Patton electronics IPLink 2823 User manual

Patton’s IPLink Managed VPN Routers are a
family of next generation appliances that
address both the security and the traffic pri-
oritization needs of enterprises. The Model 2823
Secure DMZ Router with integrated QoS makes it
easy for enterprises to isolate their web servers in a
secure demilitarized zone (DMZ). The three-port
router provides physically and logically separates
connections to a private LAN and a DMZ network,
while still allowing secure business-class Internet
access with traffic-shaping services.
As with all IPLink VPN Router, the Secure DMZ
Router implements a comprehensive security envi-
ronment. It all starts with IPSec. By supporting ESP
as well as AH, IPLink VPN Routers provide data
integrity, authentication, anti-replay and data confi-
dentiality to any traffic flow. DES, 3DES, and AES
provide standard encryption up to 256 bits. Firewall
capabilities of the IPLink VPN Routers include
Access Control Lists (ACLs), IP address and port fil-
tering, and protection against Denial of Service
(DoS) attacks. Likewise, PPPoE protocols include
support for PAP and CHAP authentication.
QoS features include ToS/DiffServ marking
and the configuration of eight service class
tags per IEEE 802.1p/Q. With traffic schedul-
ing and shaping, create dedicated bandwidth
guarantees, configurable burst tolerance, and polic-
ing to include excess traffic
discard. IP fragmentation is
configurable to help mini-
mize jitter in traffic flows.
Advanced IP features
include RIPv1 & RIPv2
routing and static route
configuration. Static and
dynamic NAT, NAPT, DNS resolver and relay,
dynamic DNS, and DHCP server further add
to the capabilities of the IPLink VPN Router.
All IPLink VPN routers can be managed via a
web browser (HTTP), command line interface
(Telnet), or an SNMP management platform.
For more information, visit us at www.pat-
ton.com.
Patton DMZ Secure Routers streamline DMZ implementation and secure-firewall configurations
for enterprise networks without sacrificing QoS for critical business traffic.
IPLink Managed VPN Routers
Model 2823 DMZ Secure Router
IP Access Products
QoS/CoS Profiles
Configurable burst tolerance, bandwidth guaran-
tees plus reduce per flow traffic jitter as required
by the application.
Configurable Security Profiles
Built-in IP address and IP port filtering, ACLs and
DoS attack detection creates a comprehensive
security environment.
Enhanced IP Services
DNS resolver and relay, NAT/NAPT, dynamic
DNS, and DHCP server, eases integration.
Strong Encryption
DES, 3DES, and AES offer standards based
encryption algorithms from 56 to 256 bits.
VPN Tunnels
Standard IPSec with AH and ESP ensures maxi-
mum protection when traversing
unsecured networks.
Triple-Port Power DMZ
Use to configure the 3rd 10/100 Ethernet port as
a physical and logical DMZ to keep traffic off the
local network.
Special Rates
Available
Call for Details
SNMP/HTTP Management
Easily manage the IPLink VPN Routers via a sim-
ple web browser interface.
Internal/external and
AC/DC power
VPN & QoS software comes
standard
10/100 LAN
Ethernet
switch with
full-duplex and
auto MDI/MDI-
X operation
10/100 Ethernet WAN with full-
duplex and auto MDI/MDI-X
operation
Front panel LEDs show
operational status at a glance
Proven Patton design

07M2823-DS3
Features
Specifications*
Patton is a registered trademark of Patton
Electronics Company in the United States and
other countries.
* Specifications subject to change without notice.
IPLink VPN Routers are next-generation security appliances that address the needs of business
users by integrating QoS into a one-box solution. By including QoS, broadband connections
can be put to dual-use without impacting the quality of business data flows.
✔Three 10/100 Ethernet ports
•Easily create a physical and logical DMZ
•Avoid router configuration complexity
•Apply QoS to the DMZ to guarantee pri-
ority for business traffic flows
✔VPN tunneling secures IP network tra-
versal.
•IPSec encryption supporting AH and ESP
provides data integrity, authentication,
anti-replay and data confidentiality.
✔256-bit encryption protects data.
•With support for DES, 3DES, and AES,
data can be encrypted using 56 to 256-
bit algorithms, right-sizing security to
resources.
✔QoS/CoS profiles
•QoS/CoS guarantees traffic priority.
•ToS/DiffServ labeling
•Eight service class tags per IEEE
802.1p/Q
•Per flow bandwidth guarantees
•Hierarchical traffic classes
•Configurable burst tolerance
•Excess traffic discard
•Configurable packet and frame frag-
mentation to minimize jitter.
WAN Ethernet port
10/100BaseT (RJ-45 connector); auto-
negotiating; half/full duplex operation
with automatic MDI/MDI-X
LAN Ethernet Ports
One 10/100BaseT port (RJ-45 connec-
tor); auto-negotiating; half or full duplex
operation with automatic MDI/MDI-X
plus One 10BaseT (RJ-45 connector);
half or full duplex with automatic
MDI/MDI-X
Management
CLI via Telnet; TFTP for Software upgrade
and configuration upload; SNMPv1;
HTTP/web browser
Protocols
IP (RFC 741), TCP (RFC 793), UDP (RFC
768), ICMP & ICMP Redirect (RFC 792),
ARP (RFC 826). IP Router with RIPv1
(RFC 1058), RIPv2 (RFC 2453), pro-
grammable static routes. Integrated
DHCP Server (RFC 2131), DNS Relay
(RFC 1631), IEEE 802.1p VLAN Tagging,
NAT/NAPT (RFC 1631/2391)
Security
IPSec including AH and ESP. DES, 3DES,
and AES encryption. Access Control
Lists (ACLs). IP port and address filter-
ing both by source and destination. DoS
Detection. Password protected system
management with a username/password
for console and virtual terminal.
Power Supplies
External universal 90–260 VAC input or
48 VDC input. (Optional Internal univer-
sal 90–260 VAC input.)
Compliance
CE Mark; Safety: UL60950-1, CSA 22.2
6095001, IEC/EN60950-1. Universal AC
units are US NRTL Listed; EMC
Emissions: FCC Part 15 Class A;
EN55022 Class A; EMC Immunity:
EN55024
Environment
Operating temperature: 0-40°C (32-104
°F); Humidity: 5-80% non-condensing
Dimensions & Weight
7.3W x 1.6H x 6.1D in.
(18.5H x 4.1W x 15.5D cm)
30.5 oz./500g (models with internal
power); 24.4 oz./400g (models with
external power; no power supply)
2823/UI 2823/48 2823/EUI
Order Information
Patton-Inalp Networks AG
Meriedweg 7
CH-3172 Niederwangen
Switzerland
Phone ++4411((3311))99885522552255
Fax ++4411((3311))99885522552266
E-mail ssaalleess@@iinnaallpp..ccoomm
Web wwwwww..iinnaallpp..ccoomm
Patton Electronics Co.
7622 Rickenbacker Drive
Gaithersburg, Maryland 20879
USA
Phone ++1133001199775511000000
Fax ++1
133001188669999229933
E-mail ssaalleess@@ppaattttoonn..ccoomm
Web wwwwww..ppaattttoonn..ccoomm
PE-Inalp Networks Private Ltd
Old No. 14 and New No.6,
Brahadambal Road,
Nungambakkam High Road
Chennai: 600 034, India
Phone ++991144444455449900339955//66//77
Fax ++9911444444554499..00339944
Email ssaalleess@@p
paattttoonn..ccoo..iinn
Web wwwwww..ppaattttoonn..ccoo..iinn
An Associate of
Electronics Co., USA