Belden Hirschmann EAGLE One User Manual
Belden Hirschmann EAGLE One User Manual

Belden Hirschmann EAGLE One User Manual

Industrial ethernet firewall

Advertisement

Quick Links

User Manual
Installation
Industrial Ethernet Firewall
EAGLE One
Installation EAGLE One
Technical support
Release 07 03/2023
https://hirschmann-support.belden.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Hirschmann EAGLE One and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Belden Hirschmann EAGLE One

  • Page 1 User Manual Installation Industrial Ethernet Firewall EAGLE One Installation EAGLE One Technical support Release 07 03/2023 https://hirschmann-support.belden.com...
  • Page 2 The naming of copyrighted trademarks in this manual, even when not specially indicated, should not be taken to mean that these names may be considered as free in the sense of the trademark and tradename protection law and hence that they may be freely used by anyone. ©...
  • Page 3: Table Of Contents

    Contents Important information Safety instructions About this manual Description General description Device name and product code Device view Power supply Ethernet ports 1.5.1 10/100 Mbit/s twisted pair port 1.5.2 100 Mbit/s F/O port Display elements 1.6.1 Device status 1.6.2 Additional status information 1.6.3 Port status Management interfaces 1.7.1 V.24 interface (external management)
  • Page 4 2.4.1 Connecting the power supply and the signal contact lines 2.4.2 Wiring the digital input (optional) Operating the device Connecting data cables Configuration Making basic settings Firewall and VPN functions 3.2.1 Firewall functions 3.2.2 VPN functions Operating modes 3.3.1 Delivery state 3.3.2 Transparent mode 3.3.3 Router mode 3.3.4 PPPoE mode...
  • Page 5: Important Information

    Important information Note: Read these instructions carefully, and familiarize yourself with the device before trying to install, operate, or maintain it. The following notes may appear throughout this documentation or on the device. These notes warn of potential hazards or call attention to information that clarifies or simplifies a procedure.
  • Page 6 NOTICE NOTICE provides information about procedures that do not involve the risk of injury. Installation EAGLE One Release 07 03/2023...
  • Page 7: Safety Instructions

    Safety instructions WARNING UNCONTROLLED MACHINE ACTIONS To avoid uncontrolled machine actions caused by data loss, configure all the data transmission devices individually. Before you start any machine which is controlled via data transmission, be sure to complete the configuration of all data transmission devices. Failure to follow these instructions can result in death, serious injury, or equipment damage.
  • Page 8 Certified usage   Use the product only for the application cases described in the Hirschmann product information, including this manual.  Operate the product only according to the technical specifications. See “Technical data” on page 51.  Connect to the product only components suitable for the requirements of the specific application case.
  • Page 9  Supply with DC voltage: A back-up fuse suitable for DC voltage is located in the plus conductor of the power supply. The minus conductor is on ground potential. Otherwise, a back-up fuse is also located in the minus conductor. Regarding the properties of this back-up fuse: See “General technical data”...
  • Page 10 Strain relief  Note: If the strain relief is insufficient, there is a potential risk of torsion, contact problems and creeping interruptions.  Relieve the connection points of cables and lines from mechanical stress.  Design strain reliefs in such a way that they help prevent any mechanical damage to cables, wires or conductors caused by external influences or their own weight.
  • Page 11 CE marking  The labeled devices comply with the regulations contained in the following European directive(s):  2011/65/EU and 2015/863/EU (RoHS) Directive of the European Parliament and of the Council on the restriction of the use of certain hazardous substances in electrical and electronic equipment.
  • Page 12 (as amended by S.I. 2019:696) - Schedule 3A, Part 6” on page 19. The UKCA conformity declaration will be available to the relevant authorities at the following address: Belden UK Ltd. 1 The Technology Centre, Station Road Framlingham, IP13 9EZ, United Kingdom...
  • Page 13 Relevant for use in explosion hazard areas (Hazardous  Locations, Class I, Division 2) The relay connections are to be installed and used within their Entity Parameters as per the following Control Drawing 000174247DNR. Avertissement - Risque d'explosion - Ne pas débrancher tant que le circuit est sous tension à...
  • Page 14 CONTROL DRAWING to EAGLEONE and TOFINOXE series devices for use in Hazardous Locations Class I Division 2, Groups A, B, C, D Rev. 0 2014-12-01 Document No.: 000174247DNR Page 1/2 Installation EAGLE One Release 07 03/2023...
  • Page 15 Manufactured in 72654 Neckartenzlingen / Germany by Hirschmann Automation and Control GmbH. DOM: ww/yy (Date of manufactur w - week, y - year. Refer to the device label). CONTROL DRAWING to EAGLEONE and TOFINOXE series devices for use in Hazardous Locations Class I Division 2, Groups A, B, C, D Rev.
  • Page 16 ATEX directive 2014/34/EU – specific regulations for safe  operation In Ex Zone 2, only the devices with a corresponding label may be operated. The devices are to be installed and used according to the European Directive 2014/34/EU. Details see the next 2 pages. Installation EAGLE One Release 07 03/2023...
  • Page 17 Use of EAGLEONE and TOFINOXE series devices according to the European directive 2014/34/EU Installation EAGLE One Release 07 03/2023...
  • Page 18 Manufactured in 72654 Neckartenzlingen / Germany by Hirschmann Automation and Control GmbH. DOM: ww/yy (Date of manufactur w - week, y - year. Refer to the device label). Use of EAGLEONE and TOFINOXE series devices according to the European directive 2014/34/EU Installation EAGLE One Release 07 03/2023...
  • Page 19 UK regulation S.I. 2016:1107  (as amended by S.I. 2019:696) - Schedule 3A, Part 6 In Ex Zone 2, only the devices with a corresponding label may be operated. The devices are to be installed and used according to UK S.I. 2016:1107. Details see the next 2 pages.
  • Page 20 Use of EAGLEONE and TOFINOXE series devices according to the UK regulation S.I. 2016:1107 (as amended by S.I. 2019:696) - Schedule 3A, Part 6 Installation EAGLE One Release 07 03/2023...
  • Page 21 Manufactured in 72654 Neckartenzlingen / Germany by Hirschmann Automation and Control GmbH. DOM: ww/yy (Date of manufactur w - week, y - year. Refer to the device label). Use of EAGLEONE and TOFINOXE series devices according to the UK regulation S.I. 2016:1107 (as amended by S.I.
  • Page 22 Supplier's Declaration of Conformity 47 CFR § 2.1077 Compliance Information EAGLE One U.S. Contact Information Belden – St. Louis 1 N. Brentwood Blvd. 15th Floor St. Louis, Missouri 63105, United States Phone: 314.854.8000 This device complies with part 15 of the FCC Rules. Operation is subject...
  • Page 23: About This Manual

