Allied Telesyn's AR410 Mid-Range Network Access Router Sets New Standard for Power & Flexibility.Business Editors, Hi-Tech Writers BOTHELL, Wash.--(BUSINESS WIRE)--May 7, 2002 Richly Featured Software Includes Quality of Service and Rate Limiting Functionality for Advanced Traffic Management Hardware Options Include WAN/LAN Expansion and Accelerators for Encryption/Compression Allied Telesyn, Inc. (www.alliedtelesyn.com), a world leader in network technologies for the access edge, today announced the availability of its newest network access router See edge router and remote access router. , the AR410. With flexible WAN service interfaces, integral 4-port switch, advanced security and an extremely comprehensive software capability that includes QoS and rate limiting In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface. Traffic that is less than or equal to the specified rate is sent, whereas traffic that exceeds the rate is dropped or delayed. , the AR410 is ideally suited to high performance NAT (Network Address Translation) An IETF standard that allows an organization to present itself to the Internet with far fewer IP addresses than there are nodes on its internal network. and VPN (Virtual Private Network) A private network that is configured within a public network (a carrier's network or the Internet) in order to take advantage of the economies of scale and management facilities of large networks. applications, where security and high data throughput are paramount. The AR410 is the latest addition to an already extensive lineup of standards-based AR-series access routers, ranging from small Internet security ''This article or section is being rewritten at Internet security is the process of protecting data and privacy of devices connected to internet from information robbery, hacking, malware infection and unwanted software. devices up to modular, multi-service router platforms for large branch offices and corporate locations. Designed for full interoperability with all major router vendors and to offer the most cost-effective solution in their class, Allied Telesyn AR-series routers are a natural fit in any access network application. Performance & Flexibility By combining advanced switching, routing and software functionality (see Appendix 1) in a compact 1U rack mount chassis, the AR410 offers twice the performance of Allied Telesyn's current AR300 range and represents a best-of-breed solution to today's mid-range edge access requirements. The AR410 offers class leading throughput of 8500pps (64byte packets) when supporting full L3 routing between VLANs, and it supports up to 9100pps (128bytes packets) with full L3 routing between VLAN See virtual LAN. VLAN - Virtual Local Area Network ports and the WAN port. The AR410 base unit supports 5 x 10/100TX Fast Ethernet An earlier name for 100Mbps Ethernet. See 100Base-T. (networking) Fast Ethernet - A version of Ethernet developed in the 1990s(?) which can carry 100 Mbps compared with standard Ethernet's 10 Mbps. It requires upgraded network cards and hubs. ports and a single general-purpose asynchronous Refers to events that are not synchronized, or coordinated, in time. The following are considered asynchronous operations. The interval between transmitting A and B is not the same as between B and C. The ability to initiate a transmission at either end. interface. An MDI/MDI-X switch is provided for port #4. 8Mb of Flash memory allows ample storage for multiple software releases and configuration files. The router's functionality can be extended or enhanced through the addition of a range of expansion options: -- Port Interface Cards (PIC) provide extra or different physical interfaces for WAN/LAN connections. PIC connectivity options include E1/T1 (with integral CSU/DSC), Frame Relay, Primary Rate and Basic Rate ISDN, leased circuits to 2Mbps, X.25 and asynchronous serial for external modem dial-up. As well as having their own on-board I/O controller for enhanced performance, PIC cards can be used interchangeably between the AR410 and Allied Telesyn's AR700 series of modular enterprise routers and the Rapier(TM) Layer 3 switch family. -- Mini Accelerator Cards (MAC) provide hardware-based STAC LZS data compression and/or DES and Triple (3DES) encryption. High-performance compression and/or encryption can be provided on all Point-to-Point and Frame Relay links connected to the router, without impacting on the central CPU and the router's main routing functions. Enterprise-Class Stateful Inspection A firewall technology that ensures that all inbound packets are the result of an outbound request. Also called "stateful packet inspection" (SPI), it was designed to prevent harmful or unrequested packets from entering the computer. Firewall Allied Telesyn's state-of-the-art ICSA-certified Stateful Inspection Firewall is available for the AR410. Stateful inspection provides an effective method of protecting private networks by monitoring both packet content and session status. It protects against a wide range of Denial of Service attacks An assault on a network that floods it with so many additional requests that regular traffic is either slowed or completely interrupted. Unlike a virus or worm, which can cause severe damage to databases, a denial of service attack interrupts network service for some period. including Ping of Death A ping request that crashes the target computer. It is caused by an invalid packet size value in the packet header. There are patches for most operating systems to prevent it. See denial of service attack. , SYN/FIN flooding, Smurf attacks An assault on a network that floods it with excessive