Kentrox Q2300 User Manual

Q2300 Ethernet QoS Access Router

TM

For Ethernet/DSL/Cable Services

The Q2300 router makes low-cost broadband services practical for
business. Until now, business-class routers have been expensive
and overly complex to set up and use, while consumer-level DSL
and cable-modem routers have lacked business-quality monitoring,
control, and security capabilities. The Q2300 router changes all this
by combining the features of an IP router, QoS appliance, IPSec
VPN appliance, firewall, and Ethernet switch into one easy-to-use
network access device.

Business-class network access

Easy-to-use graphical interface

Best-in-class QoS reports

High-performance IP Router

Virtual Private Networking (VPN )
Network Address Translation (NAT)
Intuitive CLI for scripting
VLAN support for 8 LAN subnets
Static, RIP, and OSPF support
Ethernet WAN, PPPoE capable

Figure 1: Graphical reports show network statistics and trends at a glance.

Quality of Service support for VoIP and other
critical applications—right out of the box

Mission-critical applications and delay-sensitive traffi c, such as VoIP
and video, can degrade signifi cantly when competing with bursty
web traffi c for WAN bandwidth. The Q2300 is pre-confi gured to
provide priority queuing and traffi c shaping to ensure high-priority
traffi c takes precedence over less critical applications. Traffi c can be
classifi ed with user-created policies, making it easy to prioritize traffi c
to meet your needs.

QoS Appliance

Traffi c reports and graphs
Auto DiffServ/ToS priority queuing
Class-based weighted fair queuing
User-confi gurable QoS policies
Prioritization of VoIP and video traffi c

VPN Appliance

100 IPSec tunnels
Encryption (DES, 3DES, AES)
Hardware acceleration for DES/3DES
Windows XP IPsec client support

Stateful Packet Inspection Firewall

Packet fi ltering (access control lists)
Intrusion Detection System (IDS)
Denial of Service (DoS) protection
Application Layer Gateways (ALG)

Ethernet/DSL/Cable Services

Bandwidth monitoring and control
Alarms and diagnostics

Managed Ethernet Switch

Four 10/100 Ethernet LAN ports
Auto-sensing, auto-polarity

www.kentrox.com

Q2300 Ethernet QoS Access Router

VPN Tunnel A

VPN Tunnel B

Analog

Telephone

Adapter

Q2300

Ethernet

Q2300

Figure 2: Up to 100 IPSec VPN tunnels mean fl exibility and cost savings.

DSL/Cable Modem

Ethernet

Simple, low-cost installation

Traditional routers, security devices, and network access
equipment can be diffi cult to set up, and often require
special training. That can be problematic for many
businesses that are trying to reduce support costs or do
not have on-site expertise.

The Kentrox Q2300 router is designed to simplify install­ation with its intuitive GUI, making it faster and easier
for both network administrators and less experienced
installers. Advanced feature confi gurations, such as VPN
tunnels, fi rewall, and QoS policies, are also made simpler
by the router’s GUI.

PSTN

Q2200

IP Network

T1 PPP

or FR

VoI P PB X

Accomplishing these tasks with command line-driven
products can be diffi cult and time-consuming. Arranged
logically and intuitively by function, the router’s GUI is
point-and-click easy.

Protect internal systems from intrusion

To protect internal networks from outside intrusion, the
router conceals LAN IP addresses using Network Address
Translation (NAT). It also has an integrated Stateful Packet
Inspection (SPI) fi rewall. The router fi rewall includes
Intrusion Detection System (IDS) capability,
and blocks common attacks. Application Layer Gateways
(ALG) pass common traffi c types while preventing
unwanted traffi c from entering the LAN.

which identifi es

Figure 3: The graphical interface presents confi guration options
for simpler setup.

Embedded, Web-style GUI simplifi es
management

The Graphical User Interface contains powerful tools to
troubleshoot problems, run QoS reports, make confi gur­ation changes and reload confi gurations, set up traffi c­shaping policies, or just check the health of the network.

VPN support

With Virtual Private Networks (VPNs), you can take
advantage of the cost savings associated with transmitting
communications over IP services. The Q2300 secures up to
100 VPN tunnels with standards-based IPSec encryption
(DES/3DES/AES) and authentication. The router supports
direct VPN connections with computers running Windows
XP Service Pack II IPsec clients.

Its VPN support is designed for Virtual Private Networks
Consortium interoperability and conformance. Dedicated
hardware accelerates DES/3DES encryption for optimal
performance.

Fine-tune network performance with
QoS monitoring and reports

The Q2300's graphical reports let you monitor traffi c
performance at each established QoS priority level to see
whether the critical traffi c fl ows are getting the bandwidth
they need. The report data helps you identify performance
problems and modify your QoS policies appropriately. To
reduce bandwidth pinches, for example, you would simply
view the current and historical performance reports, and
adjust QoS policies as necessary to provide the appropriate
amount of bandwidth for high-priority applications.

2