TWAP-5002
EN50155 Multifunction VPN Router w/up to 2 WiFi 11ac+ 2 serial ports**+ 2 Gigabit X-coded Ethernet (incl. 1PD**) for Load Balancing, VPN, Storage**; WV input; IP65/54/67
OVERVIEW
Lantech TWAP-5002 series is a next generation EN50155 multi-function VPN router w/2x 802.11ac Wi-Fi + 2x Gigabit Ethernet (incl. 1PD**) + 2 serial ports** that support advanced VPN function, Load-balancing, Protocol Gateway, EMMC Flash Storage** and WiFi roaming for on-board / onboard-to-ground applications. The dual core CPU with 1.6GHz + 256M flash enables the router to multi-task smoothly.
Support AP/Bridge/Client mode, Mesh roaming
TWAP-5002 supports AP/Bridge/Client mode for different applications.
It also supports client-base roaming to swap between the APs in a network.
Built-in Wireless mesh network（WMN）
TWAP-5002 supports Mesh networks composed of different nodes. The set of SSIDs allow the wireless client to roam freely without the need for complicated account management. With Mesh protocol, it can provide a reliable, scalable, stable and seamless network topology.
IEEE 802.11ac radio up to 2.6Gbps bandwidth
With IEEE 802.11ac capability, TWAP-5002 can operate either 5GHz or 2.4GHz bands, offering the maximum speed of 2.6Gbps bandwidth (1.3Gbps per 802.11ac module). It is also compatible with 802.11b/g/n that can work with 2.4GHz for longer range transmission.
The Wi-Fi 11ac supports AP/BRIDGE/AP Client modes can be diverse for most of wireless application. Working with Load-balancing “Priority” mode, the AP client can enable router to transmit on Wi-Fi with first priority.
MIMO technology with 3T3R and SMA/QMA** type connectors
Lantech TWAP-5002 series adapts MIMO technology with Smart antenna transmission and reception for 3T3R. With six external detachable antenna connectors (SMA/QMA**) and optional antennas, TWAP-5002 can have better Wi-Fi coverage.
Wireless WMM QoS
TWAP-5002 supports 802.11e standard which defines a set of Quality of Service for wireless LAN applications as well as WMM (Wi-Fi multimedia)
Advanced security & 16 SSIDs
The security support standards including 64/128bits WEP, WPA/WPA2 PSK (TKIP, AES), 802.1x ensures the best security and active defense against security treads. Lantech TWAP-5002 support up to 16 SSIDs, each SSID has its independent security and encryption.
Load Balancing with 5 mechanisms for multi-WANs
TWAP-5002 supports Load Balancing for WAN connections. There are five schemes for Load Balancing function:
Pack
|Algorithm
|Description
| | --- | --- | --- | |Basic
|Fixed
|All traffic will be distributed to a single WAN.
| | |Failover
|Routes connections through preferred WAN link while others stand-by. Sequentially activating another link if the preferred link fails.
| | |Priority
|Select the active WAN according to priority.
| | |Weighted Round-Robin
|Evenly distribute the traffic over all working WAN links in circular order according to the specified weights.
| | |Custom Route
|Routing through the selected WAN for each specific traffic, ex: TCP/UDP port number and IP address.
|Optional 2 port serial connection, Modbus gateway
Optional 2 port serial connection for RS232 or RS422, 485 in which RS422/RS485 has 2.5KV isolation protection. The built-in Modbus gateway can convert Modbus RTU/ASCII to Modbus TCP for device control.
Optional EMMC Flash storage**
The optional EMMC flash storage on the router can offer 8G/16G/32G capacity.
VPN and firewall
Besides traditional VPN peer to peer tunneling, TWAP-5002 support latest Multi-Site VPN function that is an efficient way for mesh tunneling. The registration is under cloud service and encrypted by SSH makes the connection easy and safe. It supports Multi-Site VPN, OpenVPN, L2TP over IPsec, IPsec, L2 over GRE , IPGRE, and NAT for various VPN applications. The built-in Layer-4 firewall includes DDoS, IP address filter / Mac address filter / TCP/UDP port number.
