Secure Dual Network Expansion for Enhanced Remote Management

Introduction

The IONODES Secure Display Station (SDS) product family is engineered to deliver high-assurance video display capabilities within isolated and hardened network environments. By design, SDS units maintain a strict air gap between the secured video infrastructure and any external network resources.

In response to increasing demand for remote fleet management, IONODES has introduced a firmware-level enhancement enabling SDS units to support dual network configurations while preserving the strict security isolation required for high-assurance deployments.

Background & Security Model

Traditional SDS deployments operate on a single, physically isolated LAN, typically without outbound internet access. This design ensures:

  • Unidirectional flow of information (e.g., camera streams to display endpoints only)
  • Elimination of remote attack vectors

While this approach provides maximum security, it limits the ability to remotely monitor, configure, or update systems—posing operational challenges at scale.

Firmware Enhancement Summary

The latest SDS firmware includes native support for multi-NIC operation, enabling simultaneous connections to two logically and/or physically isolated networks:

  • Primary Interface: Connected to the secure, private camera/display network
  • Secondary Interface: Connected to a management or internet-enabled network

This functionality is now available across the entire SDS family, including:

  • ION-R100S – requires supported USB Ethernet adapter
  • ION-R200 – requires supported USB Ethernet adapter
  • ION-R300 – already includes two built-in physical 2.5Gigabit Ethernet ports

Enabling the Feature

To activate dual network functionality on ION-R100S or ION-R200 models:

  • Update to firmware version 15.5.18.0 or later (exact build details in release notes)
  • Connect an IONODES-certified USB to Ethernet adapter to an available USB port
  • Access the System Configuration Webpage
  • Assign static IP configurations or DHCP as per your deployment standards

Integration with PERCEPT Cloud

When the management interface is internet-accessible, SDS units can optionally be registered with PERCEPT Cloud, enabling:

  • Secure remote health and status monitoring of deployed SDS units
  • Remote firmware updates and configuration management

The secure interface remains completely isolated. No camera traffic is ever routed through PERCEPT Cloud, preserving compliance with secured deployment models.

Learn more: https://www.ionodes.com/products/percept-cloud/


Conclusion

The latest firmware allows existing SDS customers—especially those with ION-R100S and ION-R200 units in the field—to modernize their management practices without compromising the integrity of their secure camera networks. By maintaining full physical and logical separation between data plane and control plane traffic, this solution satisfies both operational flexibility and information security requirements.


Additional Resources

  • SDS Firmware Release Notes – v15.5.18.0
  • PERCEPT Cloud SDS Getting Started Guide
  • USB Ethernet Adapter Kit (PERCEPTCLOUD-USB2ETH-KIT)