AT-AR330 & AT-AR350 Leased Line & Frame Relay Access Routers

Transcription

1 AT-AR330-xx AT-AR350-xx HIGH-SPEED WAN CONNECTIVITY Offering dual modem ports for backup and bandwidth expansion, the AT-AR330/AR350 Access Routers combine high-speed leased-line support up to T1 using a variety of physical interfaces.the routers support Frame Relay operation to T1/E1 speeds and include provision for logical interfaces and congestion-control based on Committed Information Rate (CIR). DUAL ETHERNET SUPPORT AND SIM- PLE INTERNET ACCESS The AT-AR330 supports two Ethernet LANS, making it the ideal unit for organizations wishing to maintain two separate LANs for security reasons, while providing both with access to Wide Area Networks or the Internet. Also, NAT and Extended NAT (ENAT) support unlimited LAN users for the cost of a single IP address while Dynamic IP address assignment and an integral DHCP server offer transparent IP address set-up. ADVANCED SECURITY OPTIONS The AT-AR300 series features optional hardwarebased IPSec, DES, and 3DES encryption for secure transmission of sensitive data. In addition to standard packet filtering, the AT-AR300 series supports Allied Telesyn s optional Stateful Inspection Firewall, providing extensive session and application level protection against malicious Denial of Service (DoS) attacks. HARDWARE DATA COMPRESSION OPTION The AT-AR300 Series provides standard software compression, including VJC Header, STAC and Predictor. For line speeds above 64kbps, a dedicated hardware based data compression module offers up to 8:1 compression using STAC. DUAL ETHERNET LAN SUPPORT The AT-AR330 supports connection to two separate Ethernet LANs at 10Mbps, providing secure physical layer separation for different communities of interest whether between public LANs for Web access and private company intranets or between other networks.the AT-AR330 allows both LAN communities to access the Wide Area Network using the same high-speed synchronous port, saving on line costs.the dual Ethernet AT- AR330 can also be connected to external xdsl and cable modems to take advantage of new highspeed network services. CONFIGURATION AND MANAGEMENT Standard configurations are set up in minutes using the browser-based WEBSTART configuration utility. Also, Secure Shell (SSH) client available from third parties for your Windows or Macintosh PC and server software in the router provides authenticated and encrypted secure remote management. SSH clients are.the routers support SNMP3, MIB II and Enterprise MIB. KEY FEATURES Flexible options for sharing Internet connections over digital leased lines and ISDN RIP, OSPF protocol support PAP/CHAP, RADIUS/TACACS Authentication Stateful Inspection Firewall Optional DES, 3DES encryption Dual modem ports Dual Ethernet LAN Support on AT-AR330 SNMP and CLI management Ideal for the SoHo or SMB, or for offices needing to support secure teleworkers access to the WAN REMOTE TELECOMMUTER SUPPORT Up to two telecommuters may access the router simultaneously using external modems.the RS-232 ports operate at speeds up to 115Kbps. Telecommuters may be authenticated using PAP/CHAP, while Call Back can be used to provide centralized billing.

2 SECURE LOCAL AND REMOTE FIREWALL CAPABILITY The AT-AR330 enables secure physical separation of co-located Ethernet LANs and provides shared access to the Wide Area Network (WAN).The router uses Frame Relay or digital leased services for high-speed connections to the Internet, and the Stateful Inspection Firewall provides cast-iron security against malicious Denial of Service (DoS) attacks. BRANCH OFFICE TO CORPORATE OFFICE CONNECTIVITY USING FRAME RELAY The AT-AR350 provides a cost-effective solution for connecting branch offices to the corporate network, and includes: Multi-protocol routing of IP, IPX, and Appletalk for mixed protocol networks Advanced Quality of Service features such as traffic prioritization, policy routing, RSVP, and BACP ensure optimum network performance VPNet option provides hardware DES and 3DES encryption for secure data transfer LEASED LINE BACKUP AND INTERNET ACCESS USING MODEMS The RS232 ports can provide modem backup to main network link or can be added using multilink PPP for extra bandwidth. Additionally, dial-up modems provide a low cost alternative for Internet access.

