Allied Telesis AT AR750S User Manual
Allied Telesis www.alliedtelesis.com
Datasheet | Routers
AT-AR750S
Secure VPN Router
AT-AR750S
2 x WAN 10/100BASE-T ports
5 x LAN 10/100BASE-T ports
2 x PICs
1 x Asynchronous console / Modem port
Secure Modular Routing Solution
The AT-AR750S has been designed with the
needs of small to medium enterprises/businesses
(SME/SMB) or branch office businesses in mind.
The AT-AR750S offers significant advances in
processing performance, Quality of Service (QoS),
routing, remote connectivity and security.
Extensive VPN Cabability
The AT-AR750S provides extensive IPSec-based
VPN capability, allowing the interconnection of
offices, remote tele-workers, and other users
who require secure access to a corporate
network.The integrated hardware acceleration,
standard on the AT-AR750S, maximizes
encryption throughput and removes the need
to purchase a hardware upgrade package.The
AT-AR750S is also compatible with industry
standard IPSec VPN clients.
Security
In addition to hardware-based encryption, the
AT-AR750S comes with other advanced
security features such as traffic filtering with
event logging.Traffic filtering uses the source
and destination address, port, protocol and TCP
packet type to provide control over traffic that
passes through the AT-AR750S. A Stateful
Inspection Firewall provides an increased level
of security and complements the packet filtering
function. HTTP and SMTP proxies on the
AT-AR750S provide improved control over web
and mail communications.
Quality of Service
Allied Telesis’ QoS implementation enables the
AT-AR750S to dynamically identify high priority
voice, video and application traffic, so that
appropriate service levels can be
maintained in congested networks. Advanced
QoS allows voice, video, and data traffic to have
QoS applied within individual IPSec tunnels,
over GRE, as well as IPv6 to IPv4 tunnels.
Performance
The AT-AR750S provides superior performance
over other secure VPN routers in this market
space. While most secure routers have Stateful
Firewalls with NAT, QoS, and IPsec VPN
termination capability, ver y few can perform all
three functions and still provide excellent
performance with the mixed packed sizes seen
in real networks. The AT-AR750S has been
designed to meet real network needs.
Stateful Firewall inspection, NAT and QoS:
>50Mbps @ 64 byte packets
Stateful Firewall inspection, NAT, QoS, IPsec
VPN (with AES 256 bit encryption):
>35Mbps @ 72 byte packets
The AT-AR750S can achieve up to 195 Mbps
IPsec throughput with bidirectional traffic.
This level of performance enables secure siteto-site VPNs over multiple WAN interfaces
while still firewalling the local network across
multiple LAN ports.
Comprehensive Management and
Configuration
The AT-AR750S comes with a comprehensive
suite of management features and is also
compatible with SNMP-based management
packages. An extensive command set is available
via the Command Line Interface (CLI), and a
browser-based Graphical User Interface (GUI) is
also provided to simplify the AT-AR750S'
configuration and management.The GUI provides
access to default set-ups in key management
areas and provides access to regional settings.
Allied Telesis’ SNMP support extends to SNMPv3
to provide secure management.
Key Features
Hardware
• 2 x 10/100 WAN interfaces
• 2 x Port Interface Cards (PICs)
• 5 x 10/100BASE-T switched LAN ports
• 1 x Asynchronous port / Modem Port
• DMZ port: configurable on any of the WAN/LAN ports
• RoHS Compliant
Security
• IP Filtering
• Stateful Inspection Firewall
• 802.1x
• Authentication: RADIUS,TACACS, MD5, PAP, CHAP
VPN/Encryption
• NAT-T
• AES, DES, 3DES encryption
• 5,000 configured IPsec VPN tunnels (250 active tunnels)
• HW accelerated IPsec VPN >35Mbps@72byte
packets (with AES 256 bit encryption)
• Up to 195 Mbps IPsec throughput with large packets
Manageability
• Web based GUI
• CLI management
• SNMPv3
• IP QoS
Extensive routing support, including:
• RIPv1 and v2
• OSPFv1 and v2
• GRE, L2TP
• IPX
• VRRP
• RIPng
• IPv6 – optional
• BGP-4 – optional
Multicast routing protocols, including:
• PIM-DM
• PIM-SM
• DVMRP
• IGMPv2
• IGMP Snooping
• IPv6 Multicast – optional
• PIM6
• MLD
Support for traditional network protocols,
including:
• X.25
• Frame Relay
Allied Telesis www.alliedtelesis.com
AT-AR750S | Secure VPN Router
WAN Load Balancing
The AT-AR750S’WAN Load Balancer enables
the router to combine bandwidth from multiple
WAN connections for increased throughput,
redundancy and reliable WAN connectivity.
