Skip to main content Skip to search Skip to main navigation

VPN Router MRX5-DSL-A

Product information "VPN Router MRX5-DSL-A

Fully modular industrial router for optimal coupling of your networks.

The MRX series enables you to make targeted use of the latest technology, ideal for your specific application. Thanks to the fully modular design, you can flexibly equip your MRX for your requirements and adapt it to new challenges at any time. In addition to the perfectly optimized computing power, you thus also benefit from the best possible price/performance ratio and an above-average service life. 

Wide range of applications

Based on its modular concept, you can equip your MRX with exactly the functions you need for your infrastructure. Two housing widths, various basic versions and a range of additional modules, so-called MRXcards, are available for this purpose. Thanks to these diverse options, you are highly flexible both in terms of acquisition and in terms of any adaptations that may be required at a later date.
The integrated firewall and VPN functionality also allow secure remote maintenance of your end devices.

The two housing widths

Two housing widths are available for the MRX series

  • MRX3: Here you have 3 slots at your disposal, two of which are defined by the selected base variant. In the third slot you can insert any other module (MRXcard)
  • MRX5: Here you have 5 slots at your disposal, two of which are defined by the respective selected basic variant. Any other modules (MRXcard) can be inserted into the other three slots.

The four basic variants

The MRX series is available in four basic variants, each with different basic equipment.

  • The basic variant MRX LAN consists of an Ethernet module with five LAN ports, as well as a power module for power supply and with 2 digital inputs. The five LAN ports can be divided into up to five IP networks.
  • The basic variant MRX LTE consists of an Ethernet module with five LAN ports, as well as a LTE module with integrated power supply and 2 digital inputs. The five LAN ports can be divided into up to five IP networks. The world variant supports a greater variety of cellular frequencies.
  • The basic variant MRX Fiber consists of an Ethernet module with five LAN ports, as well as a SFP/Fiber module with integrated power supply and 2 digital inputs. The five LAN ports can be divided into up to five IP networks.
  • The basic variant MRX DSL consists of an Ethernet module with five LAN ports, as well as a DSL module with integrated power supply and 2 digital inputs. The five LAN ports can be divided into up to five IP networks. MRX-DSL is available for DSL-Annex A and for DSL-Annex B.

Note: ADSL connections in Germany are usually operated in the Annex B variant. You can obtain precise information on the Vairante used (Annex A or Annex B) from your provider of the connection. This applies especially to connections outside Germany.

Various expansion options

If the possibilities of the respective basic modules are not sufficient for you, you can extend your MRX at any time by different further modules, so-called MRXcards. More detailed information about the available modules can be found in the category Apps & Acessories.

Convincing and versatile

To ensure that a secure VPN connection can be used effectively, we offer you a convenient VPN portal. With the DELTA LOGIC Connectivity Service, you can create VPNs of any complexity and access the end devices via direct routing.
You don't want to set up your router for our DELTA LOGIC Connectivity Service yourself? No problem. We will be happy to pre-configure your new router for you. Simply send us the completed router configuration form with your order.

Technical highlights

  • Segmentation into several local IP networks
  • Multiple VPN tunnels can be used in parallel
  • Firewall in the tunnel (e.g. demarcation of remote accesses)
  • Flexible administration with profile manager
  • Access management via user roles
  • Advanced event-based control (e.g. profiles, connections, redundancy)
  • High performance for broadband networks and high VPN data rate
  • Made in Germany
Wire-bound VDSL/ADSL communication
DSL Standards VDSL2 G.993.2 Profile 8a, 8b, 8c, 8d, 12a, 12b, 17a. 30a, VDSL2 Vectoring G.993.5
ADSL/ADSL2/ADSL2+ G.992.1 Annex A, G.992.3. Annex A/L/M, G.992.5 Annex A und M, T1.413
DSL connection RJ45 socket
Function PPPoE, PPPoA
Indications (LEDs) Power, WAN (Internet connection), Info (configurable), DSL
Inputs
Inputs 2 digital inputs for configurable actions, 1 x low-active, 1 x high-active (as per EN 61131-2, Type 1)
Supply/environmental conditions
Voltage Supplied via MRX, 2 further supply connections optional (redundancy)
12 ... 24 V DC (± 20%)
Power consumption Approx. 5.0 W
Operating temperature -25 ... +60 °C (maximum, possibly limited by MRX variant used)
Weight 95 g
Certifications CE, UKCA
Data sheet MRX
Data_sheet_MRX.pdf 2.14 MB May 28, 2025
Manual MRX
Manual_MRX.pdf 2.92 MB May 28, 2025
Quick Installation Guide Router English
QIG_Router_en.pdf 1.46 MB December 12, 2023
DELTA LOGIC Connectivity Service First Steps
DLCS_First_Steps.pdf 122 KB January 08, 2024

