bintec elmeg RS353awv-4G User Manual

Universal VPN router with LTE(4G), WLAN 11n and VDSL2

bintec RS353awv-4G

WLAN- 802.11n, 2,4 and 5 GHz

Mulitband LTE Modem (Compatible to HSPA+, UMTS, GSM)

VDSL2 and ADSL2+ (Annex A)

5x Gigabit-Ethernet

5x IPSec-tunnels (optional 30 tunnels), HW acceleration

IPv6 Support

Flexible mounting: Desktop or 19”- Rack

bintec RS353awv-4G

The bintec RS353awv-4G with integated LTE(4G), WIFI (802.11n) and VDSL2/ADSL2+ Modem (Annex A) is, thanks to
high-speed LTE(4G) capability, especially well-suited for scenarios where high availability and redundancy are
indispensable.

Product Description

The bintec RS353awv-4G is a powerful professional VPN router for high-speed internet access. With its combination
VDSL2 and ADSL2+ modem, this model gives small and mid-sized companies the foundation they need to establish state-
of-the-art, robust internet connectivity. What`s more, the integrated LTE (4G) modem also ensures high availability and
redundancy for the company`s IT infrastructure and the integrated 802.11n wireless module also provides wireless data
connectivity for enterprise applications.

The RS353awv-4G delivers advanced security, flexibility for a wide range of application scenarios, and exceptional
performance. The combination VDSL2 and ADSL2+ modem supports the Annex A standard (ADSL over POTS) according
to ITU standard G992.1.
The integrated LTE(4G) modem supports LTE at speeds of up to 100 Mbps for downloads and up to 50 Mbps for uploads in
addition to UMTS (3G+) and HSPA+. The state-of-the-art dual-band wireless module which operates at 2.4 and 5 GHz
supports all current wireless standards including 802.11 a/b/g/n. The MIMO 2x2 technology allows for maximum raw data
rates of up to 300 Mbps.

This router boasts a fan-less metal housing, offers long-term reliability for business-critical applications, and makes an
ideal access router for small and mid-sized enterprises (SMEs), branch locations, and home offices.

Thanks to the included 19” rackmount conversion bracket, customers can easily integrate this model into 19” server racks
or operate it on the desktop. Rack mounting is further simplified by the device height of exactly one rack unit and the
integrated power supply. The SIM card access is conveniently located on the bottom of the device.

In addition to the VDSL2 /ADSL2+ modem, the bintec RS353awv-4G also provides five Gigabit Ethernet ports which can
be independently configured for use in a LAN, WAN, or DMZ. Its integrated LTE (4G) modem can be used for remote
configuration access or backup internet access. The included five licenses for hardware-accelerated IPSec tunnels provide
comprehensive high-speed VPN functionality and allow for secure connections to branch locations and off-site employees.
A USB console port allows access to basic router features in critical environments.
With its wide range of WAN connectivity options, the RS353awv-4G raises the bar for flexibility among access routers. An
optional external indoor or outdoor LTE(4G) antenna enhances reception in challenging conditions.

Smart Design

The fan-free metal housing is a proven, rugged design that has set bintec devices apart from the competition for years.
The integrated power supply and 19” conversion bracket now also make it easy to install in a 19” rack. SIM card access is
conveniently located on the bottom of the device.

Maximum Performance

The bintec RS353awv-4G router is based on a powerful platform that provides unrivaled capabilities. Customers with
VDSL2 connections can double their data transfer rates by taking advantage of VDSL vectoring. Heavy local network
traffic can also be handled easily thanks to high speed bintec interfaces. You can establish links between separate global
locations over secure, encrypted VPN tunnels.

Airtight security

The bintec RS353awv-4G not only delivers outstanding performance, it also provides a comprehensive range of security

binte c elmeg GmbH – Südwestpa rk 94 – 9044 9 Nürnberg – Deutschlan d
Telefo n: [phone] – Tele fax: [phone]
E-Mail: info@b intec-elmeg.co m – www.bin tec-elmeg.com

binte c RS353awv-4G

Novembe r 8, 2 018

Subje ct to tech nical alteration s

201 811080 23323

features. With five simultaneous IPSec channels available, you can establish secure links between branch locations,
subsidiaries, and home offices. The integrated IPSec implementation in bintec routers allows the use of pre-shared keys
as well as digital certificates as recommended by Germany`s Federal Office for Information Security. This lets you use a
public key infrastructure and ensures maximum security. An object-oriented stateful inspection firewall offers packet
filtering to provide additional protection against attacks.

Professional management

A graphical user interface is the primary means of configuring the router. This fast, web-based interface makes it easy to
set up routers using the integrated configuration wizard. Administrators can also manage the devices locally or remotely
using configurable telnet, SSH or GSM dial-in. The bintec DIME Manager is a free software tool that allows administrators
to manage up to 50 devices at once.

Ready for the future

Businesses can easily integrate the bintec RS353awv-4G into existing company networks. This bintec router also allows
for a gradual migration to the new IPv6 internet protocol. The integrated VDSL2-modem of the bintec RS353awv-4G
supports VDSL bandplan 998 including profiles 8b and 17a, the standard used in Germany and most other European
countries. The modem also supports automatic failover to ADSL2+. With easy migration from ADSL2+ to VDSL2 and
support for VDSL vectoring, the professional-grade bintec RS353awv-4G router is a sound investment in your
organization`s future.

WLAN Controller, HotSpot and adult content filtering

The router also includes all the functionality of the bintec WLAN Controller. The bintec WLAN controller lets you configure
and monitor small- and mid-sized WLAN networks with up to 12 access points. No matter whether you need frequency
management with automatic channel selection, loadbalancing across several access points, support for virtual LANs, or
virtual wireless network administration (multi-SSID) - you have all these advanced features at your fingertips with the
WLAN Controller. The software continually monitors the entire wireless network, notifying administrators of any
malfunctions or security threats.

The router`s integrated HotSpot Gateway together is an ideal complement to the WLAN Controller in combination with a
bintec HotSpot license, allowing operators to set up a wireless guest network that requires authentication. This secure
separation between the guest network and company network is configured through the WLAN Controller and implemented
using virtual wireless networks. An additional highlight is the optional bintec elmeg webfilter which can be used to prevent
children and youth from accessing inappropriate content.

Features

VPN

IPSec Algorithms

DES (64 Bit), 3DES (192 Bit), AES (128,192,256 Bit), CAST
(128 Bit), Blowfish (128-448 Bit), Twofish (256 Bit); MD-5,
SHA-1,SHA-2 (256,384,512), RipeMD160, Tiger192 Hashes

IPSec Deffie-Hellman Groups

1 (768 Bit), 2 (1024 Bit), 5 (1536 Bit), 14 (2048 Bit), 15
(3072 Bit), 16 (4096 Bit)

Number of VPN tunnels

Inclusive 5 active VPN tunnels with the protocols IPSec,
PPTP, L2TP and GRE v.0 (also in combination possible).
Optional router extension up to 30 simultaneous utilisable
VPN tunnel via license.

binte c elmeg GmbH – Südwestpa rk 94 – 9044 9 Nürnberg – Deutschlan d
Telefo n: [phone] – Tele fax: [phone]
E-Mail: info@b intec-elmeg.co m – www.bin tec-elmeg.com

binte c RS353awv-4G

Novembe r 8, 2 018

Subje ct to tech nical alteration s

201 811080 23323

PPTP (PAC/PNS)

Point to Point Tunneling Protocol for establishing fo Virtual
Privat Networks, inclusive strong encryption methods with
128 Bit (MPPE) up to 168 Bit (DES/3DES, Blowfish)

GRE v.0

Generic Routing Encapsulation V.0 according RFC 2784 for
common encapsulation

L2TP

Layer 2 tunnelling protocol inclusive PPP user
authentication

IPSec Internet Protocol Security establishing of VPN connections

IPSec hardware acceleration

Integrated hardware acceleration for IPSec encryption
algorithms DES, 3DES, AES

IPSec IKE

IPSec key exchange via preshared keys or certificates.
Support of IKEv1, IKEv2 Initiator Mode, IKEv2 Responder
Mode

IPSec IKE Config Mode

IKE Config Mode server enables dynamic assignment of IP
addresses from the address pool of the company. IKE
Config Mode client enables the router, to get assigned
dynamically an IP address.

IPSec IKE XAUTH (Client/Server)

Internet Key Exchange protocol Extended Authenticaion
client for login to XAUTH server and XAUTH server for
loging of XAUTH clients

IPSec IKE XAUTH (Client/Server)

Inclusive the forwarding to a RADIUS-OTP (One Time
Password) server (supported OTP solutions see
www.bintec-elmeg.com).

IPSec NAT-T

Support of NAT-Traversal (Nat-T) for the application at VPN
lines with NAT

IPSec IPComp

IPSec IPComp data compression for higher data throughput
via LZS

IPSec certificates (PKI)

Support of X.509 multi-level certificates compatible to
Micrososft and Open SSL CA server; upload of
PKCS#7/8/10/12 files via TFTP, HTTP, HTTP, LDAP, file
upload and manual via FCI

IPSec SCEP

Certificates management via SCEP (Simple Certificate
Enrollment Protocol)

IPSec Certificate Revocation Lists (CRL)

Support of remote CRLs on a server via LDAP or local
CRLs

IPSec Dead Peer Detection (DPD) Continuous control of IPSec connection

IPSec dynamic IP via ISDN

Transmission of dynamic IP address in ISDN D or B
channel; free-of-charge licence necessary

IPSec dynamic DNS

Enables the registering of dynamic IP addresses by a
dynamic DNS provider for establishing a IPSec connection.

IPSec RADIUS

Authentication of IPSec connections at a RADIUS server.
Additionally the IPSec peers, which were configured on a
RADIUS server, can be loaded into the gateway (RADIUS
dialout).

IPSec Multi User

Enables the Dial-in of several IPSec clients via a single
IPSec peer configuration entry

IPSec QoS

The possibility to operate Quality of Service (traffic shaping)
inside of an IPSec tunnel

binte c elmeg GmbH – Südwestpa rk 94 – 9044 9 Nürnberg – Deutschlan d
Telefo n: [phone] – Tele fax: [phone]
E-Mail: info@b intec-elmeg.co m – www.bin tec-elmeg.com

binte c RS353awv-4G

Novembe r 8, 2 018

Subje ct to tech nical alteration s

201 811080 23323