NetVanta 2050/2100 Small Office and Home Office VPN Gateway and Firewall ™ Product Features The ADTRAN NetVanta 2050 and 2100 are network components. As a security gateway, the small office/home office VPN/Security gate- NetVanta 2050 can provide five private encryption n IPSec VPN tunneling with ways providing all the necessary components communication tunnels supporting up to 15 DES/3DES encryption required to secure an integrated VPN solution. users, while the NetVanta 2100 can provide up n Internet Key Exchange Used primarily for remote access, the NetVanta to 10 private encryption tunnels with unrestricted (IKE) for user 2050 is perfect for work-at-home telecom- number of users. With the use of Network Address authentication muters, while the NetVanta 2100 addresses Translation (NAT), both devices can hide IP n Stateful inspection the small office or corporate branch office. addresses from the external world. In addition, the firewall security Each provide key security and data manage- internal router allows multiple users to share a VPN n NetVanta 2050: 5 private ment features such as IPSec VPN tunneling, connection and can also direct incoming IP traffic. tunnels and up to 15 users stateful inspection firewall, built-in router, Web-based Management: A remote NetVanta n NetVanta 2100: 10 private authenticated remote user access, and 2050 or 2100 can easily be configured and tunnels with unrestricted Network Address Translation. users managed using a standard web browser. These Security: On a public infrastructure like the devices offer built-in alert and logging mecha- n Internal router Internet, security is of the utmost importance. nisms to warn administrators about activities n Network Address The NetVanta 2050 and 2100 protect the corporate that are going on in the network. Translation network against attacks with a built-in firewall Performance: Unlike a software-implemented nLogging and alerts and provides data security through encryption, VPN solution, which depends on local CPU and authentication and key exchange. Both the n Web-based management memory performance to implement encryption, NetVanta 2050 and the 2100 employs a stateful these standalone hardware platforms off-loads n 10/100BaseT Ethernet inspection firewall that protects an organization's interface for flexible the CPU intensive encryption process. 3DES network from common cyber attacks including connectivity encryption significantly impacts CPU perform- TCP synflooding, IP spoofing, ICMP redirect, land ance, possibly slowing all the local processes attacks, ping-of-death, and IP reassembly prob- on the computer. Since the NetVanta 2050 and lems. They also encrypt the data being sent out 2100 offer a dedicated processing platform to drive onto the network, using either the DES (Data the encryption process, local computer perform- Encryption Standard) or 3DES encryption algo- ance is unaffected. rithms. In addition, Internet Key Exchange (IKE) The NetVanta 2050 and the 2100 offer guaran- can be used for user authentication supporting teed interoperability with ADTRAN’s complete public and private keys or digital certificates, line of NetVanta 2000 Series of VPN/Security assuring that the proper VPN tunnel is established gateways: NetVanta 2300 for branch offices or as a and that the tunnel has not been redirected mid-size host, NetVanta 2400 for larger corporate or compromised. host applications, and the software implemented, VPN Tunneling: The NetVanta 2050 and the 2100 NetVanta VPN Client. Together the NetVanta 2000 are IPSec compliant devices that provides secure Series offers the most robust features and functions communication over potentially unsecure to address a wide range of enterprise VPN needs. NetVanta 2050/2100 ADTRAN, Inc. Small Office and Home Office VPN Gateway and Firewall Attn: Enterprise Networks 901 Explorer Boulevard Huntsville, AL 35806 Product Specifications P.O. Box 140000 Physical Interface Huntsville, AL 35814-4000 Administration nWAN: RJ-45 10/100 Auto-Sensing Ethernet interfacenWeb-based management 256 963-8000 voice nnLAN: RJ-45 10/100 Auto-Sensing Ethernet interface SYSLOG logging in WELF format 256 963-8699 fax nnSerial Port: RS-232 for off-net configuration Email alerts (SMTP) 256 963-8200 fax back nUser and group access control Virtual Private Network (VPN) General Information policies based on time-of-day 800 9ADTRAN Hash Algorithms nUser accounting policy statistics info@adtran.com nMD5-HMAC 128-bit authentication algorithm www.adtran.com DHCP nSHA1-HMAC 160-bit authentication algorithm nServer (to manage IP addresses on local network) Pre-Sales Encryption nTechnical Support Client (to acquire the WAN-side IP address from nDES-CBC 56-bit encryption 800 615-1176 toll-free service provider); MAC Address Masquerading n3DES-CBC 168-bit encryption application.engineer@adtran.com PPPoE www.adtran.com/support Diffie Hellman Group Support nClient (to acquire the WAN-side IP address from nGroup 1: MODP 768 Where to Buy service provider) 877 280-8416 toll-freenGroup 2: MODP 1024 channel.sales@adtran.com Environment Authentication Mechanisms www.adtran.com/where2buy Operating Temperature nPreshared keys n0° to 50°C (32° to 122 °F) Post-Sales nX.509 Certificate Support: Technical Support Storage Temperature RSA Signatures, DSS Signatures 888 423-8726n-20° to 70°C (-4° to 158 °F) Key Management support@adtran.com Relative Humidity www.adtran.com/supportnIKE (ISAKMP/Oakley) nUp to 95%, non-condensing IPSec Mode ACES Installation & nTunnel Maintenance Service Physical 888 874-ACES Size IKE Modes aces@adtran.com nn1.625" H, 9.0" W, 6.375" D Main www.adtran.com/support nAggressive Weight International Inquiriesnn2 lbs (shipping weight) Quick 256 963 8000 voice Power 256 963-6300 fax Firewall international@adtran.comn12 VDC Power nStateful inspection firewall www.adtran.com/international n4 W nCyber assault protection For the regional office Agency Approvals Diagnostics nearest you, visit: nFCC Part 15 (Class B) www.adtran.com/where2buy Front Panel Status LEDs nUL and Canadian UL (CUL), IEC/EN, CSA, CE Mark nPower – status nVPN – status, transmit, receive Product Includes nn12 VDC power supply LAN – transmit, receive nn6 ft. crossover Ethernet cable WAN – transmit, receive nUser manual Routing nQuick start guide nTCP/IP nStatic Routes nOrdering Information RIP V1 and RIP V2 Equipment Part # Network Address Translation nNetVanta 2050 1200362L1 ADTRAN is a Basic NAT (1:1) ISO 9001 registered company. nNetVanta 2100 1200361L2 NAPT (Many:1) nReverse NAT (translation of an inbound session’s destination IP address) nApplication Level Gateways for ADTRAN is a TL 9000 registered company. FTP, HTTP, POP3, and others Printed in the U.S.A. Specifications subject to change without notice. NetVanta is a trademark of ADTRAN, 61200361L2-8G May 2002 Inc. All other registered trademarks and trademarks mentioned in this ©2002 ADTRAN, Inc. All rights reserved. publication are the property of their respective owners.