Physical Interfaces:
• LAN: 4-port 10/100 Base-TX Switch
• WAN: 2-port 10/100 Base-TX Ethernet
• VoIP: 2-port FXS Phone Ports ('V' model only)
• ISDN: 2-Ports. One fixed S0, one configurable NT / TE mode ('S' model only)
Dual-WAN Ports:
• 10/100Base-T Ethernet
• Outbound Policy-Based Load-Balance
• WAN Connection Fail-over
• BoD (Bandwidth on Demand)
VoIP Features ('V' Models only):
• Protocols: SIP, RTP / RTCP
• 12 SIP Registrar Accounts (for up to 12 VoIP providers)
• G.168 Line Echo-cancellation
• Automatic Gain Control
• Jitter Buffer ( 125ms )
• Voice Codecs:
o G.711 A / µ Law
o G.723.1
o G.726
o G.729 A / B
• VAD / CNG
• Tone Generation: DTMF , Dial , Busy , Ring Back , Call Progress
• DTMF Transmission: In Band / Out Band ( RFC-2833 ) / SIP info
• FAX / Modem Support G.711 Pass-through
• T.38 for FAX
• Supplemental Services:
o Caller ID
o Call Hold / Retrieve
o Call Waiting
o Call Waiting with Caller ID
o Call Transfer
o Call Forwarding ( Always , On Busy and On No Answer )
o DND (Do not Disturb)
o Call Barring ( Incoming / Outgoing )
o MWI ( Message Waiting Indicator ) ( RFC-3842 )
o Hotline (Dial preset number when handset lifted)
ISDN Features ('S' Model Only):
• RJ-45 S/T Interfaces
• ISDN Loop-Through
• ISDN On-net / Off-net
• Euro ISDN Compatible
• Automatic ISDN Backup for Internet Access
• Support 64 / 128Kbps ( Multilink-PPP)
• BoD ( Bandwidth on Demand )
• Remote Dial-In / LAN-to-LAN Connection
• Remote Activation (Dial back on ISDN Caller ID recognition)
• ISDN Port Passthrough During Power Cut
WAN Protocols:
• DHCP Client
• Static IP
• PPPoE
• PPTP
• L2TP *
• BPA
Firewall & Security Features:
• CSM (Content Security Management):
o URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
o Surfcontrol Support - Block Web sites by category (subject to subscription)
o Prevent accessing of web sites by using their direct IP address (thus URLs only)
o Blocking automatic download of Java applets and ActiveX controls
o Blocking of web site cookies
o Block http downloads of file types :
? Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
? Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
? Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
o Time Schedules for enabling/disabling the restrictions
o Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
o Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
• Multi-NAT, DMZ Host
• Port Redirection and Open Port Configuration
• Policy-Based Firewall
• MAC Address Filter
• SPI ( Stateful Packet Inspection )
• DoS / DDoS Protection
• IP Address Anti-spoofing
• E-Mail Alert and Logging via Syslog
• Bind IP to MAC Address
VPN Support:
• Up to 100 Simultaneous VPN Tunnels
• Protocols : PPTP, IPSec, L2TP, L2TP over IPSec
• Encryption : MPPE and Hardware-Based AES / DES / 3DES
• Authentication : Hardware-Based MD5 , SHA-1
• IKE Authentication : Pre-shared Key and Digital Signature ( X.509 )
• PFS (Perfect Forward Secrecy)
• IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
• LAN-to-LAN (Dial-in & Dial-Out), Teleworker-to-LAN
• DHCP over IPSec
• NAT-Traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-Through
Bandwidth Management:
• QoS
• Guaranteed Bandwidth for VoIP
• Class-based Bandwidth Guarantee by User-Defined Traffic Categories
• DiffServ Code Point Classifying
• 4-level Priority for each Direction (Inbound / Outbound)
• Bandwidth Borrowed
• Temporary (5 minute) Quick Blocking of any LAN Client
• Bandwidth / Session Limitation
Network/Router Management:
• Web-Based User Interface (HTTP / HTTPS)
• CLI ( Command Line Interface ) / Telnet / SSH*
• Administration Access Control
• Configuration Backup / Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP / FTP
• Logging via Syslog
• SNMP Management with MIB-II
VPN Facilities:
• Up to 100 Concurrent VPN Tunnels
• IPSec Throughput up to 40Mb/s
• Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
• Encryption : MPPE and Hardware-Based AES / DES / 3DES
• Authentication : Hardware-Based MD5 and SHA-1
• IKE Authentication : Pre-shared Key and Digital Signature ( X.509 )
• LAN-to-LAN & Teleworker-to-LAN connectivity
• DHCP over IPSec
• NAT-Traversal ( NAT-T )
• Dead Peer Detection ( DPD )
• VPN Pass-Through
Network Features:
• DHCP Client / Relay / Server
• Dynamic DNS
• NTP Client (Syncrhonise Router Time)
• Call Scheduling (Enable/Trigger Internet Access by Time)
• RADIUS Client
• DNS Cache / Proxy
• Microsoft™ UPnP
• Port-Based VLAN (Ethernet LAN ports exclusive/inclusive groups)
Routing Protocols:
• Static Routing
• RIP V2
