Ox-Bras
The Cyber Security Router
in Ethernet/IP for BMS
The Ox-Bras router is a Switch Router that can be integrated into a
Ethernet IP architecture. It offers the security of installations
IPV4 and IPV6 renovation and is installed in a cupboard
or a box close to its uses
GENERAL CHARACTERISTICS
POWER
The Ox-Bras comes with redundant 12V or 24V DC or AC power supplies as standard. The reduced power consumption of 12VA allows its unventilated housing to be efficient and noiseless.
CONNECTIVITY
It can be used as a basis for your IP network infrastructure, or integrated into an existing architecture with standard products on the market. The connections of the main loop are either copper over RJ45 or fibre optic via SFP transmitter. The Ox-Bras are used in a cluster to increase security, reliability and energy control.
EASY DEPLOYMENT
Equipment on both floor loops is automatically scanned and addressed by one or two local DHCP servers. The spanning tree of the floor loops will ensure redundant communication.
A CSV import/export is available to identify each device, position it in the topology and assign it a fixed IP address. IPV6 addressing coupled with a local DNS server makes it possible to give a name to each device in the network and no longer work with complex IP addresses.
PARAMETERIZATION CONFIGURATION
The configuration is done via a web page that can be deactivated for commissioning. The configuration is distributed on the cluster in an encrypted database that allows a router to be reinstalled very quickly. An SSH console is also available.
RELIABILITY AND REDUNDANCY
Some IT or BMS services are more sensitive than others when a part of the installation falls out. In the cluster, services such as routing tables, VPN server, Config Server, will be “floating”. When the master is unavailable, the Ox-Bras in the following order of priority will take over its role.
SECURITY
The support of the 802.1X access control protocol in the Ox-Bras definitely puts the emphasis on security.
The management of VLANs according to the 802.1Q protocol. Trunk mode on the building network and by MAC address for floor equipment that does not support 802.1Q.
A colour TFT touch screen informs about the status of the Ox-arms cluster. The visualization of the general status is synthesized by pictograms and a coloured legend :
Configured in security ” R J “
All permanent open ” N L “
Temporarily open ” N K “
Temporarily closed ” M K “
Closed awaiting confirmation “% L”.
All anomalies are recorded locally or remotely on a “syslog” server for analysis purposes.
An NFC chip on the back of the display will provide enhanced authentication and a channel for dialogue with portable devices to enable or disable services.
DIAGNOSTIC
The SNMP protocol will provide status data of the Ox-Bras and BMS equipment installed on the network as well as the main alarms and alerts. Bandwidth indicators per BMS protocol are available.
After discovering the equipment on the floor loops, the modules will be tested cyclically. According to the onboard BMS protocols, it will be possible to check the validity of the responses in Lon, BACnet, Modbus…
For advanced diagnostic commissioning purposes, port forwarding for Wireshark will be available on the Ox-Bras cluster.
DOWNLOAD MANUAL
SPECIFICATIONS
MECHANICAL - ELECTRICAL
| Power | Dual redundant 12VDC and 24VAC |
| Consumption | 12 VA |
| Polarity | Protected against inversion |
| Type of mounting | DIN Rail |
| Protection | IP20 |
| Weight | 450g |
| Size with connectors | H 175 x P 130 x L 57 mm |
| Operating temperature | 0 °C ~ 60°C |
CPU- SECURITY
| Microprocessors | Dual Core Cortex-A7 1GHz + Cortex M4 200MHz |
| Memories | 512 Mo RAM + 8Go Flash |
| « Secure element » | Dedicated chip for certificate storage and encryption/decryption calculation |
| Algorithms | SHA-256 with option HMAC, ECDSA, ECDH, NIST Standard P256 |
| Access proximity | NFC |
CONNECTIQUE
| Copper connectors | 8 10/100/1000 RJ45 ports with automatic detection |
| Fibre connectors | 2 SFP 100Mb or 1000Mb ports depending on transmitter |
| Power | 2 3-point connectors 12 VDC and 24VAC |
| Alarm | 1 NO and NC relay for fail safe indication 1A 24VDC |
SERVICES
| Power | Dual redundant 12VDC and 24VAC |
| Consumption | 12 VA |
| Polarity | Protected against inversion |
| Type of mounting | DIN Rail |
| Protection | IP20 |
| Weight | 450 |
| Size with connectors | H 175 x P 130 x L 57 mm |
| Operating temperature | 0 °C ~ 60°C |
Power
The Ox-Bras comes with redundant 12V or 24V DC or AC power supplies as standard. The reduced power consumption of 12VA allows its unventilated housing to be efficient and noiseless.
Connectics
It can be used as a basis for your IP network infrastructure, or integrated into an existing architecture with standard products on the market. The connections of the main loop are either copper over RJ45 or fibre optic via SFP transmitter. The Ox-Bras are used in a cluster to increase security, reliability and energy control.
Easy deployment
Equipment on both floor loops is automatically scanned and addressed by one or two local DHCP servers. The spanning tree of the floor loops will ensure redundant communication.
A CSV import/export is available to identify each device, position it in the topology and assign it a fixed IP address. IPV6 addressing coupled with a local DNS server makes it possible to give a name to each device in the network and no longer work with complex IP addresses.
Parameterization
The configuration is done via a web page that can be deactivated for commissioning. The configuration is distributed on the cluster in an encrypted database that allows a router to be reinstalled very quickly. An SSH console is also available.
Fiability
Some IT or BMS services are more sensitive than others when a part of the installation falls out. In the cluster, services such as routing tables, VPN server, Config Server, will be “floating”. When the master is unavailable, the Ox-Bras in the following order of priority will take over its role.
Security
The support of the 802.1X access control protocol in the Ox-Bras definitely puts the emphasis on security.
The management of VLANs according to the 802.1Q protocol. Trunk mode on the building network and by MAC address for floor equipment that does not support 802.1Q.
A colour TFT touch screen informs about the status of the Ox-arms cluster. The visualization of the general status is synthesized by pictograms and a coloured legend :
Configured in security ” R J “
All permanent open ” N L “
Temporarily open ” N K “
Temporarily closed ” M K “
Closed awaiting confirmation “% L”.
All anomalies are recorded locally or remotely on a “syslog” server for analysis purposes.
An NFC chip on the back of the display will provide enhanced authentication and a channel for dialogue with portable devices to enable or disable services.
Diagnostic
The SNMP protocol will provide status data of the Ox-Bras and BMS equipment installed on the network as well as the main alarms and alerts. Bandwidth indicators per BMS protocol are available.
After discovering the equipment on the floor loops, the modules will be tested cyclically. According to the onboard BMS protocols, it will be possible to check the validity of the responses in Lon, BACnet, Modbus…
For advanced diagnostic commissioning purposes, port forwarding for Wireshark will be available on the Ox-Bras cluster.
