀ.Conformal coated printed circuit boards (optional)

Rugged Operating System (ROS ) Features

ꢀ.Simple plug and play operation - automatic learning,

Designed to operate reliably in harsh industrial environments

the RS940G provides a high level of immunity to

negotiation, and crossover detection

ꢀ.RSTP (802.1w) and Enhanced Rapid Spanning

Tree (eRSTP™) network fault recovery (<5ms)

ꢀ.Quality of Service (802.1p) for real-time traffic

ꢀ.VLAN (802.1q) with double tagging and GVRP support

ꢀ.Link aggregation (802.3ad)

electromagnetic interference and heavy electrical surges

typical of environments found in electric utility substations,

process control or in curb side traffic control cabinets. An

operating temperature range of -40°C to +85°C coupled with

hazardous location certification, optional conformal coating

and a galvanized steel enclosure allows the RS940G to be

placed in almost any location.

ꢀ.IGMP Snooping for multicast filtering

ꢀ.Port Rate Limiting and Broadcast Storm Limiting

ꢀ.Port configuration, status, statistics, mirroring, security

ꢀ.Industrial automation features (eg. Modbus)

The embedded Rugged Operating System (ROS ) provides

advanced networking features such as Enhanced Rapid

Management Tools

ꢀ.Web-based, Telnet, CLI management interfaces

ꢀ.SNMP v1/v2/v3

ꢀ.Remote Monitoring (RMON)

ꢀ.Rich set of diagnostics with logging and alarms

Spanning Tree (eRSTP ), Port Rate Limiting and a full array

of intelligent functionality for high network availability

and manageability.

The versatility and wide selection of fiber optics allows the

RS940G to be used in a variety of applications. The RS940G

provides two fiber optical Gigabit Ethernet ports for creating a

fiber optical backbone with high noise immunity and long haul

connectivity.

Universal Power Supply Options

ꢀ.Fully integrated power supply

ꢀ.Universal high-voltage range: 88-300VDC or 85-264VAC

ꢀ.Dual low-voltage DC inputs: 24VDC (9-36VDC)

or 48VDC (36-72VDC)

The embedded Rugged Operating System (ROS™) provides

advanced layer 2 and layer 3 networking functions, and

advanced cyber security features. Coupled with the ruggedized

hardware design, RS940G is ideal for creating mission-critical,

real-time, control applications where high reliability and availability

is of paramount importance.

ꢀ.Terminal blocks for reliable

maintenance free connections

ꢀ.CSA/UL 60950 safety approved

to +85°C

IS^RO^U9^G0^G0^E1^DC:2^O0^M00

ISO 90011:20000

CERTIFIED

www.RuggedCom.com

RuggedSwitch^TMRS940G

RuggedSwitch RS940G

8-Port Managed Gigabit Ethernet Switch

ROS Features

Cyber Security

A configurable "weighted fair queuing" algorithm

controls how frames are emptied from the

queues.

Cyber security is an urgent issue in many industries where

advanced automation and communications networks play

a crucial role in mission critical applications and where high

reliability is of paramount importance. Key ROS™ features that

address security issues at the local area network level include:

VLAN (IEEE 802.1q)

Virtual local area networks (VLAN) allow the segregation

of a physical network into separate logical networks with

independent broadcast domains. A measure of security is

provided since hosts can only access other hosts on the

same VLAN and traffic storms are isolated. ROS™ supports

802.1q tagged Ethernet frames and VLAN trunks. Port

based classification allows legacy devices to be assigned

to the correct VLAN. GVRP support is also provided to

simplify the configuration of the switches on the VLAN.

