Manufacturer product photo · industrial managed DIN-rail NAT router
ZJIES3000D-N
Managed NAT Router · DIN-Rail Fast Ethernet
Industrial Managed DIN-Rail NAT Router · 5×10/100Base-T (4 LAN + 1 WAN) · Firewall/VPN Event Log
Project-Based Pricing
Volume & combo discounts — get your quote
In-stock models: 3 days to your forwarder's warehouse in China after payment · Out-of-stock: 7–15 working days · then air 5–10 days or sea 25–45 days to your port
✓ Project-level customization & OEM supported
Get Best Price on WhatsAppRequest a quote ↓Terms · Sample orders welcome · Quotation / PI fixes models, prices, Incoterms (EXW or FOB, each quoted separately), lead time and T/T payment · Defective units: free spare units agreed per order (quantity depends on order size) and written into the quotation · Warranty: up to 5 years on Zhongxin Shutong industrial switches, manufacturer warranty on other brands · Full terms, warranty & RMA
Need the PDF datasheet? Get it on WhatsApp →How to get a better price
Volume DiscountOrder 50+ pcs of this model
CONTACT US
Project Combo DiscountMix any categories & models storewide in one order — no quantity limit
BIGGER
Verified Project DiscountDistributor, integrator or end user with a real project? Send the BOQ — project pricing plus free system design. Partner projects are protected: we never quote your end customer behind you
BIGGEST
All discounts are quoted personally — message me on WhatsApp ↑
◆NAT & Firewall Router
◆5×10/100Base-T (4LAN+1WAN)
◆DC24V/48V or AC220V
◆IP40 Metal Enclosure
◆DIN-Rail / Wall-Mount
◆5-Year Warranty
Overview
The ZJIES3000D-N series is an industrial managed DIN-rail NAT router with 5×10/100Base-T ports (4×LAN, 1×WAN), simplifying IP configuration for machines on existing network infrastructure in factory-automation environments. Its wide-temperature design and strong EMC immunity meet the demands of harsh industrial field environments, and its full NAT feature set lets machines adapt to specific network scenarios without complex, costly, and time-consuming configuration. These devices also protect the internal network from unauthorized access by external hosts.
Is This the Right Fit?
Six real deployment scenarios matched to this model's actual datasheet specifications.
Duplicate-IP Machine NAT IntegrationBuilt-in 4-to-1 port forwarding and NAT loopback let machines with pre-set or duplicate IP addresses join the existing factory-automation network without reconfiguring their IP settings.
DIN-Rail Mounting Inside Compact Control CabinetsDefault DIN-rail installation (wall-mount optional) with a compact 32×144×95mm metal enclosure and DC24V/48V or AC220V power options fits directly into space-limited electrical cabinets.
Wide-Temperature Outdoor Cabinet DeploymentThe optional wide-temperature build operates from -40 to +75°C (storage -40~85°C) with Level-3 EMC immunity (EN61000-4-2/3/4/5/6/8), suited to outdoor cabinets facing seasonal extremes.
Tunnel & Underground M&E Power Resilience4-pin terminals accept dual DC24V (12–36V) or DC48V (36–56V) power inputs on the same unit, together with reverse-polarity/overload protection and Level-3 EMC immunity, for tunnel and underground electromechanical rooms with strong electromagnetic interference.
Real-Time Firewall & VPN Event LoggingFiltering by IP address/MAC address/port plus port-based auto-learning lock of MAC/IP addresses, backed by real-time firewall/VPN policy-enforcement event logs stored locally or sent to a Syslog server, give visibility into network security events.
Small-to-Mid Industrial Network SegmentationStatic routing with up to 32 routing rules and up to 30k concurrent connections (4.5k connections/sec) lets the router interconnect and segment small-to-mid industrial network zones without a dedicated Layer-3 switch.
Not a good fit if:
- Fixed 5×10/100Base-T ports only (4×LAN + 1×WAN) — no Gigabit or fiber uplink option; not intended as a high-throughput backbone router.
- IP40 enclosure only — needs a control cabinet or additional protection for direct outdoor rain/dust exposure.
- Only static routing (up to 32 rules) is supported — no dynamic routing protocols (OSPF/BGP) for large multi-site WAN topologies.
