Description

DESCRIPTION

The ET-3302 is a compact, industrial temperature rated device (Internet Appliance) that tunnels layer2 Ethernet. The tunnel can be encrypted with AES or non-encrypted. The ET-3302 features two Ethernet LAN ports (4 port switch on trusted interface)and a serial setup port.

The ET-3302 encrypts data between private networks using the public Internet or any other network as the transport. This creates a flat, bridged network, a private network within public or private networks.

The ET-3302 can be a client or server. As a server, the ET-3302 supports up to 8 client devices. As a client, it can be used in conjunction with a ET-6602 server which supports up to 50 remote ET-6602 or ET-3302 clients.

The ET series uses AES 128, 192 or 256 bit encryption. AES is the US Government standard, selected using an open selection process, to replace DES and 3DES encryption.

The ET-3302 network interfaces are Ethernet only. The serial port of the ET-3302 can be used for initial setup of IP address. The ET-3302 has external 12, 24 and 48 volt options.

The ET series operates through firewalls with only one port of your choice opened. It bridges all Ethernet protocols including IPX, IP, NetBEUI, and other proprietary protocols. The ET series is straight-forward, easy to configure and maintain. The ET series has state-of-the-art AES encryption security without the configuration complexity of VPN.

For encryption of serial RS-232 links not involving ethernet or IP, see our SE-6600 product line.

Due to the encryption employed in these products, ET series products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. The ET-6602 and ET-3302 are classified as mass market encryption devices and may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are shippable to most other countries.

SPECIFICATIONS

General

• One asynchronous DE-9P RS232 serial setup port
• Two Ethernet ports, 10/100BaseT, half/full duplex, MDI/MDIX with built-in `4-port switch on the trusted interface
• Sustained throughput of 10 Mbps with AES encryption mode
• UP to 6,000 PPS throughput, depending upon packet size
• Up to 8 clients
• MAC bridging table supports 2,048 entries
• Traverses firewalls through a single port, any port, with port 22 the default port
• Communicates with ET-6600,ET-6602, and ET-3300 products
• Encrypted configuration file may be uploaded or downloaded using a PC

Protocol Features

• AES 128, 192, and 256 bit encryption
• Dynamic DNS support
• Auto-Disconnect timers
• Automatic fail-over for critical links
• Web browser configuration and management from local trusted interface
• Default IP address: 192.168.0.1
• Initial IP address may be configured via local serial terminal
• Supports 802.1Q VLAN
• Extensive filtering on MAC, IP, and Protocol
• Tunnels multicast packets and all ethernet protocols
• NAT and firewall friendly

Performance:

• Sustained throughput greater than 10 Mbps with AES encryption
• Up to 6,000 packets per second throughput, depending upon packet size
• MAC table supports 2,048 entries
• Trusted interface four port switch is wire-speed

Indicators

• Side – Power, port activity (2)
• Front – LAN connection, LAN activity (per port)

Physical/Electrical

• Power requirements: 10 to 18 VDC, 6 watts
• Wide range 24, 48, and 125 VDC options are available
• Supplied with 120-240 VAC external power supply
• 5″ x 3.75″ x 1″
• Shipping weight one pound

Environmental

• Operational Temperature: -20 to +70 C
• Storage Temperature: -50 to +85 C
• Humidity: Non-condensing
• Power Supply Options may affect temperature specifications

APPLICATIONS

How it works

The ET family products create an encrypted tunnel which passes Ethernet packets between two trusted LAN segments. All ethernet protocols are bridged between the ET units. The ET only operates in conjunction with other ET units. One unit is required for each location. Multiple client units may be connected to the same host unit, and a client may be connected to multiple host units (daisy-chained operation). A host unit may be configured to block client-unit to client-unit connections, or to allow them. All ET series units are compatible.

Download a copy of the manual.

Using the UT Encrypted Bridges and UT-SOFT with IP Multicast.

Discusses applying the UT products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The UT supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks. The UT-SOFT software client allows any PC to be a securely connected node on a remote network

Motorola MIP 5000 VoIP Radio Console VPN Solution Guide

This Motorola produced MIP 5000 VoIP Radio Console VPN Solution Guide features a virtual private network (VPN) solution that has been tested with MIP 5000 VoIP Radio Console. The VPN solution uses a pair of encrypted Ethernet bridges to provide a secure Ethernet tunnel between the dispatch center and a remote MIP 5000 console. The secure Ethernet tunnel supports a remote console operator receiving audio from and transmitting audio to radio channels and other MIP 5000 consoles using AES encryption.

ET Encrypted Bridge Quick-Start Installation Guide

A cookbook style quick start guide to installing the ET Encrypted Bridges. Illustrates common usage examples with fill-in-the-blank instructions.

ET-3302/6600 Encrypted Bridge Applications

Some ways the ET products are being used to tunnel IP traffic in the real world.

Using the ET-6601 Encrypted Bridge with EVDO & Wifi

Discusses using the ET-6601 with high speed cellular modems and 802.11 Wifi wide area connections.

ET Encrypted Bridge Installation Option

An application note describing an appliance-like installation that allows the ET to be located anywhere on the local LAN. Known around DCB as the “Single-Port Installation”.

Using the ET Encrypted Bridges with 801.Q VLANs

Discusses configuring the ET products to handle 801.Q VLAN traffic. The ET supports 801.Q VLAN tagged packets, and allows a VLAN to span multiple IP networks.

Using the ET Encrypted Bridges with IP Multicast.

Discusses applying the ET products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The ET supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks.

Automating Dial-Up Router and Bridge PPP Connections

An application note that details one common method of automating the use of IP-6600 routers and ET-6600 bridges to dial multiple remote locations on a scheduled or automated basis.