Magnum DX940 - Belden Solutions

Magnum DX940
Configurable Industrial Router
• Four network interface types
in one industrial unit:
- Ethernet copper or fiber,
100Mb or Gb
- T1 /E1/DDS WAN
- 3G Cellular wireless
- Serial RS232/RS485
• Hardened to substation EMI/
ESD specs and -40° to +85° C
with no fans
• Modbus TCP and Modbus
ASCII/RTU internetworking
• Network cyber security and
management security including IPsec, VPN, SSL and
• Panel, DIN-Rail or rack mounting with integral CSU/DSU
and power supply
The versatile Magnum™ DX940 Configurable Industrial Router combines WAN
access, IP routing, Ethernet switching, Serial-to-IP terminal services and advanced
security features in a small-footprint industrial package suitable for small and midsized remote sites such as electrical substations, renewable power generation facilities and transportation control pedestals. With 3G wireless capability, as well as
configurable port options for 10/100 and 1Gb copper and fiber media, the DX940
secure access even where wireline is too difficult or too expensive to deploy.
Magnum™ MNS-DX – Managed Network Software (MNS) for Magnum DX
family of routers provides the functionality needed by industrial routers. A full range
of routing software along with security features enables the Magnum DX940 router
to perform efficiently in harsh industrial environments. A flexible integrated protocol analyzer provides remote trouble shooting. Advanced statistics provide detailed
traffic analysis.
The configurability of Magnum DX940 extends to MNS-DX software features
as well. A licensed software key unlocks additional features for extra security and
advanced routing Extra security features such as IPSec/VPN, firewall, RADIUS,
syslog and other security capabilities can be added to MNS-DX via MNS-DX-SECURE, which also provides IP firewall features including address/port inspection/
filtering; VPN connectivity over IPsec with strong 3DES and AES encryption and
both shared key (PSK) and X.509 certificates. VPN’s comply to various IPSec/VPN
standards and have proven interoperability with other industry standard VPN devices. Cyber security capabilities cover both electronic perimeter protection for remote sites and management security for the DX940. Advanced statistics and event
recording are available with downloadable local logs, SNMP MIBs and traps, and
syslog remote logging. Advanced routing capabilities such as OSPF and BGP are
added to MNS-DX using the MNS-DX-ADVAR.
Adding Serial ports enables Serial-IP terminal services via RS232, RS485 and
RS422 serial interfaces as well as protocols such as DNP, telnet and Modbus, including Modbus-ASCII/RTU to Modbus-TCP interworking. With MNS-DX-SECURE, serial
devices can tranmit data securely using Serial-SSL using well proven, robust encryption methods.
The DX940 is purpose built for extremely harsh environments such as power
utility substations. The DX940 meets IEEE 1613 and IEC 61850-3 specifications for
EMI/ESD protection and operates at -40 to +85° C without open vent holes or fans.
Hard metal packaging is standard and conformal coating for protection against
moisture and corrosion is also available.
The DX940 is 9" by 9.5" and one 1.75" rack unit deep, with mounting options
for panels, DIN rails or 19" or 23" or ETSI racks. Integration of wide-input autoranging power supplies and of telco-compatible CSU/DSU functionality into the
base DX940 product further reduces space requirements & local wiring complexity.
Four 10/100 Ethernet ports Four 10/100 Ethernet ports configured as auto
negotiating RJ45 copper ports
Four 100M SFP Ethernet ports SFP fiber modules available as 100Mb fiber
(multi-mode and single-mode.) Single-mode up to 40Km. Multi-mode up to
Two Gigabit Ethernet ports
Two 10/100/1000 Copper ports or two Gigabit SFP sockets for Gigabit fiber via
Gb SFP’s
Four Serial DB9 ports RS232/RS485 software selectable DB9 interface. Serial
data rate from 300 bps to 230.4 kbps. Data length - 1-32 bits.
