Speedtouch™ 620/620I/620M/620S/620V/620F Business Wireless DSL Gateway

SpeedTouch™ 620/620i/620m/620s/620v/620f Business Wireless DSL Gateway

SpeedTouch 620/620i/620m/620s/620v/620f

Works with: • Windows 95, 98, Me and XP • MAC OS • Linux

For more details, please refer to the respective websites. SpeedTouch™ 620/620i/620m/620s/620v/620f Business Wireless DSL Gateway

A world of business applications... DSL gives sense to IP!

Flexible Solution The SpeedTouch 620 Series allows providers to The SpeedTouch 620 Series is a family of business- achieve a higher ARPU* than what is possible with class high performance routers. The SpeedTouch 620 the residential market. It fits the needs of Carriers, Series has been designed for Corporate/SMEs and ISPs, ASPs, Integrators and Managed Services SOHOs and offers plenty of possibilities through a Providers. It provides complete set of business features. • Managed Ethernet Switch with VLAN, DMZ, mirroring … and full remote management for setting-up SLAs, • LAN interconnect capabilities (IP VPN based on IPSec or MPLS) • VoIP features through built-in SIP multi-media PBX software • ADSL support and also hi-speed variants with ADSL2+, SHDSL.bis, VDSL.bis and GE.Fiber, integrated ISDN backup • Easy installation, embedded firewall, QoS • Wireless 802.11a/b/g capabilities • Ready for extensions: - Extension slot for upgrades and up-selling (IPSec hardware acceleration, V.92 back-up, GPRS back-up) - USB2 master port for hard disk and printer sharing

* Average Revenue Per User Business Wireless DSL Gateway

Reduced cost Operating a helpdesk is a costly business. With the SpeedTouch 620 Gateways, this cost is drastically reduced. Our complete range of DSL routers has been designed to reduce your Total Cost of Ownership (TCO). As there is no need to install software, OS upgrades are trouble-free and the PC environment remains stable.

Office Networking This gateway is the ideal solution for business offices where there is an urgent need to share access along with other colleagues. All the users will appreciate that PCs, PDAs and other devices can instantly connect to the Internet through a single hi-speed DSL gateway. Also, this gateway is fully compatible and tested to work with all our SpeedTouch 100 and 200 series (Wireless access point, LAN PCI card, PCMCIA card, wireless USB or PCMCIA cards). Just a few clicks, and you can have a complete, secure and reliable office network (LAN and WLAN simultaneously). High Performance Performance High

SpeedTouch™ 620/620i/620m/620s/620v/620f High Performance Router

The SpeedTouch 620 Series proposes a full family of high performance DSL Routers, with all the DSL flavors: ADSL, SHDSL, VDSL and Fiber.

4ATM features as an isolated IP interface (e.g. LAN, WAN, DMZ, • Up to 16 simultaneous PVCs, allowing multiple Guest, ..) and/or as PPPoE client simultaneous destinations - Support of multiple IP interfaces • ATM QoS per PVC: CBR, VBR-rt, VBR-nrt, UBR (with different IEEE 802.1q VLAN IDs) on • Service monitoring through ITU-T I.620 F4/F5 Ethernet ports and ATM PVCs loopback, alarms (AIS / RDI) and continuity checks • ATM PING command (loopback cells) and 4Dial-up networking’ features (PPP Relay) continuity check generator mode • RFC 2364 point-to-point protocol over ATM via • RFC 1483 / 2684 multiprotocol encapsulation over PPPoA-to-PPTP relaying AAL5 / ATM: both LLC / SNAP and VC-based • Multiple RFC2673 PPTP tunnels per end user multiplexing supported allowing simultaneous VPN connections between multiple hosts and destinations 4Bridging features • Multiport self-learning transparent bridge per 4Routed encapsulations IEEE 802.1D for LAN interconnect • IP over ATM (IPoA): • Remote bridge ports are isolated from each other - RFC 1483 / 2684 routed encapsulation • Pre-defined bridge filters to WAN (no filter, no - Support for IP unnumbered and for multiple CPE-to-WAN broadcast, PPPoE only) and to LAN IP addresses (no filter, multicast filter) - “True” RFC 1577 / 2225 classical IP over ATM encapsulation: supports the ATMARP and 4Integrated Managed Ethernet switch features InATMARP protocol, based on RFC 1293 / 2390 • Port configuration: port speed, full/half-duplex • IP over Ethernet (IPoE): • Port mirroring – allows network debugging - RFC 1483 / 2684 MAC encapsulated routing through non-intrusive sniffing encapsulation (RFC 1483 / 2684 bridged) • SNMP support (Medium Attachment Unit, - Support for IP unnumbered and for multiple Ethernet, interface and bridge MIBs) IP addresses • Embedded PPP clients: 4VLAN - RFC 2364 PPP over ATM, RFC 2516 PPP over • VLAN aware bridging (IEEE 802.1q), with isolated Ethernet or shared self-learning bridged table per VLAN - Terminates multiple PPP sessions per RFC 1661 • VLAN tagging - Multiple PPPoE sessions on a single PVC • Configurable VLAN priority re-mapping - PPPoE pass-through: support of pass-through (IEEE 802.1p) PPPoE sessions (directly between PC and BAS) • PVC mux/de-mux: One bridge port can be together with embedded PPPoE sessions on the multiplexed / de-multiplexed over multiple ATM same PVC PVCs, using a configurable policy, using VLAN priority (IEEE 802.1p) to map packets to PVCs • Logical Ethernet concept: - Any physical Ethernet port can be configured High Performance Router