Support Routing Protocol: Static route / RIPv2 / OSPF / BGP / EIGRP
Lantech router series supports two routing methods: static routing and dynamic routing. Dynamic routing makes use of RIPv2, OSPF, EIGRP and BGP. The user can either choose one routing method to establish the routing table.
DIDO for alarm & email notice; Event log; Remote Web control
2 sets of DIDO function can support additional high/low physical contact for designate applications besides Port / Power events, for example, DIDO function can trigger alarm if the router was moved or stolen. In case of events, the TWAP-5002 will immediately send email and trap. When the router is at remote area with limited access, Web control can help to get router status or remotely reboot by Web.
Wide range dual input voltage from 16.8-137.5V (WV model)
The TWAP-5002 is able to work from dual 16.8V ~137.5V DC isolated input (WV model) that is particular good for vehicle, rail train, depot etc. applications.
Environmental monitoring for inside router info& alerting; Wi-Fi signal strength
The built-in environmental monitoring can detect router overall temperature, voltage, current where can send the syslog, emailalert when abnormal. The graphic Wi-Fi signal strength shows connection status at a glance.
USB port for back up, restore configuration and upgrade firmware; Dual image firmware
The built-in USB port can upload/download the configuration and upgrade firmware through USB dongle for router replacement. It supports dual-image firmware to choose which one to start.
Dual image firmware
It supports dual-image firmware to choose which one to start.
Editable login page of captive portal
The TWAP-5002 supports editable captive portal function that allows administrator to force end-users redirect to authentication page.
Ruggedized EN50155 design and FCC/CE, E-marking** certificate
The TWAP-5002 series is verified with EN50155, 61373, 45545 standard with IP65/54/67 housing. It passed serious tests under extensive Industrial EMI and environmental vibration and shocks standards. With CE & FCC radio certification for Wi-Fi and E-marking** certificate, the TWAP-5002is best for outdoor community, vehicle, power substation, process control automation etc. For more usage flexibilities, TWAP-5002 supports operating temperature from -20°C to 70°C or -40°C to 70°C(-E) .
*Future Release
**Optional
FEATURES
- High Speed Air Connectivity: WLAN interface support up to 2.6Gbps link speed(2AC)
- Built-in two Gigabit ports X-coded (incl. 1PD**); 1LAN+1WAN or 2LAN
- EMMC-FLASH storage**
- Dual band 2.4G and 5GHz with 802.11ac/a/b/g/n
- Support 2.4Ghz operating within the following frequency bands:
- 2.412~2.472 GHz
- Support 5Ghz operating within the following frequency bands:
- 5.180GHz~5.825GHz
- MIMO Smart antenna technology with 3T3R with 6 SMA/QMA** type connectors for Wi-Fi
- Output power < 24dBM
- Transmit power adjustment
- VAP (virtual access point) support up to 16 SSIDs
- Support AP/Bridge/Client/Mesh mode
- Support Client-base roaming
- Support 802.11s Wireless Mesh Network
- Traffic control for each SSID
- Band preference for same SSID services on dual band
- Highly Security Capability: WEP64/128bits/ WPA/ WPA-PSK (TKIP,AES)/ WPA2/ WPA2-PSK (TKIP,AES)
- HTTP/HTTPS/Telnet/SSH & Administration access
- Support IPv6 & IPv4 protocol
- Support Routing Protocol: Static route / RIPv2 / OSPF / BGP / EIGRP
- Radius Authentication, EAP-TLS, EAP-TTLS, PEAP; SSID broadcast disable supported
- Multiple channel bandwidths of 20MHz and 40MHz for 2.4G.
- Multiple channel bandwidths of 20MHz, 40MHz and 80MHz for 5G only.
