2G-2S.0.3.FC

  • 2x SFP slot with 100/1000BASE-X support
  • 3x Fast ethernet port
  • Modbus TCP support
  • 2 independent power inputs
  • Redundant topology LAN-RING, RSTP
  • Event management with support: HTTP/ONVIF client, E-mail, IP Watchdogs, ETH events, TCP events, Modbus TCP...
  • VLAN, QoS, SNMP, SMTP, SNTP, IGMP, RSTP(-M), LLDP, 802.1X
  • Overvoltage protection up to 150A (8/20µs)
  • Operating temperature from -40 °C to +75 °C

LAN-RING industrial managed switches equipped with Ethernet ports and SFP slots. Event management, which is part of advanced management, makes these switches the ideal solution for applications with high demands on security and flexibility of the equipment used. The switches support redundant MESH/RING topologies with up to 30 ms link recovery. Thanks to the highly durable hardware, the switches can be deployed in a wide range of operating temperatures from -40 to 75 °C.

The devices are developed and manufactured in the EU and are NDAA compliant.

Models

2G-2S.0.3.FC-BOX

Industrial switch for circular topology with 2x SFP slot, 3x FE port, redundant power input, fine surge protection, EVENT MANAGEMENT: SMTP, TCP events, ETH events, HTTP client (camera management), 8x IPWatchdog.... , operating temperature -40...+75 °C, VLAN, QoS, IGMP, SNMPv2/v3, SNTP.

Order code: 1-871-220

Availability: Full-scale production

Specifications

Technical parameters
SFP SLOT
Count2
Supported formats100/1000 BASE-LX, BASE-BX
FAST ETHERNET
Count3
Supported formats10BaseT, 100BaseTx
Surge protectionup to 150 A waveform 8/20 μs
ConnectorRJ45
POWER
Count2
ConnectorWAGO 734-205
Input voltage range10 - 30 VAC / 10 - 60 VDC
Power consumptionMax. 4 W
Surge protection1500 W waveform 10/1000 μs
ENVIRONMENT
Operating temperature-40...+75 °C
Storage temperature–40…+70 °C
HumidityMax. 95 %
MECHANICS
Weight0.65 kg
Dimensions - h / w / d60 x 110 x 140 mm
IP protectionIP 30
CoolingPassive
SECURITY
Secure BootingThe code is stored and executed directly on SoC, therefore it is not externally accessible.
Firmware UpgradeThe FW image is encrypted and signed using AES-256, RSA-4096, SHA-512
SNMPSNMPv3 - SHA-512 / AES-256 (recommended)
SNMPv2c (obsolete)
GUI ApplicationDigitally signed installation file using SHA-256, RSA 4096
IEEE 802.1X-2004RFC3748 - EAP Packet Format, Authenticator PAE, Supplicant PAE
MANAGEMENT
ApplicationSIMULand.v4
SNMPv3Encrypted
SWITCH
MAC address8 K
Max. frame size10240 B (Jumbo)
Packet buffer memory1 Mbit
SwitchingStore-and-forward, full wire-speed, non-blocking on all ports
Switching capacity4.6 Gbps
Standards and protocols, EMC and safety
EMC and safety
EN 55035EMC of multimedia devices - immunity requirements
EN 55032EMC of multimedia devices - emission requirements
EN 62368-1Safety requirements of Information technology equipment
EN IEC 63000The Assessment Of Electrical And Electronic Products With Respect To The ROHS
EN 61000-4-28 kVAir discharge
EN 61000-4-24 kVContact discharge
EN 61000-4-310 V/mRadiated HF field
EN 61000-4-42 kVBursty
EN 61000-4-51 kVShock impulses
EN 61000-6-2Immunity - industrial environment
EN 61000-6-4Emissions - industrial environment
Standards and protocols
IEEE 802.3i10BASE-T 10 Mbit/s (1.25 MB/s) over twisted pair IEEE 802.3u for 100BaseT(X) and 100BaseFX
EEE 802.3u100BASE-TX, 100BASE-T4, 100BASE-FX Fast Ethernet at 100 Mbit/s (12.5 MB/s) with autonegotiation
IEEE 802.3ab1000BASE-T Gbit/s ethernet over twisted pair at 1 Gbit/s (125 MB/s)
IEEE 802.3z1000BASE-X Gbit/s ethernet over optical fiber at 1 Gbit/s (125 MB/s)
IEEE 802.3acMax. frame size 1522 bytes (allow 802.1Q tag)
IEEE 802.3xFlow Control
IEEE 802.1pClass of Service
IEEE 802.1XPort-based Network Access Control (PNAC)
IEEE 802.1qVLAN tagging
SNMP v2c/v3Simple Network Management Protocols
IGMP v1/v2Internet Group Management Protocols
SNTPSimple Network Time Protocol
SMTPSimple Mail Transfer Protocol
RSTPRapid Spanning Tree Protocol
LAN-RING.v1, v2Ring topology with a very short time reconfiguration of max. 30ms
ManagementGUI SIMULandv4 - USB C / Encrypted management via LAN

