Bintec R230aw

Bintec R230aw ... The bintec R230aw also includes WLAN function. A memory extension and new features in the software release for these devices transform them into flexible IP access routers with an integrated ADSL modem (Annex A) and with a 4-port switch.

ADSL2+ enables a high-performance WAN connection and allows download rates of up to 24 Mbps. The WLAN function provides for exceptional flexibility when using the routers in wireless environments. An SIP proxy regulates transparent communication to SIP providers and makes it possible to use the routers in VoIP scenarios, such as for Internet telephony.

The Application Level Gateway makes it possible for IP telephones to establish a connection to SIP providers in the LAN, without compromising the security of the WAN connection. Thus, the SIP proxy monitors the signalization process between the IP phone and the SIP provider and performs all the necessary NAT and firewall procedures dynamically for the duration of communications. It is also possible to easily configure and use several different SIP providers on the router.

The R230aw's wireless interface transmits the data at a maximum rate of 54 Mbps (802.11g) and is compatible with the 802.11b 11 Mbps version in the same frequency range. Encryption via the WLAN interface can use WPA and WPA2. Multi-SSID can be used to define virtual WLAN interfaces, making it possible to establish different access rules for the WLAN, e.g. to log on internal employees and external visitors. The HTTP Wizard can be of valuable assistance in configuring the WLAN component.

Both routers come complete with powerful IPSec implementation and are already equipped with two active VPN tunnels straight from the factory. In addition to encryption with AES or 3DES, both routers offer authentication via certificates or pre-shared keys. To optimize the encrypted data stream, IPComp can be used to compress it. The dead-peer detection function makes it possible to check the availability of the tunnel end point and reconnects the tunnel if it is inactive. Along with NAT Traversal, the integration of Radius or Tacacs+ for authentication purposes is also supported.

In order to be able to find partners despite dynamic IP addresses, the routers support the DynDNS function. The implementation is compatible with leading European DynDNS suppliers and seven providers are already pre-installed. The Stateful Inspection Firewall (SIF) offers effective protection against attacks from the Internet through dynamic packet filtering. Using the firewall is made considerably easier by the wide range of pre-configured services. The router security functions are rounded out by optional content filtering, which classifies all outgoing Internet queries and makes it possible to reliably filter out any undesirable contents.

Both models can work not only as PPPoE clients but as PPPoE servers as well, which makes it possible to allocate different privileges to individual users in the network. In combination with the router scheduling function, specific periods of times can be defined during which users are allocated individual privileges, such as Internet access. The router VLAN function enables a division of the users into virtual sub-networks to offer even greater security.

Inexperienced users can take advantage of an HTTP Wizard to configure the routers; the Wizard guides them step-by-step through the most important basic settings. More experienced users can opt for the HTML configuration interface. The SSH-encrypted communication to the router provides for absolutely secure configuration.