- Multiple embedded PPPoE sessions, multiple • Redundancy (DSL + DSL, using two SpeedTouch pass-through PPPoE sessions and up to one 620 routers) IPoE session can be combined on the same PVC. - Switch-over triggerable by PPP link failure, RIP, - PPPoE to the LAN – allows to use Ethernet ports F4/F5 AIS/ RDI and/or DSL physical layer failure as WAN interface • Classless inter-domain routing (CIDR - RFC 1518 / - Both PPPoE client and server mode 1519): subnetting, supernetting (RFC 1338), - Dial-up networking user GUI allowing variable length subnet masks (VLSM - RFC 1009); PPP session setup with service provider support for 31-bit prefixes (RFC 3021) - PAP (RFC 1334), CHAP (RFC 1994 / 2484) • IP over LAN (RFC 894), Address Resolution and MS-CHAP (RFC 2433) authentication Protocol (RFC 826); proxy ARP (RFC 1027) using - Auto configuration IPCP configurable ARP table (RFC 1331 / 1548 / 1661 / 1877) • PING, extended PING, trace route and extended - Dial-in, dial-on-demand and always-on PPP modes trace route - Support for IP unnumbered and for multiple • HTTP Probe: measures DNS resolution time, TCP IP addresses connect time, HTTP download time and bandwidth - DHCP-to-PPP spoofing • Wirespeed routing performance - IPCP subnet mask option: Internet access for multiple PCs on a single PPP session without * Available as option (under SW key) NAT / PAT (using multiple IP addresses) 4NAT/PAT 4IP routing • Traditional NAT (network address translation) • Multi-port (up to 16 PVCs) router support for both Basic NAT / multi-NAT and NAPT • Static routing, automatic routes (PPP, LAN) (network address and port translation) • IP address multi-homing (RFC 1631, 2663, 3022, 3027) • Label-based routing: • Static NAPT entries and static NAT - Label classification of packet streams based on (multi-NAT, basic NAT) entries source and destination IP address, source and • Transparent NAT – allows use of public IP destination port, type of service / diffserv bits, addresses on the LAN even in case of a NAT’ed protocol, source interface interface - Forwarding of packet streams based on the • Support for NAPT default server, configurable per label classification Public IP address - Type of service (RFC 1349) / DSCP (RFC 2474) • Simultaneous support of Basic NAT / multi-NAT, marking based on the label classification NAPT, transparent NAT and default server on a • IGMPv1/v2/v3 forwarding single interface • IP (RFC 791), TCP (RFC 793), UDP (RFC 768), • UPnP NAT Traversal, with safe NAT mode and ICMP (RFC 792), IPv4 router (RFC 1812) logging of UPnP commands • Dynamic routing RIPv1 (RFC 1058) and RIPv2 • Zero-config support for VPN tunnel pass-through (RFC 1723 / 2453), configurable per interface for IPSec / IKE, L2TP and PPTP / GRE, including • ISDN Back-Up (DSL + ISDN, using integrated support for multiple simultaneous tunnels, ISDN S0 interface):* to different servers or even to the same server - PPP over ISDN (RFC 1618), Multi-link PPP • Zero-config NetMeeting / H.323 support via ILS (RFC 1990), PPP Dial-on-demand. snooping - Switch-over triggerable by PPP link failure, RIP, • Zero-config SIP support, supporting simultane- F4/F5 AIS/ RDI and/or DSL physical layer failure ously multiple SIP clients and multiple Microsoft - Bandwidth on Demand: PPP Bandwidth Messenger clients Allocation/Control Protocol (BAP/BACP; RFC 2125) • Zero-config support for FTP (including passive - ISDN DSS1 (ETS 300 125, ETS 300 102-1, FTP), IRC, Jabber, RealAudio and RTSP EN 300 403-1) • Zero-config IPv6 6to4 pass-through support - Supplementary services: CLID, CLIP, CLIR, CBCP • Configurable time-out periods for outbound - Remote outband configuration possibility sessions (support of incoming calls) Easy Setup & Management & Setup Easy SpeedTouch™ 620/620i/620m/620s/620v/620f Easy Setup & Management

