Description

DESCRIPTION

The FT-6602/6630 creates an encrypted tunnel through IP networks. The FT-6602 features three Ethernet LAN ports and a serial port for initial setup, the FT-6630 2 Ethernet ports and a serial port.

The FT-6602/6630 encrypts data between private networks using the public Internet or any other network as the transport.

The FT-6602/6630 can be a server, a client or a client & server device. As a server, the FT-6602 supports up to 25 simultaneous clients. The FT-6630 support up to 50 clients.

The FT-6602/6630 Ethernet user data transport may be either TCP/IP or UDP. UDP is preferred for wireless links, for voice and for video transport. An FT server can support UDP and TCP/IP simultaneously.

The FT-Soft client software allows any Windows workstation to connect to any FT server as a stand-alone client. This is quite useful for stand-alone dispatch workstations or portable notebook-based operations. Click here for more information on the FT-Soft software client.

The FT series uses a FIPS certified encryption module. AES is used for the bulk data encryption. SHA1 is used for signing and RSA 2048 for key exchange and authentication. A USB memory device is used for certificate information storage.

The FT-6602 Ethernet ports are all 10/100BaseT. The FT-6630 Ethernet ports are 10/100/1000. The serial port can be used for initial IP setup. The FT’s are typically setup and managed using a browser. The server has a fixed IP address. Clients can use DHCP or have fixed IP addresses.

The FT series operate through firewalls with only one port of your choice opened. It bridges all Ethernet protocols including IPX, IP, NetBEUI, and other proprietary protocols. The FTs are straight-forward, easy to configure and maintain. They have state-of-the-art AES encryption security without the configuration complexity of VPN.

For encryption of serial RS-232 links not involving ethernet or IP, see our SE-6600 product line. For encryption of ethernet or IP links using non FIPS certified modules and other features, see our ET series or UT series products.

Due to the encryption employed in these products, FT and ET series products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. Some models of the ET and FT series are classified as mass market encryption devices and may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are shippable to most other countries.

SPECIFICATIONS

General

FT-6602 – Three Ethernet ports, 10/100 BaseT
• FT-6630 – Two Ethernet ports, 10/100/1000 BaseT
• USB Port for certificate information storage
• FT-6602 sustained throughput of 13 Mbps, FT-6630 – 110 Mbps
• FT-6602 supports up to 25 client devices, FT-6630 – 50 clients
• FT-Soft performance is determined by the PC workstation
• Bridge/tunnel supports 4,096 MAC address table entries
• The FT-6602 & FT-6630 use an embedded FIPS 140-2 validated cryptographic module (Certificate #918) running on a Linux x86 platform per FIPS 140-2 Implementation Guidance section G.5 guidelines

Protocol Features

• TLS ver 1.0, AES 256 bit encryption
• Optional UDP transport for Ethernet data with AES 256 bit encryption. When in UDP mode, certificate exchanges and authentication use TCP/IP
• Web browser configuration and management from local trusted interface
• Robust failover features
• Default IP address: 192.168.0.1
• Initial setup via local serial terminal
• Supports tunneling of 802.1Q VLAN
• Extensive filtering on MAC, IP, and Protocol
• Tunnels multicast packets (Layer 2 tunneling)

Performance:

• FT-6602 sustained throughput of 13 Mbps, FT-6630 – 110 Mbps
• FT-6602 supports up to 25 client devices, FT-6630 – 50 clients
• FT-Soft performance is determined by the PC workstation
• Bridge/tunnel supports 4,096 MAC address table entries

Indicators

• Power, port activity,LAN connection, LAN activity

Physical/Electrical

FT-6602

• Power: 7 to 18 VDC, 6 watts
• 12, 24, 48, 125 VDC and 240 VAC options are available
• Supplied with 100-240 VAC external supply
• Dimensions: 6 ¼” x 6 ¼” x 1”
• Shipping weight: 5 pounds

FT-6630

• Power: 100-240 VAC
• Dimensions: 1.7” x 16.8” x 14”
• Shipping weight: 20 pounds

Environmental

• FT-6602 Operating Temp: -20° to +70° C
• FT-6630: +10° to +35° C
• Storage Temperature -50° to +85° C
• Humidity: Non-condensing

APPLICATIONS

How it works

The FT family products create an encrypted tunnel which passes Ethernet packets between two trusted LAN segments. All ethernet protocols are bridged between the FT units. The FT only operates in conjunction with other FT units. One unit is required for each location. Multiple client units may be connected to the same host unit, and a client may be connected to multiple host units (daisy-chained operation). A host unit may be configured to block client-unit to client-unit connections, or to allow them. All FT series units are compatible.

Download a copy of the manual.

This is a quick-start guide and “cookbook” configuration guide.

Download a copy of the quick-start guide.

The FT series is the FIPS 140-2 encryption module version of our ET series encrypted tunnels. While these applications notes reference the ET series products, the FT series operation and capabilityes are similar.

Using the UT Encrypted Bridges and UT-SOFT with IP Multicast.

Discusses applying the UT products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The UT supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks. The UT-SOFT software client allows any PC to be a securely connected node on a remote network

Motorola MIP 5000 VoIP Radio Console VPN Solution Guide

This Motorola produced MIP 5000 VoIP Radio Console VPN Solution Guide features a virtual private network (VPN) solution that has been tested with MIP 5000 VoIP Radio Console. The VPN solution uses a pair of encrypted Ethernet bridges to provide a secure Ethernet tunnel between the dispatch center and a remote MIP 5000 console. The secure Ethernet tunnel supports a remote console operator receiving audio from and transmitting audio to radio channels and other MIP 5000 consoles using AES encryption.

ET Encrypted Bridge Quick-Start Installation Guide

A cookbook style quick start guide to installing the ET Encrypted Bridges. Illustrates common usage examples with fill-in-the-blank instructions.

ET-3302/6600 Encrypted Bridge Applications

Some ways the ET products are being used to tunnel IP traffic in the real world.

Using the ET-6601 Encrypted Bridge with EVDO & Wifi

Discusses using the ET-6601 with high speed cellular modems and 802.11 Wifi wide area connections.

ET Encrypted Bridge Installation Option

An application note describing an appliance-like installation that allows the ET to be located anywhere on the local LAN. Known around DCB as the “Single-Port Installation”.

Using the ET Encrypted Bridges with 801.Q VLANs

Discusses configuring the ET products to handle 801.Q VLAN traffic. The ET supports 801.Q VLAN tagged packets, and allows a VLAN to span multiple IP networks.

Using the ET Encrypted Bridges with IP Multicast.

Discusses applying the ET products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The ET supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks.

Automating Dial-Up Router and Bridge PPP Connections

An application note that details one common method of automating the use of IP-6600 routers and ET-6600 bridges to dial multiple remote locations on a scheduled or automated basis.