3 POWER CHARACTERISTICS Input Voltage vAC, 50-60Hz, 10W Auto-sensing internal supply PHYSICAL CHARACTERISTICS Dimensions 27cm x 20cm x 5cm 10.6" x 7.75" x 2" Weight 1.7kg (3.74lbs) ENVIRONMENTAL CHARACTERISTICS Operating Temp. 0 C to 40 C (32 F to 108 F) Relative Humidity 10-95% non-condensing ELECTRICAL/MECHANICAL APPROVALS Electromagnetic Emissions: FCC part 15 class A EN55022 class B EN Safety: UL, CSA, TUC, CE EN60950 EN41003 HARDWARE FEATURES AT-AR330 AT-AR350 Synchronous Interface Mbps Ethernet 2 1 Asynchronous Interface (RS232) 2 2 Mini Accelerator Card Slot for Encryption/Compression 1 1 FEATURE SUMMARY Leased Line SYNC up to 2 Mbps LAN Protocols IP IPX/SPX AppleTalk Routing Protocols Static Routes RIP OSPF WAN Protocols Frame Relay X.25 PPP Remote Access Dial-in Support Asynchronous Serial Ports with Routing Support Lan Bridging S panning Tree Bridge Compression STAC Compression IP Address Management IP Multi-homing Dynamic IP Assignment Dynamic Host Control Protocol (DHCP) Authentication PAP/CHAP Authentication Tunneling & Security RADIUS/TACACS Authentication NAT Network Address Translation Packet Filtering L2TP Access Concentrator L2TP Network Server Stateful Inspection Firewall Hardware DES Encryption (optional) Triple DES Encryption (optional) IPSec IKE SSH Secure Shell for Remote Mgt Traffic Shaping and QoS Packet Priority RSVP Configuration & Management Console Port Command Line Interface (CLI) Telnet Web Browser SNMP TFTP Download Technical Reference Manual CD-ROM STANDARDS & PROTOCOLS ENCRYPTION RFC 2104 HMAC RFC 2451 The ESP CBC-Mode Cipher Algorithms FIPS 180 SHA-1 FIPS 186 RSA FIPS 46-3 DES FIPS DES ETHERNET RFC 894 IEEE 802.1D IEEE 802.1G IEEE 802.3u Ethernet II Encapsulation MAC Bridges Remote MAC Bridging 100BASE-T FRAME RELAY RFC 1490, 2427 Multiprotocol Interconnect over Frame Relay ANSI T1S1 Frame relay GENERAL ROUTING RFC 768 UDP RFC 791 IP RFC 792 ICMP RFC 793 TCP RFC 2822 Internet Message Format RFC 826 ARP RFC 903 Reverse ARP RFC 925 Multi-LAN ARP RFC 950 Subnetting, ICMP RFC 1812 Router Requirements RFC 1027 Proxy ARP RFC 1055 SLIP RFC 1122 Internet Host Requirements RFC 1144 Van Jacobson s Compression RFC 1288 Finger RFC 2390 Inverse Address Resolution Protocol RFC 1332 The PPP Internet Protocol Control Protocol (IPCP) RFC 1378 The PPP AppleTalk Control Protocol (ATCP) RFC 2131 DHCP RFC 1542 BootP RFC 1570 PPP LCP Extensions. RFC 1582 RIP on Demand Circuits RFC 1918 IP Addressing RFC 1661 The Point-to-Point Protocol (PPP RFC 1552 The PPP Internetworking Packet Exchange Control Protocol (IPXCP) RFC 3232 Assigned Numbers RFC 1701 GRE RFC 1702 GRE over IPv4 RFC 1762 The PPP DECnet Phase IV Control Protocol (DNCP) RFC 1877 PPP Internet Protocol Control Protocol Extensions for Name Server Addresses RFC 1962 The PPP Compression Control Protocol (CCP) RFC 1968 The PPP Encryption Control Protocol (ECP) RFC 1974 PPP Stac LZS Compression Protocol RFC 1978 PPP Predictor Compression Protocol RFC 1990 The PPP Multilink Protocol (MP) RFC 2125 The PPP Bandwidth Allocation Protocol (BAP) / The PPP Bandwidth Allocation Control Protocol (BACP)

