Operating and safety instructions
The device operates under electrical voltage and contains highly sensitive components. Intervention by the user is required only for connecting the power supply lines. Should any further modifications be required, it is necessary to consult either with the manufacturer directly or with service personnel authorised by the manufacturer. The device must be de-energised during work. Appropriate measures must be taken to prevent electrostatic discharges on components. If the device is opened up by an unauthorised person, the user may be subject to hazards and the warranty is invalidated.
Recommendation for use
Installation, commissioning and operation may only be performed by qualified and trained personnel. The safety instructions and the instruction manual are to be observed by all persons who work with the device. At the installation site the valid guidelines and regulations for accident prevention must be observed. The instruction manual contains the most important information for safely operating the device. Appropriate storage, proper transport, installation and commissioning, as well as careful operation are prerequisites for ensuring safe and proper operation of the device.
Safety instructions
ATTENTION
To prevent damage to the device, all cable lines (power supply, interface cables) must only be connected while the device is switched off.
ATTENTION
All installation work performed on the device must be performed only under safe, secure and de-energised conditions.
Recommendation for use
Recommendation for use: Always adhere to the safety measures applicable when handling components at risk of being damaged by electrostatic discharges (EN 61340-5-1 / EN 61340-5-2).
Operating location
This device is designed for industrial use. Make certain that the specified environmental conditions are maintained at all times. Use in non-specified environments, i.e., on board ships, in explosive atmospheres or at extreme elevations, is prohibited. See also chapter 11 Technical data.
ATTENTION
Damage caused by condensation! To prevent short circuits and malfunctions caused by the formation of water condensate, the device may only be turned on after it has reached the specified ambient temperature. This also applies if the device is exposed to extreme temperature fluctuations. Damage caused by heat! Do not expose the device to direct radiation by sunlight or any other light or heat source!
Damage due to improper use
Should the control system have evident signs of damages caused, e.g., by improper operation or storage conditions or due to improper use or handling, the device must be shut down immediately. Ensure that it is secured against being started up accidentally.
Warranty / repairs
During the device warranty period, any repairs must only be performed by the manufacturer or by service personnel that has been authorised by the manufacturer.
Intended use
The device was developed especially for IT security in machines and plants and for secure remote maintenance via the Internet.
The following application areas are realised with the industrial firewall:
Remote maintenance, NAT router, mobile radio router, machine firewall
The device is only to be assembled, installed and operated within the permissible specifications. Use in non-specified environments is prohibited.
Improper use
Operation other than or beyond that described for the device shall be deemed improper use.
The device is not allowed to be used to control vehicles or for applications for which further approvals beyond the manufacturer's declaration are necessary, e.g. applications with explosion hazard, medical technology, shipping industry. Use for payment services is excluded. Use by private individuals is considered improper.
The device must not be put into operation in the case of transport damage or nonconformity with the specifications and, if necessary, must be taken out of operation in the case of changing conditions.
In the case of improper use, ADS-TEC shall not accept responsibility or liability for injury or damage that is directly or indirectly attributable to the handling of the device. Should the device have evident signs of damages caused, e.g., by improper operation or storage conditions or due to improper use or handling, it must be shut down immediately. Ensure that it is secured against being started up accidentally.
Network environment and services
ATTENTION
Security risks arising from the use of certain services in unsecure networks. Please observe the following notes.
This device supports a variety of optional network services and special functions that are disabled by default. Some of these functions are not secure against attacks from the public Internet in their default configuration. These include, but are not limited to:
- USBIP Device Server (TCP 3240)
- gpsd service (TCP 2947)
- RIP v2 (UDP 520) and OSPF (IP Proto 89)
- Modbus/TCP server
- DNS Proxy (UDP 53)
- SMS communication interfaces
- Virtual COM port services (TCP 3001/20000)
- Debug and diagnostic services such as rpcap and SSH (port 22)
These services are intended for use in controlled, trusted networks only — behind an active firewall, via a secure VPN, or in completely isolated networks. Activating these functions in unsecured or publicly accessible networks poses a significant security risk (EN 18031-1:2024).
