SIP Aware ADSL Router with IPSec

The second generation of the bintec R230aw range now includes the same functionality, minus the Wireless LAN feature.  In addition to hardware and software extensions, both models come equipped with the complete range of features available in this access device.  A memory extension and new features in the software release for these devices transform them into flexible IP access routers with an Integrated ADSL Modem and a built in four port switch.

The switch can be segregated into four independant LAN segments enabling the r230 to be the most flexible small router on the market.  Automatic ADSL line-mode detection (ADSL, ADSL2 and ADSL2+) enables high performance ADSL connectivity and allows download rates of up to 24 Mbps.

The SIP Application Layer Gateway (ALG) enables remote users to register their IP Phones without risking their security by "poking holes" in the firewall.  The ALG monitors the SIP signalling and performs all the necessary NAT translations, it is also possible to host multiple handsets through the r230s ALG thanks to the simple configuration parameters.

The R230aw’s wireless interface transmits the data at a maximum rate of 54 Mbps (802.11g) and is compatible with the 802.11b 11 Mbps version in the same frequency range. Encryption via the WLAN interface can use WPA and WPA2. Multi-SSID can be used to define virtual WLAN interfaces, making it possible to establish different access rules for the WLAN, e.g. to log on internal employees and external visitors. The HTTP Wizard can be of valuable assistance in configuring the WLAN component.

Both routers come complete with powerful IPSec implementation and are already equipped with two active VPN tunnels straight from the factory. In addition to encryption with AES or 3DES, both routers offer authentication via certificates or pre-shared keys. To optimize the encrypted data stream, IPComp can be used to compress it. The dead-peer detection function makes it possible to check the availability of the tunnel end point and reconnects the tunnel if it is inactive. Along with NAT Traversal, the integration of Radius or Tacacs+ for authentication purposes is also supported.

In order to be able to find partners despite dynamic IP addresses, the routers support the DynDNS function. The implementation is compatible with leading European DynDNS suppliers and seven providers are already pre-installed. The Stateful Inspection Firewall (SIF) offers effective protection against attacks from the Internet through dynamic packet filtering. Using the firewall is made considerably easier by the wide range of pre-configured services. The router security functions are rounded out by optional content filtering, which classifies all outgoing Internet queries and makes it possible to reliably filter out any undesirable contents.