ROUTER

ROUTER<@VM>Know your WAN access technology before selecting any one of these efficient IP/IPX routers<@VM>Know your WAN access technology before selecting any one of these efficient IP/IPX routers (cont.)

Using Internet protocols provides an efficient, affordable connection between a remote LAN and a central office

By J.B. Miles

Special to GCN


The SmartSwitch Router 600 from Cabletron Systems works with a variety of connections and includes optional hardware encryption and VPN support. Its price ranges from $2,495 to $2,995.



A popular current misconception holds that network routers will soon be as rare as rotary telephones. Don't believe it.

It's true that Gigabit Ethernet-class switches with Layer 3 routing modules are replacing high-end routers for handling traffic at the core of high-speed networks. But as the Internet becomes a more strategically important information pipeline for organizations inside and outside of government, the jobs of standalone IP access routers at the edges of departmental LANs will increase in importance.

Routers work by directing data packets from one network to another according to various network protocols and network operating systems. Most new routers can also bridge LAN traffic over a WAN by keeping track of the logical addresses of workstations on another LAN and passing data packets directly on to them.

The main challenge routers face is the inherent difficulty of efficiently managing multiple protocols. If overpowered by this task, routers themselves can become major network bottlenecks. But for groups of users on small branch office LANs that need to be connected to their main offices over various types of WAN connections using Internet protocols, the routers listed in this Buyers Guide are hard to beat for efficiency and cost-effectiveness.

I scoured router manufacturers' Web sites for access routers based on IP/Internet Packet eXchange protocols that were designed primarily for use in remote, small branch offices. (Keep in mind that the routers featured here are generally part of much larger product families; I couldn't list them all, so contact the manufacturers or check out their Web sites for more information.)


D-Link Systems' DI-106 has one ISDN and six Ethernet LAN ports, along with an ISDN BRI line, and uses Stac LZS compression. It's priced at $499.


The simplest and most basic of these routers employ analog 56-Kbps telephone connections or the Integrated Services Digital Network basic'rate interface of two B-channel 64-Kbps lines for top uncompressed throughput speeds of 128 Kbps. Most of them employ a single 10Base'T Ethernet connection for up to 10 LAN users; others incorporate a small Ethernet hub of six or eight ports for several dozen or more users.

Models such as Chase Research Inc.'s IOLink SOHO, Ericcson Datacom Inc.'s Congo Data and FlowPoint Corp.'s FlowPoint 128 can cost as little as $500 and represent a true bargain for network administrators seeking to connect a small branch office with a limited number of users to a central office site.

The multiprotocol routers listed perform at slightly higher levels of functionality than basic IP, ISDN or basic telephone service models, but are also designed primarily for connecting small branch office LANs to central sites. In addition to using standard telephone or ISDN access lines, many of them also provide leased-line 56- and 64-Kbps, dedicated T1, fractional T1, X.25 or frame relay connections.

The units often feature optional access modules for combining variuos types of connections. Such a module adds several hundred dollars to the cost of a base unit, but it can be well worth the expense if you need dedicated access.

ADC Kentrox's Pacesetter Pro, Develcon Electronics Ltd.'s Orbiter 5100 and Eastern Research Inc.'s SpanNet 2500 Series fall into this category and are also generally capable of handling a wider range of interior and exterior routing protocols than their lower-end relatives. Base prices for this class of router can be as low as $1,295; additional models for various WAN access options generally cost $500 to $1,000.

On the rise

A new category of products dubbed multiservice routers is beginning to emerge. The products in this category are capable of adding analog voice, fax and voice over IP to basic data services. Cisco Systems Inc.'s 1720/1750 Modular Access Router Series, IBM's 2210 Nways Multiprotocol Routers, Motorola's Vanguard 6435/6455 Series and Xyplex Networks' EdgeGuardian Integrated VPN/WAN Access Router are good examples.


Tips for buyers
' Determine which WAN access technology you'll need before buying an access router.

' Remember that modular routers offer the most flexibility.

' Add Data Encryption Standard options for mission-critical applications.

' Keep in mind that virtual private network access'which offers secure, cost-effective connections'is the wave of the future for Internet routers.

' Don't get confused by protocol acronyms. Ask your vendor what they mean.