The SpeedTouch Business Class Routers 620 benefit from the same setup tools than the residential SpeedTouch Products. They can be setup either locally by a “Click Next” wizard, remotely by the Carrier, ISP or Integrators through FTP, Telnet/SSH or HTTP/HTTPS interfaces.

Intuitive wizard

Network Layout UPnP Easy Setup & Management

4Main features • Time synchronization SNTPv1 (RFC 868), SNTPv2 • Language selection for CD ROM programs and (RFC 1119), SNTPv3 (RFC 1305) and SNTPv4 web GUI supporting 8 languages (RFC 2030) • Fail-proof setup wizard on CD ROM, customizable • Real-Time Clock (for non-volatile time-of-day) using operator-defined templates • Microsoft Windows UPnP: presentation, • Dr SpeedTouch on CD ROM, for continuous discovery and Internet Gateway Device model service and performance monitoring and • Remote and host software download capability user-friendly dynamic trouble-shooting, using web / HTTP / HTTPS and FTP (RFC 959) / FTPS customizable per operator • Configuration and software back-up and restore • Fully configurable via user-friendly web-based • Storage of two software images, for fail-safe GUI (HTTP / HTTPS) remote software upgrade and easy software • Support of TLS (RFC 2246, 2817, 2818, 3268) roll-back • Embedded multi-language setup wizard on • Digitally signed system software, guaranteed the web, customizable using operator-defined tamper-free templates • Storage of multiple configurations, with easy • Embedded hierarchical diagnostics tool on the web switch-over between configurations • Extensive embedded on-line help pages on the web • Memory and processor load counters • Multi-Level Password protection for web, • Reset to ISP-specific defaults and to generic CLI and FTP factory defaults - Default roles include Super User, Remote • DHCP server (RFC 1541 / 2131 / 2132): Auto-sensing Admin, LAN Admin, User, Guest DHCP server start/stop mechanism, DHCP-to-PPP - Allowed CLI commands and web pages per role and DHCP-to-IPSec spoofing, per-WAN-interface are completely configurable DHCP pool configuration and selection, Conditional - End-user access to the CPE can be completely Serving (based on options), DHCP Classless Static disabled Route Option (RFC 3442), Vendor Class Identifier • Support for HTTP digest authentication Option (60) & User Class Identifier Option (77) • Command line interface over serial port (DIN), (RFC 3004), Serving of arbitrary options, IPCP over Telnet (RFC 854) / SSH, on the web subnet mask DHCP pool propagation support for (HTTP / HTTPS - SSL) and over FTP / FTPS Routed PPPoA and Routed PPPoE • CLI fully available both in menu-mode and in • DHCP client (RFC 1541 / 2131 / 2132): DHCP text-mode Classless Static Route Option (RFC 3442), Vendor • “SNMPv1 (RFC 1157): Class Identifier Option (60) & User Class Identifier - MIB II (RFC 1213): groups system (1), interfaces Option (77) (RFC 3004), DHCP client over PPP (2) (RFC 1229 / 1573 / 2233 / 2863), ICMP (5), EGP (DHCP INFORM) and over IPoA, BOOTP client (8), Transmission (10), SNMP (11), IP (48) (RFC (RFC 951 / 1542) 2011), TCP (49) (RFC 2012), UDP (50) (RFC 2013) • DHCP relay (RFC 1541 / 2131 / 2132): Redundant - RMON MIB (RFC 1757 / 2819): groups statistics DHCP servers, DHCP relay agent information (1), history (2), alarm (3), event (9) option (RFC 3046) - ATM TC MIB (RFC 2514), ATM MIB (RFC 1695 / • Network-aware auto-IP (auto-configuration of 2515), ADSL MIB (RFC 2662) / SHDSL MIB link-local IP addresses, RFC 3330) (RFC 3276) • DNS server and forwarding; support of multiple - Bridge MIB (RFC 1286 / 1493), Ethernet MIB (RFC DNS servers; integrated Dynamic DNS client 1398 / 1623 / 1643 / 1650 / 2358 / 2665), Medium (dyndns.org, no-ip.com, dtdns.com, GnuDIP) Attachment Units MIB (RFC 1515 / 2239 / 2668) - Traps MIB (RFC 1215), IPSec Flow Monitor MIB, PING & Traceroute MIB (RFC 2925)” • Logging of events (alarms, warnings, operator sessions,...) on web page and to standard syslog-server (RFC 3164) SpeedTouch™ 620/620i/620m/620s/620v/620f Network Management & Quality of Service (QoS) Network Management & QoS & Management Network Network Management Quality Of Service SLAs monitoring The SpeedTouch 620 Series offers quality-of-service A powerful embedded Service Level Agreement (QoS) features to optimise the traffic priority and (SLA) monitoring engine enables Carriers, ISPs, deliver IP packets according this priority (e.g.: voice ASPs, Integrators and Managed Services Providers with high priority, data with low priority). to monitor and deliver reports to their customers Three levels are possible: and be pro-actively aware of network problems that • ATM QoS impact application performance, and solve the • IP QoS problems even before the customer complains. • Ethernet QoS The SpeedTouch 620 automatically generates Web reports showing compliancy to the agreed SLA’s (availability, delay, jitter,..) by using PING/Traceroute SNMP MIB (RFC2925), MIB-II, RMON MIB. The SpeedTouch 620 can easily be integrated with Network Management Systems such as Viola Networks NetAlly, InfoVista VistaView, Visual Networks IPInsight, Quallaby Proviso, Concord, NetIQ AppManager/ Chariot/ Vivinet,..

