Nortel Secure 1001, Secure 1001S, Secure 1002, Secure 1004 Specifications

Nortel Secure Router 1000 Series routers
deliver fast, secure, reliable and scalable
wide area network (WAN) T1/E1 and
serial access for enterprises and service
providers. These powerful platforms
provide consistent high-speed throughput
with no degradation in performance —
even with advanced services enabled.

Ideal for installation in enterprise
remote sites, branch offices or service
provider points of presence (POPs), the
Secure Router 1000 Series combines
high performance and a robust feature
set, making them an extraordinary
value. The Secure Router 1000 Series
complements Nortel's existing enterprise
porfolio, including IP Telephony,
Ethernet switching, WLAN and security
products. Altogether, this portfolio
enables customers to cost-effectively
deploy real-time applications across a
secure, reliable, end-to-end LAN/WAN
infrastructure.

A rich suite of routing services and
advanced functionality make the Secure
Router 1000 Series perfect for a wide

variety of applications, including high­speed Internet access, private line WAN
connectivity, video, IP Telephony, IPsec
VPN, stateful firewall and data backup
and recovery. Comprehensive, simple­to-use software tools enable sophisticated
access and bandwidth management for
dependable communications. A scale-on­demand provisioning system also allows
customers to add extra ports, bandwidth
and enhanced capabilities via software,
shortening deployment time and reducing
the need for expensive site visits.

Peak performance

Nortel Secure Router 1000 Series
routers perform up to three times faster
than standard — and some much
higher-end — WAN access platforms.
A fast path forwarding engine ensures
delivery of services and applications at
consistently high speeds, independent
of bandwidth-intensive applications,
packet sizes or enabled services, unlike
other routers that cannot sustain peak
performance as services are added. In
addition, the Secure Router products

Product Brief

Nortel Secure Router 1000 Series

High performance

Nortel Secure Router 1000 Series routers perform at wire speed even with small packet
sizes or network services enabled.

Scalability

Integrated multi-link capabilities bond multiple T1s into a single logical circuit with
aggregated bandwidth of up to 6 Mbps.

Advanced technology

Secure Router products have an industry-leading set of advanced technologies including:

> A fast path forwarding engine
> Multi-link bonding
> Extensive QoS capabilities
> Unique “virtual Ethernet” VLAN
> Robust security features including IPsec VPN, stateful firewall, policy-based NAT

and DoS protection

Integrated solution

Secure Router 1000 Series routers include a wide array of integrated capabilities,
including IPsec VPN, stateful firewall, built-in Ethernet ports, CSU/DSU and drop/insert
(DSX-1) voice support, eliminating the need to purchase extra equipment to support
additional services.

Features

Nortel Secure Router 1000 Series

have excellent latency and jitter charac­teristics. Collectively, wire-speed
performance and full bandwidth make
the Secure Router 1000 Series platforms
ideal for sites where DS3 connectivity is
cost-prohibitive or unavailable, enabling
organizations to deploy high-speed serv­ices while conserving expenses.

Scalable bandwidth

Efficient multi-link T1/E1 bonding
allows up to four T1 or four E1 links to
be combined into one logical 6-Mbps or
8-Mbps link, enabling organizations to
add bandwidth without purchasing
more costly DS3 services. Comprehen­sive Quality of Service (QoS) manage­ment capabilities deliver services with
low latency, thus allowing voice and
video traffic to share data connections
with no degradation in performance.
The Secure Router 1000 Series scale-on­demand provisioning architecture enables
network administrators to easily increase
bandwidth and expand functionality
without costly hardware upgrades.

High processing power

Delivering communications at wire speed
with all services enabled requires power.
The Secure Router 1002 and 1004
include integrated Channel Service
Units/Data Service Units (CSU/DSUs),
high-performance 300 MHz processors
and 256 MB DRAM. For enhanced

performance, Nortel provides 16 and 32
MB Flash RAM on the 1002 and 1004
models, respectively. Nortel’s Secure
Router 1001 delivers extremely high
value at an economical price. With one
T1/E1 or serial port, a 266 Mhz processor
and 128 DRAM, the platform provides
exceptionally high performance in a
small form factor. It is ideal for compa­nies that want to connect to a single-port
T1/E1 or serial WAN service.

Outstanding WAN
access value

The wide array of advanced features built
into the Secure Router 1000 Series are
key ingredients that provide extraordi­nary value:

> High-availability features are designed

to ensure no single point of failure.
The Border Gateway Protocol version
4 (BGP-4) enables multi-homing,
allowing organizations to eliminate
potential points of failure; the Virtual
Router Redundancy Protocol (VRRP)
enables redundant router configura­tions; NxT1/E1 bundling seamlessly
guards against individual circuit failure
and restores bandwidth once a connec­tion has been repaired.

> Advanced QoS features optimize

bandwidth for voice, video and data
traffic. Organizations benefit from
crystal clear multimedia communica-

tions without impeding data applica­tions. Comprehensive IP routing
protocols assure high performance,
even with features such as Access
Control List (ACL), NAT and QoS
enabled.

> Multi-link capabilities maximize

bandwidth across multiple circuits to
lower operational costs.

