Enterasys Networks XSR 1800 User Manual

XSR™ 1800 Series
Security Router for Branch Offices

• Lightning-fast security router with multiple expansion options

• Integrated IP routing, VPN and firewall—in one device

• Easily upgradeable to meet future requirements

• Best-in-class price and performance

• Dual 10/100 LAN interfaces,
IP routing, QoS and WAN
functionality in one device

— Provides non-stop, high-

performance local and
wide area networking

• Standalone or rack-mount­able design with optional
power supply redundancy

— High-availability options

for mission-critical branch
office installations

• High-performance VPN
with Hardware Accelerator

— Extranet, site-to-site and

remote access VPN
technologies

— IPSec hard w a re acceleration

for high-security VPN

• Policy-managed stateful
inspection firewall

— Secures your offices from

Internet threats

— Designed to integrate with

award-winning Dragon™
Intrusion Defense and to
support SIP-enabled
n e x t - g e n e r a t i o n messaging
technologies

• Powerful, intuitive
management

— Supports industry-standard

Command Line Interface,
SNMP integration, and
NetSight™ Atlas
m a n a g e m e n t

— Easy deployment with

remote configuration,
monitoring and
management

— Front-panel LED status

indicators, out-of-band
management interface,
and recessed Restore
Factory Default switch for
easy on-site diagnostics

High-Performance Secure
Networking

Combining lightning-fast IP routing with
multiple security applications and high
availability—all at a market-leading
price—the XSR 1800 Series delivers big
features and performance in a compact
box. Designed especially for site-to-site
and remote access connectivity, this flexible
platform includes dual Fast Ethernet LAN
interfaces, VPN hardware acceleration,
stateful deep-packet inspection firewall,
and a broad range of WAN interfaces.

The X S R - 1 8 0 5 delivers a robust 50k PPS,
100 Mbps IPSec/3DES encryption and a
180 Mbps stateful inspection firewall. The
rack-mountable X S R - 1 8 5 0 offers superior
router throughput, 200 concurrent I P S e c /
3DES VPN tunnels, stateful inspection
firewall plus optional power supply and
fan redundancy. Powerful management a n d
configuration tools—including industry­standard Command Line Interface, SNMP
integration and client/server Java application
management support—provide extensive
remote monitoring and diagnostic capabilities,
critical in environments without on-site
n e t w o r k i n g expertise.

The standards-based XSR 1800 Series
offers a future-proof design to accommodate
evolving security, QoS and connectivity
needs. Unlike typical WAN routers, the XSR
Security Router provides best-of-breed
security and maintains performance when
features are enabled. And, unlike typical
security appliances, the XSR provides
extensive IP routing and Quality of Service
(QoS) on a wide range of WAN interfaces.

The XSR Security Routers set industry­leading price/performance benchmarks
for networking with IP routing, VPN and
firewall available at a significant p r i c e
advantage over the competition. In addition,
the XSR WAN modules are shared across
multiple Enterasys platforms, leveraging
y o u r investment and simplifying d e p l o y m e n t
scenarios.

Two Options for Branch Office
Deployments

An entry-level, low-cost modular router
in a desktop form factor, the X S R - 1 8 0 5
delivers powerful performance and features
to address the WAN, VPN and firewall
needs of re mote offices for enterprise
organizations. As a VPN gat eway, the
XSR-1805 enables 50 tunnels (upgradeable
to 200), supporting site-to-site and remote
access applications.

Delivering 60k PPS performance, a modular,
rackmount form factor, and the option for
redundant power, the XSR-1850 is ideal
to support mission-critical applications
extending to the bran ch off ice. The
XSR-1850 enables 200 VPN tunnels
(upgradeable to 1,000), supporting site­to-site and remote access applications.

Both the XSR-1805 and XSR-1850
protect the Internet perimeter with a high­performance stateful inspection, deep-packet
firewall.