    About this manual The “Installation” user manual contains a device description, safety instructions, a description of the display, and the other information that you need to install the device. The following manuals are available as PDF files on the Internet at https:// www.doc.hirschmann.com: ...
  • Page 24: Key

    The symbols used in this manual have the following meanings:  Listing Work step   Subheading Installation EAGLE One Release 07 03/2023...
  • Page 25: Description

    Description General description The EAGLE One devices support the authentication, security and confidentiality of communication within production networks, but also beyond company boundaries. The EAGLE One devices support the following network modes:  Transparent mode  Router mode  PPPoE mode The EAGLE One devices are used everywhere that security-sensitive network cells require a connection from the internal network to the external network.
  • Page 26: Device Name And Product Code

    The following installation options are available:  Mounting on the DIN rail  Mounting on a vertical flat surface The device works without a fan. There are convenient options for managing the device. Manage your devices via:  Web browser ...
  • Page 27 Item Product characteristic Characteris Description tic value 16 ... 17 Ethernet port 2 1 × RJ45 socket for 10/100 Mbit/s Twisted EXTERN pair connections 1 × DSC multimode socket for 100 Mbit/s F/O connections 1 × DSC singlemode socket for 100 Mbit/s F/O connections Temperature range Extended with...
  • Page 28 Application case Certificates and Characteristic value declarations Standard applications IEC 60950-1 EN 61131-2 UL 508 Oil and gas applications ATEX Zone 2 ISA-12.12.01 – Class I, Div. 2 Substation applications IEC 61850-3 IEEE 1613 Navy applications Railway applications EN 50121-4 (trackside) Table 2: Assignment: application cases, certificates and declarations, characteristic values...
  • Page 29: Device View

    Device view 6-pin terminal block with screw lock for redundant power supply and signal contact Terminal block connection LED display elements Ethernet port 1 alternatively, depending on RJ45 socket for 10/100 Mbit/s Twisted pair connections device variant DSC multimode socket for 100 Mbit/s F/O connections MAC address of device (label) Ethernet port 2 EXTERN...
  • Page 30: Power Supply

    10b Terminal block connection ACA21-USB interface Label area for IP address of device Button (no function in the existing device version) Table 3: Front view (using the example Eagle-One-0200M2T1...) Power supply A 6-pin, screwable terminal block is available for the redundant supply to the device.
  • Page 31: Ethernet Ports