> Virtual Ethernet technology provides

seamless integration between geo­graphic locations. Layer 2 tagging,
double tagging and forwarding, and
exclusive Network Address Translation
(NAT) capabilities allow transparent
LAN access across the WAN.

> Integrated IPsec VPN, stateful fire-

wall, policy-based NAT and DoS
protection

> Dual auto-sensing 10/100BASE-T

Fast Ethernet interfaces enable

administrators to quickly and easily
perform remote configuration, provi­sioning and management.

> Bandwidth and services can be scaled

remotely, simplifying management

and eliminating the need for expensive
truck rolls and hardware upgrades.

> A choice of interfaces enables manage-

ment using a standard Command
Line Interface (CLI) or standards­based Simple Network Management
Protocol (SNMP) tools.

2

The Secure Router 1001 and 1001S are suitable for use in
remote offices or in any location needing a direct Internet
connection. Featuring either a single T1/E1 or serial port, the
Secure Router 1001 and 1001S pack a powerful punch in a
feature-packed platform. They can scale from fractional
T1/E1 to wire-speed T1/E1 bandwidth and beyond, even when
forwarding small packets with advanced services enabled.
Optional ISDN BRI backup provides high resiliency.

Secure Router 1002 and 1004 scalable routers provide high­performance WAN access for enterprise branch offices and
remote sites. These versatile platforms provide a single T1 or
E1 port plus the ability to upgrade to four-port (T1/E1) capacity.
The Secure Router 1002 and 1004 routers each provide unpar­alleled performance and advanced software functionality in a
compact, highly reliable platform.

Figure 1. Secure Router scalability

Secure Router 1001

Secure Router 1002

Secure Router 1004

Secure Router 1001S

High return on investment

Secure Router 1000 Series routers
deliver consistent top-speed perform­ance at the network edge and provide a
winning combination of standard and
advanced services. These powerful plat­forms enable organizations to improve

and provision network services, develop
new revenue-generating opportunities,
increase employee productivity, and
build customer loyalty and satisfaction.
Nortel Secure Routers offer a cost-effec­tive way to provide high-speed access
without compromising service quality.

Secure Router 1000 Series
technical specifications

Service levels and connectivity

• T1/E1

• Fractional T1/E1

• Serial (up to 2 Mbps)

• 10/100 Base-T

• ISDN-BRI U&S/T

WAN protocol support

• Point-to-Point Protocol (PPP), including PPP over
Ethernet (PPPoE)

• Frame Relay (including FRF.12 fragmentation)

• HDLC

• Bridge Control Protocol (BCP)

• Dial back-up via integral ISDN (SR 1001)

WAN interfaces (T1/E1)

T1

• Line code: B8ZS/AMI

• Framing: ESF/D4

• Output level: DS1/DSX-1

• Line build out (DS1): 0, -7.5, -15 dB

• Equalization (DSX-1): 0-655 ft

• Clock: Internal or line

E1

• Line rate: 2.048 Mbps

• Framing: G.704

• Line code: HDB3

• Electrical: G.703

• Clock: Internal or line

WAN interfaces (Serial/SR 1001S)

• V.35

• X.21

• RS-232

• RS-449

• EIA-530/530A

Management interfaces

• Console: RJ-45

• AUX: RJ-45

LAN interfaces

• Two 10/100 Base-T Fast Ethernet; 802.3, auto­negotiating, full or half-duplex, load sharing with
failover capability

• VLAN-802.1Q tagging and forwarding, double
tagging for VLAN domain

Software features

Layer 3

• Routing: RIPv1, RIPv2, OSPF, BGP4, static
routing, ECMP

• High availability: VRRP, redundant router
connections

• ACL, NAT, DHCP Relay, GRE Tunneling,
IP-IP for GRE

QoS and traffic management

• RED, WRED, DiffServ, bandwidth
guarantee/shaping, flow monitoring

• Traffic policing

• Eight-level Priority Class Based Queuing (per IP
address/subnets, ports, DSCP and ToS bits), VLAN
ID (802.1Q), VLAN priority (802.1p)

• Frame Relay traffic shaping and policing

Firewall

• Stateful packet inspection firewall

• 25-zone support

• Policy-based NAT/PAT

• 60+ Distributed Denial of Service (DDoS) attack
preventions

• 30+ ALG support (including H.323 and SIP)

Figure 1. Zero loss, bidirectional throughput using 64-byte packets

via multi-link PPP, VPN, Firewall, NAT and QoS enabled

Quad T1 Dual T1

Percent of theoretical maximum

0

20

40

60

80

100

— — — — — — — — — Interfaces — — — — — — — — —

3

— continued

94%

15%

40%

100%

26%

29%

Industry-leading performance

In independent tests, the 1004 router was found to:

> Achieve 100% zero-loss throughput in multi-link configurations

of dual and quad-T1 interfaces with VPN, Firewall, QoS and NAT
services enabled

> Provide up to 6 times the throughput of comparable Cisco offer-

ings in tests of 64-byte packets in scenarios tested

> Deliver line-rate bi-directional (full duplex) throughput of 12 Mbps

and 6 Mbps across four and two aggregated multi-link PPP T1
links, respectively

Additional tests have proven that routers, such as the Secure
Router 1001, 1002 and 1004, as well as the new Secure Router
3120, consistently outperform comparable competitive products in
critical data and voice application scenarios. The complete results
of these important tests are available from Nortel.

