Proxicast Lan Cell 2 Ae Spec

Proxicast LAN-Cell 2 3G Cellular Router A&E BID SPECIFICATIONS

3G CELLULAR WIRELESS VPN ROUTER

1. GENERAL A. Manufacturer: Proxicast, LLC 312 Sunnyfield Drive, Suite 200 Glenshaw, PA 15116-1936 U.S.A. www.proxicast.com [email protected] 877-777-7694 or 412-213-2477 Fax: 412-492-9386 B. All equipment and materials used shall be standard commercial-off-the-shelf (COTS) components that are regularly manufactured and used in the manufacturer’s product(s). C. All systems and components shall have been thoroughly tested and proven in actual use. D. The 3G cellular wireless VPN router described shall be a Proxicast LAN-Cell 2 Model Number LC2-411 series or equivalent. The router described shall be an industrial grade, full-featured 3G cellular wireless router with VPN and other security features. The router shall include an integrated 802.11 a/b/g wireless access point and at least 4 LAN Ethernet switch ports, 1 Ethernet WAN port and 1 Serial WAN port. 2. 3G CELLULAR WIRELESS VPN ROUTER REQUIREMENTS A. The router shall be a third-generation (3G) cellular router capable of transmitting, receiving and forwarding IP packets through a CDMA, GSM and/or UMTS cellular network. B. The router shall have at least 4 Ethernet LAN switch ports (10/100 Mbps) to connect any Ethernet-based devices, such as IP cameras, video-servers, DVRs, PLCs, sensors VoIP phones, etc. C. The router shall have at least 1 Ethernet WAN port (10/100 Mbps) to connect with established Ethernet-based upstream networks such as DSL, Cable, T-1 or other high-speed interfaces. D. The router shall have at least 1 Serial WAN port (RS-232) to connect with established serial upstream network devices such as analog telephone modems or satellite modems. E. The router shall have a user-upgradeable cellular modem (preferably via an external PC-Card or ExpressCard slot) that can accept industry standard 3G cellular modems from multiple cellular network operators. F.

The router must be able to automatically switch between any available WAN interface (Ethernet, Cellular or Serial) in the event the primary WAN interface fails. Recovery to the primary WAN interface must also be automatic once it becomes available again.

G. The 3G modem component shall be securely attached to the main device chassis to prevent accidental removal during transport or via vibration. H. The router shall provide a means of securely attaching external 3G cellular antennas to improve signal transmission and reception. I.

The router shall incorporate an 802.11 a/b/g Wi-Fi access point capable of bridging wireless Ethernet devices to provide WAN, Cellular or Serial Internet access.

Page 1

J.

The 802.11 a/b/g access point shall provide a means of securely attaching external antennas to improve signal transmission and reception.

K. The router shall incorporate a stateful packet inspection firewall with user-definable rules to limit and log packet travel among all possible device interfaces. L. The router shall incorporate Network Address Translation, Port Forwarding and Port-Translation features to enable LAN-based devices to be accessed on defined ports from any WAN interface. M. The router shall incorporate an IPSec VPN client server capable of establishing at least 5 secure VPN tunnels concurrently with other IPSec-compliant hardware and software products. N. The router shall incorporate DES/3DES and AES encryption technologies. O. The router shall support X.509 digital certificates. P. The router shall support HTTPS and SSH for remote management. Q. The router must provide mechanisms for monitoring and controlling cellular data usage to prevent accidental overruns of cellular data plan allocations. R. The router must provide mechanisms for monitoring and controlling bandwidth utilization on all interfaces to enable specific devices or applications to be allocated a minimum bandwidth and defined priority over other IP traffic. S. The 3G cellular wireless VPN router shall meet or exceed the design and performance specifications as described in Sections 3 and 4 below. 3. HARDWARE SPECIFICATIONS A. Physical 1. Dimensions: Main Unit: 8.69" (L) x 5.38" (D) x 1.25" (H) / 220mm x 137mm x 32mm With Card-Guard: 11.25" (L) x 5.38" (D) x 1.25" (H) / 286mm x 137mm x 32mm 2. Weight: 2.4 lbs (1.09 kg) - with power supply & Card-Guard 3. Rugged 19 gauge steel enclosure 4. Painted with industrial hardened powder coating 5. Military Spec (Mil-Spec) durability for extreme and harsh operating conditions B. Power 1. 12V DC – 1200 ma max (vehicle & solar power compatible) 2. Includes auto switching 120-240VAC to 12VDC power supply (global plug kit optional) 3. 2.1 mm jack (positive center pin) 4. Power consumption: 5W (typical), 8W (max) C. Environmental 1. Operating Temperature: -22 to 140 F (-30 to 60 C) 2. Operating Humidity: 0% to 92% (non-condensing) D. I/O Connections 1. (1) User accessible 54 mm PC-Card (PCMCIA) slot for 3G modems (ExpressCard/34 supported via optional adapter). 2. (4) 10/100 Mbps Ethernet LAN switch ports (auto-negotiate / auto MDI/MDIX) 3. (1) 10/100 Mbps Ethernet WAN port (auto-negotiate / auto MDI/MDIX) 4. (1) RS232 (RJ45) serial modem port - 230Kbps max (RJ45 to DB9 cable included)