ꢀ.Passwords - Multi-level user passwords secures switch

against unauthorized configuration

ꢀ.SSH / SSL - Extends capability of password protection

to add encryption of passwords and data as they cross

the network

ꢀ.Enable / Disable Ports - Capability to disable ports so that

traffic can not pass

ꢀ.802.1q VLAN - Provides the ability to logically segregate

traffic between predefined ports on switches

ꢀ.MAC Based Port Security - The ability to secure ports on

a switch so only specific Devices / MAC addresses can

communicate via that port

ꢀ.802.1x Port Based Network Access Control - The ability

to lock down ports on a switch so that only authorized

clients can communicate via this port

Link Aggregation (802.3ad)

The link aggregation feature provides the ability to aggregate

several Ethernet ports into one logical link (port trunk) with

higher bandwidth. This provides an inexpensive way to set up

a high speed backbone to improve network bandwidth. This

feature is also known as "port trunking", "port bundling", "port

teaming", and "ethernet trunk".

ꢀ.Radius - Provides centralized password management

ꢀ.SNMPv3 - encrypted authentication and access security

IGMP Snooping

ROS uses IGMP snooping (Internet Group Management

Protocol v1&v2) to intelligently forward or filter multicast traffic

streams (e.g. MPEG video) to or from hosts on the network.

The ROS™ cyber security features are included to help

address the various industry specific security standards such

as NERC CIP, ISA S99, AGA 12, IEC 62443, ISO 17799:2005 This reduces the load on network trunks and prevents

and PCSRF SPP-ICS.

packets from being received on hosts that are not involved.

ROS™ has a very powerful implementation of

IGMP snooping that:

Enhanced Rapid Spanning Tree Protocol (eRSTP™)

RuggedCom eRSTP allows the creation of fault-tolerant ring

and mesh Ethernet networks that incorporate redundant links

that are 'pruned' to prevent loops. eRSTP yields worst-case

ꢀ.Can be enabled on a per VLAN basis.

ꢀ.Detects and filters all multicast streams regardless of

whether subscribers exist.

fault recovery of 5ms times the 'bridge diameter' and allows

rings of up to 80 switches. For example, a ring of ten

switches will have fault recovery times under 50ms. eRSTP

implements both STP and RSTP to ensure interoperability

with commercial switches unlike other proprietary 'ring'

solutions.

ꢀ.Supports "router-less" operation by supporting an

"active" mode.

ꢀ.Restores traffic streams immediately after an RSTP

topology change.

SNMP (Simple Network Management Protocol)

SNMP provides a standardized method for network

management stations the ability to interrogate devices from

different vendors. SNMP versions supported by ROS™ are

v1, v2c, and v3. SNMPv3 in particular provides security

features (such as authentication, privacy, and access control)

not present in earlier SNMP versions. ROS™ also supports

numerous standard MIBs (Management Information Base)

allowing for easy integration with any network management

system (NMS).

Quality of Service (IEEE 802.1p)

Some networking applications such as real-time control

or VoIP (voice over IP) require predictable arrival times for

Ethernet frames. Switches can introduce latency in times

of heavy network traffic due to the internal queues that buffer

frames and then transmit on a first come first serve basis.

ROS™ supports 'Class of Service' in accordance with IEEE

802.1p that allows time critical traffic to jump ahead to the

front of the queue thus minimizing latency and reducing jitter

to allow such demanding applications to operate correctly.

ROS™ allows priority classification by port, tags, MAC

address, and IP type of service (TOS).

eRSTP fault recovery times may be approximated as follows:

For 100 Mbps, fault recovery performance is <5ms/hop

For 1,000 Mbps, fault recovery performance is <5ms/hop + 20ms

www.RuggedCom.com

RuggedSwitch^TMRS940G

RuggedSwitch RS940G

8-Port Managed Gigabit Ethernet Switch

ROS Features

SNMP (Simple Network Management Protocol) (cont’d)

A feature of SNMP supported by ROS™ is the ability to

generate "traps" upon system events. A NMS can record

traps from multiple devices providing a powerful network

Port Configuration and Status

ROS™ allows individual ports to be 'hard' configured

for speed, duplex, auto-negotiation, flow control and more.

This allows proper connection with devices that do not

negotiate or have unusual settings. Detailed status of ports

with alarm and SNMP trap on link problems aid greatly in

system troubleshooting.

troubleshooting tool. RuggedVue is RuggedCom's NMS

that provides graphical visualization of the network and is

fully integrated with all RuggedCom products.

