|
Management & Configuration
|
|
Zero Touch Provisioning (ZTP): automates the provisioning of both the configuration and firmware files through DHCP/Bootp Options
|
|
PerleView Central Management: a web-based server configuration tool that simplifies setup and deployment and gives network managers visibility and control over network configurations at remote sites.
|
|
Management & Monitoring: HTTP/HTTPS, CLI, Telnet, SNMPv1/v2/v3, REST, TACACS+
|
|
Multiple firmware versions can be saved on the unit. This allows the customer to change between older and newer firmware versions whithout the need to download.
|
|
Multiple configuration files can be stored on the unit., This allows the customer to eaisly switch between older and newer configurations during testing or production deployments.
|
|
Automatic check for software updates available over FTP, HTTP, HTTPS, SCP, SFTP, and TFTP
|
|
LLDP-Link Layer Discovery Protocol, as per IEEE 802.1AB, is a neighbor discovery protocol that is used for network devices to advertise information about themselves to other devices on the network. This protocol runs over the data-link layer, which allows two systems running different network layer protocols to learn about each other via TLVs (Type-Length-Value).
|
|
RESTful API uses HTTP requests to access and use IOLAN SCR statistics and configuration data. Any of the CLI commands can be executed through a RESTFul API script that cn be controlled externally from a server.
|
|
Connectivity Watchdog can instruct the IOLAN SCR to take different acctions (i.e. reboot) if the network connectivity to a pre-define IP address is lost. This is helpful for situations when the IOLAN SCR is deployed on remote locations hard to service if the network connectivity is lost.
|
|
Automatic DNS Update: Utilize DHCP Opt 81 to set IOLAN domain name for easy name management and with Dynamic DNS support , users on the Internet can access the device server by name without having to know its IP address. See Automatic DNS update support for details
|
|
Dynamic DNS with DYNDNS.org
|
|
Installation Wizard
|
|
Redundancy
|
|
Load Balancing
|
|
VPN Failover
|
|
Virtual Router Redundancy Protocol (VRRPv3) enables a group of devices to form a single virtual device to provide network redundancy
|
|
Primary/Backup host functionality enables automatic connections to alternate hosts
|
|
Routing Protocols
|
|
The IOLAN SCR can be configured for any of the major routing protocols for an easy integration within the data center Ethernet backbone: RIP/RIPNg, OSPFv3, BGP-4, NAT, IPv4/IPv6, Static Routing, IPv6 Encapsulations (GRE, 6in4), Port Routing
|
|
IPv6 to IPv4 translation is fully supported for environments where the Ethernet data backbone is run on IPv6 and the port management is run on IPv4
|
|
Using NAT for enhanced security, the IOLAN SCR can map a single IP address, across all or several of it's Ethernet ports.
|
|
IP Applications
|
|
DDNS, DNS Proxy / Spoofing, relay, client, Opt. 82,
|
|
NTP & SNTP (versions 1, 2, 3, 4)
|
|
DHCP / DHCPv6 server / DHCP Snooping & BOOTP
|
|
VLAN & VPN
|
|
VLAN, OpenVPN, VPN Failover (16 concurrent VPN tunnels)
|
|
IPSec VPN: NAT Traversal, ESP authentication protocol
|
|
Firewall Features
|
|
Ability to set up firewalls to restrict incoming and outgoing packets
|
|
Built in Zone-Based Policy Firewall for local security and traffic filtering.
|
|
Access Control Lists (list & ranges & time)
|
|
Filter based on MAC Address, IP, Port, Protocol, User
|
|
IEEE 802.1x Authentication and Port Security can be enabled for any Ethernet port for increased security port access.
|
|
Port Forwarding
|
|
BGP Communities
|
|
Security Features
|
|
AAA Security via remote authentication (Radius, TACACS+, & LDAP)
|
|
Trusted host filtering (IP filtering), allowing only those hosts that have been configured in the host table access to the router.
|
|
Ability to disable services (for example, Telnet, TruePort, Syslog, SNMP, Modbus, HTTP) for additional security
|
|
Ability to disable Ping responses
|
|
SSH client/server connections (SSH 1 and SSH 2). Supported ciphers are Blowfish, 3DES, AES-CBC, AES-CTR, AES-GMC, CAST, Arcfour and ChaCha20-Poly1305. Ability to individually disable network services that won’t be used by the SSH client/server connections.
