(?),9013277-2_XSRseries_DS 4/8/04 10:43 AM Page 1 XSR™ 3000 Series Security Routers for Large Offices • Comprehensive security features for enterprise branch, regional and central offices • Integrated IP routing, VPN, firewall in a single device • Industry-standard management for interoperability in multivendor environments • Best-in-class price and performance • Enterprise-class IP Meeting the Demands of a and policy-managed, stateful-inspection routing, QoS and WAN Changing Enterprise Environment firewall—in a single device. Unlike typical — Delivers non-stop local WAN routers, the XSR Security Router To keep up with evolving business demands, and wide area networking provides best-of-breed security and maintains enterprises of all sizes and types must — QoS enables VoIP and wire-speed WAN performance when operate in geographically dispersed locations. other priority-sensitive features are enabled. And, unlike typical This means that critical information and applications security appliances, the XSR provides key personnel may be located across the • Rich suite of security e x t e n s ive IP routing, Quality of Service country or around the globe. technologies (QoS) and a wide range of WAN interfaces. — Extranet, site-to-site and While this trend can enhance productivity, remote access VPN XSR Security Routers provide powerful it can also increase the risk to the security technologies management and configuration tools, of intellectual property and corporate — Policy-managed, including a familiar Command Line computing resources. A best-practice deep-packet, stateful Interface, SNMP and network management a p p r o a c h to protecting remote IT resources inspection firewall application support. Since it can be fully is a defense-in-depth strategy, with distributed — Security options are monitored and diagnosed remotely, the XSR security—in the form of a state-of-the-art software upgradeable, is ideal for locations that are managed from security router—at each office. simplifying and reducing the central site of a larger network or for the cost of deploying High-Performance Routing, VPN, offices where users lack networking expertise. new features and network capabilities F i rewall and WAN for Your Off i c e s The XSR sets industry-leading price/ • Powerful management The XSR 3000 Series Security Router performance benchmarks for mid-range tools delivers simple and powerful enterprise networking with IP routing, VPN and firewall — Easy-to-use CLI for WAN networking by combining compre- available at a significant price a d v a n t a g e reduced training costs hensive IP routing features; a broad range over the competition. In addition, the XSR — SNMP integration including of WAN interfaces; and a rich suite of WAN modules are shared across multiple support for SNMPv3 security functions, including site-to-site Enterasys platforms, leveraging your invest- — Enhanced management and remote access Virtual Private Networking ment and simplifying deployment s c e n a r i o s . via client/server Java application • Industry price/performance leadership — Optimized IP routing throughput of 250k to 500k PPS — Dedicated on-board VPN acceleration with up to 350 Mbps throughput — EOS Routing Services support a wide range of protocols — NIMs interopable with other XSR devices Page 1 of 6 • Data Sheet (?),9013277-2_XSRseries_DS 4/8/04 10:43 AM Page 2 Choose from these different options: of up to two T3/E3 or eight T1/E1 links. As a security appliance, the XSR-3150 is capable of 2 Gigabits Firewall XSR-3020 for the High-End Branch Office. With 250k t h r o u g h p u t and the IPSec VPN encryption option runs at PPS IP routing throughput, support for 1,000 VPN connec- 350 Mbps for either AES or 3DES. A redundant power supply t i o n s , and 1 Gigabit Firewall throughput, the XSR-3020 is is included to ensure high availability. well suited to service the high-end branch office. Capable of line-rate performance with dual T3/E3 interfaces, the XSR-3250 for Regional Office with WAN Aggregation XSR-3020 can be deployed to connect the branch office R e q u i r e m e n t s . With performance levels similar to the with hundreds of onsite users and teleworkers. XSR-3150, the XSR-3250 (600k PPS) has six network interface module (NIM) slots. This enables it to serve the XSR-3150 for Regional Office/VPN Tunnel Server. regional office, where up to six T3/E3 or 24 T1/E1 connections Performance of 525k PPS and support for 3,000 VPN are required. A redundant power supply is included to connections position the XSR-3150 to meet the needs of ensure high availability. the high-end branch or regional