Enterasys ANG-1105 Aurorean Network Gateway-1100 2-Port VPN Hardware Client with 3 10/100 Ports

The Aurorean Network Gateway is a universal platform for creating a global, virtual network that connects mobile users, telecommuters, branch offices and regional sites to corporate network resources. The ANG-3000, designed for connecting branch offices and trading partners to your corporate network, supports up to 500 VPN tunnels.

Dedicated VPN processing
Provides predictable throughput and scalable performance for hundreds or thousands of concurrent PPTP and IPSEC tunnels
Delivers twice the link-level performance over conventional VPNs with a pre-encryption compression algorithm

Secure network access
Uses 40-, 56-, 128-, or 168-bit (Triple DES) encryption to ensure maximum security
Works with existing authentication and authorization services to enforce access control to sensitive network resources
Supports virtual subnets for complete flexibility in IP addressing and routing
Ensures security of all virtual network nodes with password-protected administrative access and cookie-based session expiration

Multiple protocol support
Provides multiprotocol LANs with the added security of IPSEC’s strong encryption algorithms
Enables seamless integration into any network environment with multiple routing schemes (RIP, OSPF, static routing)
Centralized monitoring/remote configuration
Enables monitoring of the global virtual network from a network operations center
Provides active reporting on server utilization and performance with standards based MIB II and a private VPN MIB
Configure remotely using any standard web browser
Tunneling Protocols
PPTP
IPSEC with Internet Key Exchange (IKE) or
Authenticated Diffie-Hellman based key exchange

Encapsulated LAN Protocols
IP
IPX

Routing Protocols
IP
— RIP, RIPV2
— OSPF
— up to 256 static routes

IPX
— RIP, SAP
Routes learned on internal (trusted) port advertised on virtual
ports (clients)

IP Client Address Allocation
Policy-based dynamic address pools (local subnet or virtual
subnet)
Static user addressing
RADIUS server allocation

Compression
Microsoft Point-to-Point Compression (MPPC)
STAC-LZS

Encryption
PPTP: Microsoft Point-to-Point Encryption (MPPE), 40- or 128-bit
IPSEC: ARCFOUR 40- or 128-bit; DES (56-bit), Triple-DES (168-bit)

Data Authentication
HMAC SHA1
HMAC MD5

Authentication Services
Aurorean User List (MS-CHAP)
(via Aurorean Policy Server)
Two factor authentication (token card, etc.)
Any standard RADIUS server
RADIUS compatibility includes Microsoft’s NT Domain, Novell’s
BorderManager™ Enterprise Edition 3, RSA’s SecurID® (ACE/Server®), and
Axent’s Defender.

Performance and Capacity
ANG-3000
Up to 500 concurrent connections per Network Gateway
Performance (with compression): 20 Mb Triple DES

Configuration Tools
Secure web browser using SSL
Command line interface (CLI) via Telnet
Floppy disk-based configuration for easy installation

High Availability
Automatic tunnel fail-over to alternate VPN gateway
Embedded Watchdog Timer for auto-restart of VPN processes and auto-server reboot

SNMP Monitoring
Standard MIB II support
VPN MIB for monitoring server utilization, performance,system status
Compatible with standard network management applications

Hardware Platform
800 MHz processor (ANG-7000); 566 MHz processor (ANG-3000), 128 MB RAM (ANG-7000); 64 MB RAM (ANG-3000)
Two 10/100Base-T Ethernet LAN ports (external and trusted)
CD-ROM drive
Floppy disk drive
90-135, 180-265 VAC (40/63 Hz) AC voltage and frequency (auto-switching)
125W DC power supply
1U rack-mount chassis
— 4.3 cm (1.7") x 41.5 cm (16.35") x 55.9 cm (22")
— 10.4 kg (23 lbs)
Ambient Temperature: 10° to 25° C (50° to 77° F)
Non-operating Humidity: 95%, non-condensing at 35° C (95° F)