2
DATA SHEET
Netopia 4686-XL
Broadband VPN Router with Integrated Back-Up
Interfaces
WAN INTERFACE
One 10/100 Ethernet port, RJ-45, half- or
full-duplex/auto-sensing, MDI/MDI-X
LAN INTERFACE
Four 10/100 managed Ethernet ports, RJ-45, half- or
full-duplex/auto-sensing, MDI/MDI-X
PORTS
One RS-232 DB-9 serial management console port
One V.92 modem back-up port, RJ-11
Routing and Bridging
Network Address Translation (NAT), IP maps, and pinholes
Static routing
Default route
Numbered or unnumbered WAN interface
Up to eight subnets on each LAN interface, with DHCP server
associations
Transparent mapping option
Virtual router interfaces (ALAN)
Variable-length subnet mask
RFC 1058 RIP v1
RFC 2453 RIP v2
RFC 792 ICMP redirects
DHCP client, server, and relay agent
Extensive DHCP option support and filter rules
DNS relay/proxy
Netbios proxy
BootP support
PPP dial-on-demand
Heartbeat capabilities
IGMP multicast forwarding (LAN and WAN), snooping, and fast
leave
IP multicast outbound support through NAT
RFC 1112 IGMP v1
RFC 2236 IGMP v2
RFC 3376 IGMP v3
Multiple primary LAN subnets
High Availability
Backup default gateway through an external router
Dial back-up, external through console or internal V.92
VRRP support in all ports
Quality of Service
RFC 2474 DiffServ traffic prioritization through TOS
RFC 2598 DiffServ expedite forwarding (EF)
RFC 2597 DiffServ assured forwarding (AF), BE, and NC
support
IEEE 802.1p QoS
Traffic prioritization configurable by source and destination
addresses, port, and protocol
VPN
Embedded VPN hardware performance acceleration module
PPTP, L2TP, LNS to L2TP access server
GRE
IPSec (IKE, AH, ESP, 56-bit DES, and 168-bit 3DES)
L2TP encapsulation in IPSec
Up to 15 simultaneous VPN tunnels can be configured (client or
server)
Security
SPI (Stateful Packet Inspection) firewall
Configurable firewall
Configurable packet filtering
Denial-of-service protection
IPSec VPN gateway, tunnel mode (DES and 3DES encryption,
manual key and IKE, MD5 and SHA1 encapsulation header
protocol)
PPTP VPN gateway, client, or server termination
PPTP or IPSec VPN security associations
RFC 2865 RADIUS (AAA) management authentication
RFC 1492 authentication
Management
Menu-driven and CLI (full-featured scriptable with integrated
help) interfaces with console or Telnet access
Two-level tiered console access
Up to three backup user-defined configurations
System diagnostics and logs
TFTP download/upload of new firmware and configuration files
ICMP ping, trace route, Telnet, and syslog
LEDs for power, WAN, Ethernet, link, status, and activity
Internal dial-in console management
Configurable console timeout
Management port reassignment
Device and WAN event logs
Logging and scripting
SNMP v1 and v2 support with enterprise MIBs
Persistent configuration storage during power-down
Time and date set through NTP