Chapter 1 – Introduction and Product Description
Multi-Tech Systems, Inc. RouteFinder RF825/RF825-AP User Guide (Document Number S000422B)
7
Feature Details
•
Secure VPN Connections.
The RouteFinder SOHO security appliance uses the IPSec or PPTP industry
standard protocol, data encryption, and the Internet to provide high-performance, secure VPN connections.
For LAN connectivity, the RouteFinder SOHO security appliance utilizes the IPSec protocol to provide up to
15 tunnels with strong 3DES or AES encryption using IKE and PSK key management. For Client-to-LAN
connectivity, Multi-Tech provides optional IPSec client software allowing road warriors secure access to the
company’s internal network.
This RouteFinder also supports remote users who want to use the PPTP VPN client built into the Windows
operating system. This provides 40-bit or 128-bit encryption, user name and password authentication.
•
Connect Multiple Users to the Internet with Broadband Speed.
With the RouteFinder SOHO security
appliance, multiple users can share access to the Internet with only one IP account. The WAN Ethernet
port(s) support DSL or cable speeds of up to 20M bps.
•
Wi-Fi Connectivity Option.
The RouteFinder SOHO AP models provide secure wireless 802.11b/g high-
speed wireless connectivity for even greater flexibility and use. With Wi-Fi Protected Access™ 2 (WPA2), the
RouteFinder SOHO security appliance offers the highest available security for wireless traffic. In addition, it
engages wireless firewalling to provide control over the communications between the appliance and
connecting clients as well as providing your guests and customers with wireless Internet-only access.
•
Cellular Wireless Connectivity Options.
The RouteFinder SOHO security appliance RF825 models provide
an integrated cellular EDGE or CDMA 1xRTT modem to be used as your primary Internet connection, or as a
back-up to a wired connection. With packet data rates up to 240K bps for EDGE modems, and up to 153.6K
bps for CDMA modems, the RouteFinder RF825 security appliance is ideal for mobile applications or as a
temporary connection during a LAN/WAN failure.
•
Built-in 10/100 Switch.
The integrated 4-port 10/100M bps switch eliminates the need for an additional hub
or switch to connect users not on a LAN. It ensures high-speed transmission and can serve as a completely
dedicated full duplex backbone.
•
Network Security.
The RouteFinder SOHO appliance provides network layer security utilizing Stateful
Packet Inspection, the sophisticated firewall technology found in large enterprise firewalls, to protect the
network against intruders and Denial of Service (DoS) attacks. It also uses Network Address Translation
(NAT) to hide internal, non-routable IP addresses and allows internal hosts with unregistered IP addresses to
function as Internet-reachable servers.
•
Virtual Server Support.
In addition to providing shared Internet access, the RouteFinder SOHO security
appliance can support a Web, FTP or other Internet servers. Once configured, it accepts only unsolicited IP
packets addressed to the Web, FTP or other specified servers.
•
Dynamic DNS Client.
The RouteFinder SOHO security appliance has a built-in Dynamic DNS client that is
compatible with
DynDNS.org
. It automatically sends an update to the
DynDNS.org
update server if the WAN
IP address changes. A registered Dynamic DNS account allows you to host your own Web site, mail server,
or other services on the Internet without having to obtain a static IP address or keep track of a dynamic IP
address. It also aids in creating static-to-dynamic or dynamic-to-dynamic IPSec VPN tunnels. In addition, with
a Dynamic DNS account, you can establish a PPTP VPN tunnel behind the RouteFinder SOHO security
appliance by configuring your PPTP client to connect to
yourhostname.dydns.org
instead of a dynamic IP
address.
•
Fully Qualified Domain Name (FQDN) Feature.
The FQDN featured on the RouteFinder SOHO security
appliance allows you to utilize a static name in the IPSec VPN setup, like
“branchoffice.dyndns.org”
, instead
of a dynamic IP address, to create static-to-dynamic or dynamic-to-dynamic VPN IPSec tunnels. This allows
all of the IPSec VPN connections to act like static-to-static connections. The RouteFinder SOHO security
appliance checks the FQDN IPSec configuration every two minutes for IP address changes. If the IP address
is different than the last time it checked, it drops the current tunnel and creates a new one. This helps to keep
IPSec VPN tunnels readily available with minimal interruptions in data communication.
