Allied Telesis AT AR750S AT-AR750S - Manual

Allied Telesis www.alliedtelesis.com
Datasheet | Routers
AT-AR750S
Secure VPN Router
AT-AR750S
2 x WAN 10/100BASE-T ports
5 x LAN 10/100BASE-T ports
2 x PICs
1 x Asynchronous console / Modem port
Secure Modular Routing Solution
The AT-AR750S has been designed with the
needs of small to medium enterprises/businesses
(SME/SMB) or branch office businesses in mind.
The AT-AR750S offers significant advances in
processing performance, Quality of Service (QoS),
routing, remote connectivity and security.
Extensive VPN Cabability
The AT-AR750S provides extensive IPSec-based
VPN capability, allowing the interconnection of
offices, remote tele-workers, and other users
who require secure access to a corporate
network.The integrated hardware acceleration,
standard on the AT-AR750S, maximizes
encryption throughput and removes the need
to purchase a hardware upgrade package.The
AT-AR750S is also compatible with industry
standard IPSec VPN clients.
Security
In addition to hardware-based encryption, the
AT-AR750S comes with other advanced
security features such as traffic filtering with
event logging.Traffic filtering uses the source
and destination address, port, protocol and TCP
packet type to provide control over traffic that
passes through the AT-AR750S. A Stateful
Inspection Firewall provides an increased level
of security and complements the packet filtering
function. HTTP and SMTP proxies on the
AT-AR750S provide improved control over web
and mail communications.
Quality of Service
Allied Telesis’ QoS implementation enables the
AT-AR750S to dynamically identify high priority
voice, video and application traffic, so that
appropriate service levels can be
maintained in congested networks. Advanced
QoS allows voice, video, and data traffic to have
QoS applied within individual IPSec tunnels,
over GRE, as well as IPv6 to IPv4 tunnels.
Performance
The AT-AR750S provides superior performance
over other secure VPN routers in this market
space. While most secure routers have Stateful
Firewalls with NAT, QoS, and IPsec VPN
termination capability, very few can perform all
three functions and still provide excellent
performance with the mixed packed sizes seen
in real networks. The AT-AR750S has been
designed to meet real network needs.
Stateful Firewall inspection, NAT and QoS:
>50Mbps @ 64 byte packets
Stateful Firewall inspection, NAT, QoS, IPsec
VPN (with AES 256 bit encryption):
>35Mbps @ 72 byte packets
The AT-AR750S can achieve up to 195 Mbps
IPsec throughput with bidirectional traffic.
This level of performance enables secure site-
to-site VPNs over multiple WAN interfaces
while still firewalling the local network across
multiple LAN ports.
Comprehensive Management and
Configuration
The AT-AR750S comes with a comprehensive
suite of management features and is also
compatible with SNMP-based management
packages. An extensive command set is available
via the Command Line Interface (CLI), and a
browser-based Graphical User Interface (GUI) is
also provided to simplify the AT-AR750S'
configuration and management.The GUI provides
access to default set-ups in key management
areas and provides access to regional settings.
Allied Telesis’ SNMP support extends to SNMPv3
to provide secure management.
Key Features
Hardware
• 2 x 10/100 WAN interfaces
• 2 x Port Interface Cards (PICs)
• 5 x 10/100BASE-T switched LAN ports
• 1 x Asynchronous port / Modem Port
• DMZ port: configurable on any of the WAN/LAN ports
• RoHS Compliant
Security
• IP Filtering
• Stateful Inspection Firewall
• 802.1x
• Authentication: RADIUS,TACACS, MD5, PAP, CHAP
VPN/Encryption
• NAT-T
• AES, DES, 3DES encryption
• 5,000 configured IPsec VPN tunnels (250 active tunnels)
• HW accelerated IPsec VPN >35Mbps@72byte
packets (with AES 256 bit encryption)
• Up to 195 Mbps IPsec throughput with large packets
Manageability
• Web based GUI
• CLI management
• SNMPv3
• IP QoS
Extensive routing support, including:
• RIPv1 and v2
• OSPFv1 and v2
• GRE, L2TP
• IPX
• VRRP
• RIPng
• IPv6 – optional
• BGP-4 – optional
Multicast routing protocols, including:
• PIM-DM
• PIM-SM
• DVMRP
• IGMPv2
• IGMP Snooping
• IPv6 Multicast – optional
• PIM6
• MLD
Support for traditional network protocols,
including:
• X.25
• Frame Relay