Moxa EDR-G9010, 8GbE Copper & 2GbE SFP Multiport Industrial Firewall Router
The Moxa EDR-G9010 is a multiport industrial firewall router designed for industrial Ethernet networks that need secure routing, firewall protection, VPN connectivity, and network redundancy. It provides 8 x 10/100/1000BaseT(X) RJ45 ports and 2 x 1000/2500BaseSFP ports, giving industrial systems flexible copper and fiber connectivity.
The router supports advanced routing and network management features including OSPF, RIPv1/v2, static routing, VRRP, VLAN, RSTP, STP, Turbo Ring v2, and Turbo Chain. It also supports up to 4K routing rules, 400K concurrent connections, and 20K connections per second, helping manage demanding industrial network traffic.
The Moxa EDR-G9010 provides router and transparent bridge firewall functions with filtering for DDoS, Ethernet protocols, ICMP, IP addresses, MAC addresses, and ports. Deep Packet Inspection supports industrial protocols such as DNP3, EtherNet/IP, IEC 60870-5-104, IEC 61850 MMS, Modbus TCP, Modbus UDP, OPC UA, Siemens S7 Comm., and other supported protocols. IPS functionality is also available with an additional license.
For secure remote connectivity, the industrial firewall router supports IPsec VPN with up to 250 concurrent VPN tunnels, AES encryption, RSA authentication, X.509 v3 certificates, L2TP, and PPTP. Its IPsec VPN throughput reaches up to 100K packets per second / 800 Mbps based on RFC 2544, while firewall throughput reaches up to 350K packets per second / 2 Gbps.
The Moxa EDR-G9010 is built for industrial and demanding environments with a metal housing, IP40 protection, redundant dual DC power inputs, reverse polarity protection, DIN-rail mounting, and wall mounting with an optional kit. Its DNV-certified design supports an operating temperature of -25 to 70°C, making it suitable for industrial automation, secure Ethernet networks, critical infrastructure, and applications requiring reliable network protection and connectivity.
Key Features
-
8 x 10/100/1000BaseT(X) RJ45 ports and 2 x 1000/2500BaseSFP ports
-
Industrial firewall with router and transparent bridge firewall functions
-
Max. 350K packets per second / 2 Gbps firewall throughput
-
Up to 250 concurrent IPsec VPN tunnels
-
Supports OSPF, RIPv1/v2, Static Route, and VRRP
-
Deep Packet Inspection for multiple industrial protocols
-
Supports RSTP, STP, Turbo Ring v2, and Turbo Chain
-
DNV-certified DIN-rail mounting and -25 to 70°C operating temperature
Specifications
| Input/Output Interface |
|
| Alarm Contact Channels |
Resistive load: 1 A @ 24 VDC |
| Buttons |
Reset button |
| Digital Input Channels |
+13 to +30 V for state 1, -30 to +3 V for state 0, Max. input current: 8 mA |
| Ethernet Interface |
|
| 10/100/1000BaseT(X) Ports (RJ45 connector) |
8 |
| 1000/2500BaseSFP Ports |
2 |
| DMZ |
User-configurable DMZ ports |
| Ethernet Software Features |
|
| Broadcast Forwarding |
IP directed broadcast, broadcast forwarding |
| Redundancy Protocols |
RSTP, STP, Turbo Ring v2, Turbo Chain |
| Routing Throughput |
Max. 350K packets per second / 2 Gbps (based on RFC 2544) |
| Routing Table |
Max. 4K routing rules |
| Concurrent Connections |
Max. 400K (based on RFC 3511) |
| Connections Per Second |
Max. 20K (based on RFC 3511) |
| Routing Redundancy |
VRRP |
| Security |
Secure Boot, IPsec, L2TP (server), RADIUS, Trust access control, TACACS+, SCP, SFTP, NTP authentication, Syslog Authentication |
| Time Management |
NTP Server/Client, SNTP |
| Unicast Routing |
OSPF, RIPV1/V2, Static Route |
| Multicast Routing |
Static Route |
| Filter |
IGMP v1/v2/v3 |
| Switch Properties |
|
| VLAN ID Range |
VID 1 to 4094 |
| IGMP Groups |
1000 |
| Max. No. of VLANs |
32 |
| LED Interface |
|
| LED Indicators |
PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB |
| DoS and DDoS Protection |
|
| Technology |
ARP-Flood, FIN Scan, ICMP Flood, TCP Sessions Without SYN, NMAP-ID Scan,
NMAP-Xmas Scan, Null Scan, SYN/FIN Scan, SYN/RST Scan, SYN-Flood, Xmas Scan
|
| Firewall |
|
| Filter |
DDoS, Ethernet protocols, ICMP, IP address, MAC address, Ports |
| Stateful Inspection |
Router firewall, Transparent (bridge) firewall |
| Intrusion Prevention System |
Requires an additional license. |
| Throughput |
Firewall: Max. 350K packets per second / 2 Gbps (based on RFC 2544), IPS: Max.
200K packets per second / 2 Gbps (based on RFC 2544)
|
| IPsec VPN |
|
| Authentication |
MD5 and SHA (SHA-512), RSA (key size: 1024-bit, 2048-bit), X.509 v3 certificate |
| Concurrent VPN Tunnels |
Max. 250 IPsec VPN tunnels |
| Encryption |
DES, 3DES, AES-128, AES-192, AES-256, AES-256-GCM |
| Protocols |
IPsec, L2TP (server), PPTP (client) |
| Throughput |
Conditions: AES-256, SHA-256, Max. 100K packets per second / 800 Mbps
(based on RFC 2544)
|
| NAT |
|
| Features |
1-to-1, N-to-1, NAT loopback, Port forwarding |
| Real-Time Firewall / VPN Event Log |
|
| Event Type |
Firewall event, VPN event |
| Media |
Local storage, SNMP Trap, Syslog server |
| Serial Interface |
|
| Console Port |
RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1) |
| Connector |
USB Type-C |
| Power Parameters |
|
| Connector |
Removable terminal block |
| Input Voltage |
12/24/48 VDC (DNV-certified for 24 VDC), Redundant dual inputs |
| Operating Voltage |
9.6 to 60 VDC |
| Input Current |
0.70 A @ 24 VDC, 0.35 A @ 48 VDC, 1.51 A @ 12 VDC |
| Reverse Polarity Protection |
Supported |
| Physical Characteristics |
|
| Housing |
Metal |
| IP Rating |
IP40 |
| Dimensions |
58 x 135 x 105 mm (2.28 x 5.31 x 4.13 in) |
| Weight |
1030 g (2.27 lb) |
| Installation |
DIN-rail mounting (DNV-certified), Wall mounting (with optional kit) |
| Environmental Limits |
|
| Operating Temperature |
DNV-certified for -25 to 70°C (-13 to 158°F) |
| Storage Temperature (package included) |
-40 to 85°C (-40 to 185°F) |
| Ambient Relative Humidity |
5 to 95% (non-condensing) |
