Future Software Limited - Products - VPN Router Solution

Aricent

Leaders in Convergent Networks - Aricent

Home

You are here > Products > OEM Ready Solutions Overview>VPN

Aricent VPN Router Solution for SMB VPN and SOHO VPN Router Manufacturers



The Aricent VPN Router Solution is a pre-integrated router solution that enables equipment manufacturers to quickly build a secure VPN router. Combining VPN (IPSec / PPTP / L2TP) capability, an industry certified stateful firewall, NAT routing, intrusion detection and content filtering, the Aricent VPN Solution is an all-in-one solution for branch offices and home office VPN router manufacturers. The Aricent VPN Router Solution is readily available on standard industry reference designs. The modular architecture of the solution enables the OEM to add and remove features based on the target feature requirements. The portable architecture of the solution enables freedom of choice for selecting the processor, security co-processor and the RTOS. The Aricent VPN Solution Router provides an easy to use web interface and command line interface enabling the equipment manufacturer to address the needs of the target market with very little customization.
FUTURE SOFT VPN ROUTER SOLUTION ADVANTAGES Shortened time to market Platform flexibility Feature flexibility Easy to use web interface Future proof investment SOLUTION COMPONENT ARCHITECTURE Figure: VPN Router Solution - Component Architecture

SPECIFICATIONS

VPN

		L2TP - Client and Server support and GRE tunneling
		PPTP - Client and Server. PAP / CHAP / MSCHAPv2 authentication
		IPSec - Full peer-to-peer (initiator and responder); ESP/AH payloads; Hash algorithms: HMAC - MD5, SHA-1; Ciphers: DES, 3DES, AES (128, 196, 256-bit); Key management: IKE, Diffie-Hellman (group 1, 2, and 5); Auth methods: RSA (to 2048-bit), pre-shared secrets; aggressive mode; PKI, X.509 certificates; PKCS, PEM; multiple sub-nets, NAT traversal, and pass-through mode
		Remote access feature - enables access through external VPN Clients

Firewall

		Stateful packet inspection
		DMZ and filtering based on access lists
		Filtering based on IP options, protocol and IP address
		Prevents DOS attacks like SYN Flood, Ping of death, Win Nuke Attack, Snork Attack, Ascend Attack, TCP/UDP short header, Source routing attack, IP spoofing, Tiny Fragment attack, etc.
		Inhibits access to special sites using URL Filtering

NAT

		Sharing of the IP address account using NAT.
		Port translation (NAPT)
		Static and dynamic NAT
		Virtual Server support
		Two-way NAT
		A wide variety of ALGs are supported including H.323, CuSeeMe, DNS, FTP, PPTP, ICMP, NETBIOS, IP Multicast, ICQ etc.

Wireless

802.11a/b/g interface support

Routing

		Routing based on static routes.
		In-home routing using RIP.
		Optional OSPF support for enterprises.

Configuration

		Configuration through console using HTTP, HTTPS and SNMP
		Web Wizards for easy configuration and setup.
		Easy customization of Wizards.
		Configuration save and restore from FLASH.
		Configuration backup using TFTP.
		Remote configuration via Telnet and SSH.

DHCP

		Dynamic IP Address allocation for in-house/home office using DHCP Server.
		Static IP address allocation.
		Global, subnet specific and host specific option support.
		DHCP Client for address allocation of WAN interface.

Others

		Router redundancy and high availability using VRRP.
		Dynamic DNS and DNS Relay support.
		IGMP Proxy for applications like IP/TV.
		Configuration download from remote via TFTP
		Firmware upgrade through Web browser and CLI.

More information on features is available in the 'Feature Sheet' link below.