XSR™ 3000 Series Security Routers
for Large Offices
• Comprehensive security features for enterprise branch,
regional and central offices
• Integrated IP routing, VPN, firewall in a single device
• Industry-standard management for interoperability in
multivendor environments
• Best-in-class price and performance
• Enterprise-class IP
routing, QoS and WAN
— Delivers non-stop local
and wide area networking
— QoS enables VoIP and
other priority-sensitive
applications
• Rich suite of security
technologies
— Extranet, site-to-site and
remote access VPN
technologies
— Policy-managed,
deep-packet, stateful
inspection firewall
— Security options are
software upgradeable,
simplifying and reducing
the cost of deploying
new features and
network capabilities
• Powerful management
tools
— Easy-to-use CLI for
reduced training costs
— SNMP integration including
support for SNMPv3
— Enhanced management
via client/server Java
application
• Industry price/performance
leadership
— Optimized IP routing
throughput of 250k to
500k PPS
— Dedicated on-board VPN
acceleration with up to
350 Mbps throughput
— EOS Routing Services
support a wide range of
protocols
— NIMs interopable with
other XSR devices
Meeting the Demands of a
Changing Enterprise Environment
To keep up with evolving business demands,
enterprises of all sizes and types must
operate in geographically dispersed locations.
This means that critical information and
key personnel may be located across the
country or around the globe.
While this trend can enhance productivity,
it can also increase the risk to the security
of intellectual property and corporate
computing resources. A best-practice
a p p r o a c h to protecting remote IT resources
is a defense-in-depth strategy, with distributed
security—in the form of a state-of-the-art
security router—at each office.
High-Performance Routing, VPN,
F i r ewall and WAN for Your Off i c e s
The XSR 3000 Series Security Router
delivers simple and powerful enterprise
WAN networking by combining comprehensive IP routing features; a broad range
of WAN interfaces; and a rich suite of
security functions, including site-to-site
and remote access Virtual Private Networking
and policy-managed, stateful-inspection
firewall—in a single device. Unlike typical
WAN routers, the XSR Security Router
provides best-of-breed security and maintains
wire-speed WAN performance when
features are enabled. And, unlike typical
security appliances, the XSR provides
e x t e n s ive IP routing, Quality of Service
(QoS) and a wide range of WAN interfaces.
XSR Security Routers provide powerful
mana gement and configuration tools,
includi ng a familiar Command Line
Interface, SNMP and network management
application support. Since it can be fully
monitored and diagnosed remotely, the XSR
is ideal for locations that are managed from
the central site of a larger network or for
offices where users lack networking expertise.
The XSR sets industry-leading price/
performance benchmarks for mid-range
networking with IP routing, VPN and firewall
available at a significant price a d v a n t a g e
over the competition. In addition, the XSR
WAN modules are shared across multiple
Enterasys platforms, leveraging your investment and simplifying deployment s c e n a r i o s .
Page 1 of 6 • Data Sheet
Choose from these different options:
XSR-3020 for the High-End Branch Office.With 250k
PPS IP routing throughput, support for 1,000 VPN connect i o n s , and 1 Gigabit Firewall throughput, the XSR-3020 is
well suited to service the high-end branch office. Capable
of line-rate performance with dual T3/E3 interfaces, the
XSR-3020 can be deployed to connect the branch office
with hundreds of onsite users and teleworkers.
XSR-3150 for Regional Office/VPN Tunnel Server.
Performance of 52 5k PPS and support for 3,0 00 V PN
connections position the XSR-3150 to meet the needs of
the high-end branch or regional office with WAN connections
of up to two T3/E3 or eight T1/E1 links. As a security
appliance, the XSR-3150 is capable of 2 Gigabits Firewall
t h r o u g h p u t and the IPSec VPN encryption option runs at
350 Mbps for either AES or 3DES. A redundant power supply
is included to ensure high availability.
XSR-3250 for Regional Office with WAN Aggregation
R e q u i r e m e n t s . With performance levels similar to the
XSR-3150, the XSR-3250 (600k PPS) has six network
interface module (NIM) slots. This enables it to serve the
regional office, where up to six T3/E3 or 24 T1/E1 connections
are required. A redundant power supply is included to
ensure high availability.
Features at a Glance
XSR Model XSR-3020 XSR-3150 XSR-3250
NIM Slots 2 2 6
Fixed 10/100/1000 Ports 3 3 3
Optional Gigabit Ethernet* Mini-GBIC Mini-GBIC Mini-GBIC
IP Routing Performance 250k PPS 525k PPS 600k PPS
VPN Tunnels 1,000 3,000 3,000
(upgradeable) (upgradeable)
VPN Throughput 150 Mbps 350 Mbps 350 Mbps
Firewalling Throughput 1.1 Gbps 2 Gbps 2+ Gbps
Firewall Sessions 150,000 400,000 450,000
Redundant Power No Embedded Embedded
Supplies
VPN Accelerator Embedded Embedded Embedded
Flash Memory** 8 MB 8 MB 8 MB
DRAM 128 MB 256 MB 256 MB
External Compact Flash Yes Yes Yes
* Use of optional Gigabit port disables 1 10/100/1000 fixed port.
