DRAGON MACH4x00: the backbone switch
Up to 88 ports, 10 GbE, full L3 routing with OSPF/ECMP/PIM. The backbone for plant-level and campus networks.
18.2 DRAGON MACH and MACH1000
The GREYHOUND family handles access and aggregation layers. Plant-level backbone networks and substation cores require the highest port densities, 10 GbE throughput, and full Layer 3 routing with multicast support. The DRAGON MACH4x00 and MACH1000 serve this tier.
DRAGON MACH4x00
Section titled “DRAGON MACH4x00”The DRAGON MACH4x00 series is the backbone Layer 3 switch for connecting OT and IT networks at the plant level.
| Specification | MACH4000-52G | MACH4000-48G+4X | MACH4500-80G+8X |
|---|---|---|---|
| Ports | Up to 52 GE | Up to 52 (48 GE + 4 x 10 GE) | Up to 88 (80 GE + 8 x 10 GE) |
| Base unit | 4 x 1 GE SFP | 4 x 1/2.5/10 GE SFP+ | 8 x 1/2.5/10 GE SFP+ + 32 GE |
| Modules | 4 media module slots (10-12 ports each) | Same | Same |
| Power | Redundant internal PSU, max 200 W | Same | Same |
| Dimensions | 480 x 88 x 445 mm (2U) | Same | Same |
| Protection | IP20 | IP20 | IP20 |
Software Features
Section titled “Software Features”HiOS L2A or L3A with unicast or multicast routing:
Layer 2 Advanced: MRP (manager + client), HIPER-Ring, RSTP, MSTP, LACP, 802.1X, RADIUS, DHCP snooping, IP source guard, dynamic ARP inspection, DoS prevention, full ACL suite, RSPAN, SFLOW, PROFINET IO, EtherNet/IP, Modbus TCP, IEC 61850 (MMS server).
Layer 3 Advanced: Static routing, OSPFv2, RIPv1/v2, ECMP, VRRP with tracking, HiVRRP, ICMP Router Discovery, proxy ARP. Multicast routing: IGMP v1/v2/v3, IGMP proxy, DVMRP, PIM-DM (RFC 3973), PIM-SM/SSM (RFC 4601).
Time synchronization: PTPv2 transparent clock (two-step), PTPv2 boundary clock, SNTP client/server.
Certifications
Section titled “Certifications”EN 50121-4 (trackside), UL 61010-1/61010-2-201 (safety).
MACH1000
Section titled “MACH1000”The MACH1000 is a 28-port GbE switch with comprehensive L2/L3 features and seamless redundancy for substations and critical infrastructure.
| Specification | Value |
|---|---|
| Ports | 28 GbE |
| Redundancy | HSR, PRP, MRP, RSTP, LACP |
| Software | HiOS L2A, L3A |
| Temperature | -40 C to +70 C |
| Certifications | IEC 61850-3, IEEE 1613 |
| Time sync | IEEE 1588 PTPv2 |
Use Cases
Section titled “Use Cases”Plant-level distribution: A DRAGON MACH4500 at the plant core aggregates traffic from 8 GREYHOUND access switches via 10 GbE fiber uplinks. OSPF provides dynamic routing between production zones. PIM-SM delivers multicast video from quality inspection cameras to multiple operator stations.
Substation core: A MACH1000 pair runs HSR for zero-recovery-time redundancy. IEC 61850 MMS provides SCADA access to protection relays. IEEE 1588 PTPv2 synchronizes sampled values across the process bus.
Data center aggregation: A DRAGON MACH4000-48G+4X aggregates server traffic with 4 x 10 GbE uplinks. ECMP distributes traffic across redundant paths. VRRP provides gateway redundancy.
Key Takeaways
Section titled “Key Takeaways”MACH1000: substation-grade redundancy
28 GbE ports, HSR/PRP, IEC 61850, IEEE 1588 PTPv2. Purpose-built for substations and critical infrastructure.
What Comes Next
Section titled “What Comes Next”Rack mount switches handle the backbone. The next chapter covers industrial security products: EAGLE One firewall, EAGLE40 NGFW, and the Rail Data Diode.
References
Section titled “References”- Belden/Hirschmann. (2024). DRAGON MACH4x00 Data Sheet. Belden Inc.
- Belden/Hirschmann. (2024). MACH1000 Data Sheet. Belden Inc.