Hirschmann EAGLE One Firewall Installation and Configuration Guide

Hirschmann EAGLE One Industrial Firewall Installation, Deployment, and Security Protection Configuration Guide

Introduction: Guardians of Industrial Network Boundary Security

With the development of Industry 4.0 and intelligent manufacturing, the connection between production network and office network, as well as the Internet, is increasingly close, and the traditional isolation strategy has been unable to meet the security requirements. As the first line of defense at the network boundary, the correct deployment and configuration of industrial firewalls are directly related to the secure operation of production systems. The Hirschmann EAGLE One series industrial firewall is designed specifically for industrial automation environments, supporting transparent mode, router mode, and PPPoE mode, with built-in Stateful Inspection firewall IPSec VPN、 Redundant routing and multiple authentication mechanisms can effectively isolate security sensitive production units from external networks. This article is based on the official installation manual, systematically reviewing the hardware installation, redundant power wiring, signal contacts and digital input configuration, SFP fiber port selection, initial login, and basic firewall policy settings of EAGLE One, to help engineers quickly complete the on-site deployment of security equipment.

Chapter 1 Product Positioning and Model Decoding

1.1 Application scenarios of industrial firewalls

The core task of EAGLE One equipment is to establish a controlled connection between the internal trusted network (production unit) and the external untrusted network (office network, Internet or remote service access). Typical applications include:

Protecting individual production units in a flat enterprise network

Isolate critical production areas in routing networks

Secure connection between production units and office networks through public networks

Provide protected service access channels (remote maintenance)

Communication of common components for separating machine equipment

This device supports 2 100Mbps Ethernet ports (Port 1 is the internal/trusted end, and Port 2 is the external/non trusted end), and each port can be equipped with RJ45 twisted pair or multi-mode DSC fiber (100BASE-FX) to meet the connection requirements of different distances and environments.

1.2 Model coding rules

Product model positions 14-15 define port media (see Table 1 in the manual):

T1: RJ45 10/100M twisted pair port

M2: Multi mode fiber DSC interface (100BASE-FX)

S2: Single mode fiber DSC interface (100BASE-FX)

For example, EAGLEONE-0200M2T1 indicates that port 1 is multimode fiber and port 2 is RJ45 twisted pair.

The temperature range is defined by position 18: S=standard 0~60 ° C, T or E=extended -40~70 ° C. The device supports wide voltage inputs of 9.6~60V DC or 18~30V AC, and has built-in redundant power inputs to meet the diverse power supply conditions of industrial sites.

Chapter 2 Mechanical Installation and Grounding Standards

2.1 Installation method and space requirements

EAGLE One supports two installation methods:

DIN rail installation (35mm, compliant with DIN EN 60715): Hang the upper hook of the device on the rail, pull down the lock buckle and press it in, release the lock buckle to lock it. When disassembling, insert a screwdriver into the locking groove and pull it downwards while lifting the device upwards.

Wall mounted vertical installation (optional installation board, attachment 943 971-003): Fix the wall mounted board on a flat wall, and then clip the equipment into the installation board.

Mandatory heat dissipation spacing: Keep at least 10cm (4 inches) gap above and below the device, and at least 2cm (0.8 inches) gap on each side to ensure natural convection heat dissipation. The device is designed without a fan, and the surface of the housing may be hot when the ambient temperature is above 60 ° C. It should be avoided to touch it during operation.

2.2 Functional grounding

The front panel of the device is equipped with an independent grounding screw, which must be grounded before connecting any other cables. When disconnecting, the grounding wire must be removed last. The cross-sectional area of the grounding wire should be at least the same as that of the power supply wire. The shielding layer of the shielded twisted pair cable has been internally connected to the front cover plate as a grounding conductor.

Chapter 3 Power Supply and Signal Interface Connection

3.1 6-pin power/signal terminal block

The top of the device provides a 6-pin pluggable screw terminal block (torque 0.51Nm), which also supports redundant power and signal contacts:

Pin symbol function

1+24V (P1) power input 1 positive pole (DC) or external conductor (AC)

2 0V power input, 1 return line (DC) or neutral line (AC)

3 FAULT signal contacts (normally closed relay)

4 FAULT signal contact common terminal

5V power input with 2 loops

6+24V (P2) power input 2 positive poles

Voltage range:

DC: Rated 12~48V DC, allowing 9.6~60V DC (Class 2)

AC: Rated 24V AC, allowing 18-30V AC (Class 2)

Redundant power supply: Two input internal decoupling, no load balancing, automatically selecting the higher voltage. If only a single channel is used, the device will continue to report power loss alarms, which can be resolved by managing configuration blocking or simultaneously connecting two channels.