MH-2001 Multi-Homing Security Gateway Key Feature • WAN Backup The MH-2001 can monitor each WAN link status and automatically activate backup links when a failure is detected. The detection is based on the configurable target Internet addresses • Outbound Load Balancing The network sessions are assigned based on the user configurable load balancing mode, including “Auto”, “Round-Robin”, “By Traffic”, “By Session”, “By Packet”, “By Source IP” and “By Destination IP”. Users can also configure IP or TCP/UDP type of traffic which is connected by WAN port PLANET’s Multi-Homing Security Gateway, the MH-2001 integrates with cutting-edge technology which includes Load Balancing, QoS, VPN, Authentication and Firewall functions for central sites to establish office network and to connect with branch offices as well as remote dial users. It is designed for required application-based network solution of business at low-capital investment and perfect service to the needs for small and medium sized business. No more complex connection and settings for integrating different security products on the network is required. As Internet becomes the essentials for business, the only way to prevent failure from Internet connection is to have more connection. MH-2001’s multiple WAN interfaces can prevent it and also reduce the risks of potential shutdown. Moreover, it allows applying load-balancing by distributing the traffic through two WAN connections. In order to be a multi-homing device, PLANET’s Security Gateway provides a complete security solution in just one box. The policy-based firewall, content blocking function and VPN connectivity with 3DES and AES encryption functions are the points of this perfect product for your network security. Bandwidth management function is also supported to offer network administrators an easy and powerful ways to allocate network resources based on business priorities and to shape and control bandwidth usage. • Policy-based Firewall The built-in policy-based firewall prevents many known hacker attacks including SYN attack, ICMP flood, UDP flood, Ping of Death, etc. The access control function allows only specified WAN or LAN users using allowed network services on specified time • VPN Connectivity The security gateway supports PPTP and IPSec VPN. With DES, 3DES, AES encryption and SHA-1/MD5 authentication, the network traffic over public Internet is secured • Content Filtering The security gateway can block network connection based on URLs, Scripts (The Pop-up, Java Applet, cookies and Active X), P2P (eDonkey, Bit Torrent and WinMX), Instant Messaging (MSN, Yahoo Messenger, ICQ, QQ and Skype) and Download / Upload blocking • Dynamic Host Control Protocol (DHCP) server DHCP server can allocate up to 253 clients’ IP addresses and distribute them including IP address, subnet mask as well as DNS IP address to local computers. It provides an easy way to manage the local IP network • Web based GUI The MH-2001 supports web based GUI for configuration and management. It also supports multiple languages including English, Traditional Chinese and Simplified Chinese • User Authentication User database can be configured on the devices, and the MH-2001 also supports the authenticated database through external RADIUS and POP3 server • Bandwidth Management Network packet can be classified based on IP address, IP subnet and TCP/UDP port number and it gives guarantee and bursts bandwidth with three levels of priority • Dynamic Domain Name System (DDNS) The Dynamic DNS service allows users to name alias dynamic IP address to a static hostname • Multiple NAT Multiple NAT allows local port setting multiple subnet and connecting to the Internet through different WAN IP addresses • Server Load Balancing Up to 4 group virtual servers support server load balancing • Accounting Report Accounting report function can monitor the information about the Internal and External network traffic via MH-2001 Data Sheet 1 MH-2001 Specification Product Multi-Homing Security Gateway Model Hardware Specification Ethernet LAN WAN DMZ Button Software Management Network Connection Routing Protocol Outbound Load Balancing MH-2001 Firewall VPN Tunnels (Configure / Connection) VPN Functions Content Filtering Bandwidth Management User Authentication Accounting Report Log And Alarm Statistics Others Data Sheet 2 1 x 10/100Mbps RJ-45 2 x 10/100Mbps RJ-45 1 x 10/100Mbps RJ-45 Reset button for reset to factory default setting Web DMZ_NAT, DMZ_Transparent, NAT Static Route, RIPv2 Policy-based routing Load-balancing by Round-Robin, traffic, session, packet, Source IP and Destination IP Policy-based firewall rule with schedule NAT/ NAPT SPI firewall Prevention of SYN attack, ICMP flood, UDP flood, Ping of Death, Tear Drop, IP Spoofing, IP route, Port Scan and Land attack 200 / 100 PPTP, IPSec DES, 3DES and AES encrypting SHA-1 / MD5 authentication algorithm Remote access VPN (Client-to-Site) and Site to Site VPN URL blocking, Script blocking (Popup, Java Applet, cookies and Active X) IM blocking (MSN, Yahoo Messenger, ICQ, QQ and Skype) P2P blocking (eDonkey, Bit Torrent and WinMX) Download and Upload blocking Policy-based bandwidth management Guarantee and maximum bandwidth with 3 priority levels Classify traffics based on IP, IP subnet, TCP/UDP port Built-in user database with up to 200 entries Radius, POP3 authentication support Outbound/Inbound accounting report statistics by Source IP, Destination IP and Service Log and alarm for event and traffic Log can be saved from web, sent by e-mail or sent to syslog server Traffic statistic for interface (WAN 1/2) and policies Graphic display Record up to 30 days Firmware Upgradeable through Web Configuration Backup and Restore through Web Dynamic DNS NTP support DHCP server Multiple NAT and multiple DMZ (mapped IP) support Server load balancing MH-2001 Applications SMB Multi-Homing Security Gateway The MH-2001 is a highly integrated device including connectivity and security features for meeting a small or medium enterprise needs. It is no need to change the existing network infrastructure, and it provides a cost-effective Internet ADW-4401 XDSL / Cable Modem WAN Load Balancing Firewall WAN backup while using inexpensive and high-speed broadband. Increasing VPN Content Filter loading traffic is easy to solve by balancing over two WAN connections. Network bandwidths can be easily increased by adding another ISP connection. ADW-4302 QoS XDSL / Cable Modem DMZ Multi-Homing Security Gateway MH-2001 Win 2003 Win XP LAN Win 2000 WEB / FTP Server MAC RADIUS Server Ordering Information MH-2001 Data Sheet 3 Multi-Homing Security Gateway (2 x WAN, 1 x LAN, 1 x DMZ) PLANET Technology Corporation 11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan R.O.C. Tel: 886-2-2219-9518 Fax: 886-2-2219-9528 Email: [email protected] www.planet.com.tw VoIP Gateway: vip.planet.com.tw 04-07 C-MH2001-1 PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property or their respective owners. Copyright©2007 PLANET Technology Corp. All rights reserved.
* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project