|
|
SSL/TLS client/server data encryption (TLS v1.2, TLS v1.1, TLS v1.0, SSL v3.0, SSL v2.0 )
|
|
SSL Peer authentication
|
|
SSL encryption: AES-GCM, key exchange ECDH-ECDSA, HMAC SHA256, SHA384
|
|
Encryption: AES (256/192/128), 3DES, DES, Blowfish, CAST128, ARCFOUR(RC4), ARCTWO(RC2)
|
|
Hashing Algorithms: MD5, SHA-1, RIPEMD160, SHA1-96, and MD5-96
|
|
Key exchange: RSA, EDH-RSA, EDH-DSS, ADH
|
|
Certificate Support (X.509)
|
|
Certificate authority (CA) list
|
|
Local database
|
|
RIP authentication (via password or MD5)
|
|
2 Factor (2F) Authentication over e-mail enhances administration access security
|
|
Management Access Control
|
|
Demilitarized Zone (DMZ)
|
|
Secure HTTP/HTTPS/FTP/Telnet Authentication Proxy
|
|
SNMP v3 Authentication and Encryption support
|
|
IP Address filtering
|
|
Disable unused daemons
|
|
Active Directory via LDAP
|
|
Logging, Reporting & Alerts
|
|
Email alert notification
|
|
Syslog, Event Type, Report Type, Alerts & Monitoring, Triggers Status Screen Report, Data Usage, Diagnostic, Login Banner
|
|
Accessing Console Management Ports (Serial & Ethernet)
|
|
Serial Protocols: PPP, PAP/CHAP, SLIP
|
|
Connect directly using Telnet / SSH by port and IP address
|
|
Use an internet browser to access with HTTP or secure HTTPS
|
|
Java-free browser access to remote serial console ports via Telnet and SSH
|
|
Ports can be assigned a specific IP address
|
|
Multisession capability enables multiple users to access ports simultaneously
|
|
Multihost access enables multiple hosts/servers to share serial ports
|
|
Console Management Functions
|
|
Sun / Oracle Solaris Break Safe
|
|
Local port buffer viewing - 256K bytes per port
|
|
External port buffering via NFS, encrypted NFS and Syslog
|
|
Event notification
|
|
Windows Server 2003/2008 EMS - SAC support GUI access to text-based Special Administrative Console
|
|
Terminal Server Functions
|
|
Telnet
|
|
SSH v1 and v2
|
|
Auto session login
|
|
LPD, RCP printer
|
|
MOTD - Message of the day
|
|
Serial to Ethernet functions
|
|
Tunnel raw serial data across Ethernet - clear or encrypted
|
|
Raw serial data over TCP/IP
|
|
Raw serial data over UDP
|
|
Serial data control of packetized data
|
|
Share serial ports with multiple hosts/servers
|
|
Virtual modem simulates a modem connection - assign IP address by AT phone number
|
|
Virtual modem data can be sent over the Ethernet link with or without SSL encryption
|
|
TruePort com/tty redirector provides fixed TTY or COM ports to serial based applications enabling communication with remote devices connected to Perle IOLAN's either in encrypted or clear text modes.
|
|
TrueSerial packet technology provides the most authentic serial connections across Ethernet ensuring serial protocol integrity
|
|
RFC 2217 standard for transport of serial data and RS232 control signals
|
|
Customizable or fixed serial baud rates
|
|
Serial encapsulation of industrial protocols such as ModBus, DNP3 and IEC-870-5-101
|
|
ModBus TCP gateway enables serial Modbus ASCII/RTU device connection to ModBus TCP
|
|
Data logging will store serial data received when no active TCP session and forward to network peer once session re-established - 32K bytes circular per port
|
|
Protocols
|
|
IPv6, IPv4, TCP/IP, Reverse SSH, SSH, SSL, IPSec/IPv4, IPSec/IPv6, IPSec, RIPV2/MD5, ARP, RARP, UDP, UDP Multicast, ICMP, BOOTP, DHCP, TFTP, SFTP, SNTP, Telnet, raw, reverse Telnet, LPD, RCP, DNS, Dynamic DNS, WINS, HTTP, HTTPS, SMTP, SNMPV3, PPP, PAP/CHAP, SLIP, CSLIP, RFC2217, MSCHAP
|
RJ45 Socket