Equipment and topology management The SpeedTouch 620 can be visualized in any network map: graphical display of network topology and of network devices, including alarm status, logs, counters and graphs. In addition, software and configuration upgrade and back-up can be done trough any Network Management Platform such as HP OpenView Network Node Manager, IBM Tivoli, Computer Associates UniCenter, CastleRock SNMPc by using SNMP Traps, Syslog, SNTP, SpeedTouch 620 MIBs (ADSL, SHDSL, ATM, Ethernet, Bridge, MAU, Interface), FTP or Telnet. Network Management & Quality of Service (QoS)

4Supported Intrusion Detection Signatures

Fragment signatures Scan signatures Denial-of-Service signatures Protocol signatures Rate signatures

Fragment sweep IP protocol scan TCP SYN flood TCP null port TCP rate limitin Zero-length TCP port scan UDP flood TCP data on SYN segment UDP rate limiting fragment size TCP SYN scan Ping flood TCP invalid urgent offset ICMP rate limiting Small fragment size Stealth TCP null scan ICMP unreachable storm UDP null port IP rate limiting Fragment size overrun Stealth TCP FIN scan Smurf broadcast attack ICMP type unknown Fragment overlap Stealth TCP xmas scan Smurf storm attack ICMP code unknown Fragment out-of-order Stealth TCP full xmas scan Fraggle broadcast attack IP zero payload Stealth TCP vecna scan Fraggle storm attack Stealth TCP SYN-FIN scan Land attack UDP port scan Spoofed packet Ping sweep scan

