Perle - Model IRG7000 -Enterprise-Class Edge 5G Router & Gateway

Perle IRG7000 5G Routers provide fast, secure, and reliable managed 5G network connectivity where wired options are impossible to deploy or require a backup. This is crucial for enabling a wide range of applications while ensuring the highest degree of security to protect the integrity of critical services. Reduce the cost of downtime and service calls, and bringing distributed sites online faster. With support for Data, SMS, Voice, and Video, an IRG7000 and can be integrated into any enterprise cloud, building, industrial, or mobile location network infrastructure.

• Building and process automation controllers, Internet of Things (IoT)
• Smart grid assets (meters, switches, controllers), Telco infrastructure controllers
• SCADA, Distribution management systems, Remote data loggers, flow meters, sensing equipment
• Digital signage, ATMs, POS, Kiosks, Temporary "pop-up” stores
• Video surveillance controllers, IP cameras, Mobile hotspots
• Fleet management, GPS/GNSS Location tracking, Taxis, Public Service Vehicles, vehicle area networking (VAN)
• Public Service Vehicles, First responders, Command Centers
• Transit systems, Buses, Metro Subways, Railways

Edge Routers with Enterprise-Grade Routing Capabilities

Perle does not charge any annual subscription or license fees to maintain operation, download software updates, or access features. IRG7000 routers have all the of the routing functionality found in the most advanced enterprise routers included in the base price of the product. Extensive routing protocol support means they can be easily deployed in hierarchical or large mesh network structures. A fast CPU and lots of memory ensure the router can handle a consistent and heavy workload all day long.

Integrated Zone-Based Policy Firewall

The IRG7000 built-in firewall offers intuitive policies for multiple-interface routers to protect inside networks from unauthorized access by users on an outside network. The firewall also protects inside networks from each other, for example, by keeping a human resources network separate from a user network. If there are network resources that need to be available to an outside user, such as a web or FTP server, these resources can be placed on a separate network behind the firewall, in a demilitarized zone (DMZ). The firewall will allow limited access to the DMZ, but because the DMZ only includes the public servers, any attacks there will not affect the inside network. The firewall controls when inside users access outside networks (for example, access to the Internet), by allowing only certain addresses out, by requiring authentication or authorization, or by coordinating with an external URL filtering server. A deny-all (blacklist) policy can be used to prohibit traffic between firewall security zones until an explicit policy is applied to allow desirable traffic.  Router ports are assigned to zones and firewall inspection policies are applied to traffic moving between the zones. Firewall inter-zone policies come with considerable flexibility and granularity so that different firewall inspection policies can be applied to the same router port.

High Availability Access and Enhanced Security with 2 Factor Authentication

With multiple concurrent VPN sessions and 2 Factor Authentication, Perle IRG7000 Routers enable secure communications to multiple back-end systems.

• Remote authentication (RADIUS, TACACS+, LDAP) management, integrates with enterprise-grade systems to control access to devices in the field.
• Software image CRC control protects the software upgrade process against unwanted software corruption and malware
• High-speed OpenVPN, IP Security (IPsec), Triple Data Encryption Standard (3DES), and Advanced Encryption Standard (AES) encryption for data privacy over the Internet.
• Intrusion prevention enforces security policies in a large enterprise or service provider networks.
• Perle`s cloud-based centralized management solution puts all your network and IT infrastructure into a single application and provides secure reliable access and visibility during normal operations and critical network failures. Scalable to suit any business requirement, Cloud Centralized Management reduces human error and guarantees repeatability.

GPS / Global Navigation Satellite System (GNSS) Included

GNSS (GPS, Galileo, and Glonass) are included by default in all IRG7000 Routers and Gateways. This enables real-time location tracking of remote assets. Also, you can get real-time network clock updates in the router, or any attached equipment, for accurate time-stamp usage in time-sensitive applications.

Cutting-edge design certified for a wide range of deployment scenarios

High-performance components and features enable customers to take advantage of broadband network speeds while running secure concurrent data, voice, and video services. All IRG7000 routers have high MTBF rates because they are developed with certified high-end components to provide superior reliability and uninterrupted operation.

WAN Connectivity :  5G and 10/100/1000 Ethernet

Central Management Configuration

Perle IRG7000 Routers and Gateways use PerleView, a web-based server configuration tool that simplifies setup and deployment. Centralized management capabilities give network managers visibility and control over network configurations at remote sites. Other Perle IRG7000 management capabilities include:

• Fast Setup - Available when the router is in factory default (initial) configuration
• Web Manager - Available using a browser
• CLI - Command Line Interface
• RESTFul API - a standard for interactive Web services
• SNMP - Using a Network Management System
• No ongoing monthly or yearly licensing fees.

Serial Port

Perle IRG7000 Routers come with an IOLAN Secure Device Server built-in for a secure serial to IP (Ethernet/Cellular) connectivity applications. This makes it ideal for applications that require remote device console management, data capture, or monitoring. Some of the supported applications are:

• TrueSerial® packet technology delivers the most authentic serial connections across Ethernet for serial protocol integrity.
• Serial Port Access: connect directly using Telnet / SSH
• Terminal Server: Telnet, SSH, Rlogin, LPD, RCP printer
• Serial machine to IP (Ethernet)
• Raw serial data over Ethernet/Cellular/TCP/IP/UDP
• Virtual modem simulation
• TruePort redirector
• ModBus, DNP3 and IEC-870-5-101 encapsulation
• Line access permissions via TACACS+ and RADIUS servers
• Dial direct serial: PPP, PAP/CHAP, SLIP

All features and functionality are included in the base price of the product. There are no additional costs or fees.
Functionality