SNTP (Simple Network Time Protocol)

Port Statistics and RMON (Remote Monitoring)

ROS™ provides continuously updating statistics per port

that provide both ingress and egress packet and byte

counters as well as detailed error figures. Also provided

is full support for the RMON statistics, history, alarms, and

event groups. RMON allows for very sophisticated data

collection, analysis and detection of traffic patterns.

SNTP automatically synchronizes the internal clock of all

ROS™ devices on the network. This allows for correlation

of time stamped events for troubleshooting.

SCADA and Industrial Automation

ROS™ contains features that optimize network performance

and simplify switch management based on the unique

requirements found in SCADA and industrial automation

applications. Features such as Modbus TCP management for

retrieval of switch data using the ubiquitous Modbus protocol

and DHCP Option 82, a Rockwell Automation ODVA

requirement for IP address assignment based on the location

of the end device, provide capabilities not found in typical

"commercial" or "office grade" Ethernet switches.

Event Logging and Alarms

ROS™ records all significant events to a non-volatile

system log allowing forensic troubleshooting. Events

include link failure and recovery, unauthorized access,

broadcast storm detection, and self-test diagnostics

among others. Alarms provide a snapshot of recent

events that have yet to be acknowledged by the network

administrator. An external hardware relay is de-energized

during the presence of critical alarms allowing an

external controller to react if desired.

Port Based Network Access Control (802.1x)

ROS™ supports the IEEE 802.1x standard that defines

a mechanism for port-based network access control which

provides a means of authenticating and authorizing

devices attached to LAN ports.

HTML Web Browser and Telnet User Interfaces

ROS™ provides a simple, intuitive user interface for

configuration and monitoring via a standard graphical

web browser or via Telnet. All system parameters include

detailed on-line help to make setup a breeze. ROS™ ,

presents a common look and feel and standardized

configuration process allowing easy migration to other

RuggedCom managed products.

Port Rate Limiting

ROS™ supports configurable rate limiting per port to limit

unicast and multicast traffic. This can be essential to

managing precious network bandwidth for service providers.

It also provides edge security for denial of service

(DOS) attacks.

Configuration via ASCII Text File

Broadcast Storm Filtering

All configuration parameters are stored in an ASCII

formatted text file that can easily be transferred via TFTP

or Xmodem. The configuration file can be saved for

backup purposes and easily manipulated by a text editor.

The same text file can be downloaded to the switch at

a later date in order to re-configure or restore

a previous configuration.

Broadcast storms wreak havoc on a network and can cause

attached devices to malfunction. This could be disastrous on

a network with mission critical equipment. ROS™ limits this

by filtering broadcast frames with a user-defined threshold.

Loss of Link Management

Some intelligent electronic devices (IEDs) have dual fiber

optic ports with automatic failover to a backup port should the

primary fail. ROS™ ensures this mechanism works reliably

under all failure modes by appropriately disabling link signals

when required. ROS™ also flushes learned MAC addresses

to ensure the failover occurs quickly.

Command Line Interface (CLI)

A command line interface can be used in conjunction

with remote shell to automate data retrieval, configuration

updates, and firmware upgrades. A powerful SQL-like

capability allows expert users the ability to selectively

retrieve or manipulate any parameters the device

has to offer.

