802.1x Client
Authentification

Security at the highest level: 802.1x for mbNET
802.1x is the standard for port-based network security controls developed by the Institute of Electrical and Electronics Engineers (IEEE). This standard ensures seamless integration into existing IT infrastructures and enables secure authentication and authorized connection to the local network. Briefly: Access control to a network before an IP address is assigned.

Multiple authentication methods
The mbNET supports a variety of secure authentication methods, including EAP-TLS, EAP-PEAP, EAP-TTLS and EAP-FAST. This ensures that your network security is always up to date.

Perfect for challenging IT environments
This feature is essential for administrators and allows machine and plant builders to easily integrate mbNET into factories where complex network infrastructures such as Cisco architectures with EAP-FAST are already in use. Integrate your hardware effortlessly into any IT environment!

from HW02

SNMPv3: Simple Network
Management Protocol

Discover the SNMP support for mbNET as of version 8.2.0! This new feature ensures that network administrators can seamlessly integrate important key figures and status information from the mbNET into their network monitoring. With SNMP, mbNET offers a robust solution that meets the highest standards.

The following MIBs (Management Information Base) are now available: Device type, serial number, firmware version, Ethernet port status, operating time, CPU load, RAM utilization as well as security-related information such as openVPN connection activity, connected users and number of firewall drops.

This data is crucial for the early detection and prevention of potential security risks. Integrate your mbNET seamlessly into your existing network monitoring.

from HW02

MQTT Bridge

From now on, all internally used MQTT topics of the router and the associated data can be easily mirrored to an external MQTT broker. This innovative solution enables seamless integration and synchronization of data between internal systems and external applications or cloud services. The captured data is securely and efficiently transferred to an external MQTT broker hosted outside the machine network.

The security of the data transfer is guaranteed by SSL/TLS in conjunction with CA certificates. This feature is particularly interesting for all users of a mymbCONNECT24 portal.

from HW02

LAN segmentation /
port-based VLANs

With the new LAN segmentation, our mbNET enables machine network architects to seamlessly and efficiently set up four separate local LAN segments directly on the remote access router. These segments are completely isolated when activated and are given individual IP address ranges, which significantly increases flexibility and control over your network infrastructure.

If communication between the segments is desired, this must first be actively configured. This ensures that only required and targeted data traffic is permitted. Layer 3 routing guarantees that ARP requests and unwanted broadcasts remain within the respective LAN segments, which optimizes both the performance and security of your network.

Optimize your machine network with the LAN segmentation of the mbNET!

from HW06