Package contents

  • Switch
  • Mounting kit for mounting the switch on a DIN rail
  • Mounting kit for mounting the switch on a flat surface
  • Installation manual

Accessories

BX-1000-20-Wx-L

SFP modules SC/WDM 1000BASE-BX (2G) 20/2km SM/MM

BX-100-20-Wx-L

SFP SC/WDM 100BASE-BX (200M) 20/5km SM/MM modules

M-PPS-230/55

M-PPS power supplies with PFC function.

Pull-out shelves 19"/3U

The 19" SHELF-3U/IP-SU pull-out shelves are designed for fast and professional installation of LAN-RING industrial switches.

Pull-out shelves 19"/4U

The 19" SHELF-4U/IP-SU pull-out shelves are designed for fast and professional installation of LAN-RING industrial switches.

FAQ

What are the default passwords?

SNMPv3 (read and write)
Username:"master"
Authentication algorithm: SHA1
Authentication password:"mastermaster"
Private algorithm: AES128
Private password:"mastermaster"

SNMPv3 (read only)
Username:"user"
Authentication algorithm: SHA1
Authentication password:"useruser"
Private algorithm: AES128
Private password:"useruser"

SNMPv2c (read and write)
Community:"write"

SNMPv2c (read only)
Community:"read"

How can I restore the switch to factory settings?

For security reasons, there is no reset button on the switches. If you need to reset the switch to factory settings, you will need a USB C cable (B - older models) and SIMULand.v4 configuration software.

Procedure

Click USB in the Conectivity menu, click Reset (Factory Default) in the following window and reset the switch to factory settings.

Note: For Windows 8.1 and earlier operating systems, you may need to install the USB driver.

Will the IP address, mask and gateway change after a factory reset?

Yes. A USB factory reset will restore the device to factory settings.

Default parameters
IP address - printed on the switch label
Mask - 255.0.0.0
Gateway - 10.1.0.1

Where can I find the latest firmware version for the F series switch?

In Simuland.v4, which always contains the latest firmware available for the switch.

After upgrading the switch, the switch will be set to its default settings, except for the IP, mask, gateway and ring.



Will the configuration of the F-series switch be preserved after the FW upgrade?

Not really. After the switch upgrade, only the settings, IP, mask, gateway and ring will be preserved. The rest of the configuration will be default.

How is the compatibility of SFP modules from different manufacturers guaranteed ?

The mechanical and electrical parameters of SFP modules and slots are defined in the MSA (multi-source agreement). This ensures mutual compatibility between SFP module manufacturers and SFP slots of network elements. The SFP module includes an EEPROM. It stores information about the module type, supported speed, optical interface type, etc. The most widely used standards in IT are 100BASE-LX and 1000BASE-LX standards (LC connectors) with 2-fiber communication. This has probably also led to the fact that some commercial switches do not support the more modern single-fiber 100BASE-BX and 1000BASE-BX standards. Specifically, this refers to Byte 6 in the EEPROM (Ethernet Compliance Codes). For the above reasons, all BX-1000-...SFP modules have bit 1 (1000BASE-LX) set in Byte 6 and BX-1000-...SFP modules have bit 4 (100BASE-LX) set in Byte 6. The modules are then easily detected even by a switch that does not implement 100/1000BASE-BX support.

What do the W4 and W5 markings on SFP modules mean?

For modules with bidirectionaldata transmission over a singlefiber (wave multiplex), it is necessary to connect the optical modules correctlyto each other. Thismeans that, for example, inMETELWDM modules,the modulemarkedW4can only be interconnected with the modulemarkedW5. It is not possible to connect W4 with W4 or W5 with W5.

