preloader

VPN Router

Highlights

  • Secure remote access via IPSec and OpenVPN
  • Compact DIN-rail mounting with only 35 mm width
  • Analog inputs and relay output for process monitoring
  • Expandable through freely programmable firmware
  • Industrial temperature range from -20°C to +60°C
  • Combinable with LyconSys cellular and DSL modems

IPSec (StrongSWAN), OpenVPN and AES-256 encryption for secure remote access. Compact DIN-rail module, 35 mm wide, -20 to +60°C, MTBF 240,000 hours. Compatible with LTE and DSL modems.

Model

The VPN Routers ERT51 and ERT1001 are an important part of our solutions and enable nearly location-independent use with the right modems and modules.

The implemented VPN standards IPSec (StrongSWAN) and OpenVPN ensure highest security. Authentication is optionally via stored certificates or pre-shared keys. Our VPN routers support all modern encryption algorithms such as AES with up to 256-bit key length. Connection to third-party systems from other manufacturers (e.g. Lancom, Cisco, Phoenix) is possible.

To protect your network from attacks, a configurable Linux-based firewall is available. It can be easily adapted to your individual requirements through rules.

Our VPN routers can be configured both locally and remotely via an HTTPS-protected web interface or via a command-line interface (SSH).

Technical Highlights

  • DIN-rail module (EN 50022)
  • Power supply 9–24 V DC
  • Variants with 2 or 4 Ethernet ports
  • 2 analog inputs
  • 1 relay output
  • Web configuration
  • Various VPN technologies available
  • Freely programmable for implementation of custom applications

Two Variants

The LyconSys VPN routers are available in two base variants:

  • ERT51: A particularly compact VPN router with 2 LAN ports, 2 analog inputs and 1 switching output.
  • ERT1001: Features an integrated Gigabit switch with 4 LAN ports, 2 analog inputs and 1 switching output.

Both variants are optionally available with integrated WLAN interface for wireless network integration.

Property Value
Operating Modes LAN-WAN Router, LAN-LAN Router, VPN Client, VPN Server
Routing (Layer-3) IPv4, IPv6, NAT, async PPP, PPPoE, OpenVPN Client/Server, IPSec (IKEv1/IKEv2), L2TP
TCP/IP IPv4, IPv6 (dual-stack)
Protocols ARP, DHCP, DNS, Remote Syslog, ICMP, HTTP, HTTPS, SSH, NTP, RDATE, PPPoE, OpenVPN, IPSec
SoC Qualcomm QCA4531
CPU 650 MHz MIPS 24k, 32-bit
Memory 128 MB DDR2 RAM, 32 MB Flash
Ethernet Ports 2x RJ45, 10/100 Mbps, MDI/MDI-X, Autonegotiation
Analog Inputs 2x 10-bit A/D converter (single-ended), 0 V to 30 V
Relay Outputs 1x Solid-state relay, max. 1 A / 24 V
Periphery 1x USB 2.0 host controller, 1x microSD slot
Power Supply 9 V to 24 V DC (max. 28 V), 0.5 W to max. 3 W
Enclosure DIN-rail enclosure (ABS) per DIN 43880
Mounting DIN rail (EN 50022), wall mounting (optional)
Protection IP30
Dimensions 35 x 58 x 82 mm (W x H x D), 2 TE
Weight 88 g
Operating Temperature -20°C to +60°C
Humidity 5% to 95% (non-condensing)
MTBF 240,000 hours
Configuration Web-based (HTTPS), Command-line interface (LCI)
Indicators LEDs on front (VPN, relay, status)
Watchdogs 2 hardware watchdogs, 1 software watchdog
System Clock Real-time clock buffered (RTC)
CE EN 61000-6-2, EN 61000-6-4, EN 61000-4-2, EN 61000-4-3, EN 61000-4-4, EN 61000-4-6, EN 61000-4-29, EN 55022
RoHS EN 50581
  • VPN router unit
  • Quick start guide

Your Benefits

Security features like VPN, firewall, SSL encryption standard

IPSec (StrongSWAN), OpenVPN, AES-256 and Linux firewall are standard – no additional licences.

Full flexibility through use of common transmission technologies

Compatible with LTE, VDSL and Ethernet connections. No carrier lock-in, interoperable with Cisco, Lancom and pfSense.

Secure remote access to your devices via the internet

HTTPS web interface and SSH access, locally or remotely – reliably accessible even behind NAT and firewalls.

No special software needed for configuration

Browser-based configuration via HTTPS. No VPN client on your laptop, no proprietary management software.


FAQ

OpenVPN is easier to set up and works more reliably through firewalls. IPSec offers higher performance and is often required for enterprise VPNs (Cisco, Lancom). For most remote maintenance applications we recommend OpenVPN.

Yes, our routers support standard-compliant VPN protocols (IPSec IKEv1/v2, OpenVPN). Connection to Cisco ASA, Lancom, pfSense, Fortinet and other systems is possible. We support you with configuration.

The ERT51 is primarily designed as VPN client and is suitable for 1-2 tunnels. As VPN server for multiple incoming connections we recommend the ERT1001, which can handle 5-10 simultaneous tunnels depending on encryption strength.

The two 10-bit analog inputs (0-30V) can capture measurements – e.g. battery voltage, levels or temperature sensors. Values are readable via web UI or script and can trigger alarms or actions.

Yes, the firmware is Linux-based and freely programmable. You can install custom scripts, services or protocol handlers. We also offer contract development for custom firmware extensions.

Updates can be uploaded via the web interface or installed via SSH. Rollback to the previous version is possible.

Request now

Would you like more information or a quote?