Multiservice routers are flexible and scalable, providing modules for servicing all or most of the standard WAN access technologies ranging from ISDN to T1, as well as providing support for most IP/IPX-related routing and network protocols. They generally come in a variety of models that bundle options for enhanced security, including encryption, firewalls, advanced network management features and virtual private network support.

As mentioned, they usually offer voice over IP support along with connections for several analog lines for standard voice and fax transmissions.

Most provide options for two or more autosensing 10/100-Mbps Ethernet ports, integrated 56-Kbps channel service units or T1 data service unit/channel service units, automatic ISDN backup and more. The bare-bones cost of such units can be as low as $1,295 or slightly more, but expect to pay $4,000 or more for a model featuring all the options you want. Nevertheless, that can be a bargain for a powerful standalone device powered by a RISC processor that can provide dozens of users with instant high-speed Internet access for less than $100 per user.

How do you pick a router from the large selection available? You can start by checking the following features to see if the access router you have in mind will meet your performance requirements:

Security. Anytime you move data from one device to another, especially from LAN to LAN over a public WAN or VPN, security concerns are inherent. Even at the low end, IP access routers should include user authentication measures such as support for the Password Authentication Protocol and the Challenge Handshake Authentication Protocol. Remote access dial-in user service is another user authentication tool.

Software- or hardware-based firewall protection, such as Cisco's optional IOS Firewall, guards LANs against outside attack by filtering out illegitimate data packets, as well as offering other features, such as Java blocking, denial-of-service detection and prevention, audit trail and real-time alerts.

For mission-critical applications, consider a router with a built-in or optional 64-bit key IP Security Data Encryption Standard module or a triple DES module with a 168-bit key.

When moving traffic across a VPN, look for support for tunneling standards such as IPSec, Generic Routing Encapsulation, and Layer 2 Forwarding and Layer 2 Tunneling and protocols. Cisco and other makers of modular access routers generally provide these as options with their families of products designed for remote users, branch offices or large departments.

Quality of service. QOS controls let routers provide high levels of traffic availability and predictability. This can translate into determining which users or applications have access to how much bandwidth, with priority going to mission-critical applications.

High-end multiservice routers such as Cisco's 1720/1750 series provide such services as committed access rate, whereby traffic types are classified and specific allowable bandwidth is allotted for each type.

Policy routing also classifies and prioritizes traffic by IP precedence but doesn't set allowed bandwidth, as does CAR.

Weighted fair queuing provides consistent response time by scheduling low-bandwidth traffic to the front of the queue to reduce response time. Generic traffic shaping controls and smooths outbound WAN traffic to a specified bandwidth.

The Resource Reservation Protocol reserves guaranteed bandwidth for specified applications from one end of the WAN to the other.

Management protocols. Most of the routers listed in the accompanying table support Simple Network Management Protocol and Telnet protocols that allow them to be managed from central consoles elsewhere on the network.

If vendor-specific management software such as Cisco's CiscoView or Cabletron Systems Inc.'s clearVISN is included, it usually is an SNMP version optimized for its own product.

Cost-cutting measures. IP/IPX protocol Spoofing and Network Address Translation/Protocol Translation help manage the costs associated with using access routers over WANs.

Protocol spoofing saves money for users by getting dial-up ISDN lines to shut down when inactivity is detected, thereby reducing online costs.

NAT/NATP protocols help reduce Internet charges by allowing users to map multiple local IP addresses to a single IP address provided by an Internet service provider.


ZyXel Communication's Prestige 641 has an asymmetric digital subscriber line modem that provides throughput of up to 8M upstream and 640K downstream. It's priced at $399.


The Dynamic Host Configuration Protocol saves money by allowing configuration of devices to be handled by a central server. The need to install a DHCP server on a separate PC on the network is eliminated, thus reducing LAN installation and maintenance costs.

Compression. With compression technology such as Stac LZS, the data transfer rate passed through the router can increase by up to 600 percent, reducing online costs.

Flexibility. There are a couple of factors to consider here, the first of which is the router's ability to handle the various existing WAN technologies such as leased lines, frame relay, ISDN, Switched Multimegabit Data Service and others.