Key Features
- User-friendly NAT support that simplifies network integration
- Security functions safeguard device and network security, checking system integrity
- 5×10/100Base-T ports: 4×LAN, 1×WAN
- Optional DC 24V/48V or AC 220V power input
- IP40 protection rating
- DIN-rail / wall-mount installation
Specifications
IEEE Standards
| IEEE802.3 | 10BaseT Ethernet |
| IEEE802.3u | 100BaseT(X) and 100BaseFX Fast Ethernet |
| IEEE802.1ab | LLDP (Link Layer Discovery Protocol) |
NAT
| Feature | 4-to-1 port forwarding, NAT loopback |
| Throughput | Up to 15K packets/sec (max 100 Mbps) |
Security Protection
| Filtering | IP address, MAC address, port |
| Port-Based Auto-Learning Lock | MAC address, IP address |
| Throughput | Up to 15K packets/sec (max 100 Mbps) |
Real-Time Firewall / VPN Event Log
| Event Type | Policy enforcement |
| Interface | Local storage, Syslog server |
Interfaces
| Button | Reset button |
| RJ45 Ports | 5 × 10/100Base-T (4 × LAN, 1 × WAN) |
| LED Indicators | Power, Link |
Power
| 24V Input | 4-pin terminal, dual redundant input; 24VDC range 12–36VDC |
| 48V Input | 4-pin terminal, dual redundant input; 48VDC range 36–56VDC |
| 220V Input | 4-pin terminal, single power input; 220V range 100–240VAC |
| Power Consumption | Max 15 W |
| Power Protection | Reverse-polarity & overload |
Environment
| Standard Temp | -10 ~ +60°C |
| Wide Temp | -40 ~ +75°C |
| Storage Temp | -40 ~ +85°C |
| Humidity | 5–95% non-condensing |
Certification
| EMC | CE, FCC |
| EMI | FCC Part 15, EN 55032 (CISPR 32) Class A |
| EMS | EN61000-4-2/3/4/5/6/8 Level 3 |
| Shock | IEC60068-2-27 |
| Free Fall | IEC60068-2-32 |
| Vibration | IEC60068-2-6 |
| Green | RoHS, WEEE |
Ethernet Software Features
| Management | Web Console (HTTP/HTTPS), LLDP, Telnet, TFTP, HTTPS, SSH |
| Security | Secure boot, trusted access control |
| Time Sync | NTP Server/Client, SNTP |
| Unicast Routing | Static routing |
| Routing | Throughput: 15K packets/sec (max 100 Mbps) |
| Routing Table | Up to 32 routing rules |
| Concurrent Connections | Up to 30k |
| Connections per Second | Up to 4.5k |
Physical
| Housing | IP40 metal enclosure |
| Mounting | DIN-rail (default), wall-mount optional |
| Dimensions | 32 (W) × 144 (H) × 95 (D) mm |
Warranty
| MTBF | 320,000 hours |
| Warranty | 5 years |
Models & Ordering
| Model | Product Description | Price |
|---|---|---|
| ZJIES3000D-N-5T-AC | Industrial managed DIN-rail NAT router — 5×10/100Base-T (4×LAN, 1×WAN), AC220V (AC 100–240V) power. | |
| ZJIES3000D-N-5T-DCL | Industrial managed DIN-rail NAT router — 5×10/100Base-T (4×LAN, 1×WAN), DC24V (12–36V) power, redundant input. | |
| ZJIES3000D-N-5T-DCH | Industrial managed DIN-rail NAT router — 5×10/100Base-T (4×LAN, 1×WAN), DC48V (36–56V) power, redundant input. |
This page covers the ZJIES3000D-N series: -5T-AC = AC220V (100–240V) single power input; -5T-DCL = DC24V (12–36V) redundant dual input; -5T-DCH = DC48V (36–56V) redundant dual input. All three variants share 5×10/100Base-T ports (4×LAN, 1×WAN), full NAT/firewall functionality, and an IP40 metal DIN-rail enclosure. The requested model is ZJIES3000D-N.
Dimensions
unit: mm
Your Brand. Factory-Direct Supply.Neutral casing, ready for your logo · Custom port/power options · Small batches welcome.
Custom & OEM →Who uses it, where it goes and how to install it
Written for the ZJIES3000D-N series from the manufacturer's datasheet: industrial NAT router with 5 × 10/100Base-T (4 LAN + 1 WAN), port forwarding and NAT loopback, IP/MAC/port filtering, static routing (32 rules), AC 220V or redundant DC 24V/48V.
Who it is for
- Machine builders and OEMs — Every machine can ship with the same internal IP plan for its PLC, HMI and drives on the 4 LAN ports; at the customer site only the WAN port gets a plant address, so nothing inside the machine has to be re-addressed.
- Factory OT and plant IT teams — IP, MAC and port filtering plus port-based auto-learning lock of MAC/IP addresses keep office hosts from reaching machine controllers, and firewall/VPN policy events go to local storage or a Syslog server.
- Tunnels, underground plant rooms and utilities — The -5T-DCL (12–36 VDC) and -5T-DCH (36–56 VDC) versions take two redundant DC inputs with reverse-polarity and overload protection, and the EMS tests are listed at Level 3 for ESD, surge and fast transients.