4ATM QoS features • IP QoS queues instantiated per upstream • 16 simultaneous VC’s interface (ATM VP/VC) • Supported ATM QoS categories: UBR, VBR-nrt, • IP QoS Scheduling: Queueing between 6 classes: VBR-rt, CBR - Real-time queue with strict priority over all other • Upstream PCR (UBR, CBR) and PCR/SCR/MBS queues (VBR-nrt & VBR-rt) shaping per VC - 4 WFQ queues with strict priority over the best • Connection Admission Control (CAC) using effort queue statistical multiplexing to prevent overbooking of - Best Effort queue. This class will use any guaranteed bandwidth bandwidth that is not used by the other classes, • Per VC queueing on frame level (for SAR) but does not have any bandwidth guarantees. • Fixed priority ATM QoS category queue scheduling • Queue scheduling algorithms: • Selective Discard enabled by default on all ATM - Strict priority scheduling QoS category queues - Weighted Fair Queuing (WFQ) with configurable • Explicit Congestion Notification Indication in case queue weights of ATM queue congestion • Packet Discard Strategies: • ILMI 4.0 auto-configuration - allows automatic - Tail Drop coordination of ATM PVC and QoS parameters - Early Packet Discard active queue management between DSLAM and CPE, auto configuration of and congestion avoidance (RFC 2309) using the upstream shaping on existing terminated VCs, BLUE algorithm auto configuration of Bridged Ethernet on new • Configurable queue propagation to enqueue in PVCs and auto configuration of PPPoE Relay on lower priority queue in case of congestion new PVCs • Rate-Limiting of the strict priority real-time queue data to a percentage of the interface bandwidth 4IP QoS features • Prioritization of upstream TCP ACK segments; • VLAN 802.1p User Priority Mapping ACK filtering (coagulation of ACKs of the same • IP, TCP, UDP, ICMP header based packet TCP connection), Dynamic MTU lowering during classification, prioritization and forwarding EF timer window • Application Level Gateway tracking of • Differentiated Services Architecture parent-to-child streams as basis for packet QoS (RFC 2475 / 3260) classification • Per-Hop Behavior: Best Effort (BE) and Class • IP rate limiting, using policing on IP packet level Selector (RFC 2474), Assured Forwarding (AF) based on a two-rate token bucket meter with (RFC 2597), Expedited Forwarding (EF) (RFC 3246) configurable mark, drop and count actions and • IP QoS TOS / DiffServ handling on Tunnels configurable token bucket parameters (RFC 2983) (rate, burst size) • SLA monitoring using (extended) PING, (extend- • Metering of classified data and metering on ed) trace route and HTTP Probe, both in one-shot egress interfaces mode and on continuous scheduled basis • IP header TOS byte / DSCP field marking, ECN marking (RFC 3168) SpeedTouch™ 620/620i/620m/620s/620v/620f Firewall & VPN

ICSA certified Firewall • Content filtering: URL classification and filtering Everyone knows about crackers and the dangers they according to 59 categories, based on look-up in a can pose to business. The SpeedTouch 620 Series database accessible on the Internet. has a built-in statefull firewall that denies all unau- • Packet filtering for all information available in the thorized access. IP packet header: End-users, equipment retailers or ISPs can configure - Source and destination interface, IP address and this powerful firewall for a broad range of security port policies and requirements. Attacks are stopped in the - TCP incoming / outgoing connections router and a log of attempted breaches of security is - PINGs, ICMP type and code number, type of kept for audit purposes. The SpeedTouch 620 keeps service, protocol you safe from security violations. - Logging of intrusions to webpage and to syslog Firewall & VPN & Firewall

4Statefull embedded firewall ICSA certified VPN • Statefull inspection, supporting bi-directional TCP SpeedTouch IP VPNs enable Flexible, Fast, Secure streams (with windows size and sequence and Scaleable solutions. The SpeedTouch IP VPN number tracking), bi-directional UDP streams uses the ‘state-of-the-art” technology for VPNs (IPSec (with loose and strict UDP tracking), and the with PKI for simple deployment). Remote sites, associated ICMP streams (with sequence number Teleworkers or Call Center Agents can be securely tracking), portless protocols (ESP, GRE, 6to4, ..), connected at low cost with IPSec, scalable through application streams (integrated with NAPT Public Key Infrastructure (PKI). The SpeedTouch IP Application Level gateways) and UPnP NAT VPN is incredibly easy to install and use. Traversal • Flexible • Pre-defined firewall rules for LAN, WAN, DMZ - Easily extend network to remote users and GUEST interfaces - Ability to set up networks or change networks • Intrusion detection and Denial-of-Service attack architecture quickly detection and prevention; limitation of the • Scalability amount of half-open TCP connections; detection - Leverages and extends classic WAN to more of TCP SYN scans; limitation of the amount of remote and external users connected TCP, UDP, ICMP and IP streams; - Improved geographic coverage prevention against spoofing; resistant against - Simplified WAN operations fragment attacks and withstands all attacks from • TCO well-known hacker tools (e.g. Nessus). Support - Dial up cost savings (Teleworkers) of counters and logging. - Delivers cost effective bandwidth for remote • ICSA certified as corporate class firewall. Built-in sites (branch-offices, partners …) hardware non-volatile real-time clock keeps the - Reduced dial infrastructure expenses and costs time even when the CPE restarts or is powered of the WAN. down. Extensive logging capabilities. • Powerful firewall GUI, allows to create firewall rules on the web interface with full flexibility • Easy-to-use slider firewall GUI, allows quick changes between firewall security levels Firewall & VPN

