The NSG3309 Series are compact 9-port NAT switches, equipped with 7 or 9 GbE RJ-45 ports and up to 2 Gbps SFP Fiber links. With configurable WAN/LAN ports and NAT features, accessibility for internal resources is fully controlled and protected. And combined with RSTP support, rings can be set up on both WAN and LAN side for full network redundancy.

Furthermore, this switch series’ IP30 metal enclosure, slim and flat shape and DIN rail mountable housing allows easy deployment in harsh environments. And being compliant with IEC62443-4-2 and IEC62443-4-1, they achieve both product security features and requirements for secure development life-cycle.

With these industrial-grade features, NSG3309 switches are ideal to be positioned as a proxy at the edge of networks.

Embedded SD Card Slot: Automatically backup configurations
periodically for use as the start-up configuration in the next booting. Recorded syslog can be saved in the SD card as well.

Virtual LAN: Divide local networks with 802.1q tagging to enhance data security and network efficiency.

Integrated NAT: Network deployment made simple with full NAT modes including 1:1 NAT, Virtual NAT, IP Masquerade, and DMZ.

Access Control: MAC/IPv4-based ACL is supported for LAN control.

Multi-Admin: Multiple Admin accounts with read-&-write or read-only access.

IEC62443: Development based on IEC 62443-4-1 and compliant with IEC 62443-4-2 to meet industrial network security standards.

APPLICATION CASE

Flexibility with Configurable WAN/LAN

NSG3309 series’ RJ-45 GbE ports can be configured as LAN or WAN ports. With built-in NAT functions, an extra router is not required for access between interior and exterior networks.

1:1 NAT

Establish WAN to LAN communication initiating from either side. Each LAN device is allocated a dedicated IP address from the external network, without the need of extra configuration on a router/gateway, and regardless of protocols.

Virtual NAT

Virtual NAT combines 1:1 NAT and virtual routing mechanisms. With 1:1 NAT, each external IP will be mapped to a virtual IP, and with this virtual IP, a virtual route will be created for accessibility to the LAN servers.

IP Masquerade

NSG3309 Series can act as a network proxy, allowing access of different LAN servers via a single external IP address with different TCP/UDP ports.

DMZ

Isolate specific LAN servers in the DMZ network to allow access from the external network while keeping the internal network secured.

WAN & LAN Backup

The NSG3309 series are equipped with configurable WAN/LAN ports. For WAN backup, integrate switch into an RSTP ring with 2 WAN ports connecting to 2 different uplinks. As a result, the redundant uplink will take over when the main uplink router fails. Simultaneously, RSTP allows for redundant topology on the LAN side to ensure network continuity.