Your SlideShare is downloading. ×
Nortel Secure Router 2330
Nortel Secure Router 2330
Nortel Secure Router 2330
Nortel Secure Router 2330
Upcoming SlideShare
Loading in...5

Thanks for flagging this SlideShare!

Oops! An error has occurred.

Saving this for later? Get the SlideShare app to save on your phone or tablet. Read anywhere, anytime – even offline.
Text the download link to your phone
Standard text messaging rates apply

Nortel Secure Router 2330


Published on

  • Be the first to comment

  • Be the first to like this

No Downloads
Total Views
On Slideshare
From Embeds
Number of Embeds
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

No notes for slide


  • 1. Product Brief Nortel Secure Router 2330 A unified communications integrated branch solution The Nortel Secure Router 2330 is a multimedia, IPSec VPN, stateful firewall connection with support for up to 64 powerful modular system that converges and data applications. Comprehensive, simultaneous voice channels. The Secure routing, voice gateway, security and simple-to-use software tools enable sophis- Router 2330’s media gateway services multimedia traffic forwarding in a single ticated access and bandwidth management are also interoperable with Nortel’s cost-effective platform for enterprises. for dependable communications. Communication Server 1000/2000/2100, Delivering fast, secure, reliable and Microsoft OCS and other third-party SIP scalable wide area network (WAN) Robust routing call servers, including Broadsoft, for addi- access, the Secure Router 2330 is perfect Routing services include a full IPv4 tional telephony deployment options. for enterprises requiring high-speed IP and IPv6 protocol set, including BGP-4 or Internet access. Based on a simple- and multicast capabilities. A full-function Survivable SIP gateway to-scale architecture, the Secure Router IPv6 implementation also enables deploy- The Secure Router 2330 also supports 2330 provides consistent wire-speed ment into environments that require a Survivable SIP gateway that facilitates throughput even with advanced extended IP addressing with the same connection of SIP-based registered clients, services enabled. routing services — all with-out any addi- allowing enterprises to take full advantage tional system memory requirements. of VoIP and other advanced SIP services. The Secure Router 2330 combines This feature further provides business high performance, robust routing, Voice media gateway services continuity (or survivability) for locally- flexible WAN and voice media gateway The Secure Router 2330 offers a set of connected SIP devices via failover to the connectivity and is targeted at enterprise integrated voice interfaces that allow Secure Router’s PSTN interfaces in case branch and remote site environments. connection to the public switched tele- of loss of the primary IP connection A rich suite of routing services and phone network (PSTN) as well as support (see Figure 1). advanced WAN functionality makes of conventional TDM-based telephony the Secure Router 2330 ideal for Integrated security devices. T1/E1, FXS and FXO interfaces high-speed Internet access, private line Powerful, fully-integrated security are all available for flexible telephony WAN connectivity, IP Telephony and features include VPN and firewalls for increased reliability and user confidence. Capabilities include stateful packet firewall, detection and prevention of more than 60 Distributed Denial of Service (DDoS) attacks, VPN hardware acceleration for hub and spoke deployment over IPSec and VPN tunnels, and IPSec VPN data-encryption services with AES, 3DES, DES, SHA-1, MD-5 and Diffie-Hellman support.
  • 2. Features Simple to install, simple to scale modular platform Multi-service platform The Secure Router 2330 provides • Full IPV4/IPV6 routing, IPSec, VLAN and firewall advanced operational features while • Voice media gateway services, including support for digital and analog simplifying, or eliminating, time- trunks, analog phones, fax machines and modems consuming and confusing installation tasks. The router’s chassis has eight built- • Range of WAN connectivity, including T1/E1, ISDN BRI, Serial, Ethernet in Ethernet and three module slots that and ADSL2+ can support either data or voice modules Voice Gateway services to support the dynamic demands of • Range of integrated voice interfaces — including T1/E1 PRI, BRI, FXS/DID growing businesses. This means that in and FXO/CAMA — enable connection to the PSTN or analog telephony addition to its eight Ethernet ports, the Secure Router 2330 can support up to: devices • SIP survivable gateway ensures business continuity for SIP