Enterasys Networks XSR 3000 User Manual
XSR™ 3000 Series Security Routers
for Large Offices
• Comprehensive security features for enterprise branch,
regional and central offices
• Integrated IP routing, VPN, firewall in a single device
• Industry-standard management for interoperability in
multivendor environments
• Best-in-class price and performance
• Enterprise-class IP
routing, QoS and WAN
— Delivers non-stop local
and wide area networking
— QoS enables VoIP and
other priority-sensitive
applications
• Rich suite of security
technologies
— Extranet, site-to-site and
remote access VPN
technologies
— Policy-managed,
deep-packet, stateful
inspection firewall
— Security options are
software upgradeable,
simplifying and reducing
the cost of deploying
new features and
network capabilities
• Powerful management
tools
— Easy-to-use CLI for
reduced training costs
— SNMP integration including
support for SNMPv3
— Enhanced management
via client/server Java
application
• Industry price/performance
leadership
— Optimized IP routing
throughput of 250k to
500k PPS
— Dedicated on-board VPN
acceleration with up to
350 Mbps throughput
— EOS Routing Services
support a wide range of
protocols
— NIMs interopable with
other XSR devices
Meeting the Demands of a
Changing Enterprise Environment
To keep up with evolving business demands,
enterprises of all sizes and types must
operate in geographically dispersed locations.
This means that critical information and
key personnel may be located across the
country or around the globe.
While this trend can enhance productivity,
it can also increase the risk to the security
of intellectual property and corporate
computing resources. A best-practice
a p p r o a c h to protecting remote IT resources
is a defense-in-depth strategy, with distributed
security—in the form of a state-of-the-art
security router—at each office.
High-Performance Routing, VPN,
F i r ewall and WAN for Your Off i c e s
The XSR 3000 Series Security Router
delivers simple and powerful enterprise
WAN networking by combining comprehensive IP routing features; a broad range
of WAN interfaces; and a rich suite of
security functions, including site-to-site
and remote access Virtual Private Networking
and policy-managed, stateful-inspection
firewall—in a single device. Unlike typical
WAN routers, the XSR Security Router
provides best-of-breed security and maintains
wire-speed WAN performance when
features are enabled. And, unlike typical
security appliances, the XSR provides
e x t e n s ive IP routing, Quality of Service
(QoS) and a wide range of WAN interfaces.
XSR Security Routers provide powerful
mana gement and configuration tools,
includi ng a familiar Command Line
Interface, SNMP and network management
application support. Since it can be fully
monitored and diagnosed remotely, the XSR
is ideal for locations that are managed from
the central site of a larger network or for
offices where users lack networking expertise.
The XSR sets industry-leading price/
performance benchmarks for mid-range
networking with IP routing, VPN and firewall
available at a significant price a d v a n t a g e
over the competition. In addition, the XSR
WAN modules are shared across multiple
Enterasys platforms, leveraging your investment and simplifying deployment s c e n a r i o s .
Page 1 of 6 • Data Sheet
Choose from these different options:
XSR-3020 for the High-End Branch Office.With 250k
PPS IP routing throughput, support for 1,000 VPN connect i o n s , and 1 Gigabit Firewall throughput, the XSR-3020 is
well suited to service the high-end branch office. Capable
of line-rate performance with dual T3/E3 interfaces, the
XSR-3020 can be deployed to connect the branch office
with hundreds of onsite users and teleworkers.
XSR-3150 for Regional Office/VPN Tunnel Server.
Performance of 52 5k PPS and support for 3,0 00 V PN
connections position the XSR-3150 to meet the needs of
the high-end branch or regional office with WAN connections
of up to two T3/E3 or eight T1/E1 links. As a security
appliance, the XSR-3150 is capable of 2 Gigabits Firewall
t h r o u g h p u t and the IPSec VPN encryption option runs at
350 Mbps for either AES or 3DES. A redundant power supply
is included to ensure high availability.
XSR-3250 for Regional Office with WAN Aggregation
R e q u i r e m e n t s . With performance levels similar to the
XSR-3150, the XSR-3250 (600k PPS) has six network
interface module (NIM) slots. This enables it to serve the
regional office, where up to six T3/E3 or 24 T1/E1 connections
are required. A redundant power supply is included to
ensure high availability.
Features at a Glance
XSR Model XSR-3020 XSR-3150 XSR-3250
NIM Slots 2 2 6
Fixed 10/100/1000 Ports 3 3 3
Optional Gigabit Ethernet* Mini-GBIC Mini-GBIC Mini-GBIC
IP Routing Performance 250k PPS 525k PPS 600k PPS
VPN Tunnels 1,000 3,000 3,000
(upgradeable) (upgradeable)
VPN Throughput 150 Mbps 350 Mbps 350 Mbps
Firewalling Throughput 1.1 Gbps 2 Gbps 2+ Gbps
Firewall Sessions 150,000 400,000 450,000
Redundant Power No Embedded Embedded
Supplies
VPN Accelerator Embedded Embedded Embedded
Flash Memory** 8 MB 8 MB 8 MB
DRAM 128 MB 256 MB 256 MB
External Compact Flash Yes Yes Yes
* Use of optional Gigabit port disables 1 10/100/1000 fixed port.
**External compact flash is used to augment flash memory.
Page 2 of 6 • Data Sheet
Loading...