When a router simultaneously connects to
multiple WAN networks, the WAN Load
Balancer will distribute the traffic based on any
one of a number of selectable balancing
algorithms. A typical example would be a router
that has two Internet connections each
exchanging data to remote sites via different
Internet providers. In this case an outage limited
to one network will not result in a loss of
connectivity to these sites.
Feature Summary
Routing and Multicast
PPP and IP Routing
RIP v1 & v2
OSPF v1 & v2
BGP-4 (optional)
IPX
IGMPv2
PIM-SM / DM
DVMRP (including
draft_ietf_idmr_dvmrp_v3_10)
WAN Protocols
X.25
Frame Relay
Security
IP Filtering
Stateful Inspection Firewall
SMTP & HTTP Proxy
802.1x
Authentication: RADIUS,TACACS, MD5, PAP, CHAP
SSH
SSLv1
VPN
L2TP
GRE
IPSec
IKE
ISAKMP
PKI
NAT-T
Encryption: DES, 3DES, AES
MS
TM
XP VPN client interoperability
Hardware acceleration
QoS
Extensive Traffic classifiers of L2 to L5 traffic to
allow appropriate queuing of traffic.
IP: IP source/destination address,TOS
& DiffServ
Ethernet: MAC source/destination, 802.1q
TCP/UDP: Port numbers
VoIP: RTP source & destination
Queuing:
Low latency queuing (LLQ)
Class-based weighted fair queuing (CBWFQ)
Deficit Round Robin (DRR)
Supported tunnel interfaces: PPP, L2TP, IPsec, GRE
Management
CLI
Browser Based GUI
SNMPv3
IPv6
RIPng
IPv6 RFC 2460
Neighbour discovery RFC 2461
Stateless address auto configuration RFC 2462
ICMPv6 RFC 2463
Transmission of IPv6 packets RFC 2464
Connection of IPv6 domains via IPv4 clouds
RFC 3056
DHCPv6
Reliability
MTBF: >120 000 hrs
Hardware Features
5 x 10/100 Mbps (LAN)
2 x 10/100 Mbps (WAN)
2 x Port Interface Cards (PICs)
1 x Async Console port
DMZ port: Obtained by configuring one of the
WAN or LAN ports
Processor
533MHz
Internal security encr yption engine
Memory
64MB Ram
16MB Flash
Power Characteristics
Input Voltage: 100-240 VAC, 50-60 Hz
Max Power Consumption: 40W
Internal Battery Backup (1 year)
Physical Dimensions
Dimensions: 1RU rack mount (with included
kit), Depth 190mm,
Width 305mm, Height 44mm
Weight: 1.94 kg
Environmental
Operating Temp: 0oC to 40oC
Storage Temp: -25
o
C to 70oC
Operating relative humidity: 5 to 80%
non-condensing
Acoustic:
ANSI S12.10 General Office @ 40dB
Operating Altitude: Up to 10,000 feet
Approvals & Certifications
UL
TUV
UL60950
EN60950
EN55022 class A
EN55024
FCC class A
VCCI class A
AS/NZS CISPR22 class A
CE
Optional Extras
Port Interface Cards:
AT-AR020 Single configurable E1/T1 interface
supporting
channelized /
unchannelized
Primary Rate
ISDN / Frame Relay
AT-AR021S
Single Basic Rate ISDN (S/T) interface
(V3)
1
AT-AR023 Single Synchronous port up to
2Mbps to an external CSU/DSU
(AT-V.35-DTE-00 or AT-X.21-DTE00 cable required)
AT-AR024
Four Asynchronous RS-232
interfaces to 115Kbps
Country of Origin
China
1
AR021S (V3) requires AlliedWare®Operating System
version 2.9.1-13 or later
Loading...