Proxicast LAN-Cell 2 3G Cellular Router A&E BID SPECIFICATIONS

3G CELLULAR WIRELESS VPN ROUTER

5. (1) RS232 (RJ45) serial configuration port (RJ45 to DB9 cable included) 6. (1) SMA Reverse Polarity Male Wi-Fi 802.11a/b/g wireless antenna connector 7. (1) SMA Female bulkhead antenna connector hole (external SMA Female antenna connector optional) E. Wireless LAN 1. IEEE 802.11a/b/g compliant wireless access point built-in 2. 64/128/152 bit WEP encryption 3. MAC Filtering 4. IEEE802.1x (EAP-MD5/TLS/TTLS/PEAP) 5. WPA/WPA-PSK/WPA2/WPA2-PSK 6. Configurable power output (70mw max) 4. SOFTWARE SPECIFICATIONS A. Cellular WAN Management 1. Auto-failover routing between Ethernet, Cellular and Serial interfaces (user selectable routing priority) 2. Auto-connect on demand or stay connected 24x7 with our "always-on" feature 3. ICMP heartbeat (ping continuity) monitor to ensure persistent cellular connections 4. Configurable load balancing between WAN interfaces 5. MAC address access control list 6. Traffic redirect to an external device for high-availability applications 7. Bandwidth utilization and bandwidth throttling controls 8. Cell-Sentry cellular data budgeting system - helps manage cellular plan caps and overages B. Virtual Private Networks 1. IPSec-compliant VPN 2. 5 Simultaneous VPN connections (IPSec) 3. DES, 3DES, AES encryption 4. Local User Database or RADIUS server for Extended Authentication 5. LAN-Cell initiated/terminated IPSec VPNs and client pass-through VPN support 6. IPSec NAT Traversal + Keep-alive packet support 7. Redundant VPN connection (VPN HA) 8. Manual key, IKE and PKI (X.509) 9. Wizard based VPN set up 10. Interoperable with standard IPSec-based VPN products (e.g. Cisco, SonicWall, Juniper, WatchGuard, NetScreen, etc.) C. Firewall 1. Stateful Packet Inspection (SPI) firewall 2. Packet Filter 3. Denial of Service - DoS and DDoS protection 4. Attack Alerts & Logs 5. Access Control by type of service D. Security & Certificates 1. Digital Certificates - X.509, PKCS#7 & PKCS#12 2. Local & Remote Certificate Authority support 3. Supports SCEP/CMP with CA & RA auto-enrollment E. IP & Routing 1. DHCP client & server 2. Multi-NAT / SUA / port translation and port-forwarding 3. IP Routing: UDP, TCP, ICMP, ARP, RIP V1 and RIP V2 4. IP Multicast

Page 3

5. 6. 7. 8. 9.

Programmable static routes Policy-based routing and traffic shaping Application level priority for bandwidth sensitive applications such as VoIP Configurable LAN / DMZ / WLAN zones • IP Alias (3 VLANs) Dynamic DNS support (DDNS)

F. Device Management 1. Web-based configuration utility (HTTP or HTTPS) 2. Terminal-based configuration utility (Telnet or SSH) 3. User upgradable firmware via LAN, WAN or serial and over-the air cellular 4. FTP/TFTP for firmware upgrade & configuration backup/restore 5. SNMP support 6. Command line interface for advanced configuration 7. Remote management from LAN & WAN 8. User selectable IP port assignments for each management utility 9. Detailed event logging & packet tracing with Syslog and E-Mail log/alert support

Document revision: 04/24/09