Secure 4134 A unified communications integrated branch solution

Consolidate branch The Avaya Secure Router 4134 is a deployment into environments that modular, multi-service platform that require extended IP addressing with the networking functions integrates multiple networking functions, same routing services — all without any additional system memory requirements. with a powerful including routing, WAN, switching, voice media gateway and modular system that security into a single device. This multi- Voice media gateway converges routing, service integration can reduce the number of devices needed at the branch services security and unified or regional site, generating substantial The Secure Router 4134’s voice gateway allows connection to the public switched communications operational and capital cost savings for your business. telephone network (PSTN) as well as services in a single, support for SIP clients and conventional The Secure Router 4134 offers the TDM-based telephony devices. T1/E1, competitively-priced performance and connectivity that FXS and FXO interfaces are all available platform. enable it to not only handle the demands for flexible telephony connection. With of the integrated branch, but also act its integrated media gateway services, as the regional or headquarters router the Secure Router 4134 can connect local for many enterprises. In doing so, it IP phones, SIP clients as well as analog can cost-effectively and securely telephony devices directly to the PSTN, concentrate traffic from hundreds of eliminating the need to route voice traffic remote sites. back to a central site, saving on transmission costs. The Secure Router 4134 voice gateway and survivability Reliable performance for services are interoperable with Avaya converged branch Aura® Session Manager, Communication Server 1000 (R6.0 and higher) and applications Communication Server 2100. The Secure Router 4134 is a dependable solution that can be deployed in a variety Survivable SIP gateway of configurations to maximize uptime with no single points of failure. Data, The Secure Router 4134 also supports voice, video and other multimedia survivable SIP gateway services applications perform more smoothly that provides business continuity for without the latency, packet loss and jitter registered SIP devices. If communications encountered with other solutions, is lost to a central UC or VoIP server, SIP resulting in the ability to provide the users can continue to make/receive calls same enterprise-class service and to the locally-connected PSTN and quality of experience to remote sites access common phone features such as and branch offices as is available at hold, transfer and call waiting. When corporate headquarters. communications to the central server is restored, the Secure Router 4134 automatically re-connects SIP users for Robust routing resumed access to centralized UC and Routing services include a full IPv4 and VoIP services. IPv6 protocol set, including BGP-4 and multicast capabilities. A full-function IPv6 implementation also enables avaya.com | 1 for hub and spoke deployment over • Up to 34 Gigabit Ethernet switching Features IPSec and VPN tunnels, and IPSec ports Multi-service platform VPN data-encryption services with • Up to 64 FXS or FXO ports AES, 3DES, DES, SHA-1, MD-5 and • Full IPV4/IPV6 routing, IPSec, VLAN Diffie-Hellman support. • Up to 3 Clear or Channelized DS3/ and firewall T3 ports • Voice media gateway services, • Up to 31 T1/E1 ports including support for digital and Advanced quality of analog trunks, analog phones, fax service • Up to 7 Serial or ISDN BRI/PRI ports machines and modems Quality of service goes beyond Layer • Up to 3 HSSI ports • Wide range of WAN connectivity, 3 flow-based support by including • Up to 4 ADSL2+ ports including DS3, HSSI, Channelized Layer 2 class-based queuing. The DS3, T1/E1, ISDN, Serial and ADSL2+ highest granularity of priorities Management • High-density Ethernet switching with (eight levels) provides maximum built-in Power over Ethernet (PoE) performance with the lowest latency The Secure Router 4134 employs an for voice, video and other high- industry-aligned command line Voice Media Gateway priority traffic while guaranteeing interface (CLI) that makes it easy to set up and manage. Features include: • Range of integrated voice bandwidth among all classes. interfaces — including T1/E1 PRI, BRI, • On-Premise, Console and Command FXS/DID and FXO/CAMA — enable Multi-link