Agenda New RFI members & Future Technologies

1. Agenda New RFI members & Future Technologies • RFI Product Launches 25 min • What's new • Application possibilities • Order information • Future Technologies 20 min • Westermo R&D • Secret....

2. RedFox Industrial – The beginning of it all First introduced in special projects for extreme environments for very demanding customers, the RedFox was born back in 2005. In 2009 Westermo launched the markets first Robust Industrial Routing Switch – the RedFox Industrial.

3. RedFox Industrial – Robust Industrial Routing Switch No loose or fragile components Full metal housing Wall mount or DIN mount Industrial and railway approval Extreme tolerance for EMI 300 A/m Galvanic isolation between all interfaces Super strong extruded aluminium enclosure Wide temperature range -40°C to +70°C Isolated Power supply Heat conductive design MTBF 600 000 h Generic high speed backplane

4. RFI-10 Port configuration 10x10/100BaseTX RFI-18 Port configuration 18x10/100BaseTX RFI-14-F4G Port configuration 10x10/100BaseTX 4xGigabit SFP:s RFI-18-F4G-T4G Port configuration 10x10/100BaseTX 4xGigabit SFP:s and 4x1000BaseT RedFox Industrial – Current product portfolio Gbit module is always mounted in slot 2

5. RFI – The tailor made third+ Gigabit solution • Some Industrial Networks have a need for a drop-off Gigabit port when running an FRNT-ring on two of the fibre ports. • Customers may need to run both FRNT and RSTP on Gigabit-ports • With the wide variety of SFP (Transceivers) the RFI can easily be tailored exactly to the customer current, as well as future, needs.

6. Typical Customer Network Topology -- 2007 • Customers need Firewall, Routing and other more advanced features in order to inter- connect the industrial network to the backbone net. Flexibility in terms of number of ports in total and Gigabit ports in particular. • Typically our customers were forced to use Commercial graded units in order to address this topology. Why Commercial? • More ports • Firewalls • OSPF IndustrialNetwork BackboneNetwork

7. Typical Customer Network Topology -- 2009 • Customers need Firewall, Routing and other more advanced features in order to inter- connect the industrial network to the backbone net. Flexibility in terms of number of ports in total and Gigabit ports in particular. • Westermo launches the first Industrial Routing Switch IndustrialNetwork BackboneNetwork

8. RedFox Industrial and WeOS 4.3.0 – One Box Solution • Ethernet Switch • Flexibility in number of ports • Security using Firewalls and VPN • Dynamic Routing with OSPF • Redundancy with VRRP • Easy to use and configure

9. RedFox Industrial – One Box Solution for the customers • Customers need Firewall, Routing and other more advanced features in order to inter- connect the industrial network to the backbone net. • No need to have separate units for VPN or Routing. • Westermo delivers the complete solution and minimizes the need for third party products IndustrialNetwork BackboneNetwork

10. RedFox Industrial – New member! RFI-6-F4G 2 x 10/100BaseTX 4 x Gigabit SFP:s WeOS RLP = 1500 EUR Article Number = 3641-3210

11. RedFox Industrial – New member! RFI-10-F4G-T4G 2 x 10/100BaseTX 4 x Gigabit SFP:s 4 x 1000BaseT (Gigabit Copper/TX) WeOS RLP = 1960 EUR Article Number = 3641-3310

12. RedFox Industrial – Two new members! RFI-6-F4GPort configuration 2x10/100BaseTX 4xGigabit SFP:s RFI-10-F4G-T4G Port configuration 2x10/100BaseTX 4xGigabit SFP:s and 4x1000BaseT

13. Competitor analysis, hardware

14. WeOS VLANs & Firewall bridges across isolated islands Large older plants were built up of small isolated processes, back in the days where nobody thought that they all, in the future, would need to be integrated into one larger management system. The water/wastewater plants faces issues with; • Profitability that has to be improved. • Staff members at the plants are reduced in half. • Have to meet new government regulations. The individual islands need now to be interconnected. How can Westermo products be used to achieve this? Local SCADA 195.168.1.xxx Local SCADA 195.168.1.xxx Control system 10.10.10.xxx Control system 10.10.10.xxx Control system172.10.10.xxx Control system172.10.10.xxx 192.168.245.159