Second is the router's ability to handle various IP routing protocols such as the Routing Information Protocol and RIP2, ARP Address Resolution Protocol, the Proxy, the Internet Control Messaging Protocol and others. Finally, you may want the flexibility of adding voice and fax services to your high-speed data routing.

Obviously, if your needs are simple, keep it simple with an inexpensive, straightforward router.

But if you need more, a high-end modular unit will be the answer.

Easy setup. Routers used to be a bear to install, often demanding that users write their own lines of code to make them operate properly.

Most of today's models, particularly at this end of the service scale, come with Microsoft Windows installation wizards that make it possible even for nonprofessionals to install them in minutes.

J.B. Miles of Pahoa, Hawaii, writes about communications and computers.







































































































































































































































































































































































































Vendor Product WAN access options Security Management Price
ADC Kentrox
Portland, Ore.
503-643-1681
www.kentrox.com
Pacesetter SOHO ISDN, plain telephone service PAP/CHAP, RADIUS, IP filtering SNMP Enterprise MIB II $795
Pacesetter SOHO Pacesetter Pro ISDN, frame relay Same SNMP Enterprise MIB II $795
Pacesetter T1 T1, ISDN Same SNMP Enterprise MIB II $1,695
Alpha Telecom Inc. U.S.A. Networking Division
Sunnyvale, Calif.
408-541-6188
www.alpha-tele.com
NetRouter 1040 ISDN PAP/CHAP, Caller ID SNMP MIB II, Enterprise MIB $1,295
Cisco Systems Inc.
San Jose, Calif.
408-526-4000
www.cisco.com
1720 Modular Access Router Series ISDN, POTS, leased line, 56/64Kbps DDS, T1 fractional T1 PAP/CHAP, RADIUS, IPSec DES and 3DES encryption SNMP, Telnet, CiscoView, CiscoWorks 2000 $2195 up
1750 Modular Access Router Series Same Same Same $1,495 to $2695 up
Cabletron Systems Inc.
Rochester, N.H.
603-332-9400
www.cabletron.com
SmartSwitch Router 100 ISDN, ISDN leased line Optional 56 Kbps DES encryption, firewall SNMP $565 to $725
SmartSwitch Router 500 Series T1, leased line, frame relay, X.25 Same SNMP $1,595 to $1,695
Router 600 SmartSwitch Same Same SNMP $2,495 to $2,995
Chase Research Inc.
Nashville, Tenn.
615-872-0770
www.chaser.com
IOLink SOHO ISDN PAP/CHAP, NetSAFE Firewall SNMP MIB II, Enterprise MIB, Telnet $549 to $799
IOLink Pro Dual leased line, ISDN Same Same $995 up
Develcon Electronics Ltd.
Atlanta
770-936-0366
www.develcon.com
Orbitor 500 ISDN NetSAFE Firewall SNMP, Telnet $500 up
Orbitor 530 Leased line NetSAFE Firewall SNMP, Telnet $699
Orbitor 5100 Optional ISDN, leased line, frame relay NetSAFE Firewall SNMP, Telnet $1,199 up
D-Link Systems Inc.
Irvine, Calif.
949-788-0805
www.dlink.com
DI-300 (W & MW) ISDN PAP/CHAP, RADIUS SNMP, Telnet $499
DI-106 (W & MW) ISDN PAP/CHAP, RADIUS SNMP, Telnet $499
DI-1137C-1TP ISDN, leased line, T1/E1, fractional T1, 56-Kbps DDS PAP/CHAP, RADIUS, NetProtect Firewall SNMP, Telnet $1,299
Eastern Research Inc.
Moorestown, N.J.
856-273-6622
www.erinc.com
SpanNet 2500 Series ISDN, leased line, frame relay, T1, fractional T1, switched 56 Kbps Secure software updates SNMP, Telnet $1,375 to $3,995
Efficient Networks Inc.
Dallas
972-991-3884
www.efficient.com
