Hirschmann EAGLE One Firewall Installation and Configuration Guide

External fuse requirements (see manual page 51):

When using a single power supply, the 48V system uses a 1~2A slow fuse; 1~4A for 24V system; 1~5A for 12V system

When dual redundant power supply is used, the rated value of each fuse can be halved

3.2 Signal Contact (FAULT)

The contact is a normally closed relay, which disconnects in case of a fault and is used for remote alarm. The triggering conditions include power loss, internal failure, port link interruption, temperature exceeding the limit, or ACA adapter unplugged. Electrical parameters: maximum 1A/60V DC or 30V AC (resistive load), SELV/ES1。

3.3 Digital Input (2-pin Terminal)

The front panel of the device is equipped with a 2-pin digital input terminal (torque 0.34Nm) for connecting external sensors (such as door switches and temperature alarms) to achieve remote status acquisition

Input voltage range: -32~+32V DC

Nominal value:+24V DC

High level (state "1"):+11~+30V DC

Low level (state "0"): -0.3~+5V DC

Maximum input current: 15mA

Compliant with IEC 61131-2 Type 3 standard

Chapter 4: Network Ports and Fiber Optic Connections

4.1 Port Definition and Roles

Port 1 (internal/trusted port): Connect to the production network or device that needs protection

Port 2 (external/untrusted port): connect to external network (office network, Internet or remote access point)

The two ports are physically completely independent and carry different security zones. In the factory state, firewall rules allow internal to external traffic and prohibit external to internal traffic.

4.2 Twisted pair port (RJ45)

Support 10/100BASE-TX, Auto negotiation, Auto polarity, Auto crossover (MDI/MDI-X adaptive)

Maximum length of 100m (Cat5e)

Pin definition: MDI-X mode (1=RD+, 2=RD -, 3=TD+, 6=TD -)

4.3 Fiber port (DSC multimode)

Support 100BASE-FX, default 100M full duplex

Multimode fiber (50/125 µ m or 62.5/125 µ m), wavelength 1300nm

Transmission distance: 50 µ m fiber optic 0-5km, 62.5 µ m fiber optic 0-4km (including 3dB system margin)

Strict rule: Multimode fiber (MM) can only be connected to multimode fiber and is prohibited from being mixed with single-mode (SM).

Chapter 5 LED Status Diagnosis

5.1 System Status LED

Meaning of LED color status

Power green constantly on, dual power supply is normal

Yellow is always on, only one power supply is normal

Turn off power supply under voltage or missing

The device is ready and configurable with a green constant light status

The red constant light signal contact is disconnected (alarm state)

Turn off the device while it is starting or not ready

RR (router redundancy) green constant light device as the main mode

The yellow slow flashing device is in standby mode

ACA green flashing reading and writing configuration memory

5.2 Port Status LED (L/D)

Green constantly on: Link is valid

Green flash (3 times/cycle): The port is managed to be closed

Yellow flashing: Data transmission and reception in progress

Chapter 6 Initial Access and Basic Configuration

6.1 Factory state and IP address

Factory working mode: Transparent mode

Default IP address: 192.168.1.1/24 (HTTPS access)

Factory firewall rules: Allow internal to external traffic, prohibit external to internal traffic

6.2 First login steps

Connect the configuration computer to port 1 (internal port) of EAGLE One and set the computer IP to 192.168.1.x/24 (such as 192.168.1.10).

Enter in the browser https://192.168.1.1 (Note that it is HTTPS).

The browser will prompt a security certificate warning, select 'Continue' or 'Accept Risk'.

Login credentials:

Username: admin

Password: private (case sensitive)

Mandatory security measures: The default password must be changed immediately after the first login. The new password should be at least 8 characters long, including uppercase and lowercase letters, numbers, and special characters. If you forget your password, you need to reset it through the System Monitor.

6.3 Alternative Configuration Methods

V. 24 serial port (RJ119600bps, 8N1): Enter CLI through VT100 terminal, suitable for scenarios where IP address is unknown or network is unreachable.

HiDiscovery Protocol: Discovering devices and assigning IP addresses within the broadcast domain through HiVision or HiDiscovery tools.

ACA21 USB configuration adapter: Batch loading configuration files and firmware updates.

6.4 Introduction to Three Operating Modes

Transparent mode (factory default): The device operates as a layer 2 bridge and only forwards IP and ARP packets according to firewall rules. No need to modify existing network topology and IP subnet planning, plug and play.

Router mode: The device operates as a layer three router, with internal and external networks belonging to different subnets, providing NAT, IP Masking, 1-to-1 NAT, and port forwarding functions.

PPPoE mode: a variant of the router mode. The external port connects to the DSL modem through the PPPoE protocol, which is suitable for Internet access scenarios.

Chapter 7 Overview of VPN and Firewall Functions

7.1 Firewall Function

EAGLE One adopts Stateful Inspection technology and supports the following security features:

State based packet filtering (inbound/outbound traffic)