MH-2001

Multi-Homing Security Gateway
 

PLANET's Multi-Homing Security Gateway, the MH-2001 integrates with cutting-edge technology which includes Load Balancing, QoS, VPN, Authentication and Firewall functions for central sites to establish office network and to connect with branch offices as well as remote dial users. It is designed for required application-based network solution of business at low-capital investment and perfect service to the needs for small and medium sized business. No more complex connection and settings for integrating different security products on the network is required.

As Internet becomes the essentials for business, the only way to prevent failure from Internet connection is to have more connection. MH-2001's multiple WAN interfaces can prevent it and also reduce the risks of potential shutdown. Moreover, it allows applying load-balancing by distributing the traffic through two WAN connections.

In order to be a multi-homing device, PLANET's Security Gateway provides a complete security solution in just one box. The policy-based firewall, content blocking function and VPN connectivity with 3DES and AES encryption functions are the points of this perfect product for your network security. Bandwidth management function is also supported to offer network administrators an easy and powerful ways to allocate network resources based on business priorities and to shape and control bandwidth usage..
 
   Product Application

SMB Multi-Homing Security Gateway
The MH-2001 is a highly integrated device including connectivity and security features for meeting a small or medium enterprise needs. It is no need to change the existing network infrastructure, and it provides a cost-effective WAN backup while using inexpensive and high-speed broadband. Increasing loading traffic is easy to solve by balancing over two WAN connections. Network bandwidths can be easily increased by adding another ISP connection.
 

 
   Key Features

 

WAN Backup: The MH-2001 can monitor each WAN link status and automatically activate backup links when a failure is detected. The detection is based on the configurable target Internet addresses.
Outbound Load Balancing: The network sessions are assigned based on the user configurable load balancing mode, including "Auto", "Round-Robin", "By Traffic", "By Session", "By Packet", "By Source IP" and "By Destination IP". Users can also configure IP or TCP/UDP type of traffic which is connected by WAN port.
Policy-based Firewall: The built-in policy-based firewall prevents many known hacker attacks including SYN attack, ICMP flood, UDP flood, Ping of Death, etc. The access control function allows only specified WAN or LAN users using allowed network services on specified time.
VPN Connectivity: The security gateway supports PPTP and IPSec VPN. With DES, 3DES, AES encryption and SHA-1/MD5 authentication, the network traffic over public Internet is secured.
Content Filtering: The security gateway can block network connection based on URLs, Scripts (The Pop-up, Java Applet, cookies and Active X), P2P (eDonkey, Bit Torrent and WinMX), Instant Messaging (MSN, Yahoo Messenger, ICQ, QQ and Skype) and Download / Upload blocking.
Dynamic Host Control Protocol (DHCP) server: DHCP server can allocate up to 253 clients' IP addresses and distribute them including IP address, subnet mask as well as DNS IP address to local computers. It provides an easy way to manage the local IP network.
Web based GUI: The MH-2001 supports web based GUI for configuration and management. It also supports multiple languages including English, Traditional Chinese and Simplified Chinese.
User Authentication: User database can be configured on the devices, and the MH-2001 also supports the authenticated database through external RADIUS and POP3 server.
Bandwidth Management: Network packet can be classified based on IP address, IP subnet and TCP/UDP port number and it gives guarantee and bursts bandwidth with three levels of priority.
Dynamic Domain Name System (DDNS): The Dynamic DNS service allows users to name alias dynamic IP address to a static hostname.
Multiple NAT: Multiple NAT allows local port setting multiple subnet and connecting to the Internet through different WAN IP addresses.
Server Load Balancing: Up to 4 group virtual servers support server load balancing.
Accounting Report: Accounting report function can monitor the information about the Internal and External network traffic via MH-2001.

 

Specification

Product

Multi-Homing Security Gateway

Model

MH-2001

Hardware

Ethernet-LAN

1 x 10/100Mbps RJ-45

Ethernet-WAN

2 x 10/100Mbps RJ-45

Ethernet-DMZ

1 x 10/100Mbps RJ-45

Button

Reset button for reset to factory default setting

Software

Management

Web

Network Connection

DMZ_NAT, DMZ_Transparent, NAT

Routing Protocol

Static Route, RIPv2

Outbound Load Balancing

Policy-based routing
Load-balancing by Round-Robin, traffic, session, packet, Source IP and Destination IP

Firewall

Policy-based firewall rule with schedule
NAT/NAPT
SPI firewall
Prevention of SYN attack, ICMP flood, UDP flood, Ping of Death, Tear Drop, IP Spoofing, IP route, Port Scan and Land attack

VPN Tunnels (Configure / Connection)

200 / 100

VPN Functions

PPTP, IPSec
DES, 3DES and AES encrypting
SHA-1 / MD5 authentication algorithm
Remote access VPN (Client-to-Site) and Site to Site VPN

Content Filtering

URL blocking, Script blocking (Popup, Java Applet, cookies and Active X)
IM blocking (MSN, Yahoo Messenger, ICQ, QQ and Skype)
P2P blocking (eDonkey, Bit Torrent and WinMX)
Download and Upload blocking

Bandwidth Management

Policy-based bandwidth management
Guarantee and maximum bandwidth with 3 priority levels
Classify traffics based on IP, IP subnet, TCP/UDP port

User authentication

Built-in user database with up to 200 entries
Radius, POP3 authentication support

Accounting Report

Outbound / Inbound accounting report statistics by Source IP, Destination IP and Service

Log and Alarm

Log and alarm for event and traffic
Log can be saved from web, sent by e-mail or sent to syslog server

Statistics

Traffic statistic for interface (WAN 1 / 2) and policies
Graphic display
Record up to 30 days

Others

Firmware Upgradeable through Web
Configuration Backup and Restore through Web
Dynamic DNS
NTP support
DHCP server
Multiple NAT and multiple DMZ (mapped IP) support
Server load balancing
 

Top