messages in order to impede normal traffic. It is accomplished by sending ping requests (ICMP echo requests) to a broadcast address on the target network or an intermediate network. The return address is spoofed to the victim's address. , port scans, fragment attacks and IP spoofing Inserting the IP address of an authorized user into the transmission of an unauthorized user in order to gain illegal access to a computer system. Routers and other firewall implementations can be programmed to identify this discrepancy. See firewall. . The firewall can automatically transmit e-mail alerts when such attacks are detected. The AR410 also provides event triggers, which can be used to automatically reconfigure WAN interfaces. The AR410 has extensive firewall event logging and accounting information that can be used to create a comprehensive security audit trail. Configurable VLAN & VLAN Routing The AR410's built-in 4-port 10/100Mbps Fast Ethernet switch can be used to create separate LAN (Local Area Network) A communications network that serves users within a confined geographical area. The "clients" are the user's workstations typically running Windows, although Mac and Linux clients are also used. subnets for secure LAN operation. Additional 10Mbps Ethernet or 10/100Mbps Fast Ethernet PICs may be used to create extra LAN subnets for DMZ (DeMilitarized Zone) A middle ground between an organization's trusted internal network and an untrusted, external network such as the Internet. Also called a "perimeter network," the DMZ is a subnetwork (subnet) that may sit between firewalls or off one leg of a applications or to connect external xDSL or Cable modems cable modem Modem used to convert analog data signals to digital form and vise versa, for transmission or receipt over cable television lines, especially for connecting to the Internet. for broadband applications. For sites that require cost-effective routing between multiple VLANs, the AR410 is the answer. By cascading its integral 4-port switch with an external 12/24-port L2 switch, large numbers of users can benefit from the security and flexibility of routing between local VLANs. The AR410 scores on price at sites where a conventional L3 switch solution would be cost-prohibitive. Traffic Management with Rate Limiting As well as offering more standard and advanced functions than competitive routers in its class, the AR410 is capable of rate limiting on the LAN egress See ingress. port so that upstream traffic more closely matches the lower speed WAN link. When combined with the router's other sophisticated firewall and encryption The reversible transformation of data from the original (the plaintext) to a difficult-to-interpret format (the ciphertext) as a mechanism for protecting its confidentiality, integrity and sometimes its authenticity. Encryption uses an encryption algorithm and one or more encryption keys. features, the AR410 becomes a compelling answer to any IP-based broadband network. Pricing and Availability The AR410 access routers will ship in March, 2002. All PIC (1) (Programmable Interrupt Controller) An Intel 8259A chip that controls interrupts. Starting with the 286-based AT, there are two PICs in a PC, providing a total of 15 usable IRQs. cards are currently shipping. Router Model# Function US $List AR410 Mid-range access router $1,075 PIC Model# Function US $List AR020 Single T1/E1 port with integral CSU/DSU $795 AR021 Single Basic Rate ISDN port (U or S/T) $255 AR023 Single Synchronous port - V.35,V.24,X.21 $255 AR024 Four Asynchronous ports $255 MAC Model# Function US $List AR010 Hardware encryption card $395 AR011 Hardware compression/encryption card $495 AR012 Hardware compression card $395 ABOUT ALLIED TELESYN, INC. Allied Telesyn, Inc. leads the world in network technologies for the access edge. Since the company's inception in 1987, Allied Telesyn has been developing IP-based network products for use in video, voice and data networks at the metro edge, in education, government agencies and across the enterprise. Allied Telesyn's access, aggregation and core transport technologies range from simple Ethernet adapters The Ethernet hardware required to attach to an Ethernet network. It typically resides on an expansion board, but is sometimes built into the motherboard. An Ethernet adapter is required in each client and server. See Ethernet and network adapter. , hubs and media converters A device that converts from one type of media to another. It typically refers to a hardware device that connects different transmission media; for example, from twisted pair to coax or from twisted pair to optical fiber. to robust multi-layer Gigabit Ethernet An Ethernet standard that transmits at 1 Gbps. Used mostly to connect high-end workstations and servers as well as for network backbones, Gigabit Ethernet transmits full duplex from point to point using switches and half duplex in a shared environment (CSMA/CD) using a hub. switches and routers, wireless systems, DTM DTM dermatophyte test medium. and WDM (1) (Wavelength Division Multiplexing) A technology that uses multiple lasers and transmits several wavelengths of light (lambdas) simultaneously over a single optical fiber. transport solutions for delivering real-time voice, video and data. Allied Telesyn's comprehensive support and professional service programs are suited to meet the growing demands of today's switched broadband infrastructures. Website: www.alliedtelesyn.com Appendix 1 AR410 Software The AR410 access router runs the same software suite as Allied Telesyn's AR300 and AR700 series routers. The complete software suite is included with every router sold.
