Annet medium-sized network access router AT-AR410 - a minority report
Cool dragon
2004-2-6
background:
Netizen asked: Support NAT and VLANs, built firewalls, it is best to do access filtration and support for VPN, 4000RMB of routers! Ask the old bird to help recommend it, thank you.
Briefly analyze
From the question from this netizen, it seems that he is looking for a cost-effective router. This router must have a very powerful function by supporting NAT, VLAN, Firewall, Access Filtering, and VPN Network Management. In general, NAT, firewall, access filtration, VPNs These are all of the high-end broadband routers, while also the product of VLAN features, but this "minority" is really existence. This article will be a very well-router device AT-AR410, which is introduced to the readers. It belongs to such a minority.
Annete medium network access router AT-AR410
AT-AR410 (see Figure 1) is a new generation of medium-sized network access routers produced by American Annet. It not only has functions of traditional routers, and has a wide range of protocol support, E1, T1 expansion interfaces, and has broadband routers. Function (with Ethernet Wide Area Network, Integrated Switching LAN). It is still currently a low price in the market, with a highly flexible solution.
Quote: 3800-3900 yuan
Http://detail.it168.com/bj/files/detail_product.asp?cspace_code=39812&cTyPE_CODE = 0409&cbrand_code=1370
One. AT-AR410 Hardware Configuration and Interface (see Figure 2):
· Processor: 66 MHz Risc Power PC
· Flash: 8m
· System memory: 16M DRAM
· Wide area network port: a 10/100 Mbps full-duplex
· LAN port: four 10/100 Mbps full-duplex
Slot: Interface Card Module Slots (Accessible BRI U & S / T, T1 / E1 / PRI, SYNCHRON, 4 x Asynchronous, 10Baset / Aui Ethernet, etc. To expand)
· Control port: RS-232
two. The AT-AR410 contains Annet's Alliedware Software Suite. These software kits can support the following extensive software features.
IP packet filtering
OSPF, RIP and RIP V2 Dynamic Routing Protocol
IP, IPX and AppleTalk routing
GRE Universal Routing Package
Splendid tree
BAP / BACP bandwidth allocation
PPP link package
X.25
Frame relay
ISDN
CLI, PAP and CHAP certification
VRRP virtual router backup
BGP-4 border gateway protocol
PPPoE dial
NAT
Firewall
IPSec VPN
L2TP VPN
DES or 3DES VPN encryption
RADIUS identification service
SNMP network management
SSH security remote management
RSVP Resource Reservation Agreement
IP packet priority
STAC data compression
DHCP
three. AT-AR410 features feature
Line speed IPsec VPN
The AT-AR410 enterprise-class router integrates the three-layer route and the line speed VLAN. The AT-AR410 is particularly suitable for VPN applications for E1 / T1 speed. The AT-AR410 is designed for branches and mobile users for small and medium-sized businesses, which can divide user components into different VLANs, and these VLANs can achieve secure access through high-performance VPN tunnels and remote users. Using the PIC module provides more unprecedented elasticity and high performance WAN services, business users can also use Frame Relay with low cost advantages to connect to each other, reaching E1 / T1 speed. Unique integrated 4 port VLAN division
The AT-AR410 router provides port-based and IEEE802.1q VLAN support via 4 10 / 100Mbps swap ports. It combines the 2-layer VLAN exchange between the line speed and the 3-layer routing, which provides VLAN route. The route between 3 layers can reach 8,500 pps forwarding rate (64 Byte per data package). The AT-AR410 router provides small and medium-sized companies with a very low cost but high-performance VLAN and VLAN routing solutions. VLANs can provide high and low priority per port.
Flexible and easy expansion
6 different (including high-speed E1 / T1, V35 / X21 synchronous serial port, Bri / PRI ISDN, Ethernet, etc.) interface card modules can be easily inserted into the expansion slot of the AT-AR410. This maximizes the user's investment, providing powerful extension capabilities for future network development. All of these extensions can be universal with the Annet Ar720 / Ar740 router, and can be placed on a Rapier series 3 floors. Asynchronous serial ports can provide remote management to connect an external modem to achieve remote management.
Hardware accelerated IPsec VPN
The AT-AR410 provides hardware encryption speed than 10 times higher than the software-encrypted VPN we know. Annet's AT-AR410 router is very fast based on hardware, because its encryption operation is done by a special 32-bit encryption and compression processor. The router maintains the maximum number of DES or 3DES VPN speeds, even if the CPU is in the case of overload request and IPsec rule processing. It supports up to 1,024 encrypted tunnels. The AT-AR410 can provide a safe point-to-point link between any branches, such as dial, broadband, ISDN, T1 link.
Strategy routing
Strategy routing can route based on traffic types such as WAN link types, source addresses, and destination addresses. IP packets can be prioritized through the network and reduce delays.
Status detection firewall
Users can set DMZ protection for web servers, Mail servers, etc., which can detect firewalls to protect the security of internal private networks through the ICSA status.
Configuration and management
The two configurations of the command line and the GUI graphics interface can be provided, and the AT-AR410 supports the remote security management router via the Secure Shell (SSH) authentication, and the SSH client software is provided by a third party. The AT-AR410 also supports SNMP V1, V2 network management. Support online software upgrade.
High availability evaluation of AT-AR410
We have known that the AT-AR410 is a very traditional, very professional router, but it has the characteristics of broadband routers, so it is characterized by SMEs with high availability. Not only can it access a wide area network line such as a special line, but also access to a broadband line that is in the like. Support a wide and rich network protocol, support network security applications such as VPN and firewalls.
Annet router AT-AR410 is still a very low price professional router, which is applicable: Scope of small growth enterprises, shared broadband access, various company branches special line access, medium - sized commercial enterprises VPN network. It can be seen that the user of this product is very broad, which can be embodied and supported in its hardware performance and powerful software.
In Xiaoku's feeling, this router is the most fascinating thing is its VLAN function and VPN feature based on the exchange port.
In VLAN, it is set the router and can divide the VLAN switch (we should know that the route between the VLAN and VLANs is to the twins, and the VLAN can be easily realized on a single device, this is Only a few host companies are particularly advantageous. Compared to companies with more host counts, it is also very easy to implement VLAN. Simply divide each VLAN in each exchange port of the AT-AR410, then use ordinary switch access (eg Annet AT-FS724i switch http://detail.it168.com/bj/files/product_describe.asp?ctype_code= 0412 & CSPACE_CODE = 47037 & cflag =), in this way, each switch expands the number of ports of the VLAN, which has become an expanded VLAN. The following picture (see Figure 3) is a topographic map of a school local area network VLAN program in Annet program, which uses Annet router AT-AR41 and Annet switch AT-8024 http://detail.it168.com/bj/ files / detail_product.asp? cSpace_code = 39781 & ctype_code = 0412 & cBrand_code = 1370 and AT8024GB http://detail.it168.com/bj/files/detail_product.asp?cSpace_code=39799&ctype_code=0412&cBrand_code=1370 to networking. In VPN, the AT-AR410 can form a VPN across the Internet along with its compatriots AT-AR450S (see Figure 4) (see Figure 5). The AT-AR450S is very focused on the VPN function relative to the AT-AR410, and the hardware function is very powerful and the function is higher than the AT-AR410. There have been two articles about the VPN Xiaoku, so this is no longer detailed.
Summary: The AT-AR410 is an unpleasant router, which has the characteristics of professional routers and broadband routers that can adapt to today's broad network applications.