4 RFC 2132 DHCP Options and BOOTP Vendor Extensions RFC 2516 A Method for Transmitting PPP Over Ethernet (PPPoE) RFC 2661 L2TP RFC 2878 PPP Bridging Control Protocol (BCP) IPX Router Specification, v1.2, Novell, Inc., Part Number IPX Router Specification AppleTalk ISO 8473, relevant parts of ISO 8348(X.213), ISO 8343/ Add2, ISO 8648, ISO 8648, ISO TR 9577 Open System Interconnection RFC 3022 Traditional NAT IP MULTICASTING RFC 1075 DVMRP RFC 1112 Host Extensions RFC 1812 Router Requirements RFC 2236 IGMP v2 RFC 2362 PIM-SM RFC 2715 Interoperability Rules for Multicast Routing Protocols draft-ietf-idmr-dvmrp-v3-9 DVMRP draft-ietf-magma-snoop-02 IGMP and MLD snooping switches draft-ietf-pim-dm-new-v2-01 PIM-DM draft-ietf-pim-sm-v2-new-05 PIM-SM IPSEC RFC 1829 RFC 3173 RFC 2395 RFC 2401 RFC 2402 RFC 2403 RFC 2404 RFC 2405 RFC 2406 RFC 2407 RFC 2408 RFC 2409 RFC 2410 RFC 2411 RFC 2412 Ipsec algorithm IPComp Ipsec Compression - LZS Security Architecture for IP AH - IP Authentication Header IPsec Authentication - MD5 IPsec Authentication - SHA-1 IPsec Encryption - DES ESP - IPsec encryption IPsec DOI ISAKMP IKE IPsec encryption - NULL IP Security Document Roadmap OAKLEY IPV6 RFC 1981 Path MTU Discovery for IP version 6 RFC 2080 RIPng for IPv6 RFC 2373 RFC 2375 RFC 2460 RFC 2461 RFC 2462 RFC 2463 RFC 2464 RFC 2472 RFC 2526 IP Version 6 Addressing Architecture IPv6 Multicast Address Assignments IPv6 Neighbour Discovery for IPv6 IPv6 Stateless Address Autoconfiguration ICMP v6 Transmission of IPv6 Packets over Ethernet Networks IP Version 6 over PPP Reserved IPv6 Subnet Anycast Addresses RFC draft-vida-mld-v2 Multicast Listener Discovery (MLD) for IPv6 RFC 2711 IPv6 Router Alert Option RFC 2766 NAT-PT RFC 3056 Connection of IPv6 Domains via IPv4 Clouds RFC 3315 RFC 3633 DHCPv6 IPv6 Prefix Options for Dynamic Host Configuration Protocol draft-ietf-ngtrans-hometun-01 IPv6 over IPv4 tunnels for home to Internet access draft-ietf-pim-ipv6-03 PIM MANAGEMENT RFC 1155 MIB RFC 1157 SNMP RFC 1212 Concise MIB definitions RFC 1213 MIB-II RFC 2115 Frame Relay MIB RFC 1643 Ethernet MIB RFC 1493 Bridge MIB RFC 2790 Host MIB RFC 1515 Definitions of Managed Objects for IEEE MAUs RFC 1573 Evolution of the Interfaces Group of MIB-II RFC 2011 SNMPv2 MIB for IP using SMIv2 RFC 2012 SNMPv2 MIB for TCP using SMIv2 RFC 2096 IP Forwarding Table MIB RFC 2338 VRRP RFC 2576 Coexistence between V1, V2, and V3 of the Internet-standard Network Management Framework RFC 2578 Structure of Management Information Version 2 (SMIv2) RFC 2579 Textual Conventions for SMIv2 RFC 2580 Conformance Statements for SMIv2 RFC 2665 Definitions of Managed Objects for the Ethernet-like Interface Types RFC 2856 Textual Conventions for Additional High Capacity Data Types RFC 3164 Syslog Protocol RFC 3410 Introduction and Applicability Statements for Internet-Standard Management Framework RFC 3411 An Architecture for Describing SNMP Management Frameworks RFC 3412 Message Processing and Dispatching for the SNMP RFC 3413 SNMP Applications. RFC 3414 User-based Security Model (USM) for SNMPv3 RFC 3415 View-based Access Control Model (VACM) for the SNMP RFC 3416 Version 2 of the Protocol Operations for SNMP RFC 3417 Transport Mappings for the SNMP RFC 3418 