- Wi-Fi Multimedia (WMM) and 802.11e traffic prioritization
- Load Balancing supports 5 mechanisms between multiple WANs
- Optional 2 x serial ports(RS232/RS422/RS485)
- Optional Serial port with 2.5KV isolation on RS422/RS485
- Supports 2DI / 2DO(Digital Input / Output)
- Support Multi-Site VPN for mesh tunneling as well as Open VPN, L2TP over IPsec, IPsec, L2 over GRE , IPGRE and NAT for secured network connection
- The built-in Layer-4 firewall includes DDoS, IP address filter / Mac address filter / TCP/UDP port number
- NAT/ DMZ/ Port Forwarding
- Optional Built-in Modbus gateway converting Modbus RTU/ASCII to Modbus/TCP
- Event alerting by Syslog, SNMP Trap, Email, Relay ; Permanent local log rotation / Maxi 1K records
- Remote Web control to get status or re-boot by Web
- Built-in RTC to keep track of time always
- Support SNTP to synchronize system clock
- Support LLDP discovery protocol
- Support DHCP Server and Client
- Built-in environmental monitoring for system input voltage, current and ambient temperature; Able to set alert when abnormal
- Graphic Wi-Fi signal strength
- Firmware upgradeable through TFTP/HTTP
- Configuration backup and restoration
- Supports editable configuration file for system quick installation
- USB port to upload/download firmware by USB dongle
- Dual image firmware
- Support editable captive portal login page
- Cloud/Host based InstaAIR** for fixed/fleet router management/configuration/monitoring
- IP 65/54/67 housing for water proof environment
- Wall-mount installation
- Operation temperature -20~70C or -40~70C(-E)
Pack
|Algorithm
|Description
| | --- | --- | --- | |Basic
|Fixed
|All traffic will be distributed to a single WAN.
| | |Failover
|Routes connections through preferred WAN link while others stand-by. Sequentially activating another link if the preferred link fails.
| | |Priority
|Select the active WAN according to priority.
| | |Weighted Round-Robin
|Evenly distribute the traffic over all working WAN links in circular order according to the specified weights.
| | |Custom Route
|Routing through the selected WAN for each specific traffic, ex: TCP/UDP port number and IP address.
|*Future Release
**Optional
SPECIFICATIONS
WLAN Interface
Radio Frequency Type
|DSSS, OFDM
| |Wireless Standard
|IEEE 802.11ac/n/a 5GHz
IEEE 802.11b/g/n 2.4GHz
Wireless bandwidth
|5GHz: Up to 1300Mbps
2.4GHz: Up to 450Mbps
Modulation
|802.11b: DSSS
802.11a/g:
OFDM (BPSK, QPSK, 16-QAM, 64-QAM)
802.11n:
OFDM (BPSK, QPSK, 16-QAM, 64-QAM)
802.11ac:
OFDM (BPSK, QPSK, 16-QAM, 64-QAM, 256-QAM)
Operating Frequency
|IEEE 802.11 a/b/g/n ISM Band, 2.412GHz~2.472GHz, 5150MHz~5850MHz
| |Transmission Rate
|IEEE802.11ac: up to 1300Mbps
IEEE802.11b: 1 / 2 / 5.5 / 11 Mbps
IEEE802.11a/g: 6 / 9 / 12 / 18 / 24 / 36 / 48 / 54 Mbps
IEEE802.11n: up to 450Mbps
IEEE 802.11b/g/n(2.4Gbps)
|Output Power Tx +/- 2dB(per chain)
18dBm @ 1~11Mbps
18dBm @ 6~54Mbps
20/20dBm @ MCS0~MCS7 (HT20/40)
Receiver Sensitivity Rx +/- 2dB
≦-95dBm @ 1~11Mbps
≦-92dBm @ 6~18Mbps
≦-88dBm @ 24Mbps
≦-85dBm @ 36Mbps
≦-81dBm @ 48Mbps
≦-80dBm @ 54Mbps
