data sheet vr2020 - tdt

TDT AG – Your experts in DATA COMMUNICATION. – www.tdt.de Technical changes and errors excepted

TDT AG – MADE IN GERMANY

S E C U R I T Y

DATA SHEETVR2020The Business Router-Series from TDTTDT AG - The expert for secure and innovative data communication

State as of 18.10.2019

Data sheetG3000-Series

TDT AG – Your experts in DATA COMMUNICATION. – www.tdt.de

The most important features of the VR2020 series at a glance:

Any questions? We are there for you+49 8703 929-00 or [email protected]

THE HIGH-TECH VPN-GATEWAY BY TDT

„Made in Germany“: The company TDT stands for security and innovation in data communication since 1978.With the G3000 VPN-gateway series, TDT introduces high-tech gateways which include versatile functionalitiesfor your VPN (Virtual Private Network). The G3000 gives you the maximum throughput to transfer your datasecurely and encrypted. Through a variety of online channels (WAN via fiber optic or cable modem and mobileoperation behind a DSL modem) even sophisticated backup scenarios can be configured to provide the best possibleavailability.

G3000

Maximum security, data availability and service

DSL modem Integrated LTE modem(only for L variants)

CATHEAD LTE antenna(only for L variants)

Multi-Protocol VPN

incl. 30 VPN tunnels Multi-WANManager

TPM Chip Multi-SIM(only for L variants)

Low power consumption No VPN client costs Fanless metal housing Security and quality"Made in Germany"



TPM-Chip VPN router with built-in DSL modem

Protection against software attacks and hardwaremanipulation is provided by the integrated TrustedPlatform Module (TPM), which is used to securely storekeys and certificates. Cryptographic keys can begenerated, used and securely stored within the TPMusing the integrated random number generator (RNG).

Due to the built-in DSL modem, the device can beconnected directly to any DSL connection and thusestablish an internet connection All common DSLstandards (ADSL / 2/2 +, VDSL / VDSL2 includingvectoring) are supported.

Integrated LTE modem (only L variants) Indutrial grade steel casing

TDT offers two SIM card slots in the VR2020-LD whereeach can be equipped with a provider card. In the eventthat a network fails, the network will be switchedautomatically - the connection remains online. Theintegrated radio modem covers all common Europeanfrequency bands in the 2G / 3G / 4G range. Optionally,further radio modems are available with country-specificfrequencies

TDT's VR2020 high-tech router series sets the standardfor quality and security with its outer shell. The casing ismade of one millimeter thick zincor sheet and guaranteesgood thermal conductivity, strength and high stability.

Incl. 30 VPN-channels Multiprotocol-VPN

The VR2020 high-tech router series includes 30 VPNconnections (channels) as, another advantage of TDTproducts.A paid extension of the VPN channels istherefore not necessary. Protection against softwareattacks and hardware manipulation is provided by theintegrated Trusted Platform Module (TPM), which isused to securely store keys and certificates.Cryptographic keys can be generated, used and safelystored within the TPM with the help of the integratedrandom number generator (RNG).

While many routers usually only handle one VPNprotocol, the VR2020 series allows multiple protocols.Thus, the customer is able to choose the protocol thatbest suits his needs (e.g., OpenVPN, IPsec, IPsec / L2TPor WireGuard*)

*beta stage

MultiWAN-Manager Low power consumption

With TDT's MultiWAN manager you always have thematching connection. Whether via VDSL, LTE or WAN -the MultiWAN manager automatically selects theconnection type you prefer.

Thanks to its efficient and proprietary hardware design,TDT can reduce power consumption to values belowfive or three watts (with the DSL modem deactivated).Another advantage of the VR2020 high-tech routerseries is the reduced electricity costs. With each lessconsumed watt the heat generation is reduced and thelife of the electronic components and the entire device isincreased.

CATHEAD LTE antenna (only L variants)

The CATHEAD antenna specially developed anddesigned by TDT impresses with its high receptionquality - even in areas with poor network coverage. Theantenna can be aligned and positioned that the bestpossible reception is always guaranteed. It supports allcommon frequencies from 800 to 2700 MHz, ie. allrelevant bands in Europe.