MIB for SNMP draft-ietf-bridge-8021x-00.txt Port Access Control MIB OSPF RFC 1245 RFC 1246 RFC 1583 RFC 1586 RFC 1793 QOS RFC 1349 RFC 2205 RFC 2211 RIP RFC 1058 RFC 1723 SECURITY RFC 959 RFC 1413 RFC 1492 RFC 1779 RFC 1858 RFC 2865 OSPF protocol analysis Experience with the OSPF protocol OSPF v2 OSPF over Frame Relay Extending OSPF to Support Demand Circuits Type of Service in the IP Suite Reservation Protocol Controlled-Load RIP v1 RIP v2 FTP IDP TACACS X.500 String Representation of Distinguished Names Fragmentation RADIUS

5 RFC 2866 RFC 2459 RFC 2510 RFC 2511 RFC 2559 RFC 2585 RFC 2587 RADIUS Accounting X.509 Certificate and CRL profile PKI X.509 Certificate Management Protocols X.509 Certificate Request Message Format PKI X.509 LDAPv2 PKI X.509 Operational Protocols PKI X.509 LDAPv2 Schema draft-grant-tacacs-02.txt TACACS+ Draft-IETF-PKIX-CMP-Transport-Protocols-01 Transport Protocols for CMP draft-ylonen-ssh-protocol-00.txt SSH Remote Login Protocol PKCS #10 Certificate Request Syntax Standard RFC 2821 SMTP RFC 854 Telnet Protocol Specification. RFC 855 Telnet Option Specifications RFC 856 Telnet Binary Transmission RFC 857 Telnet Echo Option RFC 858 Telnet Suppress Go Ahead Option RFC 932 Subnetwork addressing scheme RFC 1305 NTP v3 RFC 1091 Telnet terminal-type option RFC 1179 Line printer daemon protocol RFC 1350 TFTP RFC 1510 Network Authentication RFC 2049 MIME RFC 1985 SMTP Service Extension RFC 2156 MIXER RFC 1945 HTTP/1.0 ORDERING INFORMATION AT-AR330-xx AT-AR350-xx Where xx = 10 for U.S. power cord = 20 for no power cord = 30 for U.K. power cord = 40 for Australia power cord, = 50 for Europe power cord AT-AR300 Series Options AT-AR011 ECMAC Provides hardware-based DES and 3DES encryption, hardware-based compression AT-AR012 CMAC Provides hardware-based STAC compression AT-AR013 3DES Triple DES encryption (software option) AT-AR014 Firewall Stateful inspection firewall (software option) SSL RFC 2246 The TLS Protocol Version 1.0. draft-freier-ssl-version3-02.txt SSLv3 X.25 RFC 1356 Multiprotocol Interconnect on X.25 and ISDN in the Packet Mode ITU-T Recommendations X.25 (1988), X.121 (1988). X.25 ABOUT ALLIED TELESYN Allied Telesyn was founded in 1987 with the goal of producing reliable, standards-based networking products. Focused on Ethernet/IP solutions geared to applications,allied Telesyn offers access-edge products like switches, fiber/copper MAPs, and CPE.We re also a leading global manufacturer of media converters, unmanaged switches, and NICs. Our customer-driven approach has made Allied Telesyn the ideal choice for IT professionals looking for high-quality, feature-rich network solutions at a lower price.allied Telesyn It s Our Network,Too. USA Headquarters North Creek Pkwy, Suite 200, Bothell, WA 98011, USA Tel Fax European Headquarters Via Motta 24, 6830 Chiasso, Switzerland (Corporate) Tel (+41) Fax (+41) (European Sales) Tel (+39) Fax (+39) Allied Telesyn International Corp.All rights reserved. Information in this document is subject to change without notice. All company names, logos, and product designs that are trademarks or registered trademarks are the property of their respective owners Rev. B