General

I cannot reach my device via the IP 192.168.1.1.

Have you already tried https://192.168.1.1? The HTTP connection was deactivated by default with firmware version 4.4. Your device should be available via an HTTPS connection.


My device shows that LTE is online, but I have no Internet access.

If you have configured your device, set all firewall rules and no other settings are missing, make sure that you have entered the correct access point name under Interfaces/LTE.


I need to enter the SIM PUK. Where do I have to enter the PUK?

In the new UI under Administration/Debugging, in the classic UI under Help/Debugging. Please select AT command as the tool and enter your PUK and the new PIN in the following format:
AT+CPIN="PUK","NEW PIN"
Here is an example of what this could look like:
AT+CPIN="12345678","0000"


How can I create a support package?

New UI: In the menu under Status/Support package/Create support package
Classic UI: in the menu under Help/Support/Create new support package

I cannot connect to my Siemens HMI panel (KTP1500 Comfort, KTP600 Basic,... ) via VPN in the TIA Portal. Why?

1. With HMI panels only "Advanced online loading" can be used in the TIA Portal, "Advanced online connect" is basically not possible.
2. "PG/PC interface" TAP-Windows Adapter..." must be selected as interface.
3. With some HMI panels (KTP600 Basic) the "PN/IE interface" cannot be used, in these cases the "Ethernet interface" has to be used.
4. For some HMI panels (e.g. TP700 Comfort), the "Display all compatible stations" option must not be active.


OpenVPN

Where can I download the latest Open VPN client?

You can find it here: https://openvpn.net/index.php/open-source/downloads.html



My OpenVPN connection is not going online. I get the error message “UDP link local: (not bound)” ... “Inactivity timeout (-ping-restart), restarting”.

Your firewall is blocking the connection. Make sure that the connection to the VPN server via the required port is not blocked.


My OpenVPN connection is not going online. I receive the error message “Certificate not yet valid”.

This means that the date of your device is set incorrectly. Your certificate is literally not yet valid because your device time is in the past. You can set the correct date and time via Administration/Time.


My OpenVPN connection is not going online. I get the error message “TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)”.

Explanation: There is no response from the server to the client connection within 60 seconds (see timestamp of the marked entries). This results in a timeout. This can have several causes.
This is one of the most common cases. The most common cause is then point 3.
1. Incorrect destination address or destination port in the VPN client: Check whether the correct address of the VPN server and the correct port are set here.
2. No Internet connection: Check whether VPN servers or other services are pingable on the Internet.
3. Firewall blocks the connection establishment: Make sure that the connection establishment via the required port to the VPN server is not blocked.


I see the message “temporary failure in name resolution” in the OpenVPN logs. What does this mean?

This generally means a DNS error. Make sure that the DNS settings of your Insys device are correct and that DNS queries are allowed.


When I start OpenVPN, I get a blue screen error.

This behavior is possibly caused by the TIA Portal from Siemens, which is also responsible for support in this case. DELTA LOGIC has no influence here. However, experience has shown that it can help to switch off the SIMATIC Industrial Ethernet ISO protocol on the OpenVPN network adapter.