ADTRAN 1224STR User Manual

Solution Benefits

ADTRAN NetVanta products
are VoIP-Ready! Inherent
QoS functionality supports
Voice over IP needs!

■

Converged LAN/WAN

architecture

■

Lower total cost of ownership

■

Efficient bandwidth usage

■

Space-savings, equipment

consolidation

■

Simplified network

administration

Product Features

■

Full-featured, managed

Layer 2 switch-routers

■

24-port Ethernet, Fast

Ethernet, and Gigabit
Ethernet functionality

■

Unique all-in-one

switching/ routing/
firewall/VPN platforms

■

Interoperable in established,

multi-vendor networks

■

8.8 Gbps switching capacity,

non-blocking

■

Gigabit SFP/1000Base-T

uplink/stacking capability
available

■

Stacking up to 16 switches

with single IP address
management

■

Link Aggregation, GVRP,

and LLDP

■

MAC-based port security

■

SIP ALG for NAT traversal in

VoIP applications

■

Easily recognizable Command

Line Interface (CLI)

■

Intuitive web-based Graphical

User Interface (GUI)

■

Free firmware updates

International

NetVanta1224STR

All-in-One Network Access: Modular WAN Interface, Firewall,
Ethernet Switch, IP Router, and Optional VPN

The NetVanta 1000 Series from ADTRAN is
a standards-based, non-blocking Layer 2
switching solution available at a cost up to
50 percent less than competing switches.

These devices are suitable for converged
LAN/WAN access, interconnecting LAN
devices, or for network segmentation. The
NetVanta 1224STR is a unique, all-in-one
access platform that combines a 24-port
Ethernet switch, an IP access router, a modular
WAN interface with built-in NTU, a stateful
inspection firewall, and the option for Virtual
Private Networking (VPN), all in a single
1U chassis. The NetVanta 1224STR provides
24-port Ethernet, Fast Ethernet switching,
and an extra 1000Base-T/SFP Gigabit port
for uplink or stacking capability.

Modular Hardware

A single WAN access slot in the back of the
NetVanta chassis supports a variety of Network
Interface Modules (NIMs) including E1/FE1, E1/
FE1 with G.703, ADSL, SHDSL, Serial, T1/FT1,
T1/FT1 with DSX-1, Dual T1, or a 56/64K
interface. The optional Analog or ISDN BRI
Dial Backup Modules (DIMs) support a solid
business continuity plan by dialing around a
failed circuit to any PPP-compliant device.
The ADSL NIM may also be used for broadband
backup, allowing for larger bandwidth applica­tions and faster data rates.

Standard-based Protocols

Based on the ADTRAN Operating System (AOS),
these devices offer support for 802.1Q
Virtual LANs ( VLANs), port-based switching
features include Broadcast Storm Control,

802.1D and 802.1w Spanning/Rapid Spanning
Tree, Link Aggregation, Port Mirroring, and
GVRP. Link Layer Discovery Protocol (LLDP)
auto-discovers neighboring Ethernet devices,
simplifying integration into multi-vendor envi­ronments. In addition, the integral IP router
provides cost-effective Internet access, corpo­rate Frame Relay or point-to-point connectivity
using standard routing protocols such as BGP,
OSPF, and RIP.

Security

Rest assured, with the NetVanta 1224STR your
network is protected. It comes standard with
a stateful inspection firewall to stop intruders

and common Denial of Service (DoS) attacks.
NetVanta 1224STR also offers a variety of data
security features including MAC-based port
security, multilevel user passwords, Secure
Shell (SSH) and Secure Socket Layer (SSL)
for encrypted user login, and Access
Authentication and Authorization (AAA)
with RADIUS, RSA SecurID, or TACACS+.
For added security, it offers a VPN upgrade
supporting up to 500 IPSec tunnels using
DES, 3DES, or AES encryption.

Quality of Service (QoS)

This switch-router supports QoS to prioritize
mission critical traffic and control network
congestion at various layers of the OSI model.
On the LAN, the NetVanta 1000 Series offers

802.1p and DiffServ Class of Service (CoS).
To assign priority to traffic, Weighted Round
Robin and Strict Priority Queuing is used with
four egress queues per port. For the WAN,
DiffServ marking, Low Latency Queuing,
Weighted Fair Queuing (WFQ), and Class-based
WFQ provides priority for IP packets routed
over the WAN. Together these features offer a
powerful end-to-end QoS story.