office with WAN connections Features at a Glance XSR Model XSR-3020 XSR-3150 XSR-3250 NIM Slots 2 2 6 Fixed 10/100/1000 Ports 3 3 3 Optional Gigabit Ethernet* Mini-GBIC Mini-GBIC Mini-GBIC IP Routing Performance 250k PPS 525k PPS 600k PPS VPN Tunnels 1,000 3,000 3,000 (upgradeable) (upgradeable) VPN Throughput 150 Mbps 350 Mbps 350 Mbps Firewalling Throughput 1.1 Gbps 2 Gbps 2+ Gbps Firewall Sessions 150,000 400,000 450,000 Redundant Power No Embedded Embedded Supplies VPN Accelerator Embedded Embedded Embedded Flash Memory** 8 MB 8 MB 8 MB DRAM 128 MB 256 MB 256 MB External Compact Flash Yes Yes Yes * Use of optional Gigabit port disables 1 10/100/1000 fixed port. **External compact flash is used to augment flash memory. Page 2 of 6 • Data Sheet (?),9013277-2_XSRseries_DS 4/8/04 10:43 AM Page 3 Specifications Environmental Specification Agency And Standards Specifications Operating Temperature Safety 0° C to +40° C (+32° F to 104° F) UL 60950, CSA 60950, EN 60950, EN 60825 and IEC 60950 Non-Operating Temperature Electromagnetic Compatibility -40° C to +70° C (-40° F to 158° F) 47 CFR Parts 2 and 15, CSA C108.8, EN 555022, EN Operating Humidity 55024, EN 61000-3-2, EN 61000-3-3, AS/NZS CISPR 5% to 90% (non-condensing) 22, and VCCI V-3 Power Consumption Telecom Approvals T1/E1 NIM and CT1/E1 NIM Total Power (100 to -240~ Volts) 25W USA 47 CFR Part 68; Canada CS-03; Europe TBR 12 and TBR 13 (For other approved countries, check with Physical Specification your Enterasys representative.) XSR-3020 Dimensions ITU/IETF Standards Support 53.3 cm (21") L x 42.9 cm (16.9") W x 4.2 cm (1.6") H (A full range of standards/protocols are supported. Ask your Enterasys representative for details.) Weight 7.72 kg (17 lbs) Enterasys Private Enterprise MIB Support Download-MIB XSR-3150 Parameters for router upload/download Dimensions 53.3 cm (21") L x 42.9 cm (16.9") W x 4.2 cm (1.6")H Chassis-MIB Parameters for router hardware Weight 9.09 kg (20 lbs) Timed-Reset-MIB Parameters for a countdown timer and a forced reset after XSR-3250 expiration Dimensions Configuration Change MIB 53.34 cm (21") L x 43.22 cm (17.015") W x 6.4 cm (2.5") H Parameters for SNMP management entities to determine Weight if and when configuration changes have occurred 13.154 kg (29 lbs) Configuration Management MIB Parameters for an SNMP management entity to reset the managed entity, upload and download executable images and configuration files, and identify the active executable image and configuration files Syslog Client MIB Parameters for SNMP configuration of individual network entities to generate and log diagnostic messages SNMP Persistence MIB Parameters for SNMP to save configuration changes to the startup-configuration file Page 3 of 6 • Data Sheet (?),9013277-2_XSRseries_DS 4/8/04 10:43 AM Page 4 Ordering Information Base Appliances XSR-3020 XSR Security Router with three 10/100/1000 Ethernet LAN interfaces, 2 NIM slots, 8 MB onboard Flash memory, 128 MB DRAM, dedicated VPN Accelerator, Compact Flash slot and power supply (internal) in a rackmount form factor; bundled with Enterasys Operating System (EOS) IP Routing Services XSR-3150 XSR Security Router with three 10/100/1000 Ethernet LAN interfaces, 2 NIM slots, 8 MB onboard Flash memory, 256 MB DRAM, dedicated VPN Accelerator, Compact Flash slot, and redundant power supplies (internal) in a rackmount form factor; bundled with Enterasys Operating System (EOS) IP Routing Services XSR-3250 XSR Security Router with three 10/100/1000 Ethernet LAN interfaces, 6 NIM slots, 8 MB onboard Flash memory, 256 MB DRAM, dedicated VPN Accelerator, Compact Flash slot, and redundant power supplies (internal) in a rackmount form factor; bundled with Enterasys Operating System (EOS) IP Routing Services Software XSR-3020-VPN VPN for the XSR-3020 XSR-3020-FW Firewall for the XSR-3020 XSR-3020-VPN-FW VPN and Firewall for the XSR-3020 XSR-3xxx-VPN VPN for the XSR-3150 and XSR-3250 XSR-3xxx-FW Firewall for the XSR-3150 and XSR-3250 XSR-3xxx-VPN-FW VPN and Firewall for the XSR-3150 and the XSR-3250 Network Interface Modules XSR-NCC-250-4xx NIM carrier card* (for the XSR-3250 only) NIM-ADSL-AC-01 1-port ADSL network interface module (Annex AC – POTS) NIM-ADSL-B-01 1-port ADSL network interface module (Annex B – ISDN) NIM-ETHR-01 1-port 10/100 Ethernet network interface module NIM-FIBR-01 1-port FX100 Fiber network interface module Page 4 of 6 • Data Sheet (?),9013277-2_XSRseries_DS 4/8/04 10:43 AM Page 5 Ordering Information NIM-CT1E1/PRI-1 1-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU NIM-CT1E1/PRI-2 2-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU NIM-CT1E1/PRI-4 