One540 - Fiber Router - High Performance VPN Server

One540 - Fiber Router - High Performance VPN Server

Overview

Enterprise-class data services for small and medium businesses

       The OneAccess ONE540 Multi-Service Access Router delivers advanced data services with uncompromised performance for the next generation of superfast broadband access. The unique architecture of the ONE540 provides enhanced performance to address the increasing need for higher bandwidth and higher throughput, whilst delivering increased efficiency and lower power consumption. The ONE540 is scaled to provide 50 to 150 desks with sophisticated high speed data services, embedded security and high availability using fast Ethernet and Gigabit Ethernet connectivity over Fibre and copper based networks.With a very high performance routing engine, sophisticated IP Quality of Service, flexible IP VPNs, in-built stateful firewall and gigabit Ethernet LAN switching as standard, the ONE540 delivers multiple and concurrent, high performance managed data services cost effectively and seamlessly. It enables fixed line operators, mobile operators and ISPs to flexibly satisfy the escalating demands for higher speed and throughput with innovative, agile, margin-rich data products.

Wide Area And Local Area Network Agility

      The ONE540 offers service providers the fiexibility to support a wide variety of local and wide area access connectivity speeds and types. For the access network, it supports symmetrical bandwidths up to 1Gbits/sec over multiple fibre flavours and access loops lengths. It has a single SFP interface as standard, offering plug-in options for GPON ONT, 1000Base-X and 100Base-X modules, Copper based (10/100BaseT) Ethernet network access is offered as a simply provisioned alternative. Network redundancy, provided by an optional, second WAN interface enables service providers to offer a cost effective high speed back-up and high availability capability in support of stringent service level agreements or business critical application services. This is provided as a SHDLSbis (Ethernet First Mile) interface offering speeds of up to 22Mbps.Servers, server rooms and local area networks are connected to each other and the wide area network via the inbuilt 4 port Gigabit Ethernet switch. Server load balancing ensures that local application performance is maintained. The ONE540 can optionally be specified with WiFi, supporting 802.11b/g and n. Several sophisticated authentication schemes are supported, and the WiFi network can even be
configured as a public hotspot, without compromising the security of the private wireless or wired infrastructure.

Reduced total cost of ownership, accelerated Propvisioning

      As well as opening the door to new revenue opportunities, the ONE540 helps achieve long term cost savings. As a service provider, the opportunity to replace multiple CPE with a single, flexible unit means reduced capital costs and simpler logistics and operations. A suite of provisioning tools makes roll out simpler, less prone to error and more cost effective. For instance, auto discovery options simplify initial set-ups. Tried and tested confi gurations can then be ‘cloned’ to new installations from the network operations centre (NOC). The industry standard CLI removes the need for technician training. The ONE540 supports mass customisation, enabling the provision of standardised service provider packages. A set of embedded tools and service level indicators make it simple to manage and assure the customer experience remotely, virtually removing the need for onsite assistance.

• For high speed managed data services to businesses with 50 to 150 desktops
• Enhanced performance, dual core architecture
• Sophisticated IP QoS and in-built security
• Gigabit Ethernet and Ethernet First Mile network access
• Gigabit Ethernet Switching and Wi-Fi
• Industry leading price performance
• Simple deployment, provisioning and management
• Industry standard CLI
• Lowest power consumption; no fan

• Single or dual WAN uplinks

• 4 port Gigabit Ethernet LAN switch

• Optional Wireless LAN

Gigabit Ethernet WAN Interface

• Fibre, Copper, confi gurable SFP/UTP

• 1 SFP slot for fi bre modules: 100BASE-X, 1000BASE-X,

• UTP interface 10/100/1000BASE-T with RJ-45 connector

SHDSL Interface (factory option)

• G.SHDSLbis ITU-T G.991.2 - 2 or 4 line pairs

• ATM, EFM and ATM/EFM auto detect

• Bonding based on EFM, SHDSL or ATM IMA

• RJ-11 connectors (2 RJ-11 for 4 pairs)

LAN Interfaces

• Ethernet, Fast Ethernet, Gigabit Ethernet

• 4 port switch 10/100/1000BASE-T auto-sense

• Automatic cross-over

• RJ-45 connectors

Wireless LAN (factory option)

• Dual mode IEEE 802.11b/g and n,

• Two detachable antennas

• WMM QoS

• Encryption options WEP, WPA 1.2 (TKIP) and WPA 2.0 (802.11i, AES-CCMP)

• Authentication options WPA-PSK (pre-shared key) and 802.1x with a RADIUS server (PEAP, EAP-SIM, EAP-TLS and EAP-TTLS)

Console port

 • RS232 – RJ-45 port

Performance

 • LAN to LAN: 200,000 pps

IP Addressing & Routing

• NAT/NAPT: static/dynamic NAT, NAPT, selective NAT, twice NAT, Application pass-through

• DHCP client, server, relay. IP helper addresses

• DNS proxy. DNS server update protocol: DynDNS

• Routing protocols: RIP v1/v2, OSPF v2, BGP v4

• Multicast Routing: PIM-SM and IGMP v2/v3

• Policy-Based Routing

• VRRP

• Server load balancing

IP Quality of Service

• IP Classifi cation and priority (DiffServ)

• Class-Based Queuing (CBQ), CB-WFQ on LAN/WAN interfaces

• Low Latency Queuing, fragmentation and interleaving

• Policing and remarking

• RED, WRED, ECN

PPP

• PPP over ATM, PPP over Ethernet (PPPoE) on Ethernet, SHDSLbis ,EFM and ATM interfaces

• Automatic IP address assignment

• MLPPP bonding with fragmentation and interleaving

• PAP/CHAP authentication

• IPCP subnet mask

• MAC address based authentication

Security

• Firewall with stateful packet inspection

• Standard and extended access lists

• Session monitoring and limiting

• Configurable timers per port and application

• All firewall log messages can be buffered, viewed or sent to a syslog server

IP VPNs

• IPsec, GRE, IPIP, L2TP

• IPsec encryption: AES, DES, 3DES

• IPsec tunnel and transport mode IKE and PKI, AH and ESP with SHA1 and MD-5 hashing

• UDP-based encapsulation for NAT traversal

• IKE with pre-shared secret, symmetrical or client-server mode

• Perfect Forward Secrecy

Bridging and VLANs

• Bridging & Integrated Routing and Bridging (IRB)

• VLAN tagging and un-tagging

• Multiple VLAN IDs per port

• 802.1p priority tagging, TOS/COS and COS/TOS mapping

Management

• Industry standard Command Line Interface (CLI)

• Telnet, SSH, HTTPS

• Web-based configurator for LAN and WLAN

• SNMP V1/V2C/V3

• Support of user privileges

• FTP/TFTP upload/download configuration and binaries

• QoS measurement probe

• Traceroute, ping, extended ping

• User authentication via RADIUS or TACACS+

• RADIUS accounting

• Global statistics screens (console, web-based). Event and trace buffering

• Syslog client

• Flow capture and decoding

Dimensions

• Desktop, wall mountable

• W x H x D: 270 x 50 x 145 mm; Weight: 1.3 kg

Power supply

• External adapter 12 Volt – 2 Amp

• Voltage range: 110 – 230 VAC, 50/60 Hz

• Power consumption: <25 W

Please contact us for more detailed information.

Hotline: 0913.532.536 - 0913.620.622