Secure Router 1004

Cisco

2811

Cisco 2821

Secure Router 1002

Cisco

2811

Cisco

1841

Secure Router 1001, 1001S, 1002 and 1004 feature comparison

1001 1001S 1002 1004

T1\E1 Ports 1 N/A 2 4

Serial Ports N/A 1 N/A N/A

CSU\DSU Yes N /A Yes Ye s

Add/Drop Port (DSX) N/A N/A 1 1

Backup Slot ISDN-BRI (U&ST) ISDN-BRI (U&ST) N/A N/A

Factory Factory

installed option installed option

Ethernet Ports 2 10/100 2 10/100 2 10/100 2 10/100

CPU 266 MHz 266 MHz 300 MHz 300 MHz

Memory 128 MB 128 MB 256 MB 256 MB

Console/Auxiliary Port 1/1 1/1 1/1 1/1

Compact Flash Slot Ye s Ye s N /A N/A

VPN Acceleration S/W based S/W based On-board H/W On-board H/W

Performance with 1xT1/E1 Up to 2 Mbps 2xT1/E1 4xT1/E1
services enabled

wire speed wire speed wire speed wire speed

Power External AC/DC External AC/DC External AC/DC External AC/DC

VPN (License Option)

• IPSec VPN (Site-to-site and remote access)

• DES, 3DES, AES, SHA1, MD5

• NAT Traversal

“VoIP-friendly” features

• Low-latency packet forwarding

• SIP ALG for NAT and Firewall

• Cone NAT (for Nortel Unistim protocol) with NAT
hairpinning

• Frame Relay fragmentation (FRF.12)

• Compressed RTP (cRTP)

IP multicast

• IGMPv2, IGMPv3

• PIM-SMv2, PIM-SSM

Service provisioning

• Management: Telnet SSHv2, FTP/TFTP, SNMPv1,
SNMPv2c, RADIUS, TACACS+, TCL scripting

• Management UI: CLI and graphical

• Monitoring: Syslog, statistics, alarm

• Diagnostics: BERT, loopback testing, trace route,
packet capture (PCAP)

Hardware

Dimensions

• Height: 1.32 in (3.35 cm):

• Width: 8.6 in (21.97 cm)

• Depth: 6.51 in (16.54 cm):

• Weight: 1.5 lb (.68 kg)

Processor

• 300 MHz, 266 MHz (1001 and 1001S)

Memory

• Default: 256MB DRAM, 128 MB (1001 and 1001S)

• Default: 16MB FLASH (1001 and 1001S, 1002); 32
MB FLASH (1004)

• External compact flash storage for multiple configura­tions (1001 and 1001S)

Power

• External power brick: 100-240 VAC, 110 VAC (1001
and 1001S), 50-60 HZ

• AC input current: Rated 800 mA maximum, meas­ured 120 mA (120 VAC), 60 mA (240 VAC)

• DC output current: Rated 2000 mA max., 800 mA
max. (1001 and 1001S)

• Power dissipation: 12 W maximum,
8 W maximum (1001 and 1001S)

Mounting

• Rack mount: 19 in. or 23 in. (optional)

• Wall mount: optional

• Tabletop: standard

Environmental

• Operating temperature: 32° to 104°F (0° to 40°C)

• Relative humidity: 0 to 95%

Regulatory approvals

Safety

• UL/cUL 1950, 3rd edition (2000)

• IEC60950, 3rd edition (1999)

• EN 60950

EMC

• FCC Part 15 Class A

• EN 55022A

• EN 300-386-2

• EN61000-3-2

• EN61000-3-3

Telecom

• US FCC Part 68

• Canada Industry Canada CS-03

• Europe CTR 12/13

Figure 2. The Nortel Secure Router includes fixed-configuration 1000

Series and modular 3120 platforms. All Secure Routers may be

deployed in a variety of configurations to provide high-quality data,

voice, video and multimedia performance with advanced security

features, lower total cost of ownership, flexible deployment options

and fast, reliable application delivery.

Internet

Secure Router

1004

Secure voice,

video and data

Secure Router

3120

Secure Router

3120

Secure Router

1002

High-speed

Internet access

Nortel, the Nortel logo and the Globemark are
trademarks of Nortel Networks. All other trademarks
are the property of their owners.

Copyright © 2007 Nortel Networks. All rights
reserved. Information in this document is subject to
change without notice. Nortel assumes no responsi­bility for any errors that may appear in this document.

In the United States:

Nortel
35 Davis Drive
Research Triangle Park, NC 27709 USA

In Canada:

Nortel
195 The West Mall
Toronto, Ontario M9C 5K1 Canada

Multi-link

bonding

Business

customers

Secure Router 1000 Series technical specifications— continued

T1/E1 or
DS3/T3

T1/E1

T1/E1

NN114120-022007