capabilities Line Interface; , Events, Syslog connection to the PSTN or analog telephony devices Secure Router 4134 provides best-in- • Remote SSHv2 provides secure class MLPPP and MFR (FRF.16 and communication for configuration • SIP survivable gateway ensures and maintenance business continuity for SIP devices FRF.15) support to allow bonding of T1/E1, T3 and other WAN interfaces to • Up to 128 simultaneous voice (DSP) • Avaya Unified Management create a single virtual interface channels can handle voice gateway provides Secure Router fault needs of small to large branch sites capable of transmitting at the management and device reporting maximum bandwidth available. Multi-linking enables hassle-free The Secure Router family bandwidth scalability, high-speed The Secure Router 4134, with its video, voice and data transfer while Integrated Ethernet modular design, high throughput securing connectivity from individual and reliable performance, is switching link failures. complemented by Avaya’s Secure Integrated high-density Ethernet Router 1000, 2330 and 3120 family of switching, including Gigabit, Fast Simple to install, simple to products. Deployed in combination Ethernet and Power over Ethernet scale modular platform with these other Secure Router (PoE) connectivity, enables flexible The Secure Router 4134 provides models, the Secure Router 4134 can connection of local area network connect remote sites and also act as (LAN) devices, such as powered advanced operational features while simplifying, or eliminating, time- a central-site router for most services for IP telephony devices. A enterprises. variety of Ethernet switching modules consuming and confusing installation enables up to 30 Gigabit, 72 Fast tasks. The router’s unique chassis has Ethernet or 72 PoE ports. The four small module slots and three An easy choice Ethernet switch ports can operate at medium ones to support the dynamic Secure Router 4134 is a high- either Level 2 or Level 3, enabling demands of growing businesses. Four performance branch convergence dynamic connectivity of devices and small slots support low-density data solution that brings together feature- subnets across your network. or voice modules. Medium slots can rich VoIP and feature-rich data into be used for WAN, Ethernet or voice a common platform for simplified carrier modules. A voice carrier Integrated security management, greater cost savings module also hosts up to four small and a high quality of user experience. Powerful, fully-integrated security voice modules (FXS or FXO) in a features include VPN and firewalls single medium module slot and can for increased reliability and user thereby increase total voice port confidence. Capabilities include capacity. The modular and flexible stateful packet firewall, detection Secure Router 4134 can support: and prevention of more than 60 • Up to 72 Power over Ethernet Distributed Denial of Service (DDoS) 10/100 Mbps ports attacks, VPN hardware acceleration

2 | avaya.com Secure Router 4134 • HDLC VPN Option Technical Specifications • Bridge Control Protocol (BCP) • Optional VPN acceleration hardware • IPSec VPN Features • Multilink PPP (MLPPP) • Multilink Frame Relay (MFR), • DES/3DES, AES, SHA1, MD5 Internet Routing including FRF.15 and FRF.16 • Avaya VPN Client support • IPv4 and IPv6 support, including • NAT-Traversal IPv4-IPv6 tunnels IP Multicast • Static routing, RIPv1/2, RIPng for • IGMPv1/2/3 for IPv4; MLDv1/2 for • 1000 VPN tunnels IPv6, OSPFv2 and v3, BGP4/4+ IPv6 Maximum Performance • Policy-based routing • IGMP Proxy • IP routing throughout (64 byte): • Inter-VLAN routing • IGMP Snooping — Up to 370,000 pps across • High availability: VRRP, redundant • PIM-SM for IPv4/v6 SR 4134 router connections — Up to 3 Mpps on optional 10-port • DVMRPv3 for IPv4 1 Gig module when ingress/ • GRE and IP-IP Tunneling egress is across the module MPLS Label Edge Routing (LER) Ethernet LAN services • IPSec (3DES) throughput (1450 • 10/100 Base-TX • Label Distribution Protocol (LDP) byte): 470 Mbps • RSVP-TE, OSPF-TE • 10/100/1000 Base-TX Voice Signaling Support • 1000 Mbps Optical SFP • MPLS Fast Reroute • T1/E1 ISDN PRI (User side) • IEEE 802.1x port authentication • MPLS Martini Pseudo-wire • ISDN BRI (User side) (Ethernet, PPP, HDLC over MPLS) • IEEE 802.1p • T1 CAS • IEEE 802.1Q Quality of Service/Traffic • E1 R2 CAS Management • IEEE 802.3ad LACP • Q Signaling (QSIG) • RED, WRED, DiffServ, bandwidth • IEEE 802.1s MSTP