SpeedStream 5621 Digital subscriber line PAP/CHAP SNMP MIB II, RFC 1695 for ATM, ADSL Forum MIB $500 up
SpeedStream 5660 DSL PAP/CHAP Same $500 up
Engage Communication Inc.
Aptos, Calif.
408-688-1021
www.engage.com
IP Express XL Series T1, fractional T1, frame Relay, 56/64-Kbps DDS Password protection, IP filtering EngageView, SNMP, Telnet $895 to $1,195
ExpressRouter XL Series Leased line Same Same $1,195 to $1,495
Advanced ExpressRouter Leased line Same Same $1,495 to $4,495
Ericsson Datacom Inc.
Goleta, Calif.
805-685-4455
www.acc.com
Danube Leased line, switched 56 Kbps, ISDN PAP/CHAP, IP firewall, IPSec SNMP MIB II, Telnet $1,095
Congo ISDN PAP/CHAP, Caller ID SNMP MIB II, Telnet $495 to $675
Emerging Technologies Inc.
Melville, N.Y.
516-271-4525
www.etinc.com
ET/R1000-2T/4T T1 N/A SNMP $2,495 to $3,195
FlowPoint Corp.
Los Gatos, Calif.
408-878-6800
www.flowpoint.com
FlowPoint 128 ISDN PAP/CHAP, FlowPoint FireWall SNMP, Telnet $499 to $599
FlowPoint 144 ISDL Same SNMP, Telnet $499
FlowPoint 2200 Symmetric DSL Same Same $599 to $1,198
IBM Corp.
Armonk, N.Y.
914-499-1900
www.ibm.com
2210 Nways Multiprotocol Routers ISDN, leased line PAP/CHAP, IBM VPN security software SNMP/Telnet $1,264 up
Intel Corp.
Santa Clara, Calif.
408-765-8080
www.intel.com
Express 8100 Series ISDN, leased line, frame relay, X.25 PAP/CHAP Intel DeviceView, SNMP, Telnet $549 to $699
Express 8200 Series ISDN, leased line, frame relay, X.25, T1 PAP/CHAP Intel DeviceView, SNMP, Telnet $699 up
KarlNet Inc.
Columbus, Ohio
614-457-5275
www.karlnet.com
Remote KarlRouter 56/64-Kbps leased line, T1 Firewall filtering SNMP MIB II $2,950
Kingston Technology Co.
Fountain Valley, Calif.
714-435-2600
www.kingston.com
EtheRX Internet Access Router ISDN, POTS Encryption N/A $479
Linksys
Irvine, Calif.
949-261-1288
www.linksys.com
EtherFast 4-Port 10/100 Analog Router POTS Software-based N/A $199
Lucent Internetworking Systems Murray Hill, N.J. 908-582-8500 www.ascend.com SuperPipe 95 ISDN PAP/CHAP, Caller ID, IPSec, DES encryption SNMP, Telnet $1,295
SuperPipe 155 ISDN, T1, frame relay Same SNMP, Telnet $1,795
Memotec Communications Corp.
Herndon, Va.
703-904-0550
www.memotec.com
CL2500 frame relay Optional SNMP $1,195 up
Microtronix Datacom Ltd.
London, Ontario
519-690-0091
www.microtronix.com
Access 3000 ISDN, frame relay, POTS, T1, X.25e N/A SNMP, Telnet $1,100
Access 9000 Same N/A SNMP, Telnet $1,800
Motorola Inc. Internet and Networking Group
Mansfield, Mass.
508-261-4000
www.mot.com
Vanguard 100 ISDN, frame relay, X.25 N/A SNMP $890 up
Vanguard 320 Same N/A SNMP $1,244 up
Vanguard 6435/6455 Full range of options via enhanced daughter cards N/A SNMP $2,500 to $3,530 up
Multi-Tech Systems Inc.
Saint Paul, Minn.
612-785-3500
www.multitech.com
RouteFinder Series Leased line, frame relay PAP/CHAP Bundled software, Telnet $799 to $1,139
MultiFRAD Series Frame relay PAP/CHAP Bundled software, Telnet $1,999 to $4,199
NetSpan Corp.
Richardson, Texas
972-690-8844
www.netspan.com
MultiRouter LT/Sync DDS, T1 Bundled software SNMP $949
MultiRouter EN/Sync DDS, T1 Bundled software SNMP $1,099
Netopia Inc.
Alameda, Calif.
510-814-5100
www.farallon.com
R2020 Dual Analog Router POTS Caller ID Telnet $715
R3100 ISDN Router ISDN, POTS IP firewall SNMP $585 to $815
R5100 Serial Router Frame relay IP firewall SNMP $895








































































































































































































