Category: Hirschmann

Applications

Cybersecurity is a top priority in today’s digital world. The Hirschmann EAGLE40

firewalls were specifically designed to meet the critical demands of industrial and

process automation environments. These devices include software optimized for

DPI applications to meet a variety of industrial protocols. EAGLE40-07 comes with

advanced intrusion detection and protection capabilities. Software will be updated

continuously and support for additional protocols will be added in the future. This

makes the versatile and highly configurable firewall especially ideal across OT teams

with various experience levels and skillsets.

With a convection-cooled metal housing and an extensive operating temperature

range, EAGLE40 devices support the movement towards IT/OT convergence by

providing a comprehensive multi-deployment solution without compromising

network uptime. Thus, the EAGLE40 product family is optimally suited to implement

a zones and conduits concept according to ISA/IEC 62443. enabling a defense-in

depth network architecture.

Markets

Built to withstand harsh industrial environments, the EAGLE40 next-generation

firewalls are backed by robust industry approvals and infrastructure compliance

standards appropriately suited for the oil and gas, power transmission and

distribution, as well as water and wastewater industries.

The extensive bandwidth and data encryption support also make the EAGLE40

devices an ideal firewall solution within machine building and general manufacturing

settings, as well as for use across security networks.

The multiport EAGLE40 next-generation firewalls offer

a comprehensive cybersecurity solution to maximize

uptime in today’s stringent automated environments.

Ensure heightened performance capabilities with

more port options, each at one gigabit per second

(Gbit/s) bandwidth.

Protect against physical and virtual threats with

ruggedized housing and Stateful and Deep Packet

Inspection (SPI/DPI) modules.

Gain unrivaled system configurability for all skill

levels with a comprehensive graphical user interface

and multi-layer encryption capabilities.

Key Features

• Ethernet ports- EAGLE40-03: 3x GbE ports, up to 1

Gbps throughput- EAGLE40-07: 7x GbE ports, up to 5 Gbps throughput

• HiSecOS with SPI and DPI capabilities

• Firewall Learning Mode for rule configuration

• IPSec VPN for secure data encryption

• Dynamic-routing support with OSPF and router redundancy VRRP

• Graphical HTML 5 web user interface

• Operating temperature range of  -40°C to +70°C

• Convection-cooled metal housing

• EAGLE40-03: Meets process automation standards: ISA-12.12.-01

Class 1 Div. 2 – Haz. Loc, ATEX-95 Category 3G (Zone 2)

• EAGLE40-07: Meets Energy standards: Substation IEC 61850-3 and IEEE 1613

• Assists with cybersecurity regulations: NERC CIP, IEC 62443. NIST

• Flexible management and monitoring: Industrial HiVision, Tripwire Enterprise, Tripwire Log Center

• Hardware for further DPI modules, advanced intrusion and anomaly detection capabilities

Your Benefits

As automation expands and industrial networks grow in complexity,

easy-to-use network management technology that supports

streamlined configuration and remote diagnostics is vital.

The advanced HiEOS software runs on LEMUR lite managed switches,

which are optimal for use in many industrial environments.

With the HiEOS intuitive graphical user interface, switch setup and

maintenance are easy – with no special IT intervention or knowledge

required. Also, HiEOS provides a rich feature set, including PoE/PoE+

support and device management.

Applications

HiEOS software runs on the LEMUR lite managed switches family

– ideal for industrial applications that require compact, secure and

ruggedized equipment. Delivering exceptional performance,

HiEOS provides the most up-to-date security and essential redundancy

mechanisms to deliver high reliability for industrial environments.

Markets

The HiEOS software suits many industrial applications, including

manufacturing, machine building, food and beverage, automotive,

and consumer packaged goods, along with traffic control systems,

train stations and airports.

Simplified managed switch configuration and management

The HiEOS software features essential, easy-to-use Layer 2

switching capabilities. The intuitive web interface enables

users to configure and monitor switches with no special IT

know-how required.

• The most essential features, plus high reliability, delivers

“set it and forget it” capability.

• Enhanced security with the most up-to-date software

architecture.

• Extremely easy configuration via an intuitive graphical

user interface.

Secure, easy-to-use, high reliability

• Enhanced security — including SSHv2 and multiple privilege

levels — delivering high reliability.

• Simple network management protocol (SNMP) device

management and traps that alert users if something is wrong.

• Diagnostics via remote monitoring (RMON), Syslog and others.

• Redundancy protocols, including ERPS*, RSTP and MRP Client.

• Interfaces, like CLI, SNMP, and JSON RPC, and the very

user-friendly Hirschmann web interface.

• Power over Ethernet (PoE) and PoE+ options.

Objective

In a professional environment the participants receive in-depth knowledge

about the Hirschmann™ Operating System (HiOS) Layer 2 functionality of

the RSP, MSP and EES devices.

This includes installation, commissioning, and supervision.

The training is part theory and part practice. The necessary knowledge about

functions and deployment possibilities of the products are taught in individual

theory blocks. Each block is followed by practical exercises, designed to

familiarize the participants with the devices through first-hand experience.