guarantee/sharing, flow monitoring, • FXS (Foreign Exchange Station) • IEEE 802.3x VLAN traffic policing • FXO (Foreign Exchange Office) • GVRP • 8 level Priority Class Based Queuing • Direct Inward Dialing (DID) per IP address/subnets, ports, DSCP • Port mirroring • Centralized Automated Message and ToS bits, VLAN ID (802.1Q), Accounting (CAMA) • Jumbo frames VLAN Priority (802.1p) • E-911 emergency calling • Ethernet Connectivity Fault • Frame Relay traffic shaping and Management (CFM) policing SIP Survivability Calling Features • VLAN Classification (port, subnet or WAN • Inbound/outbound PSTN calling protocol-based) • T1/E1, including ISDN PRI • Intra-branch calling • ISDN BRI, both data and voice Firewall • Call hold, consultation hold • ADSL2+ (Annex A) • Stateful Packet Inspection Firewall • Call transfer (attended, unattended) • High-Speed Serial Interface (HSSI) • 25-zone support (including • 3-way conferencing Corporate, Internet, DMZ) • DS3/T3 – Channelized with 28 DS1/ • Click to dial • Access Control Lists (ACL) T1 (1.544 Mbps) multiplexed circuits • SIP user registration • DS3/T3 – Clear-Channel with sub- • NAT, including policy-based NAT/ rate DS3 support PAT Codecs Supported • G.711 - A-law and u-law • Serial (V.35, RS-232/V.28, • 60+ Distributed Denial of Service RS-449/V.11, EIA-530/A and X.21/ (DDoS) Attack Preventions • G.726 - 16, 24, 32 Kbps RS-422) • 30+ ALG support (including H.323/ • G723.1 - 5.3, 6.3 Kbps SIP) • Point-to-Point Protocol (PPP), • G.729A - 8 Kbps including PPP over Ethernet • Pass through IPSec, L2TP, PPTP (PPPoE) • Frame Relay (including FRF.12 fragmentation)

avaya.com | 3 Other Voice Gateway Features Module Options • TDM to IP, IP to TDM conversion • Small Modules • ITU G.168 Echo Canceller — 1 and 2-port T1/E1 Account Manager or — 1 and 2-port Serial • Voice Activity Detection/Comfort Avaya Authorized Partner — 2-port ISDN Noise Generation or visit us at: — 2 and 4-port FXO www.avaya.com. • DTMF digit detection — 2 and 4-port FXS — 1-port ADSL2+ (Annex A) • Caller ID generation and detection • Medium Modules • T.38 fax relay / Fax and Modem Pass- — 8-port T1/E1 through — 1-port T3/DS3 (channelized and • Up to 128 DSP channels un-channelized) — 1-port HSSI module “VoIP-Friendly” Features — 24-port 10/100 Fast Ethernet (PoE • Low-latency packet forwarding and non-PoE) • SIP ALG for NAT and Firewall — 10-port 10/100/1000 Gigabit Ethernet • Cone NAT (for Avaya UNIStim — 4-slot Carrier module for voice protocol) with NAT hairpinning cards • Frame Relay fragmentation (FRF.12) • Compressed RTP (cRTP) Redundant Power options • AC Power Supply – 50-60 Hz 90-269 Service Provisioning VAC, 250 Watts • Management: Telnet, SSHv2, SFTP, • AC Power Supply with PoE – 50-60 Hz PAP, CHAP, SNMPv2, DHCP, DNS 90-269 VAC, 250 Watts; separate Proxy, SNTP, RADIUS, TACACS+ +54VDC supply isolated from main AC supply: AC input between 90 and 269 • Monitoring: Syslog, statistics, RMON, VAC, 410 Watts. alarm • DC Power Supply – 40 to 72 VDC, 250 • Diagnostics: BERT, loopback testing, Watts trace route, packet capture (PCAP) Environmental Physical Specifications • Operating Temperature: 32° to 104°F Chassis (0° to 40°C) • Height x Width x Depth: 3.5” H x • Non-Operating (Storage) 17.3” W x 19.7” D Temperature: -4 to 140 F (-20 to 60 C) • Weight with Power Supply: 22 lbs • Relative Humidity: 0 to 95% (non- (10.0 kg) condensing) • Chassis Slots: — 3 medium module slots Regulatory Approvals About Avaya — 4 small module slots • Safety: CTUVus and GS Certification: — 1 large module slot (combining 2 UL60950-1, EN60950-1 and Avaya is a global IEC60950-1 (International CB Report) provider of business medium slots) collaboration and — All slots are hot swappable • EMC: Class A Product, FCC Part 15, communications • 2 x 10/100/1000 Ethernet copper / 2 x ICES-003, EN300386, EN550022, solutions, providing GigE SFP Fiber ports EN55024, VCCI unified communications, • Management ports: • Telecom : TIA-968-A, CS-03, ETSI TBR contact centers, — Compact Flash 3/4, 12/13, JATE, A-Tick networking and related — USB services to companies — Fast Ethernet Learn More of all sizes around — Auxiliary and Console ports RJ-45 To learn more about Avaya solutions the world. For more and products contact your Avaya information please visit www.avaya.com.

© 2013 Avaya Inc. All Rights Reserved. 4 | avaya.com All trademarks identified by ®, ™, or SM are registered marks, trademarks, and service marks, respectively, of Avaya Inc. 07/13 • DN5107-06