Allied Telesis AT-AR750S - Manual

Allied Telesis

www.alliedtelesis.com

Datasheet |

Routers

AT-AR750S

Secure VPN Router

AT-AR750S

2 x WAN 10/100BASE-T por ts
5 x LAN 10/100BASE-T por ts
2 x PICs
1 x Asynchronous console / Modem por t

Secure Modular Routing Solution

The AT-AR750S has been designed with the
needs of small to medium enterprises/businesses
(SME/SMB) or branch office businesses in mind.
The AT-AR750S offers significant advances in
processing performance, Quality of Ser vice (QoS),
routing, remote connectivity and security.

Extensive VPN Cabability

The AT-AR750S provides extensive IPSec-based
VPN capability, allowing the interconnection of
offices, remote tele-workers, and other users
who require secure access to a corporate
network. The integrated hardware acceleration,
standard on the AT-AR750S, maximizes
encr yption throughput and removes the need
to purchase a hardware upgrade package.The
AT-AR750S is also compatible with industr y
standard IPSec VPN clients.

Security

In addition to hardware-based encr yption, the
AT-AR750S comes with other advanced
security features such as traffic filtering with
event logging. Traffic filtering uses the source
and destination address, por t, protocol and TCP
packet type to provide control over traffic that
passes through the AT-AR750S. A Stateful
Inspection Firewall provides an increased level
of security and complements the packet filtering
function. HTTP and SMTP proxies on the
AT-AR750S provide improved control over web
and mail communications.

Quality of Service

Allied Telesis’ QoS implementation enables the
AT-AR750S to dynamically identify high priority
voice, video and application traffic, so that
appropriate ser vice levels can be

maintained in congested networks. Advanced
QoS allows voice, video, and data traffic to have
QoS applied within individual IPSec tunnels,
over GRE, as well as IPv6 to IPv4 tunnels.

Performance

The AT-AR750S provides superior performance
over other secure VPN routers in this market
space. While most secure routers have Stateful
Firewalls with NAT, QoS, and IPsec VPN
termination capability, ver y few can perform all
three functions and still provide excellent
performance with the mixed packed sizes seen
in real networks. The AT-AR750S has been
designed to meet real network needs.

Stateful Firewall inspection, NAT and QoS:
>50Mbps @ 64 byte packets

Stateful Firewall inspection, NAT, QoS, IPsec
VPN (with AES 256 bit encr yption):
>35Mbps @ 72 byte packets

The AT-AR750S can achieve up to 195 Mbps
IPsec throughput with bidirectional traffic.

This level of performance enables secure site-
to-site VPNs over multiple WAN interfaces
while still firewalling the local network across
multiple LAN por ts.

Comprehensive Management and
Configuration

The AT-AR750S comes with a comprehensive
suite of management features and is also
compatible with SNMP-based management
packages. An extensive command set is available
via the Command Line Interface (CLI), and a
browser-based Graphical User Interface (GUI) is
also provided to simplify the AT-AR750S'
configuration and management. The GUI provides
access to default set-ups in key management
areas and provides access to regional settings.
Allied Telesis’ SNMP suppor t extends to SNMPv3
to provide secure management.

Key Features

Hardware

•

2 x 10/100 WAN interfaces

•

2 x Port Interface Cards (PICs)

•

5 x 10/100BASE-T switched LAN ports

•

1 x Asynchronous port / Modem Port

•

DMZ port: configurable on any of the WAN/LAN ports

•

RoHS Compliant

Security

•

IP Filtering

•

Stateful Inspection Firewall

•

802.1x

•

Authentication: RADIUS, TACACS, MD5, PAP, CHAP

VPN/Encryption

•

NAT-T

•

AES, DES, 3DES encryption

•

5,000 configured IPsec VPN tunnels (250 active tunnels)

•

HW accelerated IPsec VPN >35Mbps@72byte
packets (with AES 256 bit encryption)

•

Up to 195 Mbps IPsec throughput with large packets

Manageability

•

Web based GUI

•

CLI management

•

SNMPv3

•

IP QoS

Extensive routing support, including:

•

RIPv1 and v2

•

OSPFv1 and v2

•

GRE, L2TP

•

IPX

•

VRRP

•

RIPng

•

IPv6 – optional

•

BGP-4 – optional

Multicast routing protocols, including:

•

PIM-DM

•

PIM-SM

•

DVMRP

•

IGMPv2

•

IGMP Snooping

•

IPv6 Multicast – optional

•

PIM6

•

MLD

Support for traditional network protocols,
including:

•

X.25

•

Frame Relay