Industrial Ethernet Disconnect Device

Take a machine off the network. Physically.

LAN Lock™ is a DIN-rail hardware relay that isolates a machine from remote VPN access, plant networks and programming ports. Switch it with any 24VDC signal from your HMI, PLC, key switch or SCADA.

  • No IP address
  • No MAC address
  • No firmware
  • Nothing to patch
Buy LAN Lock™ · $249.99 Gigabit version →
LAN Lock mounted on DIN rail next to a GuardLogix PLC, with boxed units ready to ship
Designed & built in Evansville, Indiana

Why a physical disconnect?

Put the connection back on the plant floor

Remote access is invaluable, until it isn't wanted. Software firewalls and VPN settings live in IT's world.

LAN Lock™ puts the connection in the hands of the people who run the machine. Signal on: connected. Signal off: the wire is open, and nothing on the other side can reach it.

Control on the floorMaintenance, supervisors and plant managers open or close a machine's connection. No IT expertise needed.
Remote access on your termsConnect a remote-support router only when you choose. Customers sensitive to remote connections stay in control.
Another layer of securitySwitch it from the HMI behind password protection, or with a key switch for complete isolation.
Plant-wide air gapTie it to SCADA to disconnect machines on site or remotely in the event of a cyber attack.
Rendering of the Gigabit PoE LAN Lock: a DIN-rail unit with two RJ45 ports and a status bar

Next · In development

Gigabit LAN Lock™ with PoE

The same physical disconnect, built for gigabit networks and for devices powered over the Ethernet cable. Cut the link and a PoE camera doesn't just go unreachable. It goes dark.

Built forEnergy and utilities, pipelines, water and wastewater, correctional facilities, data centers and industrial OT: anywhere isolation has to be provable.
1000BASE-TFull gigabit, all four pairs. Inserts into a certified channel without slowing it down.
8 conductors switchedEvery pair physically opened, in both directions. Nothing rides through the box.
PoE goes with the dataPower breaks with the link. IP cameras, access points and access control drop cleanly.
Still no firmware24VDC enable, dry-contact feedback, 35 mm DIN rail. Same wiring as today's unit.
Talk to us about your application

or call (812) 618-5089 · sales@envisions.io

  LAN Lock™ Current model Gigabit LAN Lock™ In development
Ethernet100 Mbps full duplex1000BASE-T
Conductors switched4 (pins 1, 2, 3, 6)8 (all four pairs)
PoE pass-throughNot supportedYes, cut with the data
Enable input24 VDC24 VDC
FeedbackDry contactDry contact
Firmware · IP · MACNoneNone
Mounting35 mm DIN rail35 mm DIN rail
How to get it$249.99 · shop.envisions.ioContact us
Diagram: LAN Lock in line between the plant network and a machine, with a 24VDC enable signal controlling the relay contact 24VDC enable ← PLC · HMI · key switch · SCADA Plant · VPN Uplink Machine PLC · HMI · Panel ABCD LAN LOCK Relay K1 Connected Isolated
Enable24 VDC
Status LEDGreen
FeedbackConnected

How it works

One wire decides

  1. Mount and cableSnap LAN Lock™ onto standard 35 mm DIN rail and connect the incoming and outgoing Ethernet cables.
  2. Wire the enableLand any 24VDC output on terminal A: a PLC output, HMI button, relay, selector or key switch.
  3. Signal on, signal offSignal on: connected, green LED lit. Signal off: the connection is physically opened.
  4. Confirm the stateRead the dry-contact feedback on terminals C and D in your PLC or HMI.
Application diagram: WAN feeding a VPN and plant network, LAN Lock in line with a 24VDC enable from a PLC output, switch, HMI, remote I/O or relay, and the machine LAN below

Applications

Where it goes

  • Isolate a remote-support VPN router until maintenance enables it
  • Separate a machine network from the plant network
  • Lock out a programming port
  • Plant-wide connect/disconnect from SCADA

Any 24VDC source works as the enable: a PLC output, a switch, an HMI, remote I/O or a relay.

Technical specifications

LAN Lock™ LL-10-24-A

Download datasheet (PDF)
Enable voltage24 VDC, 100% duty cycle
Input1 × 24 VDC, 23.8 mA
Feedback output1 dry contact, 1 A @ 24 VDC
Ethernet2 × RJ45, 100 Mbps full duplex
Status indicationGreen LED
Mounting35 mm DIN rail
Connection4-position plug-in terminal
Dimensions3.4" H × 0.98" W × 4.31" D
Weight72 g

Use shielded CAT5e or better. No maintenance required under normal operation.

LAN Lock terminal legend
A 24VDC enable · B 0V · C DIG 1 COM · D DIG 1 OUT (dry-contact feedback)
LAN Lock dimension drawing
Dimensions in inches
A production run of LAN Lock units on the bench in Evansville
Designed, assembled and tested at Envision Automation & Controls, Evansville, Indiana.

Order

Lock it down

LAN Lock™
$249.99Part no. LL-10-24-A · Ships from Evansville, IN

Industrial Ethernet Disconnect Device. 24VDC enable, dry-contact feedback, green status LED, 35 mm DIN rail, 100 Mbps full duplex.

Buy in the Envision Store Datasheet

Volume orders, OEM or the Gigabit version?

Tell us about the application. We'll tell you straight whether LAN Lock™ fits, and when the Gigabit PoE unit will be ready.

Salessales@envisions.io
Supportsupport@envisions.io
Phone(812) 618-5089
Storeshop.envisions.io