Woodward 5439-555

协议：IPsec（隧道和传输模式）
–使用DES（56位）、3DES（168位）和AES（128位、192位）在硬件中进行IPsec加密，
256位）
–数据包身份验证：MD5，SHA-1
–具有主模式和快速模式的互联网密钥交换（IKE）
–通过以下方式进行身份验证：
–预共享密钥（PSK）
–X.509v3证书，带有证书颁发机构的公钥基础设施（PKI）
（CA）、可选证书撤销列表（CRL）和按主题筛选的选项
或
–合作伙伴证书，例如自签名证书
–通过DynDNS检测合作伙伴IP地址的变化
–NAT穿越（NAT-T）
–死点检测（DPD）：检测到IPsec连接中止
–IPsec/L2TP服务器：连接IPsec/L2TP客户端
–IPsec防火墙和1:1 NAT
–VPN上的默认路由
–VPN之间的数据转发（集线器和分支）
–根据许可证：多250个VPN信道
–VPN中加密的硬件加速
其他功能–远程日志记录
–路由器/防火墙冗余（可以稍后为每个许可证安装，而不是为固件安装
版本7.0））
–使用SNMP v1-v3和FL MGUARD设备管理器（FL MGUARD）进行管理
DM）
–对HTTPS/SSH远程访问的PKI支持
–可以通过LAN接口充当NTP和DNS服务器
支持
有关设备和发行说明的其他信息：说明和软件更新可在互联网上找到：phoenixcontact.net/products。
介绍
8334_en_02菲尼克斯电气11
1.1设备版本
FL MGUARD有以下设备版本，它们基本相同
功能。无论处理器技术和操作如何，都可以使用所有设备
连接的计算机使用的系统。
FL MGUARD RS4000/
FL MGUARD RS2000
FL MGUARD RS4000是一款具有智能防火墙和可选IPsec的安全路由器
VPN（10至250个隧道）。它被设计用于工业，以适应严格的
分布式安全和高可用性要求。
FL MGUARD RS2000是一个具有基本防火墙和集成IPsec VPN的版本
（多两条隧道）。它的功能范围被缩小到基本的范围。它是合适的
用于工业中的安全远程维护应用程序，并支持快速启动
用于工业用途的坚固的现场设备，从而便于无错误、独立操作。
两个版本都支持

Woodward 5439-555

Woodward 5439-555

Protocol: IPsec (tunnel and transport mode) – IPsec encryption in hardware with DES (56 bits), 3DES (168 bits), and AES (128, 192, 256 bits) – Packet authentication: MD5, SHA-1 – Internet Key Exchange (IKE) with main and quick mode – Authentication via: – Pre-shared key (PSK) – X.509v3 certificates with public key infrastructure (PKI) with certification authority (CA), optional certificate revocation list (CRL), and the option of filtering by subject or – Partner certificate, e.g., self-signed certificates – Detection of changing partner IP addresses via DynDNS – NAT traversal (NAT-T) – Dead Peer Detection (DPD): detection of IPsec connection aborts – IPsec/L2TP server: connection of IPsec/L2TP clients – IPsec firewall and 1:1 NAT – Default route over VPN – Data forwarding between VPNs (hub and spoke) – Depending on the license: up to 250 VPN channels – Hardware acceleration for encryption in the VPN Additional features – Remote logging – Router/firewall redundancy (can be installed later for each license, not for firmware version 7.0)) – Administration using SNMP v1-v3 and FL MGUARD device manager (FL MGUARD DM) – PKI support for HTTPS/SSH remote access – Can act as an NTP and DNS server via the LAN interface Support Additional information on the device as well as on release NOTE: notes and software updates can be found on the Internet at: phoenixcontact.net/products. Introduction 8334_en_02 PHOENIX CONTACT 11 1.1 Device versions The FL MGUARD is available in the following device versions, which largely have identical functions. All devices can be used regardless of the processor technology and operating system used by the connected computers. FL MGUARD RS4000/ FL MGUARD RS2000 The FL MGUARD RS4000 is a security router with intelligent firewall and optional IPsec VPN (10 to 250 tunnels). It has been designed for use in industry to accommodate strict distributed security and high availability requirements. The FL MGUARD RS2000 is a version with basic firewall and integrated IPsec VPN (maximum of two tunnels). Its scope of functions is reduced to the essentials. It is suitable for secure remote maintenance applications in industry and enables the quick startup of robust field devices for industrial use, thereby facilitating error-free, independent operation. Both versions suppor