Port Mirroring

ROS™ can be configured to duplicate all traffic on one port

to a designated mirror port. When combined with a network

analyzer, this can be a powerful troubleshooting tool.

www.RuggedCom.com

RuggedSwitch^TMRS940G

RuggedSwitch RS940G

8-Port Managed Gigabit Ethernet Switch

EMI and Environmental Type Tests

IEC 61850-3 EMI TYPE TESTS

TEST

Description

Test Levels

Severity Levels

Enclosure Contact

Enclosure Air

Enclosure ports

+/- 8kV

+/- 15kV

20 V/m

IEC 61000-4-2

IEC 61000-4-3

ESD

Radiated RFI

Signal ports

+/- 4kV @ 2.5kHz

+/- 4kV

D.C. Power ports

A.C. Power ports

IEC 61000-4-4

Burst (Fast Transient)

+/- 4kV

Earth ground ports

Signal ports

D.C. Power ports

A.C. Power ports

+/- 4kV line-to-earth, +/- 2kV line-to-line

+/- 2kV line-to-earth, +/- 1kV line-to-line

+/- 4kV line-to-earth, +/- 2kV line-to-line

IEC 61000-4-5

IEC 61000-4-6

Surge

Signal ports

10V

D.C Power ports

A.C. Power ports

Induced (Conducted) RFI

10V

Earth ground ports

Enclosure ports

IEC 61000-4-8

IEC 61000-4-29

Magnetic Field

40 A/m continuous, 1000 A/m for 1 s

30% for 0.1s, 60% for 0.1s, 100% for 0.05s

N/A

D.C. Power ports

Voltage Dips & Interrupts

30% for 1 period, 60% for 50 periods

N/A

A.C. Power ports

IEC 61000-4-11

IEC 61000-4-12

100% for 5 periods, 100% for 50 periods

2.5kV common, 1kV diff. mode@1MHz

30V Continuous, 300V for 1s

10%

2kVac (Fail-Safe Relay output)

2kVac

5kV (Fail-Safe Relay output)

5kV

Signal ports

D.C. Power ports

A.C. Power ports

Signal ports

D.C. Power ports

Signal ports

D.C. Power ports

A.C. Power ports

Signal ports

D.C. Power ports

A.C. Power ports

Damped Oscillatory

IEC 61000-4-16

IEC 61000-4-17

Mains Frequency Voltage

Ripple on D.C. Power Supply

N/A

IEC 60255-5

Dielectric Strength

H.V. Impulse

IEEE 1613 (C37.90.x) EMI IMMUNITY TYPE TESTS

Test

Description

Test Levels

Severity Levels

Enclosure Contact

Enclosure Air

Enclosure ports

Signal ports

D.C. Power ports

A.C. Power ports

Earth ground ports3

Signal ports

D.C. Power ports

A.C. Power ports

Signal ports

D.C. Power ports

A.C. Power ports

Signal ports

D.C. Power ports

A.C. Power ports

+/- 8kV

+/- 15kV

35 V/m

+/- 4kV @ 2.5kHz

+/- 4kV

N/A

IEEE C37.90.3

IEEE C37.90.2

ESD

Radiated RFI

IEEE C37.90.1

Fast Transient

Oscillatory

+/- 4kV

2.5kV common mode @1MHz

2.5kV common, 1kV diff. mode@1MHz

5kV (Fail-Safe Relay output)

5kV

2kVac

IEEE C37.90

H.V. Impulse

Dielectric Strength

Environmental Type Tests

Description

Test

IEC 60068-2-1

IEC 60068-2-2

Test Levels

-40°C, 16 Hours

+85°C, 16 Hours

Severity Levels

Cold Temperature

Dry Heat

Test Ad

Test Bd

N/A

95% (non-condensing), 55°C , 6

cycles

IEC 60068-2-30

Humidity (Damp Heat, Cyclic)

Test Db

N/A

IEC 60255-21-1

IEC 60255-21-2

Vibration

Shock

Tests Fc

Tests Ea

2g @ (10 - 150) Hz

30g @ 11mS

Class 2

Notes:

1. Only applicable to functional earth connections separated from the safety earth connection.

2. Class 2 refers to "Measuring relays and protection equipment for which a very high security margin is required or where the vibration levels are very high,

( e.g. shipboard application and for severe transportation conditions")

www.RuggedCom.com

RuggedSwitch^TMRS940G

RuggedSwitch RS940G

8-Port Managed Gigabit Ethernet Switch

Technical Specifications

EMI Immunity and Environmental Compliance

ꢀ.IEC 61000-6-2 Industrial (Generic)

