VPN Router MRX5-DSL-A
Modular VPN router suitable for every application
- Full-modular in widths 3 and 5, variants for LAN, LTE and DSL
- Flexible expandability through plug-in cards
- Universal WAN technologies (LTE/DSL/LAN/fiber - also combined as failover)
- Extensive routing functions
- IT security at KRITIS level
- IoT-ready
- Quick start for DELTA LOGIC Connectivity Service
Fully modular industrial router for optimal coupling of your networks.
Wide range of applications
The two housing widths
Two housing widths are available for the MRX series
- MRX3: Here you have 3 slots at your disposal, two of which are defined by the selected base variant. In the third slot you can insert any other module (MRXcard)
- MRX5: Here you have 5 slots at your disposal, two of which are defined by the respective selected basic variant. Any other modules (MRXcard) can be inserted into the other three slots.
The four basic variants
The MRX series is available in four basic variants, each with different basic equipment.
- The basic variant MRX LAN consists of an Ethernet module with five LAN ports, as well as a power module for power supply and with 2 digital inputs. The five LAN ports can be divided into up to five IP networks.
- The basic variant MRX LTE consists of an Ethernet module with five LAN ports, as well as a LTE module with integrated power supply and 2 digital inputs. The five LAN ports can be divided into up to five IP networks. The world variant supports a greater variety of cellular frequencies.
- The basic variant MRX Fiber consists of an Ethernet module with five LAN ports, as well as a SFP/Fiber module with integrated power supply and 2 digital inputs. The five LAN ports can be divided into up to five IP networks.
- The basic variant MRX DSL consists of an Ethernet module with five LAN ports, as well as a DSL module with integrated power supply and 2 digital inputs. The five LAN ports can be divided into up to five IP networks. MRX-DSL is available for DSL-Annex A and for DSL-Annex B.
Note: ADSL connections in Germany are usually operated in the Annex B variant. You can obtain precise information on the Vairante used (Annex A or Annex B) from your provider of the connection. This applies especially to connections outside Germany.
Various expansion options
If the possibilities of the respective basic modules are not sufficient for you, you can extend your MRX at any time by different further modules, so-called MRXcards. More detailed information about the available modules can be found in the category Apps & Acessories.
Convincing and versatile
Technical highlights
- Segmentation into several local IP networks
- Multiple VPN tunnels can be used in parallel
- Firewall in the tunnel (e.g. demarcation of remote accesses)
- Flexible administration with profile manager
- Access management via user roles
- Advanced event-based control (e.g. profiles, connections, redundancy)
- High performance for broadband networks and high VPN data rate
- Made in Germany
Wire-bound VDSL/ADSL communication | |
DSL Standards | VDSL2 G.993.2 Profile 8a, 8b, 8c, 8d, 12a, 12b, 17a. 30a, VDSL2 Vectoring G.993.5 ADSL/ADSL2/ADSL2+ G.992.1 Annex A, G.992.3. Annex A/L/M, G.992.5 Annex A und M, T1.413 |
DSL connection | RJ45 socket |
Function | PPPoE, PPPoA |
Indications (LEDs) | Power, WAN (Internet connection), Info (configurable), DSL |
Inputs | |
Inputs | 2 digital inputs for configurable actions, 1 x low-active, 1 x high-active (as per EN 61131-2, Type 1) |
Supply/environmental conditions | |
Voltage | Supplied via MRX, 2 further supply connections optional (redundancy) 12 ... 24 V DC (± 20%) |
Power consumption | Approx. 5.0 W |
Operating temperature | -25 ... +60 °C (maximum, possibly limited by MRX variant used) |
Weight | 95 g |
Certifications | CE, UKCA |
Data sheet MRX | ||
Data_sheet_MRX.pdf | 2.14 MB | May 28, 2025 |
Manual MRX | ||
Manual_MRX.pdf | 2.92 MB | May 28, 2025 |
Quick Installation Guide Router English | ||
QIG_Router_en.pdf | 1.46 MB | December 12, 2023 |
DELTA LOGIC Connectivity Service First Steps | ||
DLCS_First_Steps.pdf | 122 KB | January 08, 2024 |
General
I cannot reach my device via the IP 192.168.1.1.
Have you already tried https://192.168.1.1? The HTTP connection was deactivated by default with firmware version 4.4. Your device should be available via an HTTPS connection.
My device shows that LTE is online, but I have no Internet access.
If you have configured your device, set all firewall rules and no other settings are missing, make sure that you have entered the correct access point name under Interfaces/LTE.
I need to enter the SIM PUK. Where do I have to enter the PUK?
In the new UI under Administration/Debugging, in the classic UI under Help/Debugging. Please select AT command as the tool and enter your PUK and the new PIN in the following format:
AT+CPIN="PUK","NEW PIN"
Here is an example of what this could look like:
AT+CPIN="12345678","0000"
How can I create a support package?
New UI: In the menu under Status/Support package/Create support package
Classic UI: in the menu under Help/Support/Create new support package
I cannot connect to my Siemens HMI panel (KTP1500 Comfort, KTP600 Basic,... ) via VPN in the TIA Portal. Why?
1. With HMI panels only "Advanced online loading" can be used in the TIA Portal, "Advanced online connect" is basically not possible.
2. "PG/PC interface" TAP-Windows Adapter..." must be selected as interface.
3. With some HMI panels (KTP600 Basic) the "PN/IE interface" cannot be used, in these cases the "Ethernet interface" has to be used.
4. For some HMI panels (e.g. TP700 Comfort), the "Display all compatible stations" option must not be active.
OpenVPN
Where can I download the latest Open VPN client?
You can find it here: https://openvpn.net/index.php/open-source/downloads.html
My OpenVPN connection is not going online. I get the error message “UDP link local: (not bound)” ... “Inactivity timeout (-ping-restart), restarting”.
Your firewall is blocking the connection. Make sure that the connection to the VPN server via the required port is not blocked.
My OpenVPN connection is not going online. I receive the error message “Certificate not yet valid”.
This means that the date of your device is set incorrectly. Your certificate is literally not yet valid because your device time is in the past. You can set the correct date and time via Administration/Time.
My OpenVPN connection is not going online. I get the error message “TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)”.
Explanation: There is no response from the server to the client connection within 60 seconds (see timestamp of the marked entries). This results in a timeout. This can have several causes.
This is one of the most common cases. The most common cause is then point 3.
1. Incorrect destination address or destination port in the VPN client: Check whether the correct address of the VPN server and the correct port are set here.
2. No Internet connection: Check whether VPN servers or other services are pingable on the Internet.
3. Firewall blocks the connection establishment: Make sure that the connection establishment via the required port to the VPN server is not blocked.
I see the message “temporary failure in name resolution” in the OpenVPN logs. What does this mean?
This generally means a DNS error. Make sure that the DNS settings of your Insys device are correct and that DNS queries are allowed.
When I start OpenVPN, I get a blue screen error.
This behavior is possibly caused by the TIA Portal from Siemens, which is also responsible for support in this case. DELTA LOGIC has no influence here. However, experience has shown that it can help to switch off the SIMATIC Industrial Ethernet ISO protocol on the OpenVPN network adapter.