    Ethernet ports 1.5.1 10/100 Mbit/s twisted pair port The 10/100 Mbit/s twisted pair port allows you to connect network components according to the IEEE 802.3 10BASE-T/100BASE-TX standard. This port supports:  Autocrossing (if autonegotiation is activated)  Autonegotiation  Autopolarity ...
  • Page 32: Display Elements

    Display elements After the supply voltage is set up, the software starts and initializes itself. Afterwards, the device performs a self-test. Power STATUS LS/DA 1.6.1 Device status These LEDs provide information about conditions which affect the operation of the whole device. Display Color Activity Meaning...
  • Page 33: Additional Status Information

    1.6.2 Additional status information Display Color Activity Meaning Virtual Private — none At least one of the following cases applies:  Network The VPN status display is switched off.  No VPN connection is active.  No active VPN connection is in the "up" status.
  • Page 34: Management Interfaces

    Management interfaces 1.7.1 V.24 interface (external management) The V.24 interface is a serial interface for the local connection of an external network management station (VT100 terminal or PC with terminal emulation). The interface allows you to set up a data connection to the Command Line Interface (CLI) and to the system monitor.
  • Page 35: Aca21-Usb Interface

    1.7.2 ACA21-USB interface This interface offers you the ability to connect the storage medium AutoConfiguration Adapter ACA21-USB. This storage medium is used for saving/loading the configuration and diagnostic functions, and for loading the software. The USB interface has the following properties: ...
  • Page 36: Installation

    Installation Before installing and starting up the device, read the safety instructions. See “Safety instructions” on page 7. Overview The devices have been developed for practical application in a harsh industrial environment. On delivery, the device is ready for operation. Perform the following steps to install and configure the device: ...
  • Page 37: Installing And Grounding The Device

    Installing and grounding the device WARNING FIRE HAZARD Install the device in a fire enclosure according to IEC 60950-1. Failure to follow this instruction can result in death, serious injury, or equipment damage. 2.3.1 Installing the device onto the DIN rail ...
  • Page 38: Mounting On A Vertical Flat Surface

    2.3.2 Mounting on a vertical flat surface You have the option of attaching the device to a vertical flat surface. This requires a wall mounting plate, which you purchase as a separate accessory. See “Accessories” on page 59. The wall mounting plate comes without mounting hardware. ...
  • Page 39: Connecting The Terminal Blocks

    The device has a functional ground connection. The device is grounded via the separate ground screw.  Ground the device via the ground screw. Connecting the terminal blocks WARNING ELECTRIC SHOCK Never insert pointed objects (narrow screwdrivers, wires, etc.) into the device or into the connection terminals for electric conductors.
  • Page 40 With a non-redundant supply of the supply voltage, the device reports the loss of a supply voltage. You can prevent this message by applying the supply voltage via both inputs, or by changing the configuration in the Management. Type of the voltages Specification of the supply Pin assignment on the device that can be...
  • Page 41: Wiring The Digital Input (Optional)

    2.4.2 Wiring the digital input (optional) Signal, terminal Function DI (+) Signal input DI (−) Reference potential Table 8: Pin assignment: 2 pin, screwable terminal block (on the left), connection to the device (to the right)  Remove the terminal connector from the device. ...
  • Page 42: Connecting Data Cables

    Connecting data cables Note the following general recommendations for data cable connections in environments with high electrical interference levels:  Keep the length of the data cables as short as possible.  Use optical data cables for the data transmission between the buildings. ...
  • Page 43: Configuration

    Configuration 2 or more devices configured with the same IP address can cause unpredictable operation of your network. Install and maintain a process that assigns a unique IP address to every device in the network. Making basic settings In case of initial installation, enter the IP parameters. The device provides multiple options for configuring IP addresses: ...
  • Page 44: Firewall And Vpn Functions

    Firewall and VPN functions 3.2.1 Firewall functions The EAGLE One device supports the following firewall modes:  Stateful Inspection Firewall  Transparent Firewall  Configurable firewall rules:  Incoming/outgoing data traffic  Modem access  External Management access  IP Masquerading, 1-to-1 NAT, port forwarding ...
  • Page 45: Operating Modes

    Operating modes This device supports you in protecting the internal network against the influences of external networks. 3.3.1 Delivery state On delivery, the device works in the Transparent mode. In this mode, no network settings (e.g., for subnetworks) are required for operation. The firewall has been preconfigured so that the IP data traffic from the internal network is possible;...
  • Page 46: Starting Configuration

