安全
| 防火墙 |
Stateful Inspection Firewall |
| 支持虚拟专用网 |
VPN - IPSec: inclusive, with a max. of 2 simultaneous tunnels (in prep. for Q1/2005); \nVPN - IPSec: Powerful encryption up to 256 bits (DES, 3DES, CAST, Blowfish, Twofish, AES) |
协议
| 切换协议 |
Ethernet |
| 数据链路协议 |
Ethernet/Fast Ethernet |
ADSL的特点
| 下行数据率 |
24 Mbit/s |
| 上行数据速率 |
1 Mbit/s |
其他功能
| 最大数据传输率 |
0.1 Gbit/s |
| 接口 |
ADSL Annex A (via Pots), ADSL 2, ADSL 2+, 4 Port Switch |
| 数据传输速度 |
100 Mbit/s |
Secure ADSL, ADSL2 and ADSL2+ router with IPSec and certificate support
The Bintec X2301 and X2302 devices are fully equipped, flexible IP routers with an integrated ADSL modem and a 4-port switch. The X2301 already supports the standards of tomorrow today: ADSL2 and ADSL2+. The X2302 is prepared to support ADSL2 and ADSL2+ (firmware update expected to be available Q1/2005). With ADSL2, you can attain download rates of up to 12 Mbps; with ADSL2+ even up to 24 Mbps. The upload rate for both modes of operation is up to 1 Mbps.
As the only ones in their class, these devices offer not only standard IPSec, but encryption using secure AES (Advanced Encryption Standard) as well as certificate handling (2 active tunnels starting Q1/2005). Such functionalities as IPCOMP (compression in IPSec) and NAT Traversal are standard. Encryption with L2TP is also possible.
The devices are able to work together with a RADIUS server and are able to use PPP authentication and login authentication and to perform the authentication of IPSec partners. The Tacacs+ function fulfills the same purpose and is also implemented.
Instead of simply working with Stateful Packet Inspection (NAT/PAT), the X230x-family devices also offer a full-fledged Stateful Inspection Firewall (SIF), in which more than 70 services are already pre-configured. To complete the range of security features, the device is also equipped with a content filter, which reliably filters out undesired Web contents and does not depend on URLs only*.
The devices do not only work as a PPPoE client, they can also operate as a PPPoE server. This makes it possible to allocate different privileges to individual users within the network. If this function is combined with the "scheduling" function, it is also possible to stipulate the times at which individual users can access the Internet. The VLAN function (also a novelty in this device category) can be used to divide users into virtual sub-networks to further increase the level of security.
Inexperienced users can take advantage of the http Configurations Wizard, while more advanced users can use an HTML interface for the configuration process. SSH-encrypted communication to the device allows for an absolutely secure configuration.