The following features are included(a)
WAN Services
-- Point-to-Point Protocol
-- Basic Rate and Primary Rate ISDN
-- Frame Relay
-- X.25 (DCE and DTE mode), with MIOX
-- Time Division Multiplexing (TDM for structured T1/E1)
-- Layer Two Tunneling Protocol (L2TP LAC and LNS)
-- Asynchronous tunneling over TCP/IP
Internet
-- Dynamic IP address assignment
-- Network Address Translation (NAT) and Enhanced NAT (ENAT)
-- IP Filtering Firewall
-- Full DHCP server and client (NT compatible) with BOOTP support
-- Prioritization of IP packets
-- Generic Routing Encapsulation (GRE)
Routing
-- IP, IPX, DECnet and Appletalk
-- RIP V1 and RIP V2
-- Dynamic and static RIP
-- OSPFv2
-- Demand IP and IPX
-- Policy-based routing
-- Priority-based routing
-- Routing Information Filters
-- Traffic filters
-- IP multi-homing and multicast support
-- Logical IP interfaces
-- IPX/SPX spoofing
-- IPX RIP, SAP and traffic filters
-- RSVP including proxy agent
-- BACP
Management
-- Secure remote management with Secure Shell ( SSH )
-- SNMP, MIB II, Enterprise MIB
-- TFTP or Zmodem download
-- Automate tasks with event and periodic triggers
-- Scripting
-- Logging to asynchronous port, NVS, syslog server or email
-- Advanced filtering and display options for log messages
-- Built-in text editor for editing configuration scripts
-- Online help
-- FLASH file subsystem for storing releases, patches,
configuration scripts, keys, etc.
-- Email client for sending messages and files via email to other
hosts
-- Built-in hardware test facility
-- Link diagnostics
-- PING for IP, IPX and AppleTalk
-- Traceroute
-- Complete documentation on CD-ROM with every unit.
Security
-- PAP and CHAP
-- RADIUS and TACACS
-- User Authentication Facility
-- Access control via username/password protected logins
-- Firewall with logging
-- IP, IPX and bridge filtering
-- Hardware encryption option
Point-to-Point
-- Supports Multilink PPP
-- Dial-on-demand
-- Leased line backup
-- Link Quality Management with LQR and ECHO
-- Bandwidth on demand
-- Synchronous dialing
-- ISDN Callback
-- Link encryption and compression
-- PAP and CHAP authentication
-- Sophisticated packet debugging
Compression
-- VJC Header
-- STAC LZS (hardware and software)
-- Predictor
Encryption and VPNs
-- IP payload encryption
-- Security Associations (SAs) and IPSec.
-- Hardware 56-bit DES, 2-key and 3-key 3DES encryption
-- Hardware compression up to 8:1 on secure VPN links
(a) Not shown because of space limitations are functionality
detail on Bridging, Distributed Network Service, PBX Telephony
services, Access Server, ISDN and Frame Relay. Full details
are available online at www.alliedtelesyn.com.
|
|
||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion