bintec elmeg RS353awv-4G User Manual

Universal VPN router with LTE(4G), WLAN 11n and VDSL2

bintec RS353awv-4G

WLAN802.11n, 2,4 and 5 GHz

Mulitband LTE Modem (Compatible to HSPA+, UMTS, GSM)

VDSL2 and ADSL2+ (Annex A)

5x Gigabit-Ethernet

5x IPSec-tunnels (optional 30 tunnels), HW acceleration

IPv6 Support

Flexible mounting: Desktop or 19”- Rack

bintec RS353awv-4G

The bintec RS353awv-4G with integated LTE(4G), WIFI (802.11n) and VDSL2/ADSL2+ Modem (Annex A) is, thanks to high-speed LTE(4G) capability, especially well-suited for scenarios where high availability and redundancy are indispensable.

Product Description

The bintec RS353awv-4G is a powerful professional VPN router for high-speed internet access. With its combination VDSL2 and ADSL2+ modem, this model gives small and mid-sized companies the foundation they need to establish state- of-the-art, robust internet connectivity. What`s more, the integrated LTE (4G) modem also ensures high availability and redundancy for the company`s IT infrastructure and the integrated 802.11n wireless module also provides wireless data connectivity for enterprise applications.

The RS353awv-4G delivers advanced security, flexibility for a wide range of application scenarios, and exceptional performance. The combination VDSL2 and ADSL2+ modem supports the Annex A standard (ADSL over POTS) according to ITU standard G992.1.

The integrated LTE(4G) modem supports LTE at speeds of up to 100 Mbps for downloads and up to 50 Mbps for uploads in addition to UMTS (3G+) and HSPA+. The state-of-the-art dual-band wireless module which operates at 2.4 and 5 GHz supports all current wireless standards including 802.11 a/b/g/n. The MIMO 2x2 technology allows for maximum raw data rates of up to 300 Mbps.

This router boasts a fan-less metal housing, offers long-term reliability for business-critical applications, and makes an ideal access router for small and mid-sized enterprises (SMEs), branch locations, and home offices.

Thanks to the included 19” rackmount conversion bracket, customers can easily integrate this model into 19” server racks or operate it on the desktop. Rack mounting is further simplified by the device height of exactly one rack unit and the integrated power supply. The SIM card access is conveniently located on the bottom of the device.

In addition to the VDSL2 /ADSL2+ modem, the bintec RS353awv-4G also provides five Gigabit Ethernet ports which can be independently configured for use in a LAN, WAN, or DMZ. Its integrated LTE (4G) modem can be used for remote configuration access or backup internet access. The included five licenses for hardware-accelerated IPSec tunnels provide comprehensive high-speed VPN functionality and allow for secure connections to branch locations and off-site employees. A USB console port allows access to basic router features in critical environments.

With its wide range of WAN connectivity options, the RS353awv-4G raises the bar for flexibility among access routers. An optional external indoor or outdoor LTE(4G) antenna enhances reception in challenging conditions.

Smart Design

The fan-free metal housing is a proven, rugged design that has set bintec devices apart from the competition for years. The integrated power supply and 19” conversion bracket now also make it easy to install in a 19” rack. SIM card access is conveniently located on the bottom of the device.

Maximum Performance

The bintec RS353awv-4G router is based on a powerful platform that provides unrivaled capabilities. Customers with VDSL2 connections can double their data transfer rates by taking advantage of VDSL vectoring. Heavy local network traffic can also be handled easily thanks to high speed bintec interfaces. You can establish links between separate global locations over secure, encrypted VPN tunnels.

Airtight security

The bintec RS353awv-4G not only delivers outstanding performance, it also provides a comprehensive range of security

	bintec RS353awv-4G
bintec elmeg GmbH – Südwestpark 94 – 90449 Nürnberg – Deutschland	November 8, 2018
Telefon: [phone] – Telefax: [phone]	Subject to technical alterations
E-Mail: [e-mail] – www.bintec-elmeg.com	20181108023323

features. With five simultaneous IPSec channels available, you can establish secure links between branch locations, subsidiaries, and home offices. The integrated IPSec implementation in bintec routers allows the use of pre-shared keys as well as digital certificates as recommended by Germany`s Federal Office for Information Security. This lets you use a public key infrastructure and ensures maximum security. An object-oriented stateful inspection firewall offers packet filtering to provide additional protection against attacks.

Professional management

A graphical user interface is the primary means of configuring the router. This fast, web-based interface makes it easy to set up routers using the integrated configuration wizard. Administrators can also manage the devices locally or remotely using configurable telnet, SSH or GSM dial-in. The bintec DIME Manager is a free software tool that allows administrators to manage up to 50 devices at once.

Ready for the future

Businesses can easily integrate the bintec RS353awv-4G into existing company networks. This bintec router also allows for a gradual migration to the new IPv6 internet protocol. The integrated VDSL2-modem of the bintec RS353awv-4G supports VDSL bandplan 998 including profiles 8b and 17a, the standard used in Germany and most other European countries. The modem also supports automatic failover to ADSL2+. With easy migration from ADSL2+ to VDSL2 and support for VDSL vectoring, the professional-grade bintec RS353awv-4G router is a sound investment in your organization`s future.

WLAN Controller, HotSpot and adult content filtering

The router also includes all the functionality of the bintec WLAN Controller. The bintec WLAN controller lets you configure and monitor smalland mid-sized WLAN networks with up to 12 access points. No matter whether you need frequency management with automatic channel selection, loadbalancing across several access points, support for virtual LANs, or virtual wireless network administration (multi-SSID) - you have all these advanced features at your fingertips with the WLAN Controller. The software continually monitors the entire wireless network, notifying administrators of any malfunctions or security threats.

The router`s integrated HotSpot Gateway together is an ideal complement to the WLAN Controller in combination with a bintec HotSpot license, allowing operators to set up a wireless guest network that requires authentication. This secure separation between the guest network and company network is configured through the WLAN Controller and implemented using virtual wireless networks. An additional highlight is the optional bintec elmeg webfilter which can be used to prevent children and youth from accessing inappropriate content.

Features

	VPN
		DES (64 Bit), 3DES (192 Bit), AES (128,192,256 Bit), CAST
	IPSec Algorithms	(128 Bit), Blowfish (128-448 Bit), Twofish (256 Bit); MD-5,
		SHA-1,SHA-2 (256,384,512), RipeMD160, Tiger192 Hashes
	IPSec Deffie-Hellman Groups	1 (768 Bit), 2 (1024 Bit), 5 (1536 Bit), 14 (2048 Bit), 15
		(3072 Bit), 16 (4096 Bit)
		Inclusive 5 active VPN tunnels with the protocols IPSec,
	Number of VPN tunnels	PPTP, L2TP and GRE v.0 (also in combination possible).
		Optional router extension up to 30 simultaneous utilisable
		VPN tunnel via license.
		bintec RS353awv-4G
	bintec elmeg GmbH – Südwestpark 94 – 90449 Nürnberg – Deutschland	November 8, 2018
	Telefon: [phone] – Telefax: [phone]	Subject to technical alterations
	E-Mail: [e-mail] – www.bintec-elmeg.com	20181108023323

		Point to Point Tunneling Protocol for establishing fo Virtual
	PPTP (PAC/PNS)	Privat Networks, inclusive strong encryption methods with
		128 Bit (MPPE) up to 168 Bit (DES/3DES, Blowfish)
	GRE v.0	Generic Routing Encapsulation V.0 according RFC 2784 for
		common encapsulation
	L2TP	Layer 2 tunnelling protocol inclusive PPP user
		authentication
	IPSec	Internet Protocol Security establishing of VPN connections
	IPSec hardware acceleration	Integrated hardware acceleration for IPSec encryption
		algorithms DES, 3DES, AES
		IPSec key exchange via preshared keys or certificates.
	IPSec IKE	Support of IKEv1, IKEv2 Initiator Mode, IKEv2 Responder
		Mode
		IKE Config Mode server enables dynamic assignment of IP
	IPSec IKE Config Mode	addresses from the address pool of the company. IKE
		Config Mode client enables the router, to get assigned
		dynamically an IP address.
		Internet Key Exchange protocol Extended Authenticaion
	IPSec IKE XAUTH (Client/Server)	client for login to XAUTH server and XAUTH server for
		loging of XAUTH clients
		Inclusive the forwarding to a RADIUS-OTP (One Time
	IPSec IKE XAUTH (Client/Server)	Password) server (supported OTP solutions see
		www.bintec-elmeg.com).
	IPSec NAT-T	Support of NAT-Traversal (Nat-T) for the application at VPN
		lines with NAT
	IPSec IPComp	IPSec IPComp data compression for higher data throughput
		via LZS
		Support of X.509 multi-level certificates compatible to
	IPSec certificates (PKI)	Micrososft and Open SSL CA server; upload of
		PKCS#7/8/10/12 files via TFTP, HTTP, HTTP, LDAP, file
		upload and manual via FCI
	IPSec SCEP	Certificates management via SCEP (Simple Certificate
		Enrollment Protocol)
	IPSec Certificate Revocation Lists (CRL)	Support of remote CRLs on a server via LDAP or local
		CRLs
	IPSec Dead Peer Detection (DPD)	Continuous control of IPSec connection
	IPSec dynamic IP via ISDN	Transmission of dynamic IP address in ISDN D or B
		channel; free-of-charge licence necessary
	IPSec dynamic DNS	Enables the registering of dynamic IP addresses by a
		dynamic DNS provider for establishing a IPSec connection.
		Authentication of IPSec connections at a RADIUS server.
	IPSec RADIUS	Additionally the IPSec peers, which were configured on a
		RADIUS server, can be loaded into the gateway (RADIUS
		dialout).
	IPSec Multi User	Enables the Dial-in of several IPSec clients via a single
		IPSec peer configuration entry
	IPSec QoS	The possibility to operate Quality of Service (traffic shaping)
		inside of an IPSec tunnel
		bintec RS353awv-4G
	bintec elmeg GmbH – Südwestpark 94 – 90449 Nürnberg – Deutschland	November 8, 2018
	Telefon: [phone] – Telefax: [phone]	Subject to technical alterations
	E-Mail: [e-mail] – www.bintec-elmeg.com	20181108023323