≦-94dBm @ MCS0 (HT20/40)
≦-76dBm @ MCS7 (HT20/40)
IEEE 802.11a/n/ac(5Gbps)
|Output Power Tx +/- 2dB(per chain)
20dBm @ 6~24Mbps
16dBm @ 36~54Mbps
19/18dBm @ MCS0 (HT20/40)
16/16dBm @ MCS7 (HT20/40)
19/18/18dBm @ MCS0 (VHT20/40/80)
13/13/13dBm @ MCS8 (VHT20/40/80)
13/13dBm @ MCS9 (VHT40/80)
Receiver Sensitivity Rx +/- 2dB
≦-92dBm @ 6~18Mbps
≦-86dBm @ 24Mbps
≦-84dBm @ 36Mbps
≦-81dBm @ 48Mbps
≦-80dBm @ 54Mbps
≦-93dBm @ MCS0 (HT20/40)
≦-71dBm/≦-80dBm @ MCS7 (HT20/40)
≦-90dBm @ MCS0 (VHT20/40/80)
≦-69dBm @ MCS8 (VHT20/40/80)
≦-66dBm @ MCS9 (VHT40/80)
Encryption Security
|WEP : (64-bit ,128-bit key supported)
WPA /WPA2 : IEEE802.11i(WEP and AES encryption)
WPA-PSK (256-bit key pre-shared key supported)
EAP,MD5,EAP,TLS,EAP,TTLS,EAP
PEAP
Wireless Security
|SSID broadcast disable
|Physical Ports & System
Connectors
|10/100/1000T: 2x ports M12 8-pole X-coded with Auto MDI/MDI-X function (1LAN+1WAN or 2LAN)
USB/Console connector: 1 x M12 8-pole A-coded
DIDO : 1 x 5-pole terminal block
Power Input connector : 1 x M12 4-pole A-coded
Optional Serial connector : 2 x M12 8-pole A-coded
RP-SMA/QMA** connector for Wi-Fi 2AC: 6 (female)
RP-SMA/QMA** connector for Wi-Fi 1AC: 3 (female)
Serial Baud Rate**
|1000Kbps high data rate,250kbps normal for RS232 ; 20Mbps high data rate,250kbps normal for RS422/RS485
| |Serial Data Bits**
|5, 6, 7, 8
| |Serial Parity**
|odd, even, none, mark, space
| |Serial Stop Bits**
|1, 1.5, 2
| |RS-232**
|TxD, RxD, RTS, CTS, DTR, DSR, DCD, GND
| |RS-422**
|Tx+,Tx-, Rx+, Rx-,GND
| |RS-485 (2-wire)**
|Data+, Data-,GND
| |Isolation protection
|RS422/RS485 2.5KV isolation; 8KV contact & 15KV air
RS232 8KV contact and 15KV air ESD
DIDO 2.5KV isolation
Input power 1.5KVA isolation
DI/DO
|2 Digital Input (DI) :
Level 0: -30~2V / Level 1: 10~30V
Max. input current:8mA
2 Digital Output(DO): Open collector to 80 VDC, 50mA
LED Indicators
Power & system indicator
|Per unit: Power 1 (Green), Power 2 (Green), P-Fail (Red) , Serial1/2(Green)**, Ready(Green)
| |10/100/1000Base-T(X) port indicator
|Link/Activity (Green), Speed (Yellow)
| |WLAN LEDs
|WLAN 1/2, Link /ACT : Green
| |Fault
|Red: Ethernet link down or power down
|Fault Contact
Relay
|Relay output to carry capacity of 1A at 24VDC
|Power
Input power
|Dual DC input, isolated 16.8VDC~137.5VDC for (WV model)
| |System power
|18W
|Physical Characteristic
Enclosure
|IP 65/54/67 aluminum case
| |Dimension
|178 (W) x 99 (D) x 103 (H) mm (IP65/54 model)
185 (W) x 99 (D) x 103 (H) mm (IP67 model)
Weight
|1000g
|Environmental
Storage Temperature
|-40°C ~ 85°C (-40°F ~ 185°F)
| |Operating Temperature
|-20°C ~ 70°C (-4°F ~ 158°F)
-40°C ~ 70°C (-40°F ~ 158°F)(-E)
Operating Humidity
|5% to 95% Non-condensing
|Regulatory Approvals
EMC
|FCC Part 15 Class A, EN55032, EN55024
| |EMS
|EN61000-4-2 (ESD), EN61000-4-3 (RS), EN61000-4-4 (EFT), EN61000-4-5 (Surge), EN61000-4-6 (CS), EN61000-4-8, EN61000-6-2
| |Safety
|EN60950 (LVD), AS60950 (LVD)
| |Stability Testing
|EN61373 (Shock & Vibration)
| |Railway verification
|EN50155, EN50121-3-2, EN50121-4, EN 45545-1, EN 45545-2 Fire & Smoke verification
