Motorola Netopia 4686-XL User manual

DATA SHEET
Netopia®4686-XL
Broadband VPN Router with Integrated Back-Up
High Performance
Hardware-based VPN
acceleration and integrated
Ethernet switch for speed and
performance
Mission-Critical
Improved uptime and higher
availability with integrated dial
back-up
Enterprise-Class
Robust routing, security, and
management features optimized
for enterprise applications
High-performance Ethernet broadband router with integrated VPN hardware
acceleration and dial back-up that provides speed, performance, and
enterprise-class features for the demanding business user
Designed for enterprise users and managed service
providers, the Motorola Netopia 4686-XL Broadband
VPN Router with integrated dial back-up is ideal for
retail and SMB applications. The 4686-XL connects
directly to any external broadband cable, DSL, or
fiber access modem, providing wire-speed VPN
networking and stateful firewall security, while
high-availability features such as dial back-up save
enterprises time and money.
The 4686-XL’s integrated V.92 modem automatically
dials a pre-configured backup connection if the
primary WAN connection is lost, using the industry
standard VRRP. Alternatively, the integrated modem
may be used for out-of-band remote management
by IT departments, VARs, or service providers.
With integrated hardware acceleration, the 4686-XL
powers wire-speed VPN applications for retail,
branch offices, and enterprise teleworkers. The
router comes standard with a wide range of routing,
security, and management features optimized for
enterprise applications. Unlike competitive solutions
that require expensive and cumbersome firmware
upgrades, the 4686-XL is deployment-ready out of
the box for applications requiring wire-speed VPNs,
stateful firewall security, and enterprise-class
remote management. The rich security feature set
and high-performance hardware features eliminate
the need for an additional firewall or VPN security
appliance.
For the enterprise user or managed service provider,
the 4686-XL is an ideal solution for secure, reliable,
and high-performance networking.

2
DATA SHEET
Netopia 4686-XL
Broadband VPN Router with Integrated Back-Up
Interfaces
WAN INTERFACE
One 10/100 Ethernet port, RJ-45, half- or
full-duplex/auto-sensing, MDI/MDI-X
LAN INTERFACE
Four 10/100 managed Ethernet ports, RJ-45, half- or
full-duplex/auto-sensing, MDI/MDI-X
PORTS
One RS-232 DB-9 serial management console port
One V.92 modem back-up port, RJ-11
Routing and Bridging
Network Address Translation (NAT), IP maps, and pinholes
Static routing
Default route
Numbered or unnumbered WAN interface
Up to eight subnets on each LAN interface, with DHCP server
associations
Transparent mapping option
Virtual router interfaces (ALAN)
Variable-length subnet mask
RFC 1058 RIP v1
RFC 2453 RIP v2
RFC 792 ICMP redirects
DHCP client, server, and relay agent
Extensive DHCP option support and filter rules
DNS relay/proxy
Netbios proxy
BootP support
PPP dial-on-demand
Heartbeat capabilities
IGMP multicast forwarding (LAN and WAN), snooping, and fast
leave
IP multicast outbound support through NAT
RFC 1112 IGMP v1
RFC 2236 IGMP v2
RFC 3376 IGMP v3
Multiple primary LAN subnets
High Availability
Backup default gateway through an external router
Dial back-up, external through console or internal V.92
VRRP support in all ports
Quality of Service
RFC 2474 DiffServ traffic prioritization through TOS
RFC 2598 DiffServ expedite forwarding (EF)
RFC 2597 DiffServ assured forwarding (AF), BE, and NC
support
IEEE 802.1p QoS
Traffic prioritization configurable by source and destination
addresses, port, and protocol
VPN
Embedded VPN hardware performance acceleration module
PPTP, L2TP, LNS to L2TP access server
GRE
IPSec (IKE, AH, ESP, 56-bit DES, and 168-bit 3DES)
L2TP encapsulation in IPSec
Up to 15 simultaneous VPN tunnels can be configured (client or
server)
Security
SPI (Stateful Packet Inspection) firewall
Configurable firewall
Configurable packet filtering
Denial-of-service protection
IPSec VPN gateway, tunnel mode (DES and 3DES encryption,
manual key and IKE, MD5 and SHA1 encapsulation header
protocol)
PPTP VPN gateway, client, or server termination
PPTP or IPSec VPN security associations
RFC 2865 RADIUS (AAA) management authentication
RFC 1492 TACACS+ authentication
Management
Menu-driven and CLI (full-featured scriptable with integrated
help) interfaces with console or Telnet access
Two-level tiered console access
Up to three backup user-defined configurations
System diagnostics and logs
TFTP download/upload of new firmware and configuration files
ICMP ping, trace route, Telnet, and syslog
LEDs for power, WAN, Ethernet, link, status, and activity
Internal dial-in console management
Configurable console timeout
Management port reassignment
Device and WAN event logs
Logging and scripting
SNMP v1 and v2 support with enterprise MIBs
Persistent configuration storage during power-down
Time and date set through NTP

MOTOROLA and the Stylized M Logo are registered in the U.S. Patent and Trademark Office. Netopia is registered to Netopia, Inc., a
wholly owned subsidiary of Motorola, Inc. All other product or service names are the property of their respective owners.
© Motorola, Inc. 2008. All rights reserved. 550309-001-a 0208
DATA SHEET
Netopia 4686-XL
Broadband VPN Router with Back-Up
Regulatory
FCC Part 68, Part 15, Class B
UL-Listed, CSA Approval
European EMC and Immunity
CE Mark
Environmental
TEMPERATURE
Operating 32 °F to 104 °F
(0 °C to 40 °C)
Storage 32 °F to 158 °F
(0 °C to 70 °C)
HUMIDITY
Operating/Storage 20% to 80% non-condensing
Power
External, 12 VDC, 1000 mA
Physical
WEIGHT
3.0 lb (1.4 kg) (unit carton)
DIMENSIONS
1.4 in H x 5.3 in W x 5.4 in L (3.5 cm x 13.5 cm x 13.7 cm)
All features, functionality, and other product specifications are subject to change
without notice or obligation.
Motorola, Inc. www.motorola.com