WAN Ports DDS: 56/64 kbps OR T1/E1: 1.544 Mbps / 2.048 Mbps G.703; Full
rate and fractional (N*56/64kbps); Integral CSU/DSU
Cellular Wireless Data Access 3G EVDO REV A, EVDO, CDMA,; Frequency –
1900MHz/800 MHz; supports antenna diversity
IEEE 802.3z, 802.3ab, 802.1p: 100BASE-TX, -FX, 1000BASE-SX, -LX,
IEEE 802.3u: Auto-negotiation on TP
IEEE 802.3x, 802.1p: flow control and prioritization
IEEE 802.1Q: VLANs, maximum 32 VLANs
IEEE 8021.1d, 802.1w: Spanning Tree, Rapid Spanning Tree including RSTP
2004 extensions providing sub-second hop on rings
IEEE 802.1p: DiffServ, traffic prioritization for routed IP flows/ports
Async to TCP/IP – including Modbus gateway for connectivity to serial Modbus
devices and to other Modbus Ethernet devices; TCP/IP to serial terminal
server, reverse terminal server; Serial Multipoint and Multimaster Topologies;
PPP with authentication
See MNS-DX data sheet for details on MNS-DX-DECURE and MNS-DX-ADVAR
licensed software
Ease of use: Web-based Graphical User Interface (GUI) or CLI access remote
SSH or TELNET connection
Powerful built-in protocol analyzer to assist with trouble shooting
Other: Comprehensive statistics, SNMP MIB II and SNMP Traps, Routing
Information, DHCP, ARP and other tables.
Magnum DX940 Configurable Industrial Router
Alarm Port: Relay contacts for alarms, Form C, two NC/NO, software controllable
IEC 60068 Op. Temp. per “Type Test” -40° to 185°F (-40° to 85°C)
UL 60950 “Component Parts” temperature rating: 140°F (60°C)
Storage: -40° to 185°F (-40°to 85°C),
Ambient relative humidity: 5% to 95% (non-condensing)
High Voltage (H): 90-250 V AC or DC, 50-60Hz, 0.3A, 27 W
Low Voltage DC (L): 24-48 V DC, 1.3A, 31 W
Dimensions: 9.5" W x 9.0" D x 1.75" H (24.13 cm x 22.86cm x 4.45 cm);
Optional 19 inch Rack Mount, 1 RU
Weight: 5 lbs (2.3 kg)
Mounting: 19” ETSI and 23” Rack, Panel Mount and DIN-Rail
Safety: UL 60950-1, cUL, EN60950–1, CSA C22.2, Emissions meet FCC Part
15, Class A. IEEE 1613 Class 2 Environmental Std., IEC 61850-3, IEC 61000-65 for Electric Power Substations, NEMA TS-2 for traffic control
Immunity: EN55024, EN61000-6-2, EN61000-4-2 (ESD), EN61000-4-3 (RF),
EN61000-4-4 (EFT), EN61000-4-5 (SURGE) EN61000-4-6 (CRF), EN61000-410 (MAG FIELD), EN61000-4-11 (VDI), EN61000-4-12 (OSCILLATION),
EN61000-4-16 (CCM), EN61000-4-17 (RIPPLE), EN61000-4-29 (VDI)
Three years
Made in USA
©2010 GarrettCom, Inc. Printed in United States of America Doc No. DX940 03/10
GarrettCom, Inc. reserves the right to change specifications, performance characteristics and/or model
offerings without notice. GarrettCom is a registered trademark of GarrettCom Inc. Magnum, Dymec,
DynaStar, S-Ring, and Link-Loss-Learn are trademarks of GarrettCom, Inc. NEBS is a registered trademark
of Telcordia Technologies. UL is a registered trademark of Underwriters Labs.
GarrettCom, Inc.
47823 Westinghouse Drive
Fremont, CA 94539
PH: (510) 438-9071
FAX: (510) 438-9072
Magnum MNS-DX
• Graphical User Interface (GUI) and CLI
• Cyber Security features: firewall, IPSec,
VPN, authentication
and encryption
• Redundancy features:
routing, RSTP, VRRP,
• Built-in protocol analyzer for easy trouble
• Supports all Magnum
DX platforms and configurations
Managed Networks Software
for Magnum DX Routers
Magnum™ Managed Network Software for Magnum DX family of routers (MNS-DX) provides the
functionality needed by industrial routers. A full range of routing software along with security and
redundancy features enable the Magnum DX routers to perform efficiently in harsh industrial environments.
MNS-DX includes features needed to connect a variety of different devices and interface types to a
routed network.