ꢀ.IEC 61800-3 Industrial (Variable Speed Drive Systems)

ꢀ.IEC 61850-3 Electric Utility Substations

ꢀ.IEEE 1613 Electric Utility Substations

ꢀ.NEMA TS 2 Traffic Control Equipment (pending)

Power Supply

ꢀ.Power Consumption: 18W Max

ꢀ.24VDC: 9-36 VDC, 0.4A

ꢀ.48VDC: 36-72 VDC, 0.2A

ꢀ.HI Voltage AC/DC: 88-300VDC or 85-264VAC

Critical Alarm Relay

ꢀ.Form-C failsafe contact relay: 1A@30VDC

IEEE Compliance

ꢀ.802.3-10BaseT

ꢀ.802.3u-100BaseTX, 100BaseFX

ꢀ.802.3x-Flow Control

Physical

ꢀ.Height: 7.4"

ꢀ.802.3z-1000BaseLX

ꢀ.Width: 2.6"

ꢀ.Depth: 5.0"

ꢀ.Weight: 2.7lbs

ꢀ.Ingress Protection: IP40 (1mm objects)

ꢀ.Enclosure: 20 AWG galvanized steel enclosure

ꢀ.Mounting: DIN rail or panel mounted

ꢀ.802.3ab-1000BaseTX

ꢀ.802.3ad-Link Aggregation

ꢀ.802.1d-MAC Bridges

ꢀ.802.1d-Spanning Tree Protocol

ꢀ.802.1p-Class of Service

ꢀ.802.1q-VLAN Tagging

ꢀ.802.1w-Rapid Spanning Tree Protocol

ꢀ.802.1x-Port Based Network Access Control

Switch Properties

ꢀ.Switching method: Store & Forward

ꢀ.Switching latency: 7 us

ꢀ.Switching bandwidth: 5.6Gbps

ꢀ.MAC addresses: 8192

ꢀ.MAC address table size: 32kbytes

ꢀ.Priority Queues: 4

ꢀ.Frame buffer memory: 2 Mbit

ꢀ.VLANs: 4094

ꢀ.IGMP multicast groups: 256

ꢀ.Port rate limiting: 128kbps, 256, 512, 4, 8Mbps

ꢀ.No head of line blocking

IETF RFC Compliance

ꢀ.RFC768-UDP

ꢀ.RFC783-TFTP

ꢀ.RFC791-IP

ꢀ.RFC792-ICMP

ꢀ.RFC793-TCP

ꢀ.RFC826-ARP

ꢀ.RFC854-Telnet

ꢀ.RFC894-IP over Ethernet

ꢀ.RFC1112-IGMP v1

ꢀ.RFC1519-CIDR

ꢀ.RFC1541-DHCP (client)

ꢀ.RFC2030-SNTP

ꢀ.RFC2068-HTTP

ꢀ.RFC2236-IGMP v2

ꢀ.RFC2284-EAP

ꢀ.RFC2475-Differentiated Services

ꢀ.RFC2865-Radius

ꢀ.RFC3414-SNMPv3-VSM

ꢀ.RFC3415-SNMPv3-VACM

Approvals

ꢀ.Hazardous Locations: Class 1, Division 2

ꢀ.ISO: Designed and manufactured using a ISO9001: 2000

certified quality program

ꢀ.CE Marking

ꢀ.Emissions: FCC Part 15 (Class A),

EN55022 (CISPR22 Class A)

ꢀ.Safety: cCSAus (Compliant with CSA C22.2 No. 60950, UL

60950, EN60950)

ꢀ.Laser Eye Safety (FDA/CDRH): Complies with 21

CFR Chapter1, Subchapter J.

IETF SNMP MIBS

ꢀ.RFC1493-BRIDGE-MIB

ꢀ.RFC1907-SNMPv2-MIB

ꢀ.RFC2012-TCP-MIB

Warranty

ꢀ.5 Years - Applicable to design and manufacturing