Protection of hardware interfaces
The device has several physical interfaces that do not have integrated authentication or access control mechanisms. These interfaces represent potential access points for unauthorised physical attacks and must be protected against tampering.
| Interface | Risk | Impact |
|---|---|---|
| USB ports | Connection of unauthorised devices (e.g. keyloggers, malware sticks) | Introduction of malware, data exfiltration |
| Reset button (factory default) | Reset to insecure factory settings | Loss of secure configuration, removal of access controls |
| Serial and digital I/O interfaces | Direct access to internal control signals | Control manipulation, unintentional function triggering |
| Smart card slot | Access to cryptographic keys or identities | Identity theft, misuse of authentication |
| Modbus RTU / RS-485 | No authentication, encryption or rate limiting. All data transmitted in plaintext. | Eavesdropping, injection of manipulated messages, denial of service |
| CAN bus (IRF3851 only) | No authentication, encryption or rate limiting. Any node with physical bus access has full read/write access. | Disruption of all bus participants, injection of manipulated control commands, denial of service |
The device must be installed in a location with controlled physical access (e.g., locked control cabinet).
Overview of available network interfaces
In addition to the physical interfaces mentioned above, the device has several network interfaces. The configuration described below corresponds to the factory default settings and is relevant for safe operation and network integration.
| Interface | Affiliation | Behaviour in factory setting | Default IP address | DHCP | Packet forwarding |
|---|---|---|---|---|---|
| ETH1 | Single port | Separate, not connected to ETH2–ETH8. DHCP enabled. No IP forwarding in commissioning mode | None (DHCP client) | Yes | No |
| ETH2 - ETH8 | Internal switch network | Connected as an internal Ethernet switch. Passes all data traffic, even in factory state. Optionally configurable with packet filters | 192.168.0.254 (fixed) | No | Yes (switch) |
Notes
-
ETH2 to ETH8 behave like a Layer 2 switch without routing function. There is no isolation between the ports.
-
ETH1 is physically and logically isolated from ETH2–ETH8, which enables a secure initial configuration in commissioning mode.
-
The behaviour can be modified by activating routing or firewall functions. These functions are not active in the factory settings.
-
All Ethernet ports are physically accessible and must be secured or documented accordingly as part of a risk analysis.
Packet filter rules
The device has an integrated packet filter engine with support for Layer 2 (Ethernet/MAC-based) and Layer 3 (IP-based) packet filter rules. The packet filters can be operated in whitelist mode (deny-by-default) or blacklist mode (allow-by-default).
| Filter type | Factory default | Description |
|---|---|---|
| Layer 2 filter | Allow All | No restrictions at MAC level active |
| Layer 3 filter | - | In start-up mode, no packets are forwarded (drop all). An operating mode must be selected. |
Protection of sensitive data
ATTENTION
Data stored on the device (cryptographic keys, passwords, certificates, security-relevant configuration parameters) is not protected against physical extraction. No secure storage methods in accordance with EN 18031-1 Section 6.4 have been implemented.
The device must be installed in a physically protected environment (e.g., locked control cabinet). If the device is lost or stolen, assume all stored credentials are compromised and revoke them immediately.
Configuration data may only be transferred to the device at its final place of use. Replace the factory-installed device certificate with an organisation-specific certificate. Each device is provided with a security seal — check it for integrity during initial commissioning and at regular intervals.
Mobile communications and cyber security
ATTENTION
The mobile connection of the device via the optionally integrated modem is a publicly accessible network connection and is therefore not considered trustworthy within the meaning of EN 18031-1:2024.
For secure operation via mobile communications or other wide area connections, the use of a secure communication mechanism is mandatory (e.g., VPN via Big-LinX, OpenVPN, IPsec, or mutual TLS/HTTPS). The use of a private APN is recommended to disconnect the device from the public Internet.
Safety information on mobile communications
WARNING
- The wireless card must NOT be operated in the following environments:
- near medical and life-saving equipment,
- in explosive atmospheres (e.g. near fuel depots or chemical plants),
- near blasting operations.
- Switch the device OFF in these environments and secure it against accidental start-up. Radio interference could have unpredictable effects in certain environments! The wireless card must NOT be operated in the following environments:
- near medical and life-saving equipment,
- in explosive atmospheres (e.g. near fuel depots or chemical plants),
- near blasting operations. Switch the device OFF in these environments and secure it against accidental start-up.
