NetVanta 1224STR DC All-in-One Network Access: Modular WAN Interface, Firewall, Ethernet Switch, IP Router, and Optional VPN Solution Benefits ■ Converged LAN/WAN ® ® The NetVanta 1000 Series from ADTRAN is standard with a stateful inspection firewall to architecture a standards-based, non-blocking Layer 2 stop intruders and common Denial of Service ■ Lower total cost of ownership switching solution available at a cost up to (DoS) attacks. These products also offer a ■ Efficient bandwidth usage 50 percent less than competing switches. variety of data security features including ■ Space-savings, equipment These devices are suitable for converged MAC-based port security, multilevel user pass- consolidation LAN/WAN access, interconnecting LAN devices, words, Secure Shell (SSH) and Secure Socket ■ or for network segmentation. This series Layer (SSL) for encrypted user login, and Access Simplified network administration includes the NetVanta 1224R, 1224STR, and Authentication and Authorization (AAA) for 1224STR DC, unique, all-in-one access plat- authentication with a RADIUS or RSA SecurID Product Features forms that combine a 24-port Ethernet switch, server. For added security, these platforms offer an IP access router, a modular WAN interface a VPN upgrade supporting up to 500 IPSec ■ Full-featured, managed with built-in DSU/CSU, a stateful inspection tunnels using DES, 3DES or AES encryption. Layer 2 switch-router, Ţrewall, and the option for Virtual Private DC-powered Quality of Service (QoS) Networking (VPN), all in a single 1U chassis. ■ These switch-routers support QoS to prioritize 24-port Ethernet, Fast The 1224STR and STR DC provide 24-port Ethernet, and Gigabit mission critical traffic and control network Ethernet and Fast Ethernet switching and a Ethernet functionality congestion at various layers of the OSI model. 1000Base-T/SFP Gigabit port for uplink or ■ Unique all-in-one switching/ Ont the LAN, the NetVanta 1000 Series offers stacking capability. The 1224STR DC is ideal for routing/firewall/VPN platforms 802.1p and DiffServ Class of Service (CoS). carrier networks requiring +24/-48VDC power. ■ Ideal for co-location; carrier To assign priority to traffic, Weighted Round networks Robin and Strict Priority Queuing is used with Modular Hardware ■ 8.8 Gbps switching capacity, four egress queues per port. For the WAN, A single WAN access slot in the back of the non-blocking DiffServ marking, Low Latency Queuing, and NetVanta chassis supports a variety of Network ■ Weighted Fair Queuing provide priority for IP Gigabit SFP/1000Base-T uplink/ Interface Modules (NIMs) including ADSL, stacking capability available packets routed over the WAN. Together these 56/64k, T1/FT1, T1/FT1 with DSX-1, E1/FE1, ■ features offer a powerful end-to-end QoS story. Stacking up to 16 switches E1/FE1 with G.703, Dual T1, or a serial interface. with single IP address The optional Analog or ISDN BRI Dial Backup VoIP Ready management Modules (DIMs) support a solid business conti- In combination with the QoS features, a special- ■ Link Aggregation, GVRP, nuity plan by dialing around a failed circuit to ized SIP Application Layer Gateway (ALG) and LLDP any PPP-compliant device. The ADSL NIM allows SIP traffic to traverse NAT-enabled ■ MAC-based port security may also be used for broadband backup, firewalls. For an enterprise network, this inter- ■ SIP ALG for NAT traversal in allowing for larger bandwidth applications operability allows IP PBXs, phones, and other VoIP applications and faster data rates. SIP-based devices to set up, tear down, and ■ Easily recognizable Command pass voice and call control messages seamlessly Standard-based Protocols Line Interface (CLI) through the integral NAT-enabled firewall. Based on the ADTRAN Operating System (AOS), ■ Intuitive web-based Graphical these devices offer support for 802.1Q Virtual Administration User Interface (GUI) LANs (VLANs), Port-based switching features The AOS offers both a Command Line Interface ■ Free firmware updates include Broadcast Storm Control, 802.1D and (CLI) that mimics the widely deployed, industry ■ Unlimited, responsive, 802.1w Spanning/Rapid Spanning Tree, Link de facto standard and an intuitive web-based toll-free technical support Aggregation, Port Mirroring, and GVRP. Link GUI with step-by-step configuration wizards. ■ Industry-leading five-year Layer Discovery Protocol (LLDP) auto-discovers Together these interfaces allow you to admin- North American warranty neighboring Ethernet devices, simplifying ister and control your network in the best integration into multi-vendor environments. method that meets your needs. For a central- In addition the integral IP router provides cost- ized enterprise-wide management scheme, effective Internet access, corporate Frame Relay ™ ADTRAN offers n-Command , an intuitive, or point-to-point connectivity using standard scalable software suite for managing firmware routing protocols such as BGP, OSPF and RIP. revisions, push firmware upgrades and Security configuration changes, backup and restore Rest assured, with the NetVanta 1224R and STR configurations, and manage security policies your network is protected. Each platform comes and Access Control Lists (ACLs). NetVanta 1224STR DC All-in-One Network Access: Modular WAN Interface, Firewall, Ethernet Switch, IP Router, and Optional VPN VLAN Support Product Specifications ■ Port based VLANs ■ 802.1Q tagged trunked VLANs Network Interfaces ■ Support for up to 255 active VLANs 24 Fast Ethernet Ports ■ Inter-VLAN routing ■ 10/100 Base-T ■ Auto-Duplex ■ GARP VLAN Registration Protocol (GVRP) ■ ■ Auto-Rate Auto-MDI/MDI-X Link Aggregation Gigabit Ethernet Port ■ 802.3ad Link Aggregation ■ 10/100/1000Base-T port for copper connectivity ■ Support for six trunk groups ■ SFP slot for optical connectivity ■ Trunk groups consist of up to eight access ports ■ Auto-Duplex ■ Auto-Rate Class of Service (Switching-Layer 2) ■ Auto-MDI/MDI-X ■ ■ Enforces 802.1p priorities DiffServ ■ Four output queues per egress port NIM (Network Interface Modules) ■ Weighted Round Robin or Strict Priority Queuing ■ 56/64k ■ T1/FT1 ■ Dual T1 ■ ADSL ■ ■ Quality of Service (Routing-Layer 3) T1/FT1 with DSX-1 E1/FE1 ■ ■ ■ Low Latency Queuing E1/FE1 with G.703 Serial (V.35, X.21/V.11) ■ Weighted Fair Queuing (WFQ) DIM (Dial Backup Interface Modules) ■ DiffServ aware/mark ■ ■ Analog Modem ISDN BRI ‘U’ and ‘ST’ ■ Frame Relay Fragmentation (FRF.12) Console Port Security ■ DB-9 Firewall Switching Performance ■ Stateful Inspection Firewall ■ Non-blocking ■ Denial of Service (DoS) Protection ■ 8,000 MAC Addresses ■ ■ 16-MB memory shared by all ports Access Control Lists (ACLs) ■ Application Level Gateways (ALGs) Maximum Forwarding Bandwidth ■ 8.8 Gbps Optional Virtual Private Network (VPN) ■ IPSec Mode: Tunnel Routing Performance ■ ■ ■ Encryption: DES, 3DES, and AES 133 MHz Motorola MPC 866 32 MB DRAM ■ ■ ■ Diffie Hellman Group Support: Group 1: MODP 768, 16 MB Flash 30,000 PPS Group 2: MODP 1024 Status LEDs ■ Hash Algorithms: MD5-HMAC and SHA1-HMAC ■ Power ■ Authentication Mechanisms: XAUTH, X.509 Digital ■ WAN: Link, Activity, Alarm, Test Certificates, Preshared Keys, Secure ID, DSS ■ DBU: Link, In DBU, Alarm, Test Signature ■ Ethernet Port Status: Link, Activity, PoE Status ■ Key Management: IKE (ISAKMP/Oakley) ■ IKE Modes: Main, Aggressive, Perfect Forward Protocols Secrecy, Mode Configuration ■ ■ BGP PPP ■ Dead Peer Detection ■ OSPF ■ PPPoE ■ NAT Traversal V2 ■ ■ RIP (v1 and v2) Multilink PPP Network Address Translation ■ ■ GRE HDLC ■ Basic NAT (1:1) and NAPT (Many:1) ■ IGMP v2 ■ PPP Dial Backup ■ NAT compatible SIP ALG ■ ■ Frame Relay PAP and CHAP ■ Multilink Frame Relay Secure Management ■ Multi-level access control DHCP ■ RADIUS AAA ■ Client, Server and Relay ■ SSH CLI and SSL GUI Spanning Tree Support Network Access Control ■ ■ 802.1D Spanning Tree 802.1w Rapid Spanning Tree ■ Port Authentication (802.1x) Frame Relay ■ MAC-based Port Security ■ Point-to-Point ■ RFC1490 Encapsulation (Multiprotocol Over Frame Relay) ■ LMI Types: LMI, CCITT (Annex A), ANSI (Annex D), Static Administration ■ Familiar Command Line Interface (CLI) ■ Web-based GUI NetVanta 1224STR DC ™ ■ n-Command support ■ SNMP v2 ■ SYSLOG Logging ■ Email Alerts (SMTP) Rear View WAN Interface DBU Interface ■ Policy Statistics (using NIM) (using DIM) Diagnostics ■ Port Mirroring ■ Ping ■ Traceroute ■ LLDP (802.1ab) Environment ■ Operating Temperature: 0° to 50 °C (32° to 122 °F) ■ Storage Temperature: -20° to 70 °C (-4° to 158 °F) ■ Relative Humidity: Up to 95%, non-condensing Physical ■ Chassis: 1U, 19" rackmountable metal enclosure ■ Dimensions: 1.7” H, 17.2” W, 7.8” D ■ Weight: 7 lbs. ■ Power: +24/-48 Volts DC Network Interface Modules (NIMs) Agency Approvals ■ ■ ■ FCC Part 15 Class A CE Mark FCC Part 68 ■ C-tick ■ UL 1950/CSA ■ NEBS Level 1 Ordering Information Equipment Part # Equipment Part # NetVanta 1000 Series Chassis NetVanta 1000 Network Interface Modules (NIMs) NetVanta 1224STR DC 4200590L1 56/64k NIM 1200861L1 NetVanta 1224STR DC with VPN 4200590L2 T1/FT1 NIM 1202862L1 T1/FT1 NEBS NIM 1200862L2 T1/FT1 with DSX-1 NIM 1202863L1 Dual T1 NIM 1200872L1 E1/FE1 NIM 1200868L1 E1/FE1 with G.703 NIM 1200878L1 ADSL NIM 1200869L1 Serial NIM 1200866L1 X.35 Serial Interface Cable 1200873L1 X.21 Serial Interface Cable 1200874L1 NetVanta 1000 Dial Backup Interface Modules (DIMs) Analog Modem DIM 1200864L1 ISDN BRI-U DIM 1200865L1 ISDN BRI-S/T DIM 1200875L1 NetVanta 1000 Series SFP Modules NetVanta 1000Base-SX SFP (LC Connectors) 1200480L1 NetVanta 1000Base-LX SFP (LC Connectors) 1200481L1 ADTRAN, Inc. Attn: Enterprise Networks 901 Explorer Boulevard Huntsville, AL 35806 P.O. Box 140000 Huntsville, AL 35814-4000 256 963-8000 voice 256 963-8699 fax General Information 800 9ADTRAN info@adtran.com www.adtran.com Pre-Sales Technical Support 800 615-1176 toll-free application.engineer@adtran.com www.adtran.com/support Where to Buy 877 280-8416 toll-free channel.sales@adtran.com www.adtran.com/where2buy Post-Sales Technical Support 888 423-8726 support@adtran.com www.adtran.com/support ACES Installation & Maintenance Service 888 874-ACES aces@adtran.com www.adtran.com/support International Inquiries 256 963 8000 voice 256 963-6300 fax international@adtran.com www.adtran.com/international For the regional ofŢce nearest you, visit: www.adtran.com/regional ADTRAN is an ISO 9001, ISO 14001, and a TL 9000 certified supplier. 64200590L1-8A 10.1 September 2005 Specifications subject to change without notice. ADTRAN, N-Form, and NetVanta are Copyright © 2005 ADTRAN, Inc. registered trademarks of ADTRAN, Inc. All other trademarks mentioned in this document All rights reserved. are the property of the their respective owners.