FEATURES

ROUTER

Modular software design The modular software structure offers the possibility to integratecustomer-specific / customer-developed software.

DHCP(Dynamic Host Configuration Protocol)

A communication protocol that allows clients to poll and servers to assignthe network configuration (client / relay / server).

Protocols eg. IP, TCP, UDP, PPP, ARP, RARP, ICMP

DNS(Domain Name System)

Manages the namespace in networks, eg. to implement domain names inIP addresses (client / relay / server).

Dynamic DNS Dynamic DNS - Used to dynamically update the IP address of a machine toalways reach it under the same name.

NTP(Network Time Protocol)

Standard for time synchronization via networks (client / server).

Routing Static routing (IPv4 forwarding);Static routing (IPv6 forwarding);Destination IP address based routing (IPv4).

NAT(Network Address Translation)

Source and Destination NAT / NAPT and Masquerading.

QoS(Quality of Service)

For the prioritization of data packets to meet the quality standard,especially for timecritical transmissions / applications.

Real time statistics and log function integrated

Syslog-Client available



Security

Firewall Zone based stateful inspection firewall (IPv4 / IPv6) with packet filter anddemilitarized zone (DMZ). Bridging firewall.

OpenVPN Free software based on OpenSSL for setting up a secure VPN over anencrypted connection. Both routed and bridged tunnels (client/server) aresupported.

IPsec Internet protocol security: For secure VPN communication over potentiallyinsecure IP networks.IKEv1 / IKEv2 / MOBIKE are supported. (Client / server and IPsecpassthrough).

TPM(Trusted Platform Module)

The TPM chip is similar to a built-in smart card. The TPM protectscryptographic keys.These can be generated, used and safely stored within the TPM.It provides protection against software and hardware attacks (physicalmanipulation results in the destruction of stored keys). In addition, theintegrated random number generator (RNG) provides safe numbersequences as the basis for securely encrypted communication.

L2TP(Layer 2 Tunneling Protocol), passthrough

Tunnel protocol for transferring the data link layer (layer 2) of the OSImodel between two networks.

Hash Algorithms MD5, SHA1, SHA2 256/512

Diffie Hellman Groups For secure key exchange: 1, 2, 5, 14, 15, 16, 17, 18Modulo Prime Groups with Prime Order Subgroup: 22, 23, 24NIST Elliptic Curve Groups: 25, 26, 19, 20, 21Brainpool Elliptic Curve Groups: 27, 28, 29, 30

encryption algorithms AES 128/192/256, Blowfish, Twofish 128/256, Serpent 128/256



High-Availability

MultiWAN Manager with complexbackup options

�Multi homed and multi level backup target strategies� Prevent unnecessary switching�Optimization of the downshift� Prevention of switching instabilities (flutter)�Mobile radio: Provider switching with Multi-SIM�Dynamic connection parameters (default route, DNS, gateway, etc.);�Configurable connection verification (ping, LCP echo, etc.);� Emergency Reboot/Reset, e.g. if LTE is not set up.

VRRP(Virtual Router Redundancy Protocol)

With the support of Multi group VRRP.

Management

Administration/Configuration Via the network using Command Line (SSH) and HTTPS, and viaCommand Line (using the console port)

Remote configuration/maintenance If required, remote configuration/maintenance can be performed via TDTACS (Auto-Configuration Server according to TR-069 standard)

Firmware-Update Firmware updates can be implemented via SSH, HTTPS and TDT ACS(TR-069)

SNMP(Simple Network Management Protocol)

SNMP is a network protocol designed to monitor and control networkelements from a central station

Check_MK-Agent For connection to the network management system Check_MK



Hardware specif ications

Basic system

Processor Energy efficient and fanless MIPS processor architecture.

RAM 128 MB

System memory Futureproof 128 MB SLC-Flash.

WAN-Port 10/100/1000 Mbit/s

4-Port-Switch 10/100 Mbit/s; The ports have their own MAC addresses and can beseparated virtually.

