.com

Avaya Secure 2330 A converged voice/data branch solution

The Avaya Secure Router 2330 is a powerful modular Avaya Secure Router 2330 system that converges routing, voice gateway, security and multimedia traffic forwarding in a single cost-effective platform for enterprises. Delivering fast, secure, reliable and scalable wide area network (WAN) access, the Secure Router 2330 is perfect for enterprises requiring high-speed IP or Internet access.

The Secure Router 2330 combines high performance, robust routing, flexible Features WAN and voice media gateway connectivity and is targeted at enterprise branch Multi-service platform and remote site environments. A rich suite of routing services and advanced • Full IPV4/IPV6 routing, IPSec, VLAN and WAN functionality makes the Secure Router 2330 ideal for high-speed Internet stateful firewall access, private line WAN connectivity, IP Telephony and multimedia, IPSec • Voice media gateway services, including support VPN, stateful firewall and data applications. Comprehensive, simple-to-use for digital and analog trunks, analog phones, fax software tools enable sophisticated access and bandwidth management for machines and modems dependable communications. • Range of WAN connectivity, including T1/E1, ISDN BRI, Serial, and ADSL2+ Voice Gateway services Robust routing • Range of integrated voice interfaces, including T1/E1 PRI, BRI, FXS/DID and FXO/CAMA Routing services include a full IPv4 and IPv6 protocol set, including BGP-4 – enable connection to the PSTN or analog and multicast capabilities. A full-function IPv6 implementation also enables telephony devices deployment into environments that require extended IP addressing with the same • Up to 64 simultaneous voice (DSP) channels can handle voice gateway needs of small to large routing services — all without any additional system memory requirements. branch sites

Robust routing Voice Media • Low-latency, high-packet throughput ideal for VoIP and multimedia transport Gateway Services

• IPv4 or IPv6 with BGP-4 and Multicast services The Secure Router 2330 offers a set of integrated voice interfaces that allow (PIM-SM, DVMRP) connection to the public switched telephone network (PSTN) as well as support Integrated security of conventional TDM-based telephony devices. T1/E1, FXS and FXO interfaces • Stateful packet inspection firewall are all available for flexible telephony connection with support for up to 64 • VPN hardware acceleration and IPSec VPN simultaneous voice channels. The Secure Router 2330’s media gateway services services for secure voice and data transport are also interoperable with Avaya’s Communications Server 1000/2000/2100, Microsoft OCS and other third-party SIP call servers, including Broadsoft, for additional telephony deployment options.

OVERVIEW 1 avaya.com

Survivable SIP gateway deployment over IPSec and VPN tunnels, other WAN interfaces to create a single and IPSec VPN data-encryption services with virtual interface capable of transmitting at The Secure Router 2330 also supports AES, 3DES, DES, SHA-1, MD-5 and Diffie- the maximum bandwidth available. Multi- a Survivable SIP gateway that facilitates Hellman support. linking enables hassle-free bandwidth connection of SIP-based registered clients, scalability, high-speed video, voice and data allowing enterprises to take full advantage of transfer while securing connectivity from VoIP and other advanced SIP services. This Advanced quality individual link failures. feature further provides business continuity of service (or survivability) for locally-connected SIP devices via failover to the Secure Router’s Quality of service goes beyond Layer 3 flow- Simple to install, simple to PSTN interfaces in case of loss of the based support by including Layer 2 class- scale modular platform primary IP connection (see Figure 1). based queuing. The highest granularity of priorities (eight levels) provides maximum The Secure Router 2330 provides advanced performance with the lowest latency for voice, operational features while simplifying, or Integrated security video and other high priority traffic while eliminating, time-consuming and confusing guaranteeing bandwidth among all classes. installation tasks. The router’s chassis has 8 Powerful, fully-integrated security features built-in Ethernet and three module slots that include VPN and firewalls for increased can support either data or voice modules to reliability and user confidence. Capabilities Multi-link capabilities support the dynamic demands of growing include stateful packet firewall, detection businesses. This means that in addition and prevention of more than 60 Distributed Secure Router 2330 provides best-in-class to its 8 Ethernet ports, the SR 2330 can Denial of Service (DDoS) attacks, VPN MLPPP and MFR (FRF.16 and FRF.15) support up to: hardware acceleration for hub and spoke support to allow bonding of T1/E1, T3 and • 6 T1/E1, serial or ISDN BRI ports, or

• 12 FXS/FXO ports

HQ/Data Center

PSTN Management Avaya or third-party SIP call servers The Secure Router 2330 employs an IP industry-aligned command line interface (CLI) that makes it easy to set up and Secure Router 4134 manage. Features include:

• On-Premise, Console and Command Line WAN Interface; , Events, Syslog

Branch Secure Router 2330 • Remote SSHv2 provides secure PSTN communication for configuration and maintenance

PC PC SIP phones

Figure 1. Secure Router 2330 supports both data and IP telephony devices in the branch with survivable SIP voice services even when the WAN link goes down.