MNS-DX includes capabilities such as
• Ethernet ports can be configured as switched ports or routed ports or combinations
• Serial ports can be software configurable as RS232 or RS485 ports
• WAN configuration provides the necessary menus to configure a T1/E1 or DDS circuits
• Cellular Wireless Data Access over 3G EVDO cellular networks
• RSTP supports RSTP-2004 (802.1w) & STP (802.1d), provides resilient Ethernet networks
• Routing features support RIP and RIP-II for routed ports and VLANs. OSPF and BGP is in MNS-DX
• VRRP – Virtual Router Redundancy Protocol provides router redundancy for Ethernet LAN devices
• DHCP Server and Client – provides DHCP services or queries for IP addresses
• Remote Access for secure administration is via SSH and optionally via telnet
• VLANs (802.1q) supports tagged based VLANs as access VLANs or trunk ports. Trunk ports allow
filtering of unauthorized VLANs
• SNMP supports v1, v2 and v3 – for managing the device using Network Management Systems
• Event log locally stored provides a log of the most recent events. Syslog is in MNS-DX-SECURE
• SNTP provides time synchronization with NTP/SNTP servers
• PPP allows an asynchronous dial in backup connection over an analog modem or framing for DDS
• Modbus interoperability over Ethernet or serial ports (RS232 or RS485). Modbus Gateway (MODBUS/
TCP) and Modbus-ASCII/RTU interworking, DNP and serial-IP raw mode for serial ports
• QoS prioritzation to traffic using QoS and DiffServ tags across a network, and across a WAN port
• Maintenance: MNS-DX stores different configuration files locally or on a remote server which allows
falling back to a different configuration easily
• Trouble shooting is made easy with a built in protocol analyzer
MNS-DX-SECURE adds extra security features such as IPSec, VPN, firewall, encryption and authentication
needed for industrial cyber security. Extra Security features are unlocked via a licensed software key. IP
firewall includes address/port inspection/filtering. VPN connectivity over IPSec with strong industry standard
encryption with shared keys (PSK) and X.509 certificates provide robust secure access. VPN’s comply to
IPSec standards and have proven interoperability with industry standard VPN devices. Management
security includes encrypted interfaces multilevel userIDs with strong-form passwords and authentication
via RADIUS. Serial data is encrypted using Serial SSL capabilities included in MNS-DX-SECURE.
MNS-DX-SECURE features include
• VPN and Key Management - proven interoperability and conformance to industry standards
• Firewall provides stateful firewall rules for traffic flows or for IP streams or ports
• RADIUS provides management authentication via a RADIUS Server
• Login Banner configurable banner maessage before login to deter unauthorized users
• Secure Serial SSL connectivity allows serial devices to encrypt data
• Syslog enables logs to be collected by syslog servers for security analysis
• SSH Port Forwarding allows secure access to less secure devices on the network
• Security certificate management allows a user to manage signed certificates
MNS-DX-ADVAR adds advanced routing options such as OSPF, BGP. Advanced Routing features
are unlocked via a licensed software key.
MNS-DX provides the reliability, security and robustness needed in industrial routers. To
complement the Magnum DX substation-hardened hardware capabilities, MNS-DX provides
industrial strength software capbilities for reliable, secure industrial networks.
Managed Network Software
for Magnum DX Routers
Ease-of-use features: GUI operations and simple to use GUI configuration options, e.g. PPP (Point to Point Protocol): PPP allows a modem to initiate a connection to
User accounts, Export configurations, load new image, time synchronization etc. The ease remote networks using a dial up line. PPP over WAN provides framing services for
of use features include wizards
DDS circuits. PPP compliant to RFC 1334 and RFC 1661
Serial Ports: Async to TCP/IP – including Modbus, terminal services and PPP with authentication
WAN Ports: MNS-DX supports the necessary WAN configurations options for configuring MNS-DX-SECURE – Extra Security – licensed software features for MNS-DX or
DDS and T1/E1
Cellular: Provides the necessary configuration for Wireless Data Access over 3G EVDO MNS-DX-SECURE includes all the capabilities of MNS-DX, plus
cellular networks
VPN: VPN provides a secure connection to another remote location over a public
IP Routing: RIP, RIP II as per RFC 1058, RFC 1388, Sec 3.3 RFC 1723, RFC 2453
network such as the Internet. Magnum DX router IPSec VPN has proven interoperability
CLI (Command Line Interface): CLI for the Magnum DX’s console port, offers a rich set of with other VPN devices. VPN implementation as per RFC 2401- 2410, RFC 4302, RFC
commands, including Tab Key Help feature, through a VT100 character terminal or equivalent 4303, RFC 2451, RFC 3602, RFC 4868. Encryption methods include Diffie-Hellman
Groups 1,2,5,14 crypto; DHE with PFS; DES; 3DES; Blowfish-CBC; AES-128; AESVRRP (Virtual Router Redundancy Protocol): VRRP defines a virtual router as the default 192 and AES-256. Authentication mechanisms include HMAC-MD5-128, HMACrouter for a LAN segments. MNS-DX supports VRRP as per RFC 3768
SHA1-160, MD5, SHA1, SHA-224, SHA-256, SHA-384, SHA-512. Multiple tunnels
NAT/PAT: NAT and PAT allow different devices to communicate using a single or multiple IP can be setup for multiple source-destination pairs. VPN tunnels conform to the IPSec
addresses. NAT/PAT as per RFC 1631 and RFC 2663
DHCP Server: DHCP Server manager IP address space for devices requesting IP address RADIUS: Provides authentication to Magnum DX router via a RADIUS server.
