Hirschmann EAGLE One Industrial Ethernet Firewall Installation Manual

EAGLE One Product Overview

1 Product positioning

Fanless DIN rail industrial security gateway, integrated status detection firewall+IPSec VPN+industrial routing with three core capabilities; Specially isolate the production intranet (secure area) from the external network/office network to prevent illegal cross regional access. Supports three working modes: transparent bridge, routing, and PPPoE, suitable for production line isolation, factory external network docking, and remote device encryption access scenarios.

2 Model coding rules (complete segmented definition)

EAGLEONE: Product Series;

0200: 2 100Mbps electrical/optical ports, no Gigabit ports;

Port 1 (internal network)/Port 2 (external network): T1 (RJ45)/M2 (multi-mode DSC)/S2 (single-mode DSC);

Temperature range: S (0-60 ℃ standard)/T/E (-40~70 ℃ three proof wide temperature);

DD: Dual redundant DC power supply (9.6~60VDC);

Certification codes: distinguish ATEX, railway EN50121, power IEC61850, ship DNV, North American explosion-proof;

Software package: Entry basic firmware, supports firewall VPN、 Routing redundancy.

3. Overall hardware layout (unified front panel)

6-pin power supply/FAULT integrated terminal: two redundant DC inputs+passive fault relay;

2-pin DI digital input terminal: external 24V sensor for collecting external alarms;

2 independent 100Mbps Ethernet ports: Port 1 internal network, Port 2 external network, optional RJ45/multimode/single-mode DSC fiber;

V. 24 RJ11 local serial port (CLI debugging);

ACA21 USB interface: configure USB flash drive, read/write configuration, upgrade firmware, export logs;

Complete set of status LED indicator lights; Independent grounding screw, DIN rail buckle, wall mounted reserved hole.

Four core software functional modules

Firewall function

State detection firewall, transparent firewall; Support entry and exit rules, one-to-one NAT, port forwarding, IP spoofing prevention, remote management of access restrictions, and modem access control.

VPN function

IPSec protocol, supports multi-point VPN; Encryption algorithms AES128/192/256, 3DES/DES; Certified pre shared key/certificate, compatible with MD5/SHA hashing and NAT traversal.

Three working modes

Transparent mode (factory default): Layer 2 bridge, no need to partition subnets, active access from the internal network to the external network is allowed, and external networks cannot actively invade the internal network;

Routing mode: three-layer gateway, cross subnet forwarding, supporting redundant backup routing;

PPPoE mode: the external network interface connects to DSL broadband and adapts to Internet access scenarios.

5 Multi channel equipment management

Local: V.24 serial port, ACA21 USB configuration disk; Remote: Web HTTPS, SSH, Telnet; Batch operation and maintenance: Industrial HiVision and HiDiscovery automatically search for IP addresses.

Complete definition of LED indicator lights

Global status light of the whole machine

Power supply: yellow=single channel power supply, green=dual channel normal, off=no power supply;

Status running: Green=machine ready, red=FAULT relay triggering fault;

RR routing redundancy: Off=not configured, green=primary device, yellow flashing=backup device/primary backup communication interruption;

ACA: Green=USB drive connected, flashing read/write, yellow=USB drive failure;

VPN: Always on=at least one IPSec tunnel is functioning properly, off=no online VPN.

Port indicator light (LS link/DA data)

LS green light constantly on=link connected, flashing for 3 cycles=port closed; DA yellow light flashing=transmitting and receiving traffic, no flashing, no data.

Complete installation, wiring, and power on operation process

1. Open box verification

Check the host, power terminals, DI terminals, safety instructions, and inspect for any damage caused by transportation bumps.

Two installation methods for equipment

DIN rail: 35mm standard rail, snap on vertical fixation, with ventilation gaps reserved around;

Wall mounted: Optional wall mounted bracket, vertically fixed to a flat wall surface;

Connect the protective grounding wire before connecting other cables throughout the entire process.

3 Terminal Wiring Specification

1) 6-pin power supply+FAULT terminal

Two independent redundant DC inputs (12~48V nominal, 9.6~60V limit), the equipment automatically selects high voltage power supply; A single power supply will trigger a FAULT alarm, which can be blocked in the background; Passive contacts of relays report power loss, port disconnection, overheating, USB drive unplugged, and routing faults.

2) 2-pin DI digital input

Standard 24V industrial input, -0.3~5V low level, 11~30V high level, external sensor linkage equipment alarm.

4 Data cable connections

RJ45 twisted pair: Cat5e up to 100m, supports automatic negotiation/automatic line sequence;

DSC fiber: multimode up to 5km, single-mode up to 30km, must be docked with the same type of optical port;

EMC cabling: Separation of strong and weak electricity, avoiding long-distance parallelism, crossing 90 ° to reduce interference, and mandatory shielding of industrial/ship network cables.

5. Power on self-test

Connect the power and start automatically. The whole machine self checks for about 60 seconds. After the LED flashes in full sequence, it enters the ready state.

Factory default basic configuration

IP: Static 192.168.1.1/24 (DHCP is disabled by default);

Account: admin (private, read-write); User (public, read-only), it is recommended to change the high-strength password for the first login;

V. 24 serial port: 9600 baud, 8N1;

Port: Automatic negotiation of electrical ports, default full duplex for fiber optic cables;

Working mode: Factory transparent firewall mode;

Alarm: Port disconnection monitoring is turned off by default.

Equipment disassembly steps

Power off the entire machine, unplug the network cable and fiber optic cable USB、 All terminals;

Disconnect the ground wire first, and then remove other cables;

Unlock the DIN buckle with a screwdriver and remove the entire machine upwards;

All optical interfaces should be covered with dust caps.

Maintenance and temperature monitoring

The vulnerable parts are only FAULT relays, and the contact resistance is regularly checked in high-frequency on-off scenarios;

Regularly clean the dust in the ventilation duct to prevent dust accumulation and overheating;

Web/CLI can read the internal temperature of the device, which is about 20 ℃ higher than the environment. If it exceeds the specifications, it needs to be shut down for cooling;

The official website regularly updates firmware, fixes security vulnerabilities, and adds VPN/firewall policies.

Core mechanical, electrical, and environmental technical parameters

1. Physical parameters

The overall size is fixed, weighing 660g, IP20 protection, and fanless design.

2 Power supply specifications

DC 9.6~60V (nominal 24V), dual redundant input, maintain>10ms in case of power failure; overall power consumption of 5~7W.

3 Environmental conditions

Standard S: 0~+60 ℃; Wide temperature T/E: -40~+70 ℃;

Storage -40~85 ℃, humidity 10%~95%, no condensation; The highest altitude is 3000m.

4 I/O electrical parameters

FAULT relay: maximum 1A/60VDC; DI input 24V industrial level;

5 transmission distance

Twisted pair 100m; DSC multimode fiber 5km, single-mode 30km.

6 EMC anti-interference

Covering static electricity, radio frequency, electric fast pulse, and AC/DC stray surge of all industrial levels, meeting EMC standards specifically for rail transit, ships, and power substations.

7 Standard and Optional Accessories

Factory: power terminal, DI terminal, safety manual;

Optional: ACA21 configuration USB flash drive, V.24 debugging cable, wall bracket, rail power supply, HiVision network management, original DSC fiber jumper.

List of supporting industry certifications

Safety: UL508, EN60950-1/62368; Explosion proof ATEX/UKEX/ISA Class I Div.2; Electromagnetic FCC Class A; Industry: Railway EN50121, Power IEC61850, Ship DNV; Environmental RoHS.