The SpeedTouch products combine features to deliver voice, video and data IP networks through VPN solutions

��

4IP VPN features* - Encapsulating security payload header • IPSec (RFC 2401 / 2407): ICSA VPN certified - (ESP - RFC 2406) guaranteeing a solid security implementation and - Differentiated Services handling on IPSec tunnels complete multi-vendor interoperability (RFC 2983) • Key distribution - Support for NAT-T IPSec ESP on top of UDP - Public key infrastructure (RFC 2459, ITU-T Q.817) - GRE (RFC 1701 / 2784, with key option RFC 1702 / with X.509 digital certificates; support for cross- 2890) and IP-in-IP (RFC 2003) tunnels certification and chain of trust - Bridge Emulation Mode (BEM) using proxy ARP - On-line PKI enrollment: CEP (certificate enrollment - Automatic and manual policy rules protocol) interoperable with Entrust, VeriSign, • Encryption Netscape and Microsoft CAs - AES Rijndael – 128 / 192 / 256 bits (RFC 3602), - Off-line PKI enrollment: PKCS#10 "Certification DES – 56 (64) bits (RFC 2405, FIPS-46-2, FIPS-74, Request Syntax Standard" (RFC 2314 / 2986) and FIPS-81), 3DES – 168 (192) bits, null encryption PKCS#7 (RFC 2315) "Cryptographic Message (RFC 2410), perfect forward secrecy (PFS), ESP Syntax Standard", compatible with Entrust, CBC-mode cipher algorithms (RFC 2451) VeriSign, Netscape, RSA Keon and Microsoft • Hashing : Keyed MD5 - Shared secrets (RFC 1825 / 1828), • Tunnel set-up Keyed SHA1 (RFC 1852), - ISAKMP, IKE / Oakley (RFC 2408 / 2409 / 2412), HMAC-MD5 (RFC 2403), Main Mode and Aggressive Mode HMAC-SHA-1 (FIPS-180- - Diffie-Hellman 768-, 1024- and 1536-bit Modular 1, RFC 2404 / 3174) Exponentiation (MODP) groups (number 1, 2 and 5) • Optional SpeedTouch - Certificate Revocation List (CRL) – ITU-T IPSec SW client for X.509v2; offline import; online import via LDAP tele-workers (RFC 1777) and HTTP interface - Xauth authentication: PAP and CHAP 4Support for MPLS net- - Support of redundant gateways, with Dead Peer works Detection (RFC 3706) and configurable idleness • Dedicated support for provider-provisioned monitoring PE-based MPLS networks: • IPSec as server: - Announcing of CPE IP address to a BGP-MPLS - IKE Mode Config: automatic push of configuration VPN using RIP information to an IPSec client - Advanced RIP route filtering capabilities to • IPSec as client: support simultaneously Internet access and - IKE Mode Config: dynamic retrieval of IP MPLS VPN access using RIP. address, policy for split tunneling, DNS and - Encryption over MPLS using IPSec WINS server IP address, DNS domain name - Monitoring from CPE to an MPLS VPN using - NAPT at the head of the tunnel; DHCP spoofing PING & Traceroute MIB with the red IP address assigned by IKE Mode - Support of DHCP over MPLS VPNs using DHCP Config Relay - Single and multiple client replacement scenarios • Tunnel mode * Available as option (under SW key) SpeedTouch™ 620/620i/620m/620s/620v/620f Voice Over IP (VoIP)

