Chipset
Globespan
Features
- SHDSL ITU G.991.2 Annex A or B; G.hs ITU G.994.1
- Supports symmetric line rates 192Kbps to 2,312Kbps downstream and upstream
- Embedded Operations Channel (EOC) support
- Built-in 8-port 10/100 Base-T Ethernet switch with link status LED for each port
- IP Quality of Service (QoS) – By differentiating between types of IP traffic and giving priority to the most urgent or time-sensitive, the service provider can offer differentiated classes of service – not possible until now with DSL services.
- High availability – The Efficient Networks 5950 Business Gateway supports high availability with a redundant router configuration or dial backup functionality. The gateway automatically establishes a backup connection if it detects a DSL link failure.
- Virtual Router Redundancy Protocol (VRRP)(RFC 2338)for failover support to other VRRP-capable routers
- ATM
- Encapsulation (IP, Bridging, and Bridge Encapsulated Routing) (RFC 2684/1483)
- PPP over ATM (LLC and VC multiplexing) (RFC 2364)
- Classical IP over ATM (RFC 2225)
- Classical IP (RFC 1577)
- AAL5
- Virtual Circuit (VC) traffic shaping (CBR, PCR, UBR, VBR)
- No pre-defined limit on VCs
- I.610 OAM F5 end-to-end and segment LoopBack
- Initiates and responds to LoopBack signaling
- PPP (RFC 1661, RFC 2364)
- PPP over Ethernet (RFC 2516)
- PPP over ATM (RFC 2364)
- Bridged (RFC 1638)
- IP Routing (RFC 1331)
- IPX Routing (RFC 1552)
- Data compression of up to 4:1 (STAC™ LZS) (RFC 1974)
- Van Jacobson header compression (RFC 1144)
- Spoofing and filtering (IP-RIP, IPX-RIP, SAP, Watchdog serialization)
- Automatic IP and DNS assignment (RFC 1877)
- Routing
- TCP/IP with RIP1 (RFC 1058), RIP1-compatible and RIP2 (RFC 1389), or static routing on the LAN and/or WAN
- Novell® IPX with RIP/SAP (RFC 1552)
- DHCP server (RFC 2131, RFC 2132), relay agent (RFC 1542), and client (RFC 2132)
- Automatically defers to other DHCP servers on the network
- Automatically adjusts to changes in LAN IP addressing
- No pre-defined limit on DHCP clients
- DNS relay
- Multiple subnets on the LAN support NAT, RIP1, RIP2, ARP and IP filters
- Virtual routes can be defined based on user IP addresses or ranges
- IP Address Translation
- Network renumbering (RFC 1631)
- Network Address Translation (NAT/PAT/NAPT)
- NAT passthrough support for numerous applications including IPSec, PPTP, H.323, and NetMeeting
- Supports public Web and e-mail servers with NAT
- Configuration and Management
- Easy setup through a browser-based user interface
- Configuration and management using HTTP, serial console, SNMP, SSH, or Telnet
- Out-of-band configuration and management using serial console port
- Supports dedicated routed management PVC in bridged and routed mode
- TFTP download/upload of new software, configuration files, and scripts
- Stores backup copy of firmware on dual bank flash memory for system recovery
- Performance monitoring data available using SNMP
- Dynamic event and history logging
- Network boot using a BootP server (RFC 2131, RFC 2132)
- Syslog server support
- Security Management Basic Business Firewall
- Filter on source and/or destination IP address/port value
- Filter on SYN, ACK flags and ICMP
- Apply input, output, transmit, and receive filters on each interface
- Stateful inspection when NAT is enabled
- Logging and scripting
- ICSA-Compliant Stateful Inspection Firewall
- Optional, key-enabled upgrade provides enterprise-grade firewall protection
- Provides protection from
- Common Denial of Serivce (DoS) attacks and exploits including Killwin, Land, Ping of Death, Smurf, Teardrop, Tiny Fragments, and WinNuke
- Distributed Denial of Service (DDoS) attacks including ICMP, SYN and UDP floods
- Other hacking attacks including IP address sweeping, IP spoofing, port scanning
- Opens ports to serve legitimate requests and automatically closes them when the request or session ends
- Full-time Stateful Packet Inspection with built-in support for most popular applications
- No pre-defined limit on the number of rules that can be created and applied
- All firewall messages can be logged to the router console and to syslog servers
- Maintains a log of the most recently dropped packets in the browser-based user interface
- ICSA certification expected 2nd half of 2002
- Virtual Private Networking
- L2TP, IPSec, and L2TP inside of IPSec
- No pre-defined limit on VPN tunnels
- IPSec Tunnel and Transport modes with AH and ESP
- Internet Key Exchange (IKE) including Aggressive Mode
- DES (56-bit) and 3DES (168-bit) encryption
- Supports Perfect Forward Secrecy (DH Groups 1 and 2)
- Provides protection from replay attacks
- Implements RFCs 2104, 2401-2410, 2412, and 2451
|