**External compact flash is used to augment flash memory.
Page 2 of 6 • Data Sheet
Specifications
Environmental Specification
Operating Temperature
0° C to +40° C (+32° F to 104° F)
Non-Operating Temperature
-40° C to +70° C (-40° F to 158° F)
Operating Humidity
5% to 90% (non-condensing)
Power Consumption
Total Power (100 to -240~ Volts) 25W
Physical Specification
XSR-3020
Dimensions
53.3 cm (21") L x 42.9 cm (16.9") W x 4.2 cm (1.6") H
Weight
7.72 kg (17 lbs)
XSR-3150
Dimensions
53.3 cm (21") L x 42.9 cm (16.9") W x 4.2 cm (1.6")H
Weight
9.09 kg (20 lbs)
XSR-3250
Dimensions
53.34 cm (21") L x 43.22 cm (17.015") W x 6.4 cm (2.5") H
Weight
13.154 kg (29 lbs)
Agency And Standards Specifications
Safety
UL 60950, CSA 60950, EN 60950, EN 60825 and IEC
60950
Electromagnetic Compatibility
47 CFR Parts 2 and 15, CSA C108.8, EN 555022, EN
55024, EN 61000-3-2, EN 61000-3-3, AS/NZS CISPR
22, and VCCI V-3
Telecom Approvals T1/E1 NIM and CT1/E1 NIM
USA 47 CFR Part 68; Canada CS-03; Europe TBR 12
and TBR 13 (For other approved countries, check with
your Enterasys representative.)
ITU/IETF Standards Support
(A full range of standards/protocols are supported. Ask
your Enterasys representative for details.)
Enterasys Private Enterprise MIB Support
Download-MIB
Parameters for router upload/download
Chassis-MIB
Parameters for router hardware
Timed-Reset-MIB
Parameters for a countdown timer and a forced reset after
expiration
Configuration Change MIB
Parameters for SNMP management entities to determine
if and when configuration changes have occurred
Configuration Management MIB
Parameters for an SNMP management entity to reset the
managed entity, upload and download executable images
and configuration files, and identify the active executable
image and configuration files
Page 3 of 6 • Data Sheet
Syslog Client MIB
Parameters for SNMP configuration of individual network
entities to generate and log diagnostic messages
SNMP Persistence MIB
Parameters for SNMP to save configuration changes to
the startup-configuration file
Ordering Information
Base Appliances
XSR-3020
XSR Security Router with three 10/100/1000 Ethernet LAN interfaces, 2 NIM slots, 8 MB onboard Flash memory, 128
MB DRAM, dedicated VPN Accelerator, Compact Flash slot and power supply (internal) in a rackmount form factor;
bundled with Enterasys Operating System (EOS) IP Routing Services
XSR-3150
XSR Security Router with three 10/100/1000 Ethernet LAN interfaces, 2 NIM slots, 8 MB onboard Flash memory, 256
MB DRAM, dedicated VPN Accelerator, Compact Flash slot, and redundant power supplies (internal) in a rackmount
form factor; bundled with Enterasys Operating System (EOS) IP Routing Services
XSR-3250
XSR Security Router with three 10/100/1000 Ethernet LAN interfaces, 6 NIM slots, 8 MB onboard Flash memory, 256
MB DRAM, dedicated VPN Accelerator, Compact Flash slot, and redundant power supplies (internal) in a rackmount
form factor; bundled with Enterasys Operating System (EOS) IP Routing Services
Software
XSR-3020-VPN
VPN for the XSR-3020
XSR-3020-FW
Firewall for the XSR-3020
XSR-3020-VPN-FW
VPN and Firewall for the XSR-3020
XSR-3xxx-VPN
VPN for the XSR-3150 and XSR-3250
XSR-3xxx-FW
Firewall for the XSR-3150 and XSR-3250
XSR-3xxx-VPN-FW
VPN and Firewall for the XSR-3150 and the XSR-3250
Network Interface Modules
XSR-NCC-250-4xx
NIM carrier card* (for the XSR-3250 only)
NIM-ADSL-AC-01
1-port ADSL network interface module (Annex AC – POTS)
NIM-ADSL-B-01
1-port ADSL network interface module (Annex B – ISDN)
NIM-ETHR-01
1-port 10/100 Ethernet network interface module
NIM-FIBR-01
1-port FX100 Fiber network interface module
Page 4 of 6 • Data Sheet
Ordering Information
NIM-CT1E1/PRI-1
1-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU
NIM-CT1E1/PRI-2
2-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU
NIM-CT1E1/PRI-4
4-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU
NIM-DIRELAY-02
Drop and insert network interface module, provides IP PBX pass through for T1/E1 with integrated CSU/DSU
NIM-T1/E1-01
1-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU
NIM-T1/E1-02
2-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU
NIM-T1/E1-04