devices • 6 T1/E1, serial or ISDN BRI ports, or • Up to 64 simultaneous voice (DSP) channels can handle • 12 FXS/FXO ports voice gateway needs of small to large branch sites Management Robust routing The Secure Router 2330 employs an • Low-latency, high-packet throughput ideal for VoIP and multimedia trans- industry-aligned command line interface port (CLI) that makes it easy to set up and manage. Features include: • IPv4 or IPv6 with BGP-4 and Multicast services (PIM-SM, DVMRP) • On-Premises, Console and Command Integrated security Line Interface; Telnet, Events, Syslog • Stateful packet inspection firewall • Remote SSHv2 provides secure • VPN hardware acceleration and IPSec VPN services for secure voice and communication for configuration data transport and maintenance The Secure Router family The Secure Router 2330, with its modular design, high throughput and reliable performance, is complemented by Nortel’s Secure Router 1000, 3120 and 4134 Series. Deployed in combina- tion with other Secure Router models, the Secure Router 2330 not only handles Advanced quality of service Multi-link capabilities the WAN and LAN requirements of the Quality of service goes beyond Layer 3 The Secure Router 2330 provides best- integrated branch, but can also act as a flow-based support by including Layer 2 in-class multilink PPP (MLPPP) and voice media gateway device for connec- class-based queuing. The highest granu- multilink frame relay (MFR) support tion to the PSTN. larity of priorities (eight levels) provides to allow bonding of T1/E1 and other maximum performance with the lowest WAN interfaces to create a single virtual An easy choice latency for voice, video and other interface capable of transmitting at the Secure Router 2330 is a high-perfor- high-priority traffic while guaranteeing maximum bandwidth available. Multi- mance, cost-effective branch conver- bandwidth among all classes. linking enables hassle-free bandwidth gence solution that brings together scalability, high-speed video, voice and feature-rich voice and data services data transfer while securing connectivity into a common platform for simplified from individual link failures. management, greater cost savings and a high quality of user experience. 2
  • 3. Technical specifications • HDLC • 30+ ALG support (including H.323/SIP) • Bridge Control Protocol (BCP) • Pass through IPSec, L2TP, PPTP Features • Multilink PPP (MLPPP) Voice Signaling support • Multilink Frame Relay (MFR), including Internet Routing • T1/E1 PRI (User side) FRF.15 and FRF.16 • IPv4 and IPv6 support, including • ISDN BRI (User side) IPv4-IPv6 tunnels IP Multicast • T1 CAS • Static routing, RIPv1/2, RIPng for IPv6, • IGMPv1/2/3 for IPv4; MLDv1/2 for IPv6 • E1 R2 CAS OSPFv2 and v3, BGP4/4+ • IGMP Proxy • Q Signaling (QSIG) • Policy-based routing • IGMP Snooping • FXS (Foreign Exchange Station) • Inter-VLAN routing • PIM-SM for IPv4/v6 • FXO (Foreign Exchange Office) • High availability: VRRP, redundant router • DVMRPv3 for IPv4 • Direct Inward Dialing (DID) connections • Centralized Automated Message MPLS Label Edge Routing (LER) • GRE and IP-IP Tunneling Accounting (CAMA) services • Emergency calling Ethernet LAN • Label Distribution Protocol (LDP) • 10/100 Base-TX • RSVP-TE, OSPF-TE SIP Survivability features • 10/100/1000 Base-TX • MPLS Fast Reroute • SIP proxy and registrar functionality • 1000 Mbps Optical SFP • MPLS Martini Pseudo-wire (Ethernet, • Inbound/outbound PSTN dialing • IEEE 802.1x port authentication PPP, HDLC over MPLS) • Local dialing within the branch • IEEE 802.1p • E911 • IEEE 802.1Q Quality of Service/Traffic Management Codecs supported • IEEE 802.3ad LACP • RED, WRED, DiffServ, bandwidth • G.711 - A-law and u-law • IEEE 802.1s MSTP guarantee/sharing, flow monitoring, traffic • G.726 - 16, 24, 32 Kbps • IEEE 802.3x VLAN policing • G723.1 - 5.3, 6.3 Kbps • GVRP • 8 level Priority Class Based Queuing • G.729A - 8 Kbps • Port mirroring • Jumbo frames – Per IP address/subnets, ports, DSCP DSP features • Ethernet Connectivity Fault Management and ToS bits, VLAN ID (802.1Q), • TDM to IP, IP to TDM conversion (CFM) VLAN Priority (802.1p) • ITU G.168 Echo Canceller • Frame Relay traffic shaping and policing • Voice Activity Detection/Comfort Noise WAN • VLAN Classification (port, subnet or Generation • T1/E1, including ISDN PRI protocol-based) • DTMF digit detection • ISDN BRI (U and S/T), both data and Firewall • Caller ID generation and detection voice • Stateful Packet Inspection Firewall • T.38 fax relay/Fax and Modem Pass- • ADSL2+ (Annex A and B) • 25-zone support (including Corporate, through • Serial (V.35, RS-232/V.28, RS-449/V.11, Internet, DMZ) • Up to 