Page 1 of 6 • Data Sheet

Specifications

Technical Specifications

MTBF (predicted)

>77,000 hrs

In-Band Management

Remote SNMP via NetSight Atlas

Authenticated Tunnels

XSR-1850: 200 (expandable to 1,000)
XSR-1805: 50 (expandable to 200)

Physical Specifications

XSR-1850

Dimensions

25.4 cm (10") L x 43.1 cm (17") W x 5.0 cm (2.0") H

Weight

4.08 kg (9 lbs)

XSR-1805

35.6 cm (14") L x 25.4 cm (10") W x 2.5 cm (6.4") H

Weight

3.18 kg (7 lbs)

Environmental Specifications

Operating Temperature

0° C to +40° C (+32° F to 104° F)

Non-Operating Temperature

-40° C to +70° C (-40° F to 158° F)

Operating Humidity

5% to 90% (non-condensing)

Power Consumption

Total Power (100 to -240 Volts) 25 W

Agency and Standards Specifications

Safety

UL 60950, CSA 60950, EN 60950, EN 60825 and IEC
60950

Electromagnetic Compatibility (EMC)

47 CFR Parts 2 and 15, CSA C108.8, EN 555022, EN
55024, EN 61000-3-2, EN 61000-3-3, AS/NZS CISPR
22, and VCCI V-3

Telecom Approvals (T1/E1 NIM and CT1/E1 NIM)

USA 47 CFR Part 68; Canada CS-03; Europe TBR 12
and TBR 13 (For other approval countries, check with
your Enterasys representative.)

Other MIBs

Chassis MIB, Entity MIB, Ctdownload MIB

Dialer

ITU-T V.25bis and V.25ter; T1/E1; ITU-T G.703, G.704,
G.705, G.706, G.732, G.735, G.736,G.737, G.738,
G.739, G.823, G.824, G.962, G.963, G.964; AT&T PUB
43802, 54016, 62411; ANSI/EIA-656; ANSI T1.102;
ANSI T1.403; ETSI ETS 300 011, 166, 233, 324, 347

ITU/IETF Standards Support

(A full range of standards/protocols are supported. Ask
your Enterasys representative for details.)

Enterasys Private Enterprise MIB Support

Download-MIB

Parameters for router upload/download

Chassis-MIB

Parameters for router hardware

Timed-Reset-MIB

Parameters for a countdown timer and a forced reset after
expiration

Configuration Change MIB

Parameters for SNMP management entities to determine
if and when configuration changes have occurred

Configuration Management MIB

Parameters for an SNMP management entity to reset the
managed entity, upload and download executable images
and configuration files, and identify the active executable
image and configuration files

Syslog Client MIB

Parameters for SNMP configuration of individual network
entities to generate and log diagnostic messages

SNMP Persistence MIB

Parameters for SNMP to save configuration changes to
the startup configuration file

Page 2 of 6 • Data Sheet

Specifications

XSR Model XSR-1805 XSR-1850

NIM Slots 2 2

Fixed 10/100 Ethernet ports 2 2

IP Routing performance 50 Kpps 60 Kpps

VPN Tunnels 50 200

VPN Throughput 100 Mbps 100 Mbps

Firewall Throughput 180 Mbps 200 Mbps

Firewall Sessions 12,500 80,000

Redundant Power Supply No Optional

VPN Accelerator Embedded Embedded

Flash Memory * 8 MB 8 MB

DRAM ** 32 MB 64 MB

External Compact Flash Yes Yes

* External compact flash is used to augment flash memory.

** Memory upgrades available for increased limits and performance.

Ordering Information

Base Appliances

XSR-1805

XSR Security Router with two 10/100 Ethernet LAN interfaces, 2 NIM slots, 8 MB onboard Flash memory, 32 MB
DRAM, dedicated VPN Accelerator, Compact Flash slot and power supply (external); bundled with Enterasys
Operating System (EOS) IP Routing Services

XSR-1850

XSR Security Router with two 10/100 Ethernet LAN interfaces, 2 NIM slots, 8 MB onboard Flash memory,
64 MB DRAM, dedicated VPN Accelerator, Compact Flash slot and power supply (internal) in a rack-mount form
factor; bundled with Enterasys Operating System (EOS) IP Routing Services

Software

XSR-18XX-VPN

VPN for the XSR 1800 Series

XSR-18XX-FW

Firewall for the XSR 1800 Series

XSR-18XX-VPN-FW

VPN and Firewall for the XSR 1800 Series

Page 3 of 6 • Data Sheet

Ordering Information

Network Interface Modules

NIM-ADSL-AC-01

1-port ADSL network interface module (Annex AC – POTS)

NIM-ADSL-B-01

1-port ADSL network interface module (Annex B – ISDN)

NIM-ETHR-01

1-port 10/100 Ethernet network interface module

NIM-FIBR-01

1-port FX100 fiber network interface module

NIM-CT1E1/PRI-1

1-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU

NIM-CT1E1/PRI-2

2-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU

NIM-CT1E1/PRI-4

4-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU

NIM-DIRELAY-02

Drop and Insert network interface module, provides IP PBX pass through for T1/E1 with integrated CSU/DSU