Vendor Product WAN access options Security Management Price
Nortel Networks
Simi Valley, Calif.
805-583-8600
www.nortel.com
BayStack Advanced RemoteNode (ARN) ISDN, POTS, leased line, T1, X.25, fractional T1, 56/64-Kbps DDS, N/A SNMP, RMON $1,745 to $4,495
NX Networks
Westborough, Mass.
508-898-2800
www.proteon.com
GT 60/70 Optional modules for most WAN protocols PAP/CHAP, ARCFOUR, DES and 3DES encryption, RADIUS, firewall SNMP, Telnet $648 to 1,398
GT 90 Same Same SNMP, Telnet $944 to $1,694
GT 900 Same Same SNMP, Telnet $1,695 to $1,995
Osicom
Santa Monica, Calif.
310-581-4030
www.osicom.com
RouterMate R64/R64R Frame relay, POTS N/A SNMP, Telnet $995
RouterMate R56/R56R Frame relay, POTS N/A SNMP, Telnet $995
RouterMate RT1/RT1R Frame relay, T1 N/A SNMP, Telnet $1,495
Pivotal Networking Inc.
Sunnyvale, Calif.
408-731-4567
www.pivnet.com
StarGazer 1700 POTS PAP/CHAP SNMP $395 to $945
StarGazer 1800 ISDN PAP/CHAP, IPSec, DES encryption SNMP $495 to $1,395
StarGazer 1900 ISDN, frame relay PAP/CHAP, IPSec, DES encryption SNMP $495 to $1,395
RAD Data Communications Inc.
Mahwah, N.J.
201-529-1100
www.rad.com
LAN Ranger MBE Series Dial-up, leased line, frame relay, DDS, ISDN PAP/CHAP, RADIUS, firewall SNMP, Telnet $1100 up
Ramp Networks Inc.
Santa Clara, Calif.
408-988-5353
www.rampnet.com
WebRamp 310i POTS, ISDN PAP/CHAP SNMP MIB II $849
WebRamp 410i ISDN, POTS PAP/CHAP SNMP, Telnet $599
WebRamp 510i SDSL, ISDN IP filtering SNMP, Telnet $590
3Com Corp.
Santa Clara, Calif.
408-326-5000
www.3com.com
SuperStack II NetBuilder 43x Series ISDN, leased line, T1 IPSec, IP firewall, DES and 3DES encryption SNMP $5,295
Shiva Corp.
Bedford, Mass.
781-687-1000
www.shiva.com
AccessPort ISDN Smart Detect software ShivaRemote, AccessSwitch $717
Sync Research Inc.
Irvine, Calif.
949-588-2070
www.sync.com
FrameNode 3600 Series ISDN, frame relay Dial backup NetView/390, SNMP $995 up
Xyplex Networks
Littleton, Mass.
978-952-4700
www.nbase-xyplex.com
SOHO-Network 1000 Router ISDN, frame relay PAP/CHAP SNMP $500 to $675
EdgeBlaster MultiFunction WAN Access Router T1, fractional T1, frame relay PAP/CHAP, IPS+ D360ec-based VPN tunnels, Caller ID, RADIUS SNMP $1950 up
EdgeGuardian Integrated VPN WAN Router T1 Same, with hardware-based encryption SNMP $5,445 up
Zoom Telephonics Inc. Boston 617-423-1072 www.zoomtel.com ZoomAccess 2 ZoomAccess 8 POTS, ISDN, leased line POTS, ISDN, leased line PAP/CHAP, RADIUS, IP filtering firewall Same WebManage software WebManage software $1299 up $1,377
ZyTrax Communications Inc.
Saint-Laurent, Quebec
514-285-9088
www.zytrax.com
WarpTwo ISDN Proprietary SNMP $400 to $480
ZyXel Communications Corp.
Anaheim, Calif.
714-632-0882
www.zyxel.com
Prestige 128 Plus ISDN PAP/CHAP, RADIUS SNMP $599
Prestige 641 Asymmetric DSL PAP/CHAPP SNMP $399
Prestige 310 Cable ADSL PAP/CHAP SNMP $299

inside gcn

  • A framework for secure software

Reader Comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group