Installation guide

NetVanta 2000 Series Hardware Installation Guide Introduction

Features and Specifications

The NetVanta 2000 Series provides granular control over network access that includes maximum security,

data authenticity and privacy, and significant ease of use. The following list highlights the NetVanta 2000

Series’ major features.

Physical Interfaces

Firewall Features

• Stateful inspection firewall

– Provides support against the following attacks: IP Spoofing, Land Attack, Ping of Death, and

Reassembly Attack

– Provides checks for the following attacks: ICMP Redirect, Syn Flooding, Winnuke, and Source

Routing

• Application content filtering

• Cyber assault protection

• HTTP relay

Address Translation

• Basic NAT (1:1)

• NAPT (Many:1)

• Reverse NAT (translation of an inbound session’s destination IP address)

IPSec Tunnel

• ESP

•AH

• Manual key management or automatic key management using IKE

• X.509 certificate support

• MD5-HMAC (Hashed Message Authentication Code)128-bit authentication algorithm

• SHA1-HMAC 160-bit authentication algorithm

• DES-CBC (Cipher Blocking Chaining) 56-bit encryption

• 3DES-CBC 168-bit encryption

• PUBLIC RJ-45 10/100BaseT auto-sensing Ethernet interface

• PRIVATE (2050/2100) RJ-45 10/100BaseT auto-sensing Ethernet interface

• PRIVATE (2054) RJ-45 10/100BaseT auto-sensing Ethernet switch ports

• PRIVATE 1

(2300/2400) RJ-45 10/100BaseT auto-sensing Ethernet interface

• PRIVATE 2 (2300 /2400) RJ-45 10/100BaseT auto-sensing Ethernet interface

• PRIVATE 3 (2400/ 2400) RJ-45 10/100BaseT auto-sensing Ethernet interface

• CONSOLE RS-232 for off-line configuration