SbC3100 – Secured by Cimetrics BNSD
The Cimetrics SbC3100 is a BACnet Network Segmentation Device (BNSD) designed to route, secure, and monitor BACnet traffic across BACnet/IP ↔ BACnet/IP, BACnet/IP ↔ BACnet/SC, and BACnet/SC ↔ BACnet/SC networks. It is the modern replacement for legacy BACnet/IP routers like the B3075, adding BACnet/SC routing, segmentation, and a built-in BACnet firewall for secure traffic management.
Product Highlights
- Secure segmentation between BACnet/IP and BACnet/SC networks
- Support for BACnet/IP with optional BBMD on a customer port
- Support for BACnet/SC certificate lifecycle, including Certificate Signing Request (CSR) generation (through web interface)
- Supports up to 500 BACnet/SC devices per secure network
- Supports up to 250 BACnet/IP devices for large deployments
- Supports DHCP, DNS, NTP and syslog
- Remote configuration thru web setup
- Remote diagnostics via OpenVPN, Syslog, and Wireshark capture
- Intuitive web-based configuration interface
- Seamless integration with the SbC ecosystem (e.g., SbC4000)
Description
Secured by Cimetrics SbC3100 BACnet Network Segmentation Device (BNSD) segments nonsecure BACnet/IP networks from secure BACnet/SC networks without compromising performance, reliability or security.
The SbC3100 BNSD is a fully compliant BACnet network layer router, with additional capabilities to monitor and enforce policy on BACnet traffic passing between network segments.
FEATURES
-
- Two Ethernet ports: both support BACnet segmentation, and one also serves as a configuration port.
- Segments the private network from the public network.
- Connects unsecured BACnet/IP or secured BACnet/SC networks to secured BACnet/SC Networks.
- Built-in configurable BACnet Firewall Engine – Controls the flow of BACnet traffic between the connected networks.
- IT integration via Syslog: Log real-time events, including BACnet Firewall actions.
- Supports OpenVPN, which enables non-BACnet communication with devices on the private network.
- Wireshark packet capture on Ethernet with optional decoding of encrypted traffic.
- Web-based configuration interface.
- Integrates with the Secured by Cimetrics BACnet/SC management and diagnostic platform
CYBERSECURITY BENEFITS of SbC3100 BNSD
-
- SbC BACnet Firewall can reduce the severity of cybersecurity threats in segmented networks.
- Building Automation System operators can be alerted to unexpected traffic due to misconfiguration or malicious actors.
- Policy-based monitoring provides valuable visibility into the Building Automation System for IT network and security operations teams via syslog.
DEPLOY YOUR NETWORK WITH SECURED BY CIMETRICS:
Cimetrics SbC3100 BACnet Network Segmentation Device segments unsecured BACnet/IP and BACnet/SC networks from BACnet/SC networks. In a typical deployment, a Secured by Cimetrics Appliance (SbC4000) monitors the BNSD’s BACnet Firewall to detect and diagnose network and security issues. The SbC3100 BNSD monitors and enforces policy on BACnet messages flowing between BACnet/IP and BACnet/SC network segments.

Hardware
| Power Adapter Input Voltage: | 100—240 VAC, 50-60 Hz |
| Operating Temperature: | 0 to 40 C |
| Storage Temperature: | -30 to 50 C |
| Power Consumption: | 12 VDC, 10W typical |
| Dimensions: | 15.8 x 16 x 2.5 cm |
| Weight: | 450 cm |
| Ethernet Ports: | (3) 10/100/1000 Mbps |
| Approvals: | FCC Class A, CE |
| Router Enclosure: | Metal |