4-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU
NIM-SER-02
2-port Sync/Async Serial WAN network interface module (2 Mbps per port) Note: These are not HSSI interfaces
NIM-SER-04
4-port Sync/Async Serial WAN network interface module (2 Mbps per port) Note: These are not HSSI interfaces
NIM-BRI-ST-01
1-port ISDN Basic Rate network interface module with S/T interface (Euro version)
NIM-BRI-ST-02
2-port ISDN Basic Rate network interface module with S/T interface (Euro version)
NIM-BRI-U-01
1-port ISDN BRI with U interface
NIM-BRI-U-02
2-port ISDN BRI with U interface
NIM-T3/E3-01
1-port fractional T3/E3 network interface module with integrated CSU/DSU
Accessories
XSR-512MB-MEM
512 MB memory upgrade for XSR-3150 and XSR-3250, expands routing, VPN and Firewall units
NIM-V35-CAB-04
4-port V.35 DTE serial cable for NIM-SER-xx
NIM-232-CAB-04
4-port RS232/EIA530 DTE serial cable for NIM-SER-xx
NIM-X21-CAB-04
4-port X.21 DTE serial cable for NIM-SER-xx
Page 5 of 6 • Data Sheet
NIM-449-CAB-04
4-port EIA 449 DTE serial cable for NIM-SER-xx
NIM-DBU1-CAB-04
4-port combination V.35 /RS232 DTE serial cable for NIM-SER-xx
MGBIC-LC01
1000Base-SX Mini-GBIC with LC connector
MGBIC-LC09
1000Base-LX Mini-GBIC with LC connector
MGBIC-MT01
1000Base-SX Mini-GBIC with MTRJ connector
*Note: XSR 3000 Series configurations include hardware and software components. Product orders should include:
• The XSR-3000 base system (EOS IP Routing Services, on board flash and base DRAM, 3 10/100/1000 LAN interfaces and 2 to 6 NIM slots, model dependent)
• 1 to 6 network interface modules (NIM), if needed.
• NIM carrier card (Model XSR-3250) for installation of the third and all subsequent NIMS; order one NIM carrier card XSR-NCC-250-4xx for
every two NIMs. (The first and second NIM can be installed on the XSR-3250 without a NIM carrier card. One NIM carrier card enables the
installation of a third and fourth NIM. A second enables the installation of a fifth and sixth NIM.) Please note that NIMs must be installed in a
NIM carrier card to be hot swappable (hot swap available in XSR Release 9).
• NIM cables, if needed
• Additional security features (VPN and Firewall) and additional memory for added VPN tunnel capacity, if needed
• NetSight Atlas Router Services Manager application
• Service contract, recommended to maintain system currency
• XSR series products have a license management system to allow the purchase and installation of additional software feature sets at any time.
Warranty
As a customer-centric company, Enterasys is committed to
providing the best possible workmanship and design in our
product set. In the event that one of our products fails due
to a defect in one of these factors, we have developed a
comprehensive warranty that protects you and provides a
simple way to get your products repaired as soon as possible.
Service and support
Enterasys Networks understands that superior service and
support is a critical component of Networks that Know.
The Enterasys SupportNet Portfolio—a suite of innovative
and flexible service and support offerings—completes the
Enterasys solution. SupportNet offers all the p o s t - i m p l e m e n tation support services you need—online, onsite or over the
phone—to maintain your network availabilityand performance.
NetSight and XSR are trademarks or re g i s t e red trademarks of Enterasys Networks. All
other products or services mentioned are identified by the trademarks or service
marks of their respective companies or organizations. NOTE: Enterasys Networks
reserves the right to change specifications without notice. Please contact your representative to confirm current specifications.
All contents are copyright © 2004 Enterasys Networks, Inc. All rights re s e r v e d .
Lit. #9013277-2 4/04
Page 6 of 6 • Data Sheet
Additional Information
For additional information on the XSR, please visit the web
at enterasys.com/products/routing
Contact Information
Contact Enterasys Sales at 8 7 7 - 8 0 1 - 7 0 8 2 o r
e n t e r a s y s . c o m / c o r p o r a t e / c o n t a c t / c o n t a c t - s a l e s . h t m l
Enterasys Networks
Corporate Headquarters
50 Minuteman Road
™
A n d o v e r , MA 01810
U . S . A
Loading...