Funkwerk RS120 5510000219 User Manual
Product codes
5510000219
bintec RS120
Professional Gigabit Ethernet Router
The bintec RS120 is a powerful and, thanks to its comprehensive equipment, flexible router. The fan-free metal housing
guarantees long-term reliability in critical corporate applications and is ideal for use as an access router in SMEs or for
connecting branch offices and home offices. The device has five gigabit Ethernet ports, which can be configured for
LAN, WAN or DMZ. The RS120 also comes with a SFP slot for optical fibre expansion modules, e.g. for connecting to
an optical fibre broadband connection. A UMTS USB modem connected to the USB port can be used as a remote
configuration access and as a backup interface.
guarantees long-term reliability in critical corporate applications and is ideal for use as an access router in SMEs or for
connecting branch offices and home offices. The device has five gigabit Ethernet ports, which can be configured for
LAN, WAN or DMZ. The RS120 also comes with a SFP slot for optical fibre expansion modules, e.g. for connecting to
an optical fibre broadband connection. A UMTS USB modem connected to the USB port can be used as a remote
configuration access and as a backup interface.
The device is supplied ex works with a licence for five hardware-accelerated IPSec tunnels.
Using functions flexibly
Only a few functions are required to forward data packets between two networks. The bintec RS120 has features that
go far beyond just routing and allow it to be integrated into complex IT infrastructures. By using Extended Routing and
NAT (ERN) the data can be routed in IP routing according to criteria such as IP protocols (Layer 4), source or
destination IP address, source or destination port, TOS/DSCP, source or destination interface and the status of the
destination interface. In addition, you can also use network address translation to translate the data traffic for both
inbound and outbound connections and individually for each interface based on a wide range of criteria.
The comprehensive multicast support makes the device ideal for use in multimedia and streaming applications.
The Stateful Inspection Firewall (SIF) offers effective protection against attacks from the Internet through dynamic
packet filtering. Firewall handling is made easier through numerous pre-configured services. An optional content filter
rounds off the security functions of the devices*. In this case, all the outgoing Internet enquiries are classified and allow
contents not wanted to be reliably filtered out.
The basic equipment of the RS Series also offers a SIP application level gateway (ALG) for the direct connection of IP
telephones in the network or for registering with a VoIP provider, without affecting the security of the WAN connection.
The corresponding releases in NAT and the internal Stateful Inspection Firewall are controlled automatically by ALG for
the length of the communication.
Quality of Service is more than a watchword in FEC devices. Thanks to the rising convergence between voice and data,
the classification of data streams is gaining in importance. Our routers provide corresponding QoS mechanisms for
prioritising the VoIP traffic ahead of normal internet traffic, for example, and to guarantee it sufficient bandwidth.
Alternatively you can give normal data traffic priority over e-mail traffic. The bintec QoS implementation allows voice
data to be processed before e-mal data, for example, within a VPN tunnel.
The DNS proxy function supports the LAN for address implementation and the automated IP configuration of PCs is
carried out over an integrated DHCP server.
go far beyond just routing and allow it to be integrated into complex IT infrastructures. By using Extended Routing and
NAT (ERN) the data can be routed in IP routing according to criteria such as IP protocols (Layer 4), source or
destination IP address, source or destination port, TOS/DSCP, source or destination interface and the status of the
destination interface. In addition, you can also use network address translation to translate the data traffic for both
inbound and outbound connections and individually for each interface based on a wide range of criteria.
The comprehensive multicast support makes the device ideal for use in multimedia and streaming applications.
The Stateful Inspection Firewall (SIF) offers effective protection against attacks from the Internet through dynamic
packet filtering. Firewall handling is made easier through numerous pre-configured services. An optional content filter
rounds off the security functions of the devices*. In this case, all the outgoing Internet enquiries are classified and allow
contents not wanted to be reliably filtered out.
The basic equipment of the RS Series also offers a SIP application level gateway (ALG) for the direct connection of IP
telephones in the network or for registering with a VoIP provider, without affecting the security of the WAN connection.
The corresponding releases in NAT and the internal Stateful Inspection Firewall are controlled automatically by ALG for
the length of the communication.
Quality of Service is more than a watchword in FEC devices. Thanks to the rising convergence between voice and data,
the classification of data streams is gaining in importance. Our routers provide corresponding QoS mechanisms for
prioritising the VoIP traffic ahead of normal internet traffic, for example, and to guarantee it sufficient bandwidth.
Alternatively you can give normal data traffic priority over e-mail traffic. The bintec QoS implementation allows voice
data to be processed before e-mal data, for example, within a VPN tunnel.
The DNS proxy function supports the LAN for address implementation and the automated IP configuration of PCs is
carried out over an integrated DHCP server.
Comprehensive IPSec implementation
The IPSec implementation integrated in bintec RS120 works not only with preshared keys but also with certificates.
This allows a public key infrastructure to be created for maximum security. (The German Federal Office for Information
Security also recommends the use of certificates.)
Furthermore, the bintec IPSec implementation offers support when creating VPN connections with dynamic IP
addresses: Even small branch offices can be reached without having to be permanently online. If both VPN nodes only
have dynamic IP addresses, confidential information can continue. The exchange of IP addresses is carried out over a
dynamic DNS provider.
This allows a public key infrastructure to be created for maximum security. (The German Federal Office for Information
Security also recommends the use of certificates.)
Furthermore, the bintec IPSec implementation offers support when creating VPN connections with dynamic IP
addresses: Even small branch offices can be reached without having to be permanently online. If both VPN nodes only
have dynamic IP addresses, confidential information can continue. The exchange of IP addresses is carried out over a
dynamic DNS provider.
Load Balancing/Backup
The devices offer a unique level of flexibility thanks to the wide variety of interfaces supported. The RS120wu supports
the ability to configure two interfaces as WAN interfaces. As a result, there is not only more bandwidth available, but
there is the opportunity to spread data traffic across individual WAN connections according to load or data type.
Equally, you can use a connection (e.g. SDSL) for the VPN connection to the head office and use a second WAN port
for a low-cost ADSL connection to guarantee the company's other data traffic. If either connection fails, the other can
take over the entire data transfer. In the event that both lines fail, data traffic can automatically be routed over a UMTS
modem connected to the USB port.
the ability to configure two interfaces as WAN interfaces. As a result, there is not only more bandwidth available, but
there is the opportunity to spread data traffic across individual WAN connections according to load or data type.
Equally, you can use a connection (e.g. SDSL) for the VPN connection to the head office and use a second WAN port
for a low-cost ADSL connection to guarantee the company's other data traffic. If either connection fails, the other can
take over the entire data transfer. In the event that both lines fail, data traffic can automatically be routed over a UMTS
modem connected to the USB port.
Simple configuration and maintenance
The router is configured over the Funkwerk Configuration Interface (FCI), using the integrated configuration wizards for
example. The FCI is a web-based graphic user surface that you can use from any PC with an up-to-date Web browser
example. The FCI is a web-based graphic user surface that you can use from any PC with an up-to-date Web browser