64 DSP channels EIA-530/A and X.21/RS-422) • Point-to-Point Protocol (PPP), including • Access Control Lists (ACL) “VoIP-friendly” features PPP over Ethernet (PPPoE) • NAT, including policy-based • Low-latency packet forwarding • Frame Relay (including FRF.12 fragmen- NAT/PAT • SIP ALG for NAT and Firewall tation) • 60+ Distributed Denial of Service (DDoS) • Cone NAT (for Nortel UNIStim Attack Preventions protocol) with NAT hairpinning HQ/Data Center • Frame Relay fragmentation (FRF.12) • Compressed RTP (cRTP) PSTN Nortel Communication Server 1000/2000/2100 or third-party VPN SIP call servers (e.g., OCS) • IPSec VPN • DES / 3DES, AES, SHA1, MD5 IP • Nortel VPN Client support • Optional VPN acceleration hardware Secure Router 4134 • NAT-Traversal • 100 VPN tunnels WAN Service Provisioning • Management: Telnet, SSHv2, SFTP, PAP, Branch Secure Router 2330 CHAP, SNMPv2, DHCP, DNS Proxy, PSTN SNTP, RADIUS, TACACS+ • Monitoring: Syslog, statistics, RMON, alarm • Diagnostics: BERT, loopback testing, trace route, packet capture (PCAP) PC PC SIP phones Figure 1. Secure Router 2330 supports both data and IP telephony devices in the branch with survivable SIP voice services even when the WAN link goes down. 3
  • 4. Physical specifications Secure Router 2330 ordering information Chassis Nortel Order Code Description • Height x Width x Depth: 4.4cm x 44.4cm Base Unit x 29.6cm (1.75in x 17.5in x 11.6in) • Weight with Power Supply: 3.4 kg (7.5lbs) SR0002?03E5 * Secure Router 2330 chassis. 3 small module Slots, 4 x 10/100 • Chassis Slots: Base-TX ports, 2 x 10/100/1000 Base-TX ports, 2 GE SFP ports, 128MB Compact Flash, AC Power supply and operating software. – 3 small module slots Power cord included as designated below. – All slots are hot swappable *? = power cord A = No power cord • 4 x 10/100 Fast Ethernet Copper type (see table B = Euro power cord (10A/200-230V) • 2 x 10/100/1000 Ethernet copper at right) C = UK/Ireland power cord (10A/240V) • 2 x GigE SFP Fiber ports D = Japan power cord (7A/100V) • Management ports: E = North America power cord (10A/110-120V) – Compact Flash F = Australia power cord (10A/240V) H = India and South Africa power cord (10A/220-230V) – Console port (RJ-45) Small Modules Power options • AC power supply - 50-60 Hz 90-269 SR0000005E5 1-port T1/E1 module / supports ISDN-PRI VAC, 60 Watts SR0000006E5 2-port T1/E1 module / supports ISDN-PRI • 12 VDC input for optional external SR0000007E5 1-port Serial module redundant power SR0000008E5 2-port Serial module Environmental • Operating temperature: 32° to 104°F SR0000009E5 2-port ISDN BRI (S/T) module (0° to 40°C) SR0000010E5 2-port ISDN BRI (U) module • Relative humidity: 0 to 95% SR0000042E5 2-port FXO module (non-condensing) SR0000044E5 4-port FXO module Regulatory Approvals • Safety: CTUVus and GS Certification: SR0000046E5 2-port FXS module UL60950-1, EN60950-1 and IEC60950-1 SR0000048E5 4-port FXS module (International CB Report) SR0004060E6 1-port ADSL2+ Annex A module • EMC: Class A Product, FCC Part 15, ICES-003, EN300386, EN550022, SR0004061E6 1-port ADSL2+ Annex B module EN55024, VCCI VPN Encryption • Telecom: TIA-968-A, CS-03, ETSI TBR SR0004055E6 SR2330 IPSec VPN Encryption module. 100 IPSec Tunnels 3/4, 12/13 Packet Voice module SR0004056E6 SR2330 Packetized Voice (DSP) module (8 voice/fax channels activated) SR4304001 Software upgrade license for 16 voice/fax channels SR4304002 Software upgrade license for 32 voice/fax channels SR4304003 Software upgrade license for 64 voice/fax channels SR3716002 SIP Survivability Mode (SSM) upgrade license to 100 users (25-user SSM license included in base router s/w) For more information, visit Nortel on the Web at In the United States: Nortel For the latest Nortel news, visit 35 Davis Drive Research Triangle Park, NC 27709 USA For more information, contact your Nortel representative, or call 1-800-4 NORTEL In Canada: or 1-800-466-7835 from anywhere in North America. Nortel 195 The West Mall Toronto, Ontario M9C 5K1 Canada Nortel, the Nortel logo, Nortel Business Made Simple, the Globemark and CallPilot are In Caribbean and Latin America: trademarks of Nortel Networks. All other trademarks are the property of their owners. Nortel 1500 Concorde Terrace Copyright © 2009 Nortel Networks. All rights reserved. Information in this document is Sunrise, FL 33323 USA subject to change without notice. Nortel assumes no responsibility for any errors that may In Europe: Nortel appear in this document. Maidenhead Office Park, Westacott Way Maidenhead Berkshire SL6 3QH UK NN123877-092409 Email: In Asia: Nortel United Square 101 Thomson Road Singapore 307591 BUSINESS MADE SIMPLE Phone: (65) 6287 2877