VoIP Ready

In combination with the QoS features, a
specialized SIP Application Layer Gateway
(ALG) allows SIP traffic to traverse NAT­enabled firewalls. For an enterprise network,
this interoperability allows IP PBXs, phones,
and other SIP-based devices to set up, tear
down, and pass voice and call control
messages seamlessly through the integral
NAT-enabled firewall.

Administration
The AOS offers both a Command Line Interface
(CLI) that mimics the widely deployed, industry
de facto standard and an intuitive Web-based
GUI with step-by-step configuration wizards.
For a centralized enterprise-wide manage­ment scheme, ADTRAN offers n-Command, an
intuitive, scalable software suite for managing
firmware revisions, push firmware upgrades
and configuration changes, backup and restore
configurations, and manage security policies
and Access Control Lists (ACLs).

www.adtran.com/global

NetVanta1224STR

All-in-One Network Access: Modular WAN Interface, Firewall,
Ethernet Switch, IP Router, and Optional VPN

NetVanta 1224STR Web-GUI

Product Specifications

Network Interfaces

Network Interface Modules (NIMs)

■

E1/FE1

■

E1/FE1 with G.703

■

ADSL

■

SHDSL

■

Serial (V.35, X.21/V.11)

Dial Backup Interface Modules (DIMs)

■

Analog Modem

24 Fast Ethernet Ports

■

10/100Base-T

■

Auto-rate

Gigabit Ethernet Port

■

A single combo Gigabit Ethernet port

supporting both 10/100/1000Base-T
and SFP for copper or optical connectivity

■

Auto-duplex

■

Auto-rate

■

Auto-MDI/MDI-X

Console Port

■

DB-9

Switching Performance

■

Non-blocking

■

8,000 MAC Addresses

■

16-MB memory shared by all ports

■

Maximum Forwarding Bandwidth: 8.8 Gbps

Routing Performance

■

133 MHz Motorola MPC 866 ■ 32 MB DRAM

■

16 MB Flash

Status LEDs

■

Power

■

WAN: Link, Activity, Alarm, Test

■

DBU: Link, In DBU, Alarm, Test

■

Ethernet Port Status: Link, Activity

Protocols

■

eBGP/iBGP

■

OSPF

■

RIP (v1 and v2)

■

PIM Sparse Mode

■

Demand Routing

■

Policy-based Routing

■

GRE

■

ATM (ADSL)

■

Frame Relay

■

Multilink Frame Relay

■

Layer 3 Backup

■

T1/FT1

■

T1/FT1 with DSX-1

■

Dual T1

■

56/64K

■

ISDN BRI ‘ST’ and ‘U’

■

Auto-duplex

■

Auto-MDI/MDI-X

■

30,000 PPS

■

PPP

■

Multilink PPP

■

PPPoE

■

PPPoA

■

IGMP v2

■

RFC 1483

■

HDLC

■

PPP Dial Backup

■

PAP and CHAP

■

Multihoming

DHCP

■

Client, Server, and Relay

Spanning Tree Support

■

802.1D Spanning Tree ■ 802.1w Rapid Spanning Tree

Frame Relay

■

Point-to-Point

■

RFC 1490 Encapsulation (Multiprotocol Over

Frame Relay)

■

LMI Types: LMI, CCITT (Annex A),

ANSI (Annex D), Static

VLAN Support

■

Port-based VLANs

■

802.1Q tagged trunked VLANs

■

Support for up to 255 active VLANs

■

Inter-VLAN routing

■

GARP VLAN Registration Protocol (GVRP)

Link Aggregation

■

802.3ad Link Aggregation

■

Support for six trunk groups

■

Trunk groups consist of up to eight access ports

Class of Service (Switching-Layer 2)

■

Enforces 802.1p priorities

■

DiffServ

■

Four output queues per egress port

■

Weighted Round Robin

■

Strict Priority Queuing

Quality of Service (Routing-Layer 3)

■

Low Latency Queuing

■

Weighted Fair Queuing (WFQ)

■

Class-based WFQ

■

DiffServ aware/mark

■

Frame Relay Fragmentation (FRF.12)

Security

Firewall

■

Stateful Inspection Firewall

■

Denial of Service (DoS) Protection

■

Access Control Lists (ACLs)

■

Application Level Gateways (ALGs)

Optional Virtual Private Network (VPN)

■

IPSec Tunnel Mode: 500 Tunnels

■

Encryption: DES, 3DES, and AES

■

Diffie Hellman Group Support:

❏

Group 1: MODP 768

❏

Group 2: MODP1024

■

Hash Algorithms: MD5-HMAC and SHA1-HMAC

■

Authentication Mechanisms:

XAUTH, X.509 Digital Certificates, Preshared Keys,
Secure ID, DSS Signature