NIM-T1/E1-01

1-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU

NIM-T1/E1-02

2-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU

NIM-T1/E1-04

4-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU

NIM-SER-02

2-port Sync/Async Serial WAN network interface module (2 Mbps per port) Note: These are not HSSI interfaces

NIM-SER-04

4-port Sync/Async Serial WAN network interface module (2 Mbps per port) Note: These are not HSSI interfaces

NIM-BRI-ST-01

1-port ISDN Basic Rate network interface module with S/T interface (Euro version)

NIM-BRI-ST-02

2-port ISDN Basic Rate network interface module with S/T interface (Euro version)

NIM-BRI-U-01

1-port ISDN BRI with U interface

NIM-BRI-U-02

2-port ISDN BRI with U interface

NIM-T3/E3-01

1-port fractional T3/E3 network interface module with integrated CSU/DSU

Page 4 of 6 • Data Sheet

Ordering Information

Accessories

XSR-64MB-MEM

64 MB memory upgrade for XSR-1805, expands routing, VPN and firewall limits

XSR-128MB-MEM

128 MB memory upgrade for XSR-1805 and 1850, expands routing, VPN and firewall limits

NIM-V35-CAB-04

4-port V.35 DTE serial cable for NIM-SER-xx

NIM-232-CAB-04

4-port RS232/EIA530 DTE serial cable for NIM-SER-xx

NIM-X21-CAB-04

4-port X.21 DTE serial cable for NIM-SER-xx

NIM-449-CAB-04

4-port EIA 449 DTE serial cable for NIM-SER-xx

NIM-DBU1-CAB-04

4-port combination V.35 /RS232 DTE serial cable for NIM-SER-xx

XSR-1805-RKMT

XSR-1805 rackmount kit

XSR-RPC

Optional XSR-1850 rack mount power shelf with three open slots and one power supply

XSR-RPOWER-1850

Additional power supplies for XSR-RPC (up to three per XSR-RPC)

NIM-E1-COAX-BLN

G.703 Balun with 120-ohm UTP (RJ-45F) to 75W dual-BNC cables

* Note: XSR 1800 Series configurations include hardware and software components. Product orders should include:

• The XSR-1800 base system (EOS IP Routing Services, on board flash and base DRAM, 2 10/100 LAN interfaces and 2 NIM slots)

• NIM cables, if needed

• Additional security features (VPN and Firewall) and additional memory for added VPN tunnel capacity, if needed

• NetSight Atlas Router Services Manager application

• Service contract, recommended to maintain system currency

• XSR series products have a license management system to allow the purchase and installation of additional software feature sets at any time.

Page 5 of 6 • Data Sheet

Warranty

As a customer-centric company, Enterasys is committed to
providing the best possible workmanship and design in our
product set. In the event that one of our products fails due
to a defect in one of these factors, we have developed a com­prehensive warranty that protects you and provides a sim­ple way to get your products repaired as soon as possible.

Service and Support

Enterasys understands that superior service and support is a
critical component of Networks that Know.™The Enterasys
SupportNet Portfolio—a suite of innovative and flexible
service and support offerings—completes the Enterasys solu­tion. SupportNet offers all the post-implementation support
services you need—online, onsite or over the phone—to
maintain your network availability and performance.

Additional Information

For more information about Enterasys XSR Security
Routers, including the latest product offerings, visit the
web at h t t p : / / w w w . e n t e r a s y s . c o m / p r o d u c t s / r o u t i n g / x s r

Contact Information

Contact Enterasys Sales at 877-801-7082 or
e n t e r a s y s . c o m / c o r p o r a t e / c o n t a c t / c o n t a c t - s a l e s . h t m l

Enterasys Networks
Corporate Headquarters
50 Minuteman Road
Andover, MA 01810
U.S.A

XSR, Dragon and NetSight are trademarks
or re g i s t e red trademarks of E n t e r a s y s
Networks. All other products or services
mentioned are identified by the trademarks
or service marks of their respective compa­nies or org a niz ations. NOTE: Enterasys
Network s reserves the r ight to change
specifications without notice. Please con­tact your representative to confirm current
specifications.

All contents are copyright © 2004 Enterasys
Networks, Inc. All rights re s e r v e d .

Lit. #9013483-1 4/04

Page 6 of 6 • Data Sheet