| |Radio Frequency
|EN 301 489-1,
EN 301 489-17,
EN 301 489-19,
EN 301 489-52,
EN 300 440,
EN 301 893,
EN 300 328,
EN 62311
MTBF
|565,049 Hrs
(IEC62380 standards)
Software
IPv6/4
|Present
| |Operation Mode
|AP/Bridge/Client/MESH mode
| |Login Security
|Supports IEEE802.1x Authentication/RADIUS
| |Access Security
|HTTP/HTTPS/Telnet/SSH & Administration; SNMP v1/v2/v3 access for authentication via MD5/SHA(v3) and Encryption via DES/AES(v3)
| |Routing
|Static route / RIPv2 / OSPF / BGP / EIGRP
| |Protocol
|PPPoE Client,DHCP server/client, Adjustable MTU, Port forwarding (NAPT), DMZ; NAT, SNTP, Firewall(Firewall(DDoS; IP address filter / Mac address filter / TCP/UDP port number), VRRP, DDNS
| |Management
|SNMP v1,v2c,v3/ Web/Telnet/CLI
| |Roaming
|Client-base roaming
| |MESH
|Support 802.1s
| |WMM
|Wi-Fi multimedia and 802.11e traffic prioritization
| |Security
|WEP64/128bits/ WPA/ WPA-PSK (TKIP,AES)/ WPA2/ WPA2-PSK (TKIP,AES)/SSH/SSL/HTTPS
| |Authentication
|Radius Authentication, EAP-TLS, EAP-TTLS, PEAP; SSID broadcast disable supported
| |SSID
|16 sets
| |Timer
|Built-in Real Time Clock to keep track of time always(RTC)
| |Discovery
|IEEE 802.1ab Link Layer Discovery Protocol (LLDP)
| |SNMP trap
|Device cold / warm start
Port link up / link down DI / DO high / low
Environmental Monitoring
|System status for input voltage, current , ambient temperature to be shown in GUI and sent alerting if any abnormal status
| |Graphic signal display
|Graphic Wi-Fi signal strength & TX / RX rate display
| |Remote Web control
|To reboot or get status of router by Web
| |Captive portal
|Editable captive portal login page
| |Maintenance
|Firmware upgradeable through TFTP/HTTP
| |Configuration backup & restore
|Supports text configuration file for quick system installation
|Software - Load Balancing
5 schemes for multiple WAN(client mode)
|Pack
|Algorithm
|Description
| | --- | --- | --- | |Basic
|
Fixed
|All traffic will be distributed to a single WAN.
| | |Failover
|Routes connections through preferred WAN link while others stand-by. Sequentially activate another link if preferred link failure occurs.
| | |Priority
|Routes connections through preferred WAN link while others stand-by. Sequentially activate other links if overflow occurs.
| | |Weighted Round-Robin
|Evenly distribute the traffic over all working WAN links in circular order according to the specified weights
| | |Custom Route
|Routing through the selected WAN for each specific traffic ex: TCP/UDP port number and IP address.
|*Future Release
**Optional
ORDERING INFORMATION
All QMA connector models are with –Q model name; -40~70C operational models are with –E model name.
2 Gigabit ports without PD function as default, P/N add to the last digit (ex. 8632-02121) for models w/o 1 PD
EMMC Flash Storage
OPTIONAL ACCESSORIES - Management System
OPTIONAL ACCESSORIES - Wi-Fi Antenna
| Wi-Fi hinge rotatable antenna, WiFi Dual Bands 2.4/5.8GHz, SMA Connector |
OPTIONAL ACCESSORIES - Antenna Base
| Magnetic antenna base for Wi-Fi, RP SMA Jack Base, Length : 1M |