2 avaya.com

The Secure Router family • 1000 Mbps Optical SFP MPLS Label Edge Routing (LER) services • IEEE 802.1x port authentication • Label Distribution Protocol (LDP) The Secure Router 2330, with its modular design, high throughput and reliable • IEEE 802.1p • RSVP-TE, OSPF-TE performance, is complemented by Avaya’s • IEEE 802.1Q • MPLS Fast Reroute Secure Router 1000, 3120 and 4134 • IEEE 802.3ad LACP • MPLS Martini Pseudo-wire (Ethernet, Series. Deployed in combination with other • IEEE 802.1s MSTP PPP, HDLC over MPLS) Secure Router models, the Secure Router 2330 not only handles the WAN and LAN • IEEE 802.3x VLAN Quality of Service/Traffic Management requirements of the integrated branch, • GVRP • RED, WRED, DiffServ, bandwidth but can also act as a voice media gateway • Port mirroring guarantee/sharing, flow monitoring device for connection to the PSTN. • Jumbo frames • Traffic Policing • Ethernet Connectivity Fault Management • 8 level Priority Class Based Queuing An easy choice (CFM) — Per IP address/subnets, Ports, DSCP and ToS bits, VLAN ID (802.1q), Secure Router 2330 is a high-performance, WAN cost-effective branch convergence solution VLAN Priority (802.1p) • T1/E1, including ISDN PRI that brings together feature-rich voice and • Frame Relay traffic shaping and policing • ISDN BRI (U and S/T), both data and data services into a common platform for • VLAN Classification (port, subnet or voice simplified management, greater cost savings protocol-based) and a high quality of user experience. • ADSL2+ (Annex A and B) • Serial (V.35, RS-232/V.28, RS-449/V.11, Firewall Technical Specifications EIA-530/A and X.21/RS-422) • Stateful Packet Inspection Firewall • Point-to-Point Protocol (PPP), including • 25-zone support (including Corporate, Features PPP over Ethernet (PPPoE) Internet, DMZ) Internet Routing • Frame Relay (including FRF.12 • NAT, including policy-based NAT/PAT • IPv4 and IPv6 support, including IPv4- fragmentation) • 60+ Distributed Denial of Service (DDoS) IPv6 tunnels • HDLC Attack Preventions • Static routing, RIPv1/2, RIPng for IPv6, • Bridge Control Protocol (BCP) • 30+ ALG support (including H.323/SIP) OSPFv2 and v3, BGP4/4+ • Multilink PPP (MLPPP) • Pass through, IPSec, L2TP, PPTP • Policy-based routing • Multilink Frame Relay (MFR), including Voice Signaling Support • Inter-VLAN routing FRF.15 and FRF.16 • T1/E1 ISDN PRI (User side) • High availability: VRRP, redundant router IP Multicast connections • ISDN BRI (User side) • IGMPv1/2/3 for IPv4; MLDv1/2 for IPv6 • GRE and IP-IP Tunneling • T1 CAS • IGMP Proxy • E1 R2 CAS Ethernet LAN • IGMP Snooping • Q Signaling (QSIG) • 10/100 Base-TX • PIM-SM for IPv4/v6 • FXS (Foreign Exchange Station) • 10/100/1000 Base-TX • DVMRPv3 for IPv4 • FXO (Foreign Exchange Office)

3 • Direct Inward Dialing (DID) “VoIP-Friendly” Features Physical Specifications

• Centralized Automated Message • Low-latency packet forwarding Chassis Accounting (CAMA) • SIP ALG for NAT and Firewall • Height x Width x Depth: 4.4cm x 44.4cm • Emergency calling • Cone NAT (for Avaya Unistim protocol) x 29.6cm (1.75in x 17.5in x 11.6in) with NAT hairpinning SIP Survivability Features • Weight with Power Supply: 3.4 kg • Frame Relay fragmentation (FRF.12) (7.5lbs) • SIP proxy and registrar functionality • Compressed RTP (cRTP) • Chassis Slots: • Inbound/outbound PSTN dialing — 3 small module slots • Local dialing within the branch VPN — All slots are hot swappable • E911 • IPSec VPN, NAT-Traversal • 4 x 10/100 Fast Ethernet Copper • DES / 3DES, AES, SHA1, MD5 Codecs Supported • 2 x 10/100/1000 Ethernet copper • Site-to-site and remote access support • G.711 - A-law and u-law • 2 x GigE SFP Fiber ports • Optional VPN acceleration hardware • G.726 - 16, 24, 32 Kbps • Management ports: • 100 VPN tunnels — Compact Flash • G723.1 - 5.3, 6.3 Kbps — Console port (RJ-45) • G.729A - 8 Kbps Service Provisioning • Management Telnet, SSHv2, SFTP, PAP, Power options DSP Features CHAP, SNMPv2, DHCP, DNS Proxy, SNTP, • AC Power Supply – 50-60 Hz, 90-269 • TDM to IP, IP to TDM conversion RADIUS, TACACS+ VAC, 60 Watts • ITU G.168 Echo Canceller • Monitoring: Syslog, statistics, RMON, alarm • 12 VDC Input for optional external • Voice Activity Detection/Comfort Noise • Diagnostics: BERT, loopback testing, redundant power Generation trace route, packet capture (PCAP) Environmental • DTMF digit detection • Operating Temperature: 32° to 104°F • Caller ID generation and detection (0° to 40°C) • T.38 fax relay/Fax and Modem • Relative Humidity: 0 to 95% Pass‑through (non-condensing) • Up to 64 DSP channels

About Avaya

Avaya is a global leader in enterprise communications systems. The company provides unified communications, contact centers, and related services directly and through its channel partners to leading businesses and organizations around the world. Enterprises of all sizes depend on Avaya for state-of-the-art communications that improve efficiency, collaboration, customer service and competitiveness. For more information please visit www.avaya.com.

© 2010 Avaya Inc. All Rights Reserved. Avaya and the Avaya Logo are trademarks of Avaya Inc. and are registered in the United States and other countries. All trademarks identified by ®, TM or SM are registered marks, trademarks, and service marks, respectively, of Avaya Inc. avaya.com All other trademarks are the property of their respective owners. Avaya may also have trademark rights in other terms used herein. References to Avaya include the Enterprise business, which was acquired as of December 18, 2009. 03/10 • DN5105