LEDs For status information, a power LED and 9 status LEDs are available.

USB Ports 2 ports (USB 3.0) e.g. backup, UPS management via USB-to-Serialadapter.

Crypto Engine Hardware acceleration for encryption/decryption.

TPM (Trusted Platform Module) For the secure storage of keys and certificates.

console port The micro USB configuration interface (console), with integrated USB-to-serial chip, provides an easy way to address the router independently of thenetwork.

Reset button To restart or reset the router.

RS232 interface (optional) The serial interface is optionally available and is used as a terminal strip(Rx / Tx / GND).



DSL modem

VDSL2 ITU-T G.993.2 to profile 30a

VDSL2-Vectoring According to ITU-T G.993.5

ADSL/2/2+ ITU-T G.992.1/3/5

ADSL Standard Annex B/J (Annex A is available on request).

DSL Forum performance specifications ADSL TR-048/67, TR-100; VDSL: WT-114

Erasure Decoding Increased interleaver depth and re-transmission bonding.

Ethernet in the First Mile EFM (IEEE 802.3 ah)

Ethernet-based multi-pair bonding ITU-T G.998.2

DSL Port RJ45 socket



Mobile radio (only for L-variants) High speed M2M mobile connectivity

LTE FDD (=Frequency Division Duplex)� Category 3� Download max. 100 Mbps� Upload max. 50 Mbps� Bands:

� 1 (2100 MHz)� 3 (1800 MHz)� 7 (2600 MHz)� 8 (900 MHz)� 20 (800 MHz)

UMTS(WCDMA/HSPA+/DC-HSPA+) FDD (=Frequency Division Duplex)

� Download category 24 / Upload category 6� Dual Carrier (DC-HSPA+) Download max. 42.2 Mbps� USUPA Upload max. 5.76 Mbps� UMTS Down- und Upload max. 384 Kbps� Bands:

� 1 (2100 MHz)� 3 (1800 MHz)� 8 (900 MHz)

Dual Band GSM/GPRS/EDGE multi-slot class 12� Bands:

� 3: DCS 1800 (MHz)� 8: PCS 1900 (MHz)

� EDGEDownload max 236,8 Kbps, Upload max. 118,4 Kbps

� GPRSDownload max 85,6 Kbps, Upload max. 85.6 Kbps

Multi-SIM For the use of 2 SIM cards (Mini-SIM) for backup scenarios.Both SIM slots are located at the front of the device andare therefore easily accessible.

Antenna connection 2x SMA (female)

Position determination (optional with LD variants)

GNSS(Global Navigation Satellite System)

Antenna connection



Technical data

Robust metal casing Optionally with wall bracket and DIN rail clip.

Dimensions 188x39x157 (BxHxT mm, without antennas).

Weight ca. 860 g

Operating temperature -20° C to +50° C (Only during running operation)

Humidity 85% (non-condensing)

Power supply Power supply 12V, 1A (hollow plug)

Input voltage wide range, 9...30V DC

Average power consumption ≤ 6W

Warranty

Manufacturer's warranty 3 years Bring-In warranty

Package content

VR2020, AC adapter, remote CATHEAD LTE antenna (onlyin L models) with 1.8m cable length, patch cable, Quickstartmanual

Accessories

Wall bracket / DIN rail clip 04-9999-0000-006

19" Installation Kit 00-0002-0384-001

plug-in power supply 00-0200-0164-002



EU Declaration of ConformityTDT thereby declares that the VR2020 radio equipment is in compliance with Directive 2014/53 / EU.The full text of the EU declaration of conformity is available at the following internet address:download.tdt.de

TDT hereby declares that the telecommunications terminal equipment type VR2020 is in compliancewith Directive 2014/35/EU. The full text of the EU Declaration of Conformity is available at the internetaddress: download.tdt.de

© 2019 by TDT AG

Views

Further informationFor further information please call the following number: +49 8703 929 00 or by mail to [email protected]

Fig. VR2020-LD

Fig. VR2020-Series

data sheet vr2020 - tdt

Documents