The SpeedTouch 620 Series includes a SIP PBX that enables voice communication over Internet or any IP Network. It can reduce or eliminate inter-office charges. For teleworkers, it allows them to place calls to their office either by using the headquarters PBX or by using a VoIP gateway. For branch-offices, it offers services such as a small PBX like call logging, call blocking, …

��

�� VoIP

��

�� Voice Over IP (VoIP)

4Integrated SIP Multi-media PBX features* • SIP Proxy Server • SIP (RFC 2543 / 3261) - Local SIP proxy server for the SIP User Agents - Supports single-site scenarios (one SpeedTouch on the LAN 620, no central softswitch), operator network - Supports all kinds of multi-media calls, scenarios (one SpeedTouch 620, with central including voice calls, video calls, text chat softswitch) and multi-site scenarios (multiple sessions and mixed calls SpeedTouch 620, no central softswitch) - Can work as proxy server towards centralized - Supports a wide variety of SIP User Agents, SIP proxy server including SpeedTouch 280 Series IP Phones, - Local call handling in absence of a centralized Pingtel xpressa, Snom, Windows Messenger SIP proxy server • SIP Registrar Server - Transparent for all SIP supplementary services - Local registrar for the SIP User Agents on the (call waiting, call hold, call transfer, call forking, ..) LAN implemented in SIP User Agents and in - Can work as proxy registrar towards a centralized SIP proxy servers centralized SIP registrar - Creation and definition of user groups - Active users tracking - Configurable session screening / blocking - Plug-and-play IP Phones installation with (per user or user group: outgoing black list of SpeedTouch 280 Series IP Phones unauthorized callees, incoming black list of - Configurable registration screening / blocking / unauthorized callers) logging (list of SIP URLs and/or IP addresses) - Call logging of successful and/or failed calls, - Automatic re-registration to centralized SIP on the web and/or to a syslog server Registrar Server when the IP address of the - Parallel call forking: Incoming SIP calls ring on CPE changes all SIP endpoints behind the CPE or on all SIP - Multiple incoming calls on a single public IP endpoints of a user group

* Available as option (under SW key) SpeedTouch™ 620/620i/620m/620s/620v/620f Wireless capabilities

The SpeedTouch Business Class Routers 620 have built-in Wireless LAN (WLAN) and Hotspots capabilities

4Features • Built-in 802.11a/b/g with external antenna • Access point, client and repeater mode • Advanced features for security: 128bits WEP encryption, MAC address filtering, WPA, 802.1x and RADIUS

��

�� Wireless

��

�� Wireless capabilities

��

�� SpeedTouch™ 620/620i/620m/620s/620v/620f Specifications

Hardware specifications Physical specifications • Height: 35 mm (1.38 in.) 4WAN interfaces • Width: 238 mm (9.30 in.) • DSL line RJ11 • Depth: 185 mm (7.29 in.) • ADSL, ADSL2, Re-ADSL and ADSL2+ for the • Color-coded cabling SpeedTouch 620(i) • Wall-mount support • ADSL2+ Annex M (more symmetric ADSL) for the SpeedTouch 620m Operating environment • SHDSL and SHDSL.bis 2-wire and 4-wire for the • Temperature: 0° to 40° C (32° to 105° F) SpeedTouch 620s • Humidity: 20% to 80% • VDSL and VDSL.bis 2-wire and 4-wire for the SpeedTouch 620v Power requirements • Fast Ethernet and Gigabit Ethernet Copper and • AC voltage: 100 to 120 V AC, 220 to 240 V AC; Fiber FX/LX for SpeedTouch 620f optional 48V DC power supply • Integrated ISDN So interface (for ISDN back-up)* • Frequency: 50 / 60 Hz • Power Cord Lock system to avoid accidental 4LAN interfaces power plug-out • 4-port 10 / 100BaseT auto-detect Ethernet switch • Power consumption: 18 W maximum IEEE 802.3 (RJ45), half- / full-duplex with auto- MDI / MDI-X * Available as option (under SW key)

4Serial interface • DIN type

4Wireless interface • 802.11b/g or 802.11a/b/g (depending on version)

4Other • USB 2.0 master (for printer sharing and file sharing) • PCMCIA / CardBus plug-in slot for future extension: IPSec acceleration card, PSTN back-up card, GPRS back-up card, .. Specifications

Need more help? Additional help is available online at http://www.speedtouch.com.

4For more information: www.speedtouch.com