- Integrators segmenting small industrial networks — Static routing with up to 32 rules, up to 30k concurrent connections and NTP server/client let one compact router separate and time-synchronise a production line or pump station without a Layer 3 switch.
Where and how to install
- Inside the machine's control cabinet — At 32 × 144 × 95 mm it takes about 32 mm of DIN rail (wall mounting is optional). The housing is IP40, so it belongs in a closed cabinet, not exposed to rain or dust. Place it near the machine's own switch or PLC so LAN patch cords stay short.
- WAN to the plant, LAN to the machine — Connect the single WAN port to the plant or SCADA network and the 4 LAN ports to the machine side. If the machine has more than 4 Ethernet devices, add a small DIN-rail switch on one LAN port, such as the ZJIES1000D-8T-DC.
- Power wiring — Order -5T-AC for 100–240 VAC (single input), -5T-DCL for 12–36 VDC or -5T-DCH for 36–56 VDC. Each unit has one power range; on DC versions feed both inputs of the 4-pin terminal from separate supplies or breakers. At the 15 W maximum it draws about 0.63 A at 24 V or 0.31 A at 48 V.
- Earthing and cable runs — Bond the cabinet and DIN rail to earth and keep each copper run under 100 m. The ports are copper only, so if the plant network is far away or in another building, put a media converter or fiber switch between the WAN port and the plant network, with an Ethernet surge protector on any copper line that leaves the cabinet.
- Temperature and condensation — The standard version is rated -10 to +60°C and the wide-temperature version -40 to +75°C; order the wide version for outdoor or unheated cabinets. Humidity is 5–95% non-condensing, so add a heater or filtered vent where cabinets cool down sharply at night.
- Not for backbone or video aggregation — Routing throughput is up to 15K packets per second with a maximum of 100 Mbps, and there is no Gigabit or fiber port. Use it at the edge of a machine or small zone, not between a large camera network and its NVR.
Link planning: -5T-AC, -5T-DCL or -5T-DCH
All three versions have the same 5 copper ports, NAT, firewall and routing functions; only the power input differs. Size the WAN side for the 100 Mbps routing limit: with an assumed 70% load ceiling, keep traffic through the router under about 70 Mbps.
| ZJIES3000D-N-5T-AC | ZJIES3000D-N-5T-DCL | ZJIES3000D-N-5T-DCH | |
|---|---|---|---|
| Ports | 4 × LAN + 1 × WAN, 10/100Base-T | 4 × LAN + 1 × WAN, 10/100Base-T | 4 × LAN + 1 × WAN, 10/100Base-T |
| Fiber ports | None | None | None |
| Routing throughput | 15K pps, max 100 Mbps | 15K pps, max 100 Mbps | 15K pps, max 100 Mbps |
| Routing | Static, 32 rules | Static, 32 rules | Static, 32 rules |
| Concurrent / new connections | 30k / 4.5k per s | 30k / 4.5k per s | 30k / 4.5k per s |
| Power input | 100–240 VAC, single | 12–36 VDC, dual | 36–56 VDC, dual |
| Max. power / current | 15 W | 15 W ≈ 0.63 A @ 24 V | 15 W ≈ 0.31 A @ 48 V |
| Operating temperature | -10~60°C / -40~75°C | -10~60°C / -40~75°C | -10~60°C / -40~75°C |
| Size (W × H × D) | 32 × 144 × 95 mm | 32 × 144 × 95 mm | 32 × 144 × 95 mm |
- Pick -5T-DCL for machines and control cabinets with a 24V DC supply, the most common case in automation.
- Pick -5T-DCH for substations, tunnels and telecom rooms with a 48V DC battery system, and -5T-AC only where mains is the only supply.
All values are from the manufacturer's datasheet. Current = 15 W ÷ voltage. The 70 Mbps working limit is 70% of the 100 Mbps maximum (planning assumption).
Industrial NAT Router FAQ — ZJIES3000D-N
What does the ZJIES3000D-N actually do in a factory network?
It is a DIN-rail NAT router with 5 x 10/100Base-T ports — 4 LAN plus 1 WAN. It puts a machine cell behind its own address space, so identical machines with identical internal IPs can join the plant network without re-addressing, and blocks unauthorized access from outside hosts.
What throughput and connection capacity can I expect?
NAT and firewall throughput reach up to 15K packets per second, with a maximum of 100 Mbps. It sustains up to 30,000 concurrent connections and about 4,500 new connections per second, with a routing table of up to 32 static rules — sized for machine cells, not core routing.
What firewall and logging features are included?