4-port channelized T1/E1 with support for ISDN PRI and integrated CSU/DSU NIM-DIRELAY-02 Drop and insert network interface module, provides IP PBX pass through for T1/E1 with integrated CSU/DSU NIM-T1/E1-01 1-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU NIM-T1/E1-02 2-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU NIM-T1/E1-04 4-port T1/E1 network interface module, provides Clear Channel and Fractional operation with integrated CSU/DSU NIM-SER-02 2-port Sync/Async Serial WAN network interface module (2 Mbps per port) Note: These are not HSSI interfaces NIM-SER-04 4-port Sync/Async Serial WAN network interface module (2 Mbps per port) Note: These are not HSSI interfaces NIM-BRI-ST-01 1-port ISDN Basic Rate network interface module with S/T interface (Euro version) NIM-BRI-ST-02 2-port ISDN Basic Rate network interface module with S/T interface (Euro version) NIM-BRI-U-01 1-port ISDN BRI with U interface NIM-BRI-U-02 2-port ISDN BRI with U interface NIM-T3/E3-01 1-port fractional T3/E3 network interface module with integrated CSU/DSU Accessories XSR-512MB-MEM 512 MB memory upgrade for XSR-3150 and XSR-3250, expands routing, VPN and Firewall units NIM-V35-CAB-04 4-port V.35 DTE serial cable for NIM-SER-xx NIM-232-CAB-04 4-port RS232/EIA530 DTE serial cable for NIM-SER-xx NIM-X21-CAB-04 4-port X.21 DTE serial cable for NIM-SER-xx Page 5 of 6 • Data Sheet (?),9013277-2_XSRseries_DS 4/8/04 10:44 AM Page 6 NIM-449-CAB-04 4-port EIA 449 DTE serial cable for NIM-SER-xx NIM-DBU1-CAB-04 4-port combination V.35 /RS232 DTE serial cable for NIM-SER-xx MGBIC-LC01 1000Base-SX Mini-GBIC with LC connector MGBIC-LC09 1000Base-LX Mini-GBIC with LC connector MGBIC-MT01 1000Base-SX Mini-GBIC with MTRJ connector *Note: XSR 3000 Series configurations include hardware and software components. Product orders should include: • The XSR-3000 base system (EOS IP Routing Services, on board flash and base DRAM, 3 10/100/1000 LAN interfaces and 2 to 6 NIM slots, model dependent) • 1 to 6 network interface modules (NIM), if needed. • NIM carrier card (Model XSR-3250) for installation of the third and all subsequent NIMS; order one NIM carrier card XSR-NCC-250-4xx for every two NIMs. (The first and second NIM can be installed on the XSR-3250 without a NIM carrier card. One NIM carrier card enables the installation of a third and fourth NIM. A second enables the installation of a fifth and sixth NIM.) Please note that NIMs must be installed in a NIM carrier card to be hot swappable (hot swap available in XSR Release 9). • NIM cables, if needed • Additional security features (VPN and Firewall) and additional memory for added VPN tunnel capacity, if needed • NetSight Atlas Router Services Manager application • Service contract, recommended to maintain system currency • XSR series products have a license management system to allow the purchase and installation of additional software feature sets at any time. Warranty Additional Information As a customer-centric company, Enterasys is committed to For additional information on the XSR, please visit the web providing the best possible workmanship and design in our at enterasys.com/products/routing product set. In the event that one of our products fails due Contact Information to a defect in one of these factors, we have developed a comprehensive warranty that protects you and provides a Contact Enterasys Sales at 8 7 7 - 8 0 1 - 7 0 8 2 o r simple way to get your products repaired as soon as possible. e n t e r a s y s . c o m / c o r p o r a t e / c o n t a c t / c o n t a c t - s a l e s . h t m l Enterasys Networks Service and support Corporate Headquarters Enterasys Networks understands that superior service and 50 Minuteman Road ™ support is a critical component of Networks that Know. A n d o v e r, MA 01810 The Enterasys SupportNet Portfolio—a suite of innovative U . S . A and flexible service and support offerings—completes the Enterasys solution. SupportNet offers all the p o s t - i m p l e m e n- tation support services you need—online, onsite or over the phone—to maintain your network availability and performance. NetSight and XSR are trademarks or re g i s t e red trademarks of Enterasys Networks. All other products or services mentioned are identified by the trademarks or service marks of their respective companies or organizations. NOTE: Enterasys Networks reserves the right to change specifications without notice. Please contact your rep- resentative to confirm current specifications. All contents are copyright © 2004 Enterasys Networks, Inc. All rights re s e r v e d . Lit. #9013277-2 4/04 Page 6 of 6 • Data Sheet