Security
| Firewall security |
Stateful Inspection Firewall |
| VPN support |
VPN - IPSec: inclusive, with a max. of 2 simultaneous tunnels (in prep. for Q1/2005); \nVPN - IPSec: Powerful encryption up to 256 bits (DES, 3DES, CAST, Blowfish, Twofish, AES) |
Protocols
| Switching protocols |
Ethernet |
| Data link protocols |
Ethernet/Fast Ethernet |
DSL features
| Downstream data rate |
24 Mbit/s |
| Upstream data rate |
1 Mbit/s |
Other features
| Maximum data transfer rate |
0.1 Gbit/s |
| Interface |
ADSL Annex A (via Pots), ADSL 2, ADSL 2+, 4 Port Switch |
| Data transfer rate |
100 Mbit/s |
Performance
| Internal memory |
16 MB |
| Flash memory |
4 MB |
Secure ADSL, ADSL2 and ADSL2+ router with IPSec and certificate support
The Bintec X2301 and X2302 devices are fully equipped, flexible IP routers with an integrated ADSL modem and a 4-port switch. The X2301 already supports the standards of tomorrow today: ADSL2 and ADSL2+. The X2302 is prepared to support ADSL2 and ADSL2+ (firmware update expected to be available Q1/2005). With ADSL2, you can attain download rates of up to 12 Mbps; with ADSL2+ even up to 24 Mbps. The upload rate for both modes of operation is up to 1 Mbps.
As the only ones in their class, these devices offer not only standard IPSec, but encryption using secure AES (Advanced Encryption Standard) as well as certificate handling (2 active tunnels starting Q1/2005). Such functionalities as IPCOMP (compression in IPSec) and NAT Traversal are standard. Encryption with L2TP is also possible.
The devices are able to work together with a RADIUS server and are able to use PPP authentication and login authentication and to perform the authentication of IPSec partners. The Tacacs+ function fulfills the same purpose and is also implemented.
Instead of simply working with Stateful Packet Inspection (NAT/PAT), the X230x-family devices also offer a full-fledged Stateful Inspection Firewall (SIF), in which more than 70 services are already pre-configured. To complete the range of security features, the device is also equipped with a content filter, which reliably filters out undesired Web contents and does not depend on URLs only*.
The devices do not only work as a PPPoE client, they can also operate as a PPPoE server. This makes it possible to allocate different privileges to individual users within the network. If this function is combined with the "scheduling" function, it is also possible to stipulate the times at which individual users can access the Internet. The VLAN function (also a novelty in this device category) can be used to divide users into virtual sub-networks to further increase the level of security.
Inexperienced users can take advantage of the http Configurations Wizard, while more advanced users can use an HTML interface for the configuration process. SSH-encrypted communication to the device allows for an absolutely secure configuration.