Filtering works by IP address, MAC address and port, with port-based auto-learning lock of MAC and IP. Policy-enforcement events are logged to local storage or a Syslog server, and the NAT engine supports 4-to-1 port forwarding and NAT loopback for reaching internal services.
How do I power and mount the ZJIES3000D-N?
Power options: dual-redundant DC 24V (12-36 VDC), dual-redundant DC 48V (36-56 VDC) or single AC 220V (100-240 VAC), max 15 W, with reverse-polarity and overload protection. The IP40 metal housing measures 32 x 144 x 95 mm and mounts on DIN-rail by default, wall-mount optional.
Can it survive harsh temperatures and electrical noise?
Yes: -10 to +60 C standard, -40 to +75 C wide-temperature, storage -40 to +85 C, humidity 5-95% non-condensing. EMC immunity meets EN61000-4-2/3/4/5/6/8 Level 3, and the unit passes IEC60068-2 shock, free-fall and vibration tests for cabinet installations near heavy equipment.
How is the router managed and kept secure?
Management runs over a web console (HTTP/HTTPS), Telnet, SSH and TFTP, with LLDP discovery and a hardware reset button. Security includes secure boot and trusted access control, while NTP server/client and SNTP keep clocks aligned for accurate firewall event logs.
Can I install several identical machines with the same internal IP addresses, each behind its own ZJIES3000D-N?
Yes, that is the main use of this router. Each machine keeps its internal addresses on the LAN side, and each router's WAN port gets its own unique plant IP. To reach a PLC or HMI from SCADA, create a port-forwarding rule on that machine's router; NAT loopback lets devices use the same forwarded address from inside too. The datasheet lists port forwarding and NAT loopback but does not name 1:1 NAT, so if your SCADA needs a separate plant IP per internal device, confirm with us before ordering.
Can I use the ZJIES3000D-N as a VPN gateway for remote access to the machine?
Do not plan on it without checking with us. The datasheet lists real-time firewall/VPN policy-enforcement event logs, but it does not list any VPN tunnel type (such as IPsec or OpenVPN), VPN client/server settings or a cellular modem. For remote service, the usual approach is a separate remote-access gateway on the plant side; if a built-in VPN is a requirement, send us your remote-access method and we confirm before you order.
My machine has more than 4 Ethernet devices. How do I connect them to the ZJIES3000D-N?
Put a switch on one of the 4 LAN ports, for example an unmanaged DIN-rail switch such as the ZJIES1000D-8T-DC, and connect the devices to it; they all stay in the machine's internal subnet. Traffic between devices on that switch does not pass through the router, so only traffic to and from the plant network counts against the 100 Mbps routing limit.
Can the ZJIES3000D-N route between several plant subnets, or do I need a Layer 3 switch?
For a small number of zones it can: it supports static routing with up to 32 routing rules. It has no dynamic routing protocol such as OSPF or BGP, so every route is entered by hand, and throughput is limited to 100 Mbps. For a large site with many VLANs and Gigabit traffic, use a Layer 3 core switch and keep the ZJIES3000D-N at the edge of individual machines or cells.
Can the ZJIES3000D-N give the correct time to PLCs and HMIs inside the machine?
Yes. It supports NTP client and NTP server as well as SNTP: set it to take time from the plant's NTP server on the WAN side, then point the PLCs and HMIs on the LAN side to the router's LAN address as their NTP server. That keeps alarm and event timestamps on the machine aligned with SCADA and with the router's own Syslog events.
What power connector does the ZJIES3000D-N have, and do I need to confirm it before ordering?
Yes, please confirm the power connector with us before ordering. For Zhongxin Shutong products the power input type and connector can differ between versions and batches, so tell us your supply (AC or DC and the voltage), how you will wire it in the cabinet and your country's plug standard, and we confirm the exact connector and supply version of the ZJIES3000D-N for your order.
Ordering questions — samples, shipping, payment, lead time and genuine stock — are answered once on our FAQ page.
Our own line — Zhongxin Shutong industrial switches1,500 m² clean rooms100% port-by-port tested-40…+75 °C rated, cycled to +85 °CEN 61000-4 Level 3 EMC immunitySerial-number traceability on every unitISO 9001 · 14001 · 27001 · CMMI L3See the factory →See all certifications →
Every order, any brand: there is no return policy — defective units are covered by free spare units agreed per order and written into the quotation. Warranty up to 5 years on the Zhongxin Shutong industrial line, manufacturer warranty on other brands. Terms, warranty & RMA
Request a quote for this product
An engineer replies within 24 hours on working days with model check, price and lead time. No obligation, no newsletters.
Product: ZJIES3000D-N
For a fast, exact quote tell us: model or requirement · quantity · destination country / port · EXW or FOB · deadline.