Planet Technology MH-2001 User Manual

Multi-Homing Security Gateway

Key Feature

• WAN Backup The MH-2001 can monitor each WAN link status
and automatically activate backup links when a failure is detected.
The detection is based on the configurable target Internet
addresses

• Outbound Load Balancing The network sessions are assigned
based on the user configurable load balancing mode, including
“Auto”, “Round-Robin”, “By Traffic”, “By Session”, “By Packet”,
“By Source IP” and “By Destination IP”. Users can also configure IP
or TCP/UDP type of traffic which is connected by WAN port

• Policy-based Firewall The built-in policy-based firewall prevents

PLANET’s Multi-Homing Security Gateway, the MH-2001 integrates with

cutting-edge technology which includes Load Balancing, QoS, VPN,

Authentication and Firewall functions for central sites to establish office

network and to connect with branch offices as well as remote dial users. It

is designed for required application-based network solution of business at

low-capital investment and perfect service to the needs for small and

medium sized business. No more complex connection and settings for

integrating different security products on the network is required.

As Internet becomes the essentials for business, the only way to prevent

failure from Internet connection is to have more connection. MH-2001’s

multiple WAN interfaces can prevent it and also reduce the risks of

potential shutdown. Moreover, it allows applying load-balancing by

distributing the traffic through two WAN connections.

In order to be a multi-homing device, PLANET’s Security Gateway provides

a complete security solution in just one box. The policy-based firewall,

content blocking function and VPN connectivity with 3DES and AES

encryption functions are the points of this perfect product for your

network security. Bandwidth management function is also supported to

offer network administrators an easy and powerful ways to allocate

network resources based on business priorities and to shape and control

bandwidth usage.

many known hacker attacks including SYN attack, ICMP flood,
UDP flood, Ping of Death, etc. The access control function allows
only specified WAN or LAN users using allowed network services
on specified time

• VPN Connectivity The security gateway supports PPTP and IPSec
VPN. With DES, 3DES, AES encryption and SHA-1/MD5
authentication, the network traffic over public Internet is secured

• Content Filtering The security gateway can block network
connection based on URLs, Scripts (The Pop-up, Java Applet,
cookies and Active X), P2P (eDonkey, Bit Torrent and WinMX),
Instant Messaging (MSN, Yahoo Messenger, ICQ, QQ and Skype)
and Download / Upload blocking

• Dynamic Host Control Protocol (DHCP) server DHCP server can
allocate up to 253 clients’ IP addresses and distribute them
including IP address, subnet mask as well as DNS IP address to local
computers. It provides an easy way to manage the local IP network

• Web based GUI The MH-2001 supports web based GUI for
configuration and management. It also supports multiple
languages including English, Traditional Chinese and Simplified
Chinese

• User Authentication User database can be configured on the
devices, and the MH-2001 also supports the authenticated
database through external RADIUS and POP3 server

• Bandwidth Management Network packet can be classified based
on IP address, IP subnet and TCP/UDP port number and it gives
guarantee and bursts bandwidth with three levels of priority

• Dynamic Domain Name System (DDNS) The Dynamic DNS
service allows users to name alias dynamic IP address to a static
hostname

• Multiple NAT Multiple NAT allows local port setting multiple
subnet and connecting to the Internet through different WAN IP
addresses

• Server Load Balancing Up to 4 group virtual servers support
server load balancing

• Accounting Report Accounting report function can monitor the
information about the Internal and External network traffic via
MH-2001

MH-2001

Data Sheet

1

Specification

MH-2001

Product

Model

Hardware Specification

Ethernet  LAN
  WAN
  DMZ
Button

Software

Management
Network Connection
Routing Protocol
Outbound Load Balancing

Firewall

VPN Tunnels (Configure / Connection)
VPN Functions

Content Filtering

Bandwidth Management

User Authentication

Accounting Report
Log And Alarm

Statistics

Others

Multi-Homing Security Gateway

MH-2001

1 x 10/100Mbps RJ-45
2 x 10/100Mbps RJ-45
1 x 10/100Mbps RJ-45
Reset button for reset to factory default setting

Web
DMZ_NAT, DMZ_Transparent, NAT
Static Route, RIPv2
Policy-based routing
Load-balancing by Round-Robin, traffic, session, packet, Source IP and Destination IP
Policy-based firewall rule with schedule
NAT/ NAPT
SPI firewall
Prevention of SYN attack, ICMP flood, UDP flood, Ping of Death, Tear Drop, IP
Spoofing, IP route, Port Scan and Land attack
200 / 100
PPTP, IPSec
DES, 3DES and AES encrypting
SHA-1 / MD5 authentication algorithm
Remote access VPN (Client-to-Site) and Site to Site VPN
URL blocking, Script blocking (Popup, Java Applet, cookies and Active X)
IM blocking (MSN, Yahoo Messenger, ICQ, QQ and Skype)
P2P blocking (eDonkey, Bit Torrent and WinMX)
Download and Upload blocking
Policy-based bandwidth management
Guarantee and maximum bandwidth with 3 priority levels
Classify traffics based on IP, IP subnet, TCP/UDP port
Built-in user database with up to 200 entries
Radius, POP3 authentication support
Outbound/Inbound accounting report statistics by Source IP, Destination IP and Service
Log and alarm for event and traffic
Log can be saved from web, sent by e-mail or sent to syslog server
Traffic statistic for interface (WAN 1/2) and policies
Graphic display
Record up to 30 days
Firmware Upgradeable through Web
Configuration Backup and Restore through Web
Dynamic DNS
NTP support
DHCP server
Multiple NAT and multiple DMZ (mapped IP) support
Server load balancing

Data Sheet

2