M!DGE – Cellular router

• Switch / Router
  – M!DGE Ethernet ports can be configured either as Switch (one IP address) or Router (up to four physically separated ports with individual IP addresses). Any combination of switched/routered port is possible
• Terminal server
  – 2 independent sessions
  – encapsulates serial protocol to TCP (UDP) and vice versa – suitable for IP and serial RTU’s combination within one network
• Subnets
  – IP aliases – one additional IP address (alias) for each LAN and LAN/VPN combination possible
• VLAN
  – 802.1Q – up to five VLANs can be assigned
  – M!DGE management can be done over VLAN
• NAPT
  – masquerading, source and destination (IP/Mask/Port) translation supported
• Virtual tunnels
  GRE – end-to-end tunneling protocol
  PPTP – basic encryption and authentication features, end-to-end
  IPsec – cryptographic end-to-end 
  OpenVPN – cryptographic single server to multiple clients
• QoS
  – prioritize critical traffic (e.g. SCADA) over lower priority applications (e.g. management)
  – 802.1p and DiffServ (DSCP) supported
• Static and dynamic routing
  – Static routing
  – Extended routing – policy based routing
  – Multipath routes – weighted IP session distribution for particular subnets across multiple interfaces
  – OSPF (Open Shortest Path First) protocol – allowing to be added to a network of OSPF routers
  – BGP (Border Gateway protocol) – peering with other BGP enabled routers

Serial

• Modbus, IEC101, DNP3, Comli, DF1, Profibus, Async Link, C24, Cactus, RP570, Siemens 3964(R) and others
• Serial SCADA protocol addresses are mapped to M!DGE IP addresses

Ethernet

• TCP (UDP) protocols (e.g. IEC104, DNP3/TCP) can be handled transparently or using Terminal server
• Embedded Modbus RTU / Modbus TCP converter

Device 

• Digitally signed FW

Management

• HTTPS (HTTP) for Web interface
• SSL (X.509) certificate for HTTPS
• SSH for CLI interface
• SNMP v3 (v1, v2c)

Access Control

• Role-based access control (RBAC)
  • User – read-only
  • Admin – full access

• RADIUS – authentication using remote RADIUS server
• Multiple failed login alert
• Continuous improvement, no backdoor at all

 Data Security

• IPsec
  • Cryptographic end-to-end tunnelled security

• OpenVPN

• • Cryptographic single server to multiple clients tunnelled security

Firewall

• Fully featured standard Linux firewall
• Layer 2 – MAC, Layer 3 – IP, Layer 4 – TCP/UDP/…
• All unwanted traffic is blocked at the network boundary

• Basic IP knowledge is sufficient
• Intuitive Web interface
• Remote (automatic) FW upgrade possible over-the-air
• Automatic FW upgrade from flash disc
• CLI via SSH
• SNMP v3 (v1, v2c)
• SMS management

• Embedded diagnostics & network management
• Monitoring – save-to-file analysis of all Eth interfaces
• Graphs – Eth/WAN network traffic
• SNMP based remote monitoring => no proprietary Network Management Software required
• SNMP Notification (either SNMP Traps or acknowledged SNMP Informs) generated upon configured events
• External Flash disc – Automatic FW upgrade, configuration backup/restore, user specific behaviour
• SMS / E-mail Event notification

• 3 year warranty
• – 40 to +70 °C
• Industrial hardened design
• Heavy-duty industrial components
• Components sourced exclusively from manufactures / authorised dealers
• Metal case
• VRRP –  Virtual Router Redundancy Protokol
• Fallback management
• Connection supervisory with Automatic connect recovery

SW customization

• SDK – Software Development Kit
  • Simple and fast way to implement customer-specific functions and applications
  • SDK host defining the runtime environment (a sandbox)
  • SDK interpreter language (C-like scripting language)
  • SDK API allows to access HW interfaces (e.g. COM ports, I/O ports, external storage media) and also to configure (e.g. sending SMS messages, E-mails)

HW models

There are two slots which can be used for HW expansion:

• mPCIe slot
  • Standard full size mini PCI Express slot
  • The second cellular module
  • GPS with time pulse (PPS) output

• Proprietary extension slot
  • 8 pin connector
  • COM/IO expansion board: RS232/RS485 + 1× DI, 1× DO

SW keys

SW authorization keys allow to use or to add advance features only when and where needed

• LXC – Linux Container
  • Virtual embedded Linux instance for implementation of user specific services

• SERVER – Server clients extension

• • Extension of OpenVPN, DHCP, NAPT, Firewall, Static routes, etc. clients and rules
  • Details

Ordering codes

G – GPS (GNSS) module, Part.No.: mPCIe-GPS
Note: just one option for mPCIe slot is possible

Bands, Slot, mPCIe positions are used only for M!DGE2.

SW keys – if unit is ordered with SW keys, all keys are specified in this bracket. SW key activates the feature, which is under the license. SW key can be ordered independently for specific S/N anytime later on.

Possible values M!DGE2:
LXC – Linux container, Part No.: M!DGE2-SW-LXC
SERVER – Server clients extension, Part No.: M!DGE2-SW-SERVER

Type – specific product type for which type approvals like CE, FCC etc. are issued

Possible values:
M!DGE, M!DGE2

Order code – the complete product code, which is used on Quotations, Invoices, Delivery notes etc.

In order to find out the correct Order code, please use RACOM WebService.

Technical parameters are subject to change without prior notification.

Economy antenna

• 4G/3G/2G, all bands
• 0 dBi
• Feedline cable RG174, 3m, SMA/F
• -40°C to +85°C
• Suitable also for outdoor installation
• Datasheet, Part No.: ANT-LTE-W1
• Manufactured by Matron

MIMO antenna

• 4G/3G/2G, 2 x MIMO
• 2 dBi
• Feedline cable RG174, 3m, 2 x SMA/F
• -40°C to +65°C
• Datasheet, Part No.: ANT-LTE-AB0727B
• Manufactured by Myiot

Antenna GPS

• GNSS
• Active 3-5 V
• Feedline cable, 5m, 1 x SMA/F
• -40°C to +85°C
• Datasheet, Part No.:  ANT-GPS-MS-SMA
• Manufactured by Ublox