Efficient’s 5950 is an SDSL / SHDSL (Symmetric High-density Digital Subscriber Line) Gateway. It combines the functions of a DSL modem, managed 8-port 10/100 Base-T Ethernet switch, ICSA-compliant firewall, VPN security appliance, and full-featured router-all in a single chassis. The Efficient Networks 5950 SDSL/SHDSL Business Gateway can be configured for either SDSL or SHDSL via a simple command. The ability to offer either access method through a single device facilitates the transition from SDSL to SHDSL. The reasons for migrating to SHDSL are compelling. Compared to SDSL, SHDSL has 30% more reach, with translates to at least a 60% larger coverage area. With up to 2.3Mbps symmetric bandwidth on a single copper pair, SHDSL supports higher-bandwidth services, such as Voice over IP. And its standardization eliminates traditional interoperability problems between Digital Subscriber Line Access Multiplexers (DSLAMs) and customer premises equipment.
Chipset
Globespan

Features

• SHDSL ITU G.991.2 Annex A or B; G.hs ITU G.994.1
• Supports symmetric line rates 192Kbps to 2,312Kbps downstream and upstream
• Embedded Operations Channel (EOC) support
• Built-in 8-port 10/100 Base-T Ethernet switch with link status LED for each port
• IP Quality of Service (QoS) – By differentiating between types of IP traffic and giving priority to the most urgent or time-sensitive, the service provider can offer differentiated classes of service – not possible until now with DSL services.
• High availability – The Efficient Networks 5950 Business Gateway supports high availability with a redundant router configuration or dial backup functionality. The gateway automatically establishes a backup connection if it detects a DSL link failure.
• Dial backup support
• External modem
• Virtual Router Redundancy Protocol (VRRP)(RFC 2338)for failover support to other VRRP-capable routers
• ATM
• Encapsulation (IP, Bridging, and Bridge Encapsulated Routing) (RFC 2684/1483)
• PPP over ATM (LLC and VC multiplexing) (RFC 2364)
• Classical IP over ATM (RFC 2225)
• Classical IP (RFC 1577)
• AAL5
• Virtual Circuit (VC) traffic shaping (CBR, PCR, UBR, VBR)
• No pre-defined limit on VCs
• I.610 OAM F5 end-to-end and segment LoopBack
• Initiates and responds to LoopBack signaling
• PPP (RFC 1661, RFC 2364)
• PPP over Ethernet (RFC 2516)
• PPP over ATM (RFC 2364)
• Bridged (RFC 1638)
• IP Routing (RFC 1331)
• IPX Routing (RFC 1552)
• Data compression of up to 4:1 (STAC™ LZS) (RFC 1974)
• Van Jacobson header compression (RFC 1144)
• Spoofing and filtering (IP-RIP, IPX-RIP, SAP, Watchdog serialization)
• Automatic IP and DNS assignment (RFC 1877)
• Routing
• TCP/IP with RIP1 (RFC 1058), RIP1-compatible and RIP2 (RFC 1389), or static routing on the LAN and/or WAN
• Novell® IPX with RIP/SAP (RFC 1552)
• DHCP server (RFC 2131, RFC 2132), relay agent (RFC 1542), and client (RFC 2132)
• Automatically defers to other DHCP servers on the network
• Automatically adjusts to changes in LAN IP addressing
• No pre-defined limit on DHCP clients
• DNS relay
• Multiple subnets on the LAN support NAT, RIP1, RIP2, ARP and IP filters
• Virtual routes can be defined based on user IP addresses or ranges
• IP Address Translation
• Network renumbering (RFC 1631)
• Network Address Translation (NAT/PAT/NAPT)
• NAT passthrough support for numerous applications including IPSec, PPTP, H.323, and NetMeeting
• Supports public Web and e-mail servers with NAT
• Configuration and Management
• Easy setup through a browser-based user interface
• Configuration and management using HTTP, serial console, SNMP, SSH, or Telnet
• Out-of-band configuration and management using serial console port
• Supports dedicated routed management PVC in bridged and routed mode
• TFTP download/upload of new software, configuration files, and scripts
• Stores backup copy of firmware on dual bank flash memory for system recovery
• Performance monitoring data available using SNMP
• Dynamic event and history logging
• Network boot using a BootP server (RFC 2131, RFC 2132)
• Syslog server support
• Security Management Basic Business Firewall
• Filter on source and/or destination IP address/port value
• Filter on SYN, ACK flags and ICMP
• Apply input, output, transmit, and receive filters on each interface
• Stateful inspection when NAT is enabled
• Logging and scripting
• ICSA-Compliant Stateful Inspection Firewall
• Optional, key-enabled upgrade provides enterprise-grade firewall protection
• Provides protection from
• Common Denial of Serivce (DoS) attacks and exploits including Killwin, Land, Ping of Death, Smurf, Teardrop, Tiny Fragments, and WinNuke
• Distributed Denial of Service (DDoS) attacks including ICMP, SYN and UDP floods
• Other hacking attacks including IP address sweeping, IP spoofing, port scanning
• Opens ports to serve legitimate requests and automatically closes them when the request or session ends
• Full-time Stateful Packet Inspection with built-in support for most popular applications
• No pre-defined limit on the number of rules that can be created and applied
• All firewall messages can be logged to the router console and to syslog servers
• Maintains a log of the most recently dropped packets in the browser-based user interface
• ICSA certification expected 2nd half of 2002
• Virtual Private Networking
• L2TP, IPSec, and L2TP inside of IPSec
• No pre-defined limit on VPN tunnels
• IPSec Tunnel and Transport modes with AH and ESP
• Internet Key Exchange (IKE) including Aggressive Mode
• DES (56-bit) and 3DES (168-bit) encryption
• Supports Perfect Forward Secrecy (DH Groups 1 and 2)
• Provides protection from replay attacks
• Implements RFCs 2104, 2401-2410, 2412, and 2451

7 stuks beschikbaar