• Gateway (IP Passthrough Bridging), Switching, Routing

Routing / Switching Protocols

• IPv4/IPv6, Static Routing, RIP/RIPNg, NAT, OSPFv3, BGP-4, IPv6 Encapsulations (GRE, 6in4), VRRP, Port Routing, STP, MSTP, PPPoE V6, LLDP

IP Applications

• DDNS, DNS Proxy / Spoofing, relay, client, Opt. 82,
• NTP & SNTP (versions 1, 2, 3, 4) with support from GPS, GNSS & Network Carrier timing
• DHCP / DHCPv6 server & BOOTP for automated network-based setup

VLAN & VPN

• VLAN, IPSec, OpenVPN, VPN Failover (16 concurrent VPN tunnels)

GPS & GNSS Reports

• GPS for tracking equipment over RS232, USB, and Ethernet
• NMEA 0183 v3.0, TAIP, CSV

LTE Applications

• Private LTE / CBRS - ability to select a specific band for LTE connection

Firewall & Security

• Built in Zone-Based Policy Firewall
• Access Control Lists (list & ranges & time)
• Filter based on MAC Address, IP, Port, Protocol, User
• AAA, LDAP, Radius, TACACS+
• 802.1x
• Layer 2 MAC address filtering
• Certificate Support (X.509)
• Port Forwarding
• BGP Communities

Security Features

• Security via remote authentication (LDAP, Radius and TACACS+)
• Trusted host filtering (IP filtering), allowing only those hosts that have been configured in the host table access to the router.
• Idle LTE port timers, which close a connection that has not been active for a specified period of time
• Ability to disable services (for example, Telnet, TruePort, Syslog, SNMP, Modbus, HTTP) for additional security
• Ability to individually disable network services that won’t be used by the SSH client/server connections (SSH 1 and SSH 2)
• Logging via syslog
• Ability to disable Ping responses
• Ability to setup Access Lists (ACL’s) to restrict traffic
• Ability to set up firewalls to restrict incoming and outgoing packets
• SSH client/server connections (SSH 1 and SSH 2)
• SSL/TLS client/server data encryption (TLSv1/1.1/1.2 and SSLv2)
• Ability to setup Virtual Private Networks (VPNs)
• Wireless cellular security using PAP or CHAP authentication
• Dynamic DNS with DYNDNS.org
• Domain Name Server (DNS) support
• Email alert notification
• SSH connections (supported ciphers are Blowfish, 3DES, AES-CBC, AES-CTR, AES-GMC, CAST, Arcfour and ChaCha20-Poly1305)
• SSL/TLS connections
• RIP authentication (via password or MD5)
• OSPF
• 2F Authentication
• Management Access Control
• SNMPv3
• DMZ
• FIPS 140-2
• Secure HTTP/HTTPS/FTP/Telnet Authentication Proxy

Logging, Reporting & Alerts

• Sys Log, Event Type, Report Type, Alerts & Monitoring, Triggers Status Screen Report, Data Usage, Diagnostic

Management

• PerleVIEW Management, WEB (HTTP/HTTPS), SNMPv1/v2/v3, RESTful API, SMS Control, Load Balancing, CLI/Piping, Login Banner, E-mail, Ping, Telnet, FTP, Connection on Demand
• Network Assist: This Windows-based desktop application helps busy IT managers configure and monitor the status of deployed Perle devices.
• Automatic check for software updates.
• Software updates available over FTP, HTTP, HTTPS, SCP, SFTP, and TFTP

Power Management (General)

• Power Processor Saving Mode – this feature optimizes idle power consumption, saving energy by reducing performance where possible.
• Power Saving Features including; LED power saving mode, Smart Standby Mode, Power saving strategies such as turning off unused interfaces (USB, Serial, Ethernet), turning off GPS and adjusting the Ethernet rate.
• Operating Power Modes
• Standard – When power is applied to the router, it will power up. All inputs are ignored (from a power up and Smart Standby perspective). This is the default.
• Smart Standby Mode – you can configure a combination of one or two user defined conditions to determine when the router is powered up and when it goes into Smart Standby Mode.

Power Management (Ignition Sense)

• Configurable time delay for shutdown / start based on vehicle ignition status
• Low Voltage Standby function to prevent battery drain
• Operating Power Mode (Ignition mode) – this mode monitors the ignition input and goes in and out of Smart Standby based on the voltage of the ignition input. When the voltage on the ignition input goes below a user pre-defined threshold, the router will be powered down into Smart Standby Mode. When the voltage on the ignition input goes above the Perle Wireless LTE Router pre-defined value the power will be restored. You can configure a combination of inputs and schedule to control Smart Standby Mode.

GPIO Capabilities

• One GPIO configurable as high side pull-up / dry contact, analog input, digital input, low side current sink output, digital output/open drain, or Pulse Counter.
• One GPIO configurable as Vehicle ignition sense or analog input
• Two Digital Inputs configurable as high side pull-up / dry contact, digital input, or Pulse Counter
• One normally open (NO) relay contact

Serial Port Capabilities

• Access: connect directly using Telnet / SSH
• Terminal Server: Telnet, SSH v1 and v2, Rlogin, Auto session login, LPD, RCP printer
• Serial to Ethernet: Tunnel raw serial data across Ethernet - clear or encrypted, RAW serial data over TCP/IP/UDP, packetized data, virtual modem, TruePort com/tty redirector, TrueSerial packet technology, RFC2217 transport & RS232 control signals
• Industrial Protocols Encapsulations: ModBus, DNP3 and IEC-870-5-101, ModBus TCP Gateway
• Remote Access: PPP, PAP/CHAP, SLIP