M!DGE – Cellular router

• Switch / Router
  – M!DGE Ethernet ports can be configured either as Switch (one IP address) or Router (up to four physically separated ports with individual IP addresses). Any combination of switched/routered port is possible
• Terminal server
  – 2 independent sessions
  – encapsulates serial protocol to TCP (UDP) and vice versa – suitable for IP and serial RTU’s combination within one network
• Subnets
  – IP aliases – one additional IP address (alias) for each LAN and LAN/VPN combination possible
• VLAN
  – 802.1Q – up to five VLANs can be assigned
  – M!DGE management can be done over VLAN
• NAPT
  – masquerading, source and destination (IP/Mask/Port) translation supported
• Virtual tunnels
  GRE – end-to-end tunneling protocol
  PPTP – basic encryption and authentication features, end-to-end
  IPsec – cryptographic end-to-end 
  OpenVPN – cryptographic single server to multiple clients
• QoS
  – prioritize critical traffic (e.g. SCADA) over lower priority applications (e.g. management)
  – 802.1p and DiffServ (DSCP) supported
• Static and dynamic routing
  – Static routing
  – Extended routing – policy based routing
  – Multipath routes – weighted IP session distribution for particular subnets across multiple interfaces
  – OSPF (Open Shortest Path First) protocol – allowing to be added to a network of OSPF routers
  – BGP (Border Gateway protocol) – peering with other BGP enabled routers

Serial

• Modbus, IEC101, DNP3, Comli, DF1, Profibus, Async Link, C24, Cactus, RP570, Siemens 3964(R) and others
• Serial SCADA protocol addresses are mapped to M!DGE IP addresses

Ethernet

• TCP (UDP) protocols (e.g. IEC104, DNP3/TCP) can be handled transparently or using Terminal server
• Embedded Modbus RTU / Modbus TCP converter

Device 

• Digitally signed FW

Management

• HTTPS (HTTP) for Web interface
• SSL (X.509) certificate for HTTPS
• SSH for CLI interface
• SNMP v3 (v1, v2c)

Access Control

• Role-based access control (RBAC)
  • User – read-only
  • Admin – full access

• RADIUS – authentication using remote RADIUS server
• Multiple failed login alert
• Continuous improvement, no backdoor at all

 Data Security

• IPsec
  • Cryptographic end-to-end tunnelled security

• OpenVPN

• • Cryptographic single server to multiple clients tunnelled security

Firewall

• Fully featured standard Linux firewall
• Layer 2 – MAC, Layer 3 – IP, Layer 4 – TCP/UDP/…
• All unwanted traffic is blocked at the network boundary

• Basic IP knowledge is sufficient
• Intuitive Web interface
• Remote (automatic) FW upgrade possible over-the-air
• Automatic FW upgrade from flash disc
• CLI via SSH
• SNMP v3 (v1, v2c)
• SMS management

• Embedded diagnostics & network management
• Monitoring – save-to-file analysis of all Eth interfaces
• Graphs – Eth/WAN network traffic
• SNMP based remote monitoring => no proprietary Network Management Software required
• SNMP Notification (either SNMP Traps or acknowledged SNMP Informs) generated upon configured events
• External Flash disc – Automatic FW upgrade, configuration backup/restore, user specific behaviour
• SMS / E-mail Event notification

• 3 year warranty
• – 40 to +70 °C
• Industrial hardened design
• Heavy-duty industrial components
• Components sourced exclusively from manufactures / authorised dealers
• Metal case
• VRRP –  Virtual Router Redundancy Protokol
• Fallback management
• Connection supervisory with Automatic connect recovery

SW customization

• SDK – Software Development Kit
  • Simple and fast way to implement customer-specific functions and applications
  • SDK host defining the runtime environment (a sandbox)
  • SDK interpreter language (C-like scripting language)
  • SDK API allows to access HW interfaces (e.g. COM ports, I/O ports, external storage media) and also to configure (e.g. sending SMS messages, E-mails)

HW models

There are two slots which can be used for HW expansion:

• mPCIe slot
  • Standard full size mini PCI Express slot
  • The second cellular module
  • GPS with time pulse (PPS) output

• Proprietary extension slot
  • 8 pin connector
  • COM/IO expansion board: RS232/RS485 + 1× DI, 1× DO

SW keys

SW authorization keys allow to use or to add advance features only when and where needed

• LXC – Linux Container
  • Virtual embedded Linux instance for implementation of user specific services

• SERVER – Server clients extension

• • Extension of OpenVPN, DHCP, NAPT, Firewall, Static routes, etc. clients and rules
  • Details

Ordering codes

Trade name – trade and marketing name of the product. This name is used for the all products within the same product family.
Possible values: M!DGE

Gen. – generation of the product of specific Trade name. The very first generation doesn’t have any number in this position.
Possible values: none, 2

Bands – frequency bands
Possible values: E, P, A, U
E – 4G/3G/2G, Europe, Middle East, Africa
P – 4G/3G/2G, Asia, Pacific, South America
A – 4G/3G/2G, Americas
U – only 3G/2G, world wide
Note: ‘P’ and ‘A’ are available for high volumes only

Slot – Proprietary extension slot
Possible values:
N – not used
C – The second RS232/485 + 1×DI,1×DO, Part No.: M!DGE2-HW-COM/IO

mPCIe – mPCIe slot
Possible values:
N – not used
E – The second cellular module, Bands E, Part No.: mPCIe-E
P – The second cellular module, Bands P, Part No.: mPCIe-P
A – The second cellular module, Bands A, Part No.: mPCIe-A
U – The second cellular module, Bands U, Part No.: mPCIe-U
G – Internal GPS (GNSS) module, Part No.: mPCIe-GPS
Note: just one option for mPCIe slot is possible

Bands, Slot, mPCIe positions are used only for M!DGE2.

SW keys – if unit is ordered with SW keys, all keys are specified in this bracket. SW key activates the feature, which is under the license. SW key can be ordered independently for specific S/N anytime later on.
Possible values M!DGE2:
LXC – Linux container, Part No.: M!DGE2-SW-LXC
SERVER – Server clients extension, Part No.: M!DGE2-SW-SERVER

Type – specific product type for which type approvals like CE, FCC etc. are issued
Possible values:
M!DGE, M!DGE2

Order code – the complete product code, which is used on Quotations, Invoices, Delivery notes etc.

In order to find out the correct Order code, please use RACOM WebService.

Economy antenna

• 4G/3G/2G, all bands
• 0 dBi
• Feedline cable RG174, 3m, SMA/F
• -40°C to +85°C
• Suitable also for outdoor installation
• Datasheet, Part No.: ANT-LTE-W1
• Manufactured by Matron