WARNING
- The device must not be used for applications in which people or objects could be harmed due to a malfunction of the radio connection. Communication via radio connections cannot be guaranteed. The device must not be used for applications in which people or objects could be harmed due to a malfunction of the radio connection.
WARNING
- Check whether lightning protection is required at the installation site (protection against direct lightning strikes and protection against induced voltages from distant lightning strikes). Danger from lightning strikes when installing antennas in exposed locations! Check whether lightning protection is required at the installation site (protection against direct lightning strikes and protection against induced voltages from distant lightning strikes).
WARNING
- In accordance with the requirements of the American Federal Communications Commission (FCC) and ISED (Industry Canada), maintain a minimum distance of 20 cm between the transmitting antennas and people. Electromagnetic radiation may be hazardous to health. In accordance with the requirements of the American Federal Communications Commission (FCC) and ISED (Industry Canada), maintain a minimum distance of 20 cm between the transmitting antennas and people.
WARNING
- Observe the maximum permissible signal strength (EIRP) in accordance with national or local regulations (see calculation example for EIRP).
- Observe the regulations and standards applicable at the installation site (e.g. the standards for antenna installation VDE 0855 and for lightning protection VDE 0185-305).
- Have antenna systems planned, installed and approved exclusively by qualified electrical engineers.
- When operating in North America, the antenna gain (including line losses) must not exceed the following values in accordance with the specifications of the US Federal Communications Commission (FCC) and the Canadian ISED (Industry Canada): Radio interference and possible health hazards due to exceeding the permissible transmission power! When using directional antennas with high antenna gain, the maximum permissible field strength may be exceeded. Observe the maximum permissible signal strength (EIRP) in accordance with national or local regulations (see calculation example for EIRP). Observe the regulations and standards applicable at the installation site (e.g. the standards for antenna installation VDE 0855 and for lightning protection VDE 0185-305). Have antenna systems planned, installed and approved exclusively by qualified electrical engineers. When operating in North America, the antenna gain (including line losses) must not exceed the following values in accordance with the specifications of the US Federal Communications Commission (FCC) and the Canadian ISED (Industry Canada): LTE Band 2 (1850–1910 MHz) 6 dBi Band 4 (1710–1755 MHz) 6 dBi Band 5 (824–849 MHz) 6 dBi Band 7 (2500–2570 MHz) 9 dBi Band 12 (699–716 MHz) 6 dBi Band 13 (777–787 MHz) 6 dBi Band 25 (1850–1915 MHz) 6 dBi Band 26 (814–849 MHz) 6 dBi Band 30 (2305–2315 MHz) 1 dBi (external vehicle antennas not permitted!) Band 41 (2496–2690 MHz) 9 dBi UMTS
Calculation example for transmission power (EIRP)
EIRP = Pout- Closs + Antgain = 22 dBm - 8 dB + 9 dBi = 23 dBm (≙ 200 mW)
EIRP = Equivalent Isotropically Radiated Power
P(out) = Transmission power of the radio card
C(loss) = Losses due to attenuation in coaxial cable and connectors
Ant(gain) = Antenna gain
Protection against electrostatic discharge
ATTENTION
- When handling components that are susceptible to electrostatic discharge, observe the relevant safety measures (e.g. DIN EN 61340-5-1 / DIN EN 61340-5-2).
- Installation/service work on the device is only permitted when it is secured and de-energised. Damage caused by electrostatic discharge Electrostatic discharge can cause damage to the device. When handling components that are susceptible to electrostatic discharge, observe the relevant safety measures (e.g. DIN EN 61340-5-1 / DIN EN 61340-5-2). Installation/service work on the device is only permitted when it is secured and de-energised.
Use of the device in accordance with UL approval
The following applies to devices with UL marking (Underwriter Laboratories, USA) on the type plate:
-
The device may only be used in closed rooms.
-
The communication cables may only be laid within a building.
-
The device contains an internal fuse at the voltage input. This fuse and all other internal components must not be replaced by service personnel, but only by the manufacturer.