Home / Solutions

Solutions · Machine network security

LAN Lock™ — take a machine off the network, physically

A DIN-rail Ethernet disconnect that isolates a machine from remote VPN access, plant networks and programming ports — switched by a 24VDC signal from your HMI, PLC, key switch or SCADA.

Buy LAN Lock™ — $249.99Call (812) 618-5089
LAN Lock mounted on DIN rail in a control panel
$249.99Part no. LL-10-24-A · Ships from Evansville, IN
Buy in the Envision Store Download datasheet (PDF)

Why a physical disconnect?

Remote access is invaluable — until it isn't wanted. Software firewalls and VPN settings live in IT's world. LAN Lock™ puts the connection back in the hands of the people on the plant floor.

Control on the floorMaintenance, supervisors and plant managers can open or close a machine's connection — no IT expertise needed.
Peace of mind for remote accessConnect a remote-support router only when you choose. Customers sensitive to remote connections stay in control.
Another layer of securitySwitch it from the HMI behind password protection, or with a key switch for complete isolation.
Plant-wide air gapTie it to SCADA to disconnect machines on site or remotely in the event of a cyber attack.
Rendering of the Gigabit PoE LAN Lock in development

In development

Gigabit LAN Lock™ with PoE

A Gigabit, PoE-capable LAN Lock™ is in development — the same physical disconnect, built for faster networks and for devices powered over the Ethernet cable.

Isolate networksPhysically separate network segments at Gigabit speed.
PoE devicesDisconnect IP cameras, access points, access control and other PoE devices.
Critical infrastructureBuilt for sites where isolation is critical — energy, utilities, correctional facilities and more.
Talk to us about your application
A production run of LAN Lock units in Evansville
Designed and built in Evansville, Indiana.

How it works

  1. Mount LAN Lock™ on standard 35 mm DIN rail and connect the incoming and outgoing Ethernet cables.
  2. Wire any 24VDC output to the enable terminal — PLC, HMI, relay, selector or key switch.
  3. Signal on: connected, green LED lit. Signal off: the connection is physically opened.
  4. Use the dry-contact feedback output to confirm the state in your PLC or HMI.

Applications

LAN Lock application examples

  • Isolate a remote-support VPN router until maintenance enables it
  • Separate a machine network from the plant network
  • Lock out a programming port
  • Plant-wide connect/disconnect from SCADA

Technical specifications
Enable voltage 24 VDC, 100% duty cycle
Input current 23.8 mA
Feedback output 1 dry contact, 24 VDC, 1 A
Ethernet 2 × RJ45, 100 Mbps full duplex
Status indication Green LED
Mounting 35 mm DIN rail
Connection 4-position plug-in terminal
Dimensions 3.4" H × 0.98" W × 4.31" D
Weight 72 g

Wiring and dimensions

LAN Lock terminal legend
Terminals: A — 24VDC enable · B — 0V · C — DIG 1 COM · D — DIG 1 OUT (dry contact feedback)
LAN Lock dimensions in inches
Dimensions in inches

Technical support: (812) 618-5089 · support@envisions.io

FAQ

Common questions

How does LAN Lock™ disconnect the network?

It sits in line between two Ethernet segments. When its 24VDC enable input is on, the connection passes through; when the signal is removed, the connection is physically opened — nothing on the other side can reach the machine.

What can switch it?

Any 24VDC output — a PLC output, an HMI button behind password protection, a relay, a selector or key switch, or a SCADA command for plant-wide control.

How do I know if it's connected?

A green status LED shows when the connection is enabled, and a dry-contact feedback output lets your PLC or HMI confirm the state.

Does it slow down the network?

The current LAN Lock™ passes 100 Mbps full-duplex Ethernet (use shielded CAT5e or better). A Gigabit, PoE-capable LAN Lock™ is in development.

Is a Gigabit or PoE version available?

A Gigabit LAN Lock™ with PoE pass-through is in development — ideal for isolating PoE devices such as IP cameras. Contact us to discuss your application and hear when it's available.

Does it need maintenance?

No maintenance is required under normal operation.

Ready to talk about your application?

Send us your part and your process. We'll tell you straight whether we can solve it — and how. We reply to every quote request within one business day.

Request a quoteCall (812) 618-5089