15. WeOS VLANs & Routing bridges across isolated islands WeOS supports VLAN Routing out of the box and using it means Westermo devices can build bridges between previously isolated IP-islands. Connecting the different networks together using, for example, a RFI-10-F4G-T4G, enables the central SCADA or DCS to easily connect to ALL different networks without changing any settings in the remote devices Local SCADA 195.168.1.xxx Control system 10.10.10.xxx SCADA / DCS192.168.2.xxx Control system172.10.10.xxx 192.168.245.159

16. WeOS VLANs & Routing bridges across isolated islands WeOS supports VLAN Routing out of the box and upon using it Westermo devices can build bridges between IP-islands. Connecting the different networks together with, for example, an RFI-10-F4G-T4G, it enables the central SCADA or DCS to easily connect to ALL different networks without changing any settings in the remote devices. Local SCADA 195.168.1.xxx Control system 10.10.10.xxx SCADA / DCS192.168.2.xxx Control system172.10.10.xxx 192.168.245.159

17. WeOS Firewall – no need for dedicated firewall devices As systems grow in size and complexity, security becomes an issue. How does Westermo solve this issue? Local SCADA 195.168.1.xxx Control system 10.10.10.xxx SCADA / DCS192.168.2.xxx Control system172.10.10.xxx 192.168.245.159

18. WeOS Firewall – no need for dedicated firewall devices Each port can have specific firewall rules to increase security between networks. Having the RFI-10-F4G-T4G already installed in the networks, the administrator can easily configure firewalls on two of the networks/interfaces, ensuring that security is guaranteed. No need to buy separate devices, with Westermo and WeOS customers get a one box solution. Local SCADA 195.168.1.xxx Control system 10.10.10.xxx SCADA / DCS192.168.2.xxx Control system172.10.10.xxx 192.168.245.159

19. RedFox energy application - VPN In the power industry SCADA systems are used for monitoring and supervision of different processes. A secure connection to the remote sites is of great importance. How can this be solved? Site A Site B Internet Office Site C

20. RedFox energy application - VPN With IPsec and VPN we can achieve Cyber security in a LAN to LAN connection between the office networks and the sites. • In case of a polled system the RedFox located at the office site will be set to initiator and the units on sites as responders. • In case of an always on system the office unit will be set as responder and the sites as initiators. Site A Site B Internet Office Site C

21. RedFox energy application - VPN Another scenario is that a service engineer needs to have access to the SCADA system when he is out travelling. When accessing Internet you will be assigned different IP addresses. That scenario is solved by a road warrior set up in RedFox. Site A Site B Internet Office Site C

22. RedFox energy application - VPN It is also possible to forward the traffic to one of the remote sites . This makes it possible to maintain a system even if the engineer is at a Starbucks cafe on the other side of the world. Site A Site B Internet Office Site C

23. In Railway signaling two different migrations are happening at the same time. Apart from the migration from legacy to IP systems, Ethernet systems now also have the capability to replace large parts of existing SDH systems. In case of an increased density of trackside equipment, no additional SDH nodes are needed since industrial Ethernet equipment is able to offer the needed availably, using either layer 2 redundancy an/or layer 3 static or dynamic routing. Railway Signalling Systems Siemens OTN Node NEC SDH Node

24. Railway Signalling Systems Whichever need you have, from legacy 25 year-old FSK serial technology up to complex routing across different media, Westermo has it all to support you in offering a complete solution for complex and demanding transportation environments.Because of the high number of signaling systems with lifetimes that exceed 25 years, it will be important to continue supporting legacy systems.

25. Railway Signalling Systems • With the combination of reliable hardware and an extensive operating system Westermo offers a solution that can meet the demands of railway operators.Westermo offers a solution where layer2 redundancy can be combined with Layer 3 redundant dynamic routing to support fast recovery and routing across various media. OSPFRouting FRNTRing

26. RFI DEMO – Quick intro to VRRP and the CLI Virtual Redundancy Routing Protocol (VRRP) eases the network administrator daily life. Main thing about VRRP is that it uses a shared, Virtual, IP address between two, or more devices. Configuring the end-devices gateway address to the VRRP-address, administrators need not to reconfigure networks should one unit fail.