using DHCP. DHCP server as per RFC 2131
RADIUS conforms to RFC 2865 and RFC 2866
DHCP Client: DHCP client makes a request for IP address and other IP information from Security Certificates: allows management of security certificates
DHCP servers present on the network. DHCP client as per RFC 2131
Key Management: Internet Key Exchange (IKE) and Pre-shared Keys (PSK) conform
STP (Spanning Tree Protocol), IEEE 802.1d: Provides interoperable support for redundant to RFC 2409
paths and connections while preventing loops in the network
Serial SSL connectivity: Serial Port SSL VPN provide secure communications for
RSTP (Rapid Spanning Tree Protocol), IEEE 802.1w: RSTP includes RSTP-2004. Similar to devices connected to serial ports.
STP(IEEE 802.1d) but faster in changing interconnection direction. Used in conjunction with SSH port forwarding for secure access to other less secure devices using SSH
Magnum 6K switches for redundant rings and meshes of managed switches and routers. tunnels
Industry standard compliant for interoperability.
Syslog: Syslog provides log centralization using the Syslog protocol. Syslog is conformant
VLANs, IEEE 802.1q: Users may configure VLANs for traffic segmentation. MNS-DX to RFC 3164
provides capabilities for the DHCP server to assign IP addresses to segments defined by
VLANs. Physical ports can be defined as access ports or trunk ports. Trunk ports can filter
out unauthorized VLANs
SNTP (Simple Network Time Protocol): Automatically synchronizes the Magnum DX’s
MNS-DX-ADVAR – Advanced Routing – licensed software features for MNS-DX
internal clocks with other devices on the LAN, handling time-zones worldwide as well as MNS-DX-ADVAR includes all the capabilities of MNS-DX plus
BGP (Border Gateway Protocol): BGP is a core routing protocol commonly used by
time changes for Daylight Savings. SNTP is per RFC 1769 and RFC 2030
Event Log: System events are recorded in a log locally, enabling the system manager to large networks to manage routing and other polices based on IP blocks. BGP as per
RFC 4271
track and analyze what has happened within the Magnum DX system operations
Modbus: MNS-DX implements the Modbus specifications for connecting Modbus devices – OSPF (Open Shortest Path First): OSPF is a dynamic routing protocol used by
whether they are over a serial connection on Magnum DX Serial ports or other Modbus routers and provides fast recovery. OSPF as per RFC 2328
devices on Ethernet. MNS-DX implements the Modbus gateway functionality
SNMP (Simple Network Management Protocol) v1, v2, v3: Provides basic network
management by using agent software in the Magnum 6K that collects and saves pre- ©2010 GarrettCom, Inc. Printed in United States of America Doc No. MNS-DX 03/10
GarrettCom, Inc. reserves the right to change specifications, performance characteristics and/or
defined data, and responds to queries and commands from a network manager station. v1 model offerings without notice. GarrettCom is a registered trademark of GarrettCom Inc.
is implemented per RFC1155, RFC1157, RFC1212, RFC1213 (MIB II), Bridge MIB RFC1493, Magnum, Dymec, DynaStar, S-Ring, and Link-Loss-Learn are trademarks of GarrettCom, Inc.
NEBS is a registered trademark of Telcordia Technologies. UL is a registered trademark of Un-
and RFC1757 plus security enhancements. v2 is per RFC 1901-08. v3 provides encrypted derwriters Labs.
authentication & access security and is per RFC 2271-75. All are supported by TCP/IP and
Ordering Information
MNS-DX – Included with all Magnum DX routers
MNS-DX-SECURE – includes all features of MNS-DX and adds extra security features
MNS-DX-ADVAR – includes all features of MNS-DX and adds advanced routing features
MNS-DX-MAINT – Annual maintenance for software updates for one Magnum-DX router
for one year. Includes MNS-DX, MNS-DX-SECURE and MNS-DX-ADVAR as applicable
GarrettCom, Inc.
47823 Westinghouse Drive
Fremont, CA 94539
PH: (510) 438-9071
FAX: (510) 438-9072
Download PDF