VoIP Friendly Routers with QoS and Bandwidth Management

Carolina Digital’s Router/Firewall and VoIP SIP-Proxy Network Appliance

Carolina Digital Phones offers a three different desktop or 19″ rack mounted network appliance routers and with routing, firewall and SIP Proxy services.

Carolina Digital Installed Firewall/Router/SIP-Proxy

pfSense is an open source firewall and router platform based on NanoBSD / FreeBSD that includes most all of the features of expensive, commercial firewalls. This next generation pfSense stateful firewall for embedded applications supports:

• In place upgrades. No need to disassemble your system in order to upgrade, patch or add packages to your CF.
• Multiple firmware support. Two partitions on the CF, each with their own separate pfSense install means you can test upgrades and rollbacks without impacting your production environment.
• Ports and package support. FreeBSD packages that are suitable for an embedded platform can be installed and used.

pfSense provides a software packaging system which allows for the extension of functionality beyond its extensive core feature set. Core features include:

• Stateful firewall based on OpenBSD pf
• Captive portal with MAC filtering, RADIUS support, etc.
• NAT support
• Load balancing
• VPN: IPsec, OpenVPN, PPTP
• Dynamic DNS client
• DHCP Server and Relay functions
• PPPoE Server
• Reporting and monitoring features with real time information

FW-7535 Network Appliance Router/Firewall/SIP-Proxy

Environmentally friendly network platform: Built entirely with RoHS compliant parts and production processes, the FW-7535 provides a low power platform for network applications, reducing electricity costs and  having space for the end user. An embedded ultra-low voltage ATOM 1.66GHz CPU delivers power-efficient processing while the Intel ICH8M system logic provides PCI-E bus network bandwidth. The FW-7535 includes six integrated Ethernet ports with optional bypass, so that it can be easily deployed in front-line security applications where reliability and availability are of key concern.

Fanless platform reduces power consumption: Measuring only 40 mm in height, the FW-7535 can be deployed virtually anywhere. Its space-saving design offers flexibility and cost savings while maintaining the high throughput and availability required for network security, acceleration and other network applications.

Hardware Specifications

1.66 GHz Processing Power: This desktop network appliance can be fitted with either the Intel Atom D410 or the D510, which are the newest versions of the 32nm Intel Atom. Both CPUs have come with1.66 GHz of processing power. The D410 is a single core, while the D510 is a dual core.

Expansive I/O interface and Internal Storage: An internal 2.5” HDD, CF Socket, USB 2.0 ports, Mini-PCIe and console connection options guarantee that all hardware requirements will be met. Six GbE network ports including one pair with bypass provide high throughput and availability.

Small form factor for flexible deployment: The FW-7535’s low profile (36 mm height) makes it a perfect solution for network applications where space is critical. Solid engineering and quality components, ensure reliable operation in almost any situation.

Cost-effective Solution: The embedded Intel atom processor and ICH8M chipset provides a stable, ultra-low power platform at an outstanding value-price point.

Phoenix IT-100 Network Appliance Router/Firewall/SIP-Proxy

Fanless 500Mhz Transmeta Crusoe TM5600. 128MB SDRAM. 20GB HD. 2 x Realtek RTL8100B 10/100 Ethernet Nics. 1 x Atheros-based 802.11b/g Wireless NIC. Stateful inspection firewall. 5-20 users. Up to 50,000 concurrent connections. 10-14 Mbps IPSec VPN throughputs.

Network Interfaces

1. WAN (RL0 interface): The first RJ45 Ethernet port from the left.
2. LAN (RL1 interface): The four-port switch hub.
3. OPT1 (the ATH0 wireless interface) with two built-in hidden diversified antennas. Note: The wireless interface is not available if the Soekris VPN1411 VPN accelerator is selected.

Deployments

The Phoenix IT-100 appliance has been employed at the following network locations to protect SMB (Small and Medium Business):

1. SOHO (Small Office and Home Office)
2. Captive Portal
3. Branch Office
4. VPN Endpoints

Performance as a VPN Router

¹As measured by IPerf. The IPerf performance was compared to the reported measurements of the Cisco ASA 5510 in the following article: IPSecPerformance of Cisco ASA 5510 as Measured by IPerf.

Mercury OpenBrick-M N270 pfSense Appliance

1.6 Ghz Intel Atom N270. 4 x Ethernet ports: one (1) x Realtek RTL8111DL Gigabit Ethernet and three (3) x Realtek RTL8110S Gigabit Ethernet. 1GB DDR2 Memory.  Stateful inspection firewall. 20-250 users. Up to 500,000 concurrent connections. 18-27 Mbps IPSec VPN throughputs.

The Mercury OpenBrick-M appliance has been deployed at the following network locations to protect SMB (Small and Medium Business) and Enterprise

SOHO/SMB:

1. Branch Office
2. VPN Endpoints
3. Internet edge

Features

1. 1.6Ghz Intel Atom N270
2. 1GB/2GB DDR2 RAM
3. pfSense 2.0 for i386
4. High Performance IPSec VPN: 18Mbps 3DES and 27Mbps AES256
5. Four (4) Gigabit Ethernet Ports:
   • Multi-WAN for load balancing, redundancy and failover

Purchase, Support and Hardware Warranty

Your Carolina Digital Phone support engineer will be able to provide you with an exact quote for the purchase and installation of this Network Appliance. The install price will depend on the complexity of your network. Simple installs can be as low as $350 for the purchase and initial configuration of the Network Appliance. The initial purchase includes 90 days of free telephone support. The Network Appliance carries a manufacturer’s 1-year warranty and at manufacturer’s option they will replace or repair your Network Appliance. In mission critical environments, Carolina Digital Phone recommends a backup Network Appliance to have on-hand for quick replacement in the event of a natural disaster like lighting strike or hardware failure.

Extended Support: For a annual maintenance fee of $350, Carolina DIgital Phone will make available a replacement Network Appliance for next day replacement. The annual Maintenance all includes continued telephone and on-line support by our network engineers beyond the initial 90 days of support with the initial purchase.