BX-100(0)-20-Wx-L
WavelengthsW4: TX:1310 / RX:1550 nm
WavelengthsW5: TX:1550 / RX:1310 nm

BX-10G-20-Wx
WavelengthsW4: TX:1270 / RX:1330 nm
Wavelengths W5: TX:1330 / RX:1270 nm

Does it affect how I insert SFP modules into SFP slots in the switch?

YES, ifyouare using the LAN-RING protocol. In terms of the LAN-RING protocol, the port with thelowerindex is thetransmitportand the port with thehigherindex is thereceiveport.Therefore,the rulemustbefollowedthat the optics will be connected from thelowerindex portto thehigherindex port.Therefore,inallswitchesin a ring,SFP modulesmustbeinserted in thesameway, e.g., an SFP with theW4 tag at the endwill be inserted into slot G1and anSFP with theW5 tag will be inserted into slot G2.

NO, ifyoudisable the LAN-RING protocol oruse the RSTP protocol. Inthiscase,it does not matter how the SFPs are inserted.

Do the SFP slots of LAN-RING switches also support SFP modules with RJ45 connectors?

Yes, they have support.

For example, we can recommend the following tested types:
MICROTIK S-RJ01
BEL SFP-1GBT-05

RJ45 SFP modules are not supported in the 2G-2C.8S.0.0.F(G)-BOX switch on ports P1-P8.

What encryption and authentication methods are supported on the switch for SNMPv3?

SNMPv3-enabled switches have SHA1 and AES128 methods enabled by default. You can change to SHA512 and AES256c in the configuration.

What is the maximum recommended load for 20G/2G/200M optical ports?

The recommended line load is 75% of the total data throughput.

Can LAN-RING also be used as a bus system?

Yes, of course, this option is available for the LAN-RING system. Only in this case, we recommend disabling the ringing function in the switch configuration (None) or switching LAN-RING to Rapid Spanning Tree Protocol (RSTP-M).

Extending UTP/FTP to more than 100 m?

If the distance between the camera and the switch is longer than 100 m, we use a LAN-EXT solution. This is a device that can repeat the route of the link, even several times in a row.

LAN extenders

Is the 150A (8/20µs) surge protection level sufficient for outdoor applications?

To answer this question, it is useful to refer to EN62305-1 (Lightning protection, Part 1 - General principles).

Switches, connected metallic cabling and equipment (cameras) should be located in the LPZ0B zone, i.e. in a zone protected by a lightning arrester against direct lightning strikes.

Table E.2 gives the expected utility current for LPL I-II (Lightning Protection Levels) under indirect lightning strike up to 100A (8/20µs) and for LPL (III-IV) up to 50A (8/20µs).

However, the standard recommends that magnetic cable shielding be included in the protection of electronic systems.

Therefore, if the switch will be in our OH65 steel enclosure and routed through the inside of a steel pole or steel protector (all under the arrester and grounded), 150A (8/20µs) is sufficient protection.

If any of the above precautions are not followed, switches with 1000A (8/20µs) protection on the FE ports must be used.

The most important thing is to make every effort to prevent direct lightning strikes, where the standard assumes a current of up to 2000A (10/350µs). Such a current is a major problem for the RJ45 connectors themselves. In our experience, the maximum level of current that RJ45 contacts can withstand is somewhere between 1-2kA (8/20µs).

Different RSTP protocol behaviour

I have observed different RSTP behavior of your switch compared to a competing switch in the following situation. There are two switches in the network connected to each other by a fiber optic link. Egress filtering is enabled on one of these devices (Egress filtering: No unknown destination address). However, only one switch is available at this time because the link is blocked by the RSTP protocol. However, if I replace the unavailable switch with a competing device with a similar configuration, both switches are available.

Egress filtering causes BPDU frames to be sent only in one direction because the other direction is filtered. This causes the first switch to know about the second, but the second switch does not know about the first. This condition is handled by the so-called "contention mechanism". This was incorporated into the 802.1D-2004 standard and solves the problem you mentioned by blocking the link to prevent loops. Our implementation of the RSTP protocol complies with this standard. Other vendors may have a different implementation of the RSTP protocol based on an older standard that did not include a "dispute mechanism".

Is it possible to disable a switch port based on input from a remote device?

Yes, the switch allows you to respond to the input state of a remote device by data shutting down the port. PoE remains active, so there is no need to wait for camera initialization on recovery, it is available immediately.