Allied Telesis
www.alliedtelesis.com
AT-AR770S
| Secure Gigabit VPN Router
Security
In addition to hardware-based encryption, the
AT-AR770S comes with other advanced
security features such as traffic filtering with
event logging. Traffic filtering uses the source
and destination address, port, protocol and TCP
packet type to provide control over traffic that
passes through the AT-AR770S. A Stateful
Inspection Firewall provides an increased level
of security and complements the packet filtering
function. HTTP and SMTP proxies on the AT-
AR770S provide improved control over web
and mail communications.
Quality of Service
Allied Telesis’ QoS implementation enables the
AT-AR770S to dynamically identify high priority
voice, video and application traffic, so that
appropriate service levels can be maintained in
congested networks. Advanced QoS allows
voice, video, and data traffic to have QoS
applied within individual IPSec tunnels, over
GRE, as well as IPv6 to IPv4 tunnels.
Comprehensive Management and
Configuration
The AT-AR770S comes with a comprehensive
suite of management features and is also
compatible with SNMP-based management
packages. An extensive command set is available
via the Command Line Interface (CLI). Allied
Telesis’ SNMP support extends to SNMPv3 to
provide secure management.
WAN Load Balancer
The AT-AR770S’ WAN Load Balancer enables
the router to combine bandwidth from multiple
WAN connections for increased throughput,
redundancy and reliable WAN connectivity.
When a router simultaneously connects to
multiple WAN networks, the WAN Load
Balancer will distribute the traffic based on any
one of a number of selectable balancing
algorithms. A typical example would be a router
that has two Internet connections each
exchanging data to remote sites via different
Internet providers. In this case an outage limited
to one network will not result in a loss of
connectivity to these sites.
Feature Summary
Hardware Features
2 x WAN combo ports (SFP or 10/100/1000TX)
4 x LAN 10/100/1000TX ports
2 x PIC
1 x Asynchronous console / Modem port
DMZ port: Obtained by configuring one of the WAN or LAN
ports
Processor
833MHz
Internal security encryption engine
Memory
128MB Ram
32MB Flash
Power Characteristics
Input Voltage: 100-240 VAC, 50-60 Hz
Max Power Consumption: 40W
Internal Battery Backup (1 year)
Physical
Dimensions: 1RU rack mount
Depth 239mm, Width 440mm
Height 44mm
Weight: 2.95 kg
Environmental
Operating Temp: 0°C to 50°C
Storage Temp: -25°C to 70°C
Operating relative humidity: 5 to 80% non-condensing
Acoustic: General Office @ 40dB V. Measured in
accordance with ANSI S12.10
Operating Altitude: Up to 10,000 feet
Approvals & Certifications
UL
TUV
UL60950-1
CAN/CSA-C22.2 No. 60950-1-03
EN60950-1
AS/NZS 60950
EN60825-1
EN55022 class A
EN55024
FCC class A
VCCI class A
AS/NZS CISPR22 class A
CE
Reliability
MTBF: >120 000 hrs (telcordia methodology, data path only)
Optional Extras
Port Interface Cards:
AT-AR020
Single configurable E1/T1 interface
that supports channelized/unchannelized
Primary Rate ISDN/Frame Relay
AT-AR021S (V3)
2
Single Basic Rate ISDN S/T interface
AT-AR023
Single Synchronous port up to 2Mbps to
an external CSU/DSU (AT-V.35-DTE-00 or
AT-X.21-DTE-00 cable required)
AT-AR024 Four Asynchronous RS-232 interfaces to
115Kbps
Software Features
Routing and Multicast
PPP and IP Routing
RIP v1 & v2
OSPF v1 & v2
BGP-4 (optional)
IPX
IGMPv2
PIM-SM / DM
DVMRP (including draft_ietf_idmr_dvmrp_v3_10)
DECNet
WAN Protocols
X.25
Frame Relay
Security
IP Filtering
Stateful Inspection Firewall
NAT-T
SMTP & HTTP Proxy
802.1x
Authentication: RADIUS, TACACS, MD5, PAP, CHAP
SSH
SSLv1
VPN
L2TP
GRE
IPSec
IKE
ISAKMP
PKI
Encryption: DES, 3DES, AES
Microsoft Windows XP VPN client interoperability
Hardware acceleration
QoS
Extensive Traffic classifiers of L2 to L5 traffic to allow
appropriate queuing of traffic
IP: IP source / destination address, TOS & DiffServ
Ethernet: MAC source / destination, 802.1q
TCP / UDP: Port numbers
VoIP: RTP source & destination
Queuing:
• Low latency queuing (LLQ)
• Class-based weighted fair queuing (CBWFQ
• Deficit Round Robin (DRR)
Supported tunnel interfaces: PPP, L2TP, IPsec, GRE
RSVP
Management
CLI
SNMPv3
IPv6
RIPng
IPv6 RFC 2460
Neighbour discovery RFC 2461
Stateless address auto configuration RFC 2462
ICMPv6 RFC 2463
Transmission of IPv6 packets RFC 2464
Connection of IPv6 domains via IPv4 clouds RFC 3056
DHCPv6
Country of Origin
China
2
AR021S (V3) requires AlliedWare
®
Operating System
version 2.9.1-13 or later