Seminar Content

Basic Settings

• Software management

• Configuration management

• External Memory

Switching

• Port configuration

• Rate Limiter

• IGMP

• VLANs

• Quality of Service

Redundancy

• MRP

• PRP

• HSR

• Rapid Spanning Tree

Device Security

• User Management

• Password Policy

• Management Access

• RADIUS

Network Security

• Port Security

• Denial of Service (DoS)

• Authentication (802.1x)

• Access Control Lists (ACLs)

Diagnostics

• Port Mirroring

• Device status

• Security Status

• Topology Discovery

• Configuration check

• Event log

• Persistent Logging

• SFlow

Advanced

• DHCP Relay and Server

HiOS is an entirely new operating system for Industrial Ethernet,

combining high performance with robust security. It permits the use

of intelligent infrastructures in time-critical applications that were

previously a ‚hard-wired‘ domain via new point-to-point connection

technology.

With zero switchover time, the PRP (Parallel Redundancy Protocol) and

HSR (High-Availability Seamless Redundancy) redundancy methods

ensure smooth production processes. Comprehensive security mechanisms

protect networks against attacks and operating errors.

Target Group

Product training course for System Engineers, Network Designers and

Support Technicians.

Prerequisites

An understanding of Ethernet and TCP/IP, for example “Industrial Ethernet

(CT1)” and “Industrial Networking (CT2)” is required.

If available, the participant should bring a laptop with Ethernet connection

and an operating system CD. Administrator rights are required.

Applications

The Hirschmann switches in the RSP, RSPL (Lite), RSPS (Smart), RED, Embedded 

Ethernet (EES) families, and OCTOPUS series, as well as the modular MSP, RSPE (Ex

pandable) and GREYHOUND systems, are ideally suited to virtually any application 

that calls for maximum network availability.

Markets

HiOS was developed specifically to meet the requirements of the automation sector. 

Examples include: 

• Automotive production

• Transportation

• Power transmission and distribution

HiOS provides extensive redundancy mechanisms to your state-of-the-art hard

ware. It adds Parallel Redundancy Protocol (PRP) over Gigabit, Rapid Spanning Tree 

Protocol (RSTP) over High Availability Seamless Redundancy (HSR), RSTP Ring-Only 

Mode and FuseNet network coupling protocols for maximum network uptime.

The latest Transport Layer Security (TLS) libraries enhance the security of network 

communication. The ability to disable unused slots on modular devices hinders 

unauthorized network access. Out-Of-Band management via a dedicated RJ45 port 

on the new GREYHOUND 1040 means that the devices can be managed even during 

high Central Processing Unit (CPU) load, for example if a network loop occurs.

HiOS also extends the range of applications for the latest generation of Industrial 

Ethernet products from Hirschmann. From cabling through switches and routers, 

supplemented by WLAN, firewalls and network management software, a seamless 

high availability solution for state-of-the-art automation networks is now available 

from a single supplier.

HiOS is focussed on redundancy technologies for maximum network availability. 

Devices running L2A software onwards offer unrestrained network topology design 

based on a combination of standards-based redundancy protocols and FuseNet 

coupling protocols.

Your Benefits

Highest availability and Data Security In One

The Hirschmann Operating System (HiOS) is well known as an operating system 

with unique redundancy and security features that enable it to provide high network 

availability and data security for efficient production processes. Network Address 

Translation increases the network deployment options. Extended backwards 

compatibility with devices running Classic Switch Software means that existing 

networks can be operated, maintained and expanded well into the future using HiOS

based components.

Easy Access Control Lists provide granular network security to devices using Layer 

2 Standard (L2S) software. Extensive new design combinations such as Media 

Redundancy Protocol (MRP) sub rings with Link Aggregation are available for the 

higher value Layer 2 Advanced (L2A) switches. 1:1 NAT now runs on the RSP, RSPE 

(Expandable) and OCTOPUS Layer 3 switches.

HiOS supports FuseNet, the “Fusion of Networks”. FuseNet uniquely identifies a 

family of redundant coupling protocols which are proprietary to Hirschmann. These 

protocols provide great flexibility in the way networks can be redundantly coupled, to 

suit every topology.

Hirschmann upgrades HiOS software to increase the power

and performance of its Industrial Ethernet switches.

HiOS software offers intelligent and unique  combinations of network

redundancy protocols to meet every physical and application requirement.

Redundancy – an extensive number of standardized and proprietary

redundancy mechanisms to meet any requirement.

Security – comprehensive security functionality to help you secure

your networks.

Ease of Use – an intuitive graphical interface, compre hensive command

line interface, and full SNMP support meet every management challenge.

Key Features

•  A combination of standards-based protocols and FuseNet coupling 

protocols results in a high level of fault tolerance

•  PRP over Gigabit is now available for existing hardware.

Only a software update is required

•  The incorporation of Classic Switch Software functions into HiOS ensures 

that existing networks can continue to be expanded many years into the future

•  Easy Access Control Lists allow control of what data crosses a network,

even in standard switches

•  Address Translation: 1:1 NAT allows the connection of networks that use 

identical subnets

•  HiOS supports the new 2.5 Gbit/s transmission rate. This provides faster

speed without a significant increase in power consumption or heat generation.

When used with Link Aggregation, it results in high speed data uplinks, at a

significantly lower cost than 10 Gbit/s