VCL-MX-5020-R-ES
Router with E1 and Enhanced Security

Highlights:

• High-reliability hardware
• Easy installation and management
• Suitable for installation in sub-stations, SCADA and industrial networks / harsh environments
• Supports for Gigabit Ethernet, Optical Ports, ITU-T G.703 Compliant E1 Interfaces
• Detailed system logging, built-in reporting and monitoring tools including real-time graphs
• Export logs locally or on a Syslog server
• Network Flow Monitoring
• Suitable for 1+0 non-redundant and 1+1 redundant installation with automatic failover*. Support Active-Active mode
• High availability functionality with Active-Active and Active-Passive features
• Secure Boot
• Secure Web Gateway (SWG)
• Data Loss Prevention (DLP)
• Resistance to Denial of Service (DoS) Attack
• Prevention of DDoS & DoS-added
• Content filtering and Brute Force attack mitigation
• Non-volatile Access Log with capability to "fingerprint" all successful and failed log-in attempts and keep a log of the IP addresses of all successful and failed logins / login attempts.
• Integrated threat control includes prevention of network attacks
• Intelligent protection of endpoints includes authentication, authorization and control
• Support out of band management through management port / console
• In service / remote software upgrade
• SYN cookie protection
• Zone based IP spoofing
• Malformed packet protection
• Software and Hardware Token Supported (TOTP)
• IEEE 1613
• IEC 61850-3, IEC 60068-2-27, IEC 60068-2-6 compliance

VCL-MX-5020-R-ES offers a wide range of VPN technologies ranging from modern SSL VPN's to IPsec. Site-to-Site and road warrior setups are possible and with the integrated OpenVPN client exporter, the client can be configured within minutes.

*Redundant device Failover switching with VCL-Ethernet Failover Switch.

Firewall Security:

• Inclusion Policy—Access Control based upon White List IP addresses, MAC address and IP Domain
• Exclusion Policy—Access Control based on Black-List Continuous monitoring of the TLS connection to nullify MitM attacks.

Interfaces:

• 4 x 1G Optical (SFP) Ethernet Interfaces
• 4 x 10/100/1000 BaseT RJ45 Electrical Ethernet Interfaces
• 4 x ITU-T G.703 Compliant E1 Interfaces, 120 Ohms
• E1 Clock Synchronization Interface Options (User Selectable):
• External Clock: 1 PPS, 10MHz
• Internal Clock: Stratum 3E or higher

Throughput:

• Router with E-SEC : 14.40 Gbit/s
• Network Firewall : 14.08 Gbit/s
• IPSEC VPN Throughput / port : 120 Mbit/s

Network Management (NMS) and Monitoring Ports:

• 1 x 10/100/1000BaseT RJ45 Electrical Ethernet dedicated Secure Management Port
• 1 x RS232 (RJ45) Console Port for local access and management

Routing Features and Capabilities:

• GUI and CLI based
• Static and Dynamic IP addressing for physical and logical interfaces
• IPv4 and IPv6 IP addressing format supported
• Support for multiple IP address
• ARP, IP forwarding
• Static routing, Default routing, VLAN based routing, CARP redundancy
• Routing Protocols: RIPv1, RIPv2, OSPFv2 and OSPFv3, BGPv4
• Layer 2, Layer 3 routing
• TCP/IP, UDP, DHCPv4, DHCPv6
• SNMPv2, SNMPv3
• ACL Layer 2, Layer 3 Security
• QoS, Traffic Shaper
• Supports 802.1Q VLAN
• System Authentication and remote access via RADIUS
• SSH (Secure Access Control) with encrypted password protection.

GUI Features:

• Comprehensive Dashboard for centralized overview of diagnostics, monitoring, device health, systemstatus, and keymetrics
• Smart quick and efficient search functionality for streamlined user experience
• Detailed system information, Interface status and monitoring, and network overview
• Granular usermanagement with role-based access control for secure system access
• Real-time surveillance for identifying and responding to live threat and network fluctuations
• Comprehensive functionality for tracking and logging system, network and user activities and events.