    Starting configuration To access the EAGLE One, proceed as follows (device in the delivery state):  Install the required Jave plugin on your computer. You find information about the plug-in and its installation in the “User Manual Configuration”.  Connect your computer to the internal port, and start an https-capable Web browser on your computer in order to configure the EAGLE One.
  • Page 47 Figure 3: Configuration after the installation of the EAGLE One Installation EAGLE One Release 07 03/2023...
  • Page 48: Monitoring The Ambient Air Temperature

    Monitoring the ambient air temperature Operate the device below the specified maximum ambient air temperature exclusively. See “General technical data” on page 51. The ambient air temperature is the temperature of the air at a distance of 5 cm (2 in) from the device. It depends on the installation conditions of the device, for example the distance from other devices or other objects, and the output of neighboring devices.
  • Page 49: Maintenance And Service

    Maintenance and service  When designing this device, Hirschmann largely avoided using high-wear parts. The parts subject to wear and tear are dimensioned to last longer than the lifetime of the product when it is operated normally. Operate this device according to the specifications. ...
  • Page 50: Disassembly

    Disassembly WARNING ELECTRIC SHOCK Disconnect the grounding only after disconnecting all other cables. Failure to follow this instruction can result in death, serious injury, or equipment damage.  Disconnect the data cables.  Disable the supply voltage.  Disconnect the terminal blocks. ...
  • Page 51: Technical Data

    Technical data General technical data  Dimensions See “Dimension drawings” on page 53. W × H × D Weight 660 g Power supply  2 voltage inputs for redundant power supply  Safety extra-low voltage (SELV), redundant inputs disconnected Rated voltage AC 24 V AC, Class 2 Voltage range AC incl.
  • Page 52 Climatic Ambient air temperature Devices with operating temperature conditions characteristic value S (Standard): during operation 0 °C ... +60 °C (+32 °F ... +140 °F) Devices with operating temperature characteristic value E and T (extended): -40 °C ... +70 °C (-40 °F ... +158 °F) Maximum inner temperature of Devices with operating temperature device (guideline)
  • Page 53 Dimension drawings  60,6 128,02 2.39 5.04 inch 127,37 5.01 Figure 4: Dimensions Installation EAGLE One Release 07 03/2023...
  • Page 54 EMC and immunity  Note: You will find detailed information on the certificates and declarations applying to your device in a separate overview. See table 2 on page 28. Immunity Standard Navy applications Railway Substation applications applications applications IEC 60068-2-6, test Fc Vibration 5 Hz ...
  • Page 55 EMC interference Standard Navy applications Railway Substation emission applications applications applications (trackside) GL Guidelines AC and DC supply connections — EMC 1 — — FCC 47 CFR Part 15 AC and DC supply connections Class A Class A Class A Class A EN 61000-6-4 AC and DC supply connections...
  • Page 56 EMC interference Standard Navy applications Railway Substation immunity applications applications applications (trackside) Conducted disturbances EN 61000-4-6 150 kHz ... 80 MHz 10 V 10 V 10 V 10 V...
  • Page 57 EMC interference Standard Navy applications Railway Substation immunity applications applications applications (trackside) Damped oscillation - AC/DC supply connection EN 61000-4-12 line/ground — — — 2.5 kV IEEE C37.90.1 EN 61000-4-12 line/line — — — 1 kV IEEE C37.90.1 Damped oscillation – data line EN 61000-4-12 line/ground —...
  • Page 58 Network range  Ports Wave Fiber System Example Fiber BLP/Dispersion length attenuati for F/O attenuation cable length 1300 nm 50/125 µm 0-8 dB 0-5 km 1.0 dB/km 800 MHz*km 1300 nm 62.5/125 µm 0-11 dB 0-4 km 1.0 dB/km 500 MHz*km Table 9: F/O port 100BASE-FX a.
  • Page 59 Accessories  Note that products recommended as accessories may have different characteristics to those of the device, which may limit the application range of the overall system. For example, if you add an accessory with IP20 to a device with IP65, the degree of protection of the overall system is reduced to IP20.
  • Page 60 Underlying technical standards  Name ANSI/UL 121201 Nonincendive Electrical Equipment for Use in Class I and II, Division 2 and Class III, Divisions 1 and 2 Hazardous (Classified) Locations EN 50121-4 Railway applications – EMC – Emission and immunity of the signaling and telecommunications apparatus (Rail Trackside) EN 55032 Electromagnetic compatibility of multimedia equipment –...
  • Page 61: A Further Support

    You find the addresses of our partners on the Internet at http://www.hirschmann.com. A list of local telephone numbers and email addresses for technical support directly from Hirschmann is available at https://hirschmann-support.belden.com. This site also includes a free of charge knowledge base and a software download section. Customer Innovation Center...

Table of Contents