ePipe Product Documentation: VPN and Security Products:

ePipe VPN and Security Products:
Introduction to ePipe 2100 and 2200 series

Introduction to ePipe 2000 Family
Using ePipe
ePipe 2000 Family Feature Sets

Shared Internet Access (SIA)
Secure Remote Access (SRA)
Site-to-Site Intranet VPN access (SSV)
Direct Connection Services (DCS)

ePipe 2000 Models

Introduction to ePipe

ePipe The ePipe 2000 family of products offers scalable dial-up and broadband network gateway solutions for small-medium businesses (SMB)s. ePipe's in-built optional feature sets can be easily enabled as your needs change to provide the functionality of a router, packet filtering firewall, VPN gateway, and modem pool in one cost effective solution. ePipe's capabilities include:

Shared Internet access for your entire office
Packet filtering firewall, robust security features
Secure Remote Access for mobile clients (PPTP server)
Site to Site VPN using IPSec and E2B (MLIP bonding technology) or IPSec and IKE
Direct dial access for remote workers, and Site to Site direct dial connections

E2B Diagram

ePipe's 4 or 8 high-performance serial ports are primarily for connecting external analogue modems or ISDN terminal adapters in order to dial ISPs, other networks or allow direct dial-in from remote networks or mobile workers. Up to 8 modem or ISDN Internet connections can be bundled into a secure VPN tunnel connecting remote sites through the Internet using ePipe's unique End-to-End Bonding (E2B).

The Internet connections can also be used for standard Internet-based applications such as web browsing, e-mail, file downloads, etc, using ePipe's Intelligent Internet Bonding (I2B). ePipe is an access router, firewall, VPN gateway and bandwidth aggregator in one device, it has all your office needs to get Internet-connected and exploit the wide range of e-business technologies.

The ePipe 2200 series all have 2 Ethernet ports for connecting to broadband, like cable and DSL services. The ePipe 2202 has two 10/100mbps Ethernet ports, and the 2242 two 10mbps Ethernet ports as well as four RS232 serial ports, allowing for a flexible, scalable bandwidth solution. Up to four analogue modems or TAs connected to the four serial ports may be used as an automatic failover in the event of an ISP failure or outage. This ability to detect an outage and automatically connect backup links will give the user seamless Internet access.

The ePipe 2148/88 models are particularly convenient when establishing a new LAN in a small branch office, for example. Each has an in-built 10-Megabit Ethernet LAN hub for connecting up to eight PC workstations or server computers, with the option to extend the network by connecting an additional LAN hub or switch. All models can be added to an existing TCP/IP-based Ethernet LAN. The ePipe 2181 has a single 10/100 Megabit Ethernet port, and connects to LANs at 10 or 100 Megabits per second via an Ethernet switch or hub.

ePipe's serial ports can also be used to connect other serial devices to your LAN, including terminals, printers, POS devices, industrial devices, instruments, etc. These serial ports can operate at speeds up to 230 Kbps.

Using ePipe 2000

Installation and maintenance is simple, through a browser based configuration tool. The ePipe Management Assistant provides a Graphical User Interface (GUI), which allows you to easily configure, monitor and tune your site's Internet or VPN access from any PC on your LAN. It enables you to easily activate optional Feature Sets within ePipe, as you purchase them. Guided setup wizards take the mystery out of getting your PCs, modems and ISP accounts to work in tandem with ePipe so that you can quickly connect your LAN to the Internet, remote offices or mobile workers. Advanced setup allows networking engineers to configure more complex access scenarios with relative ease.

ePipe Feature Sets

As your organization's needs change, you can make greater use of ePipe's functionality by purchasing activation keys to enable ePipe's built-in optional Feature Sets.

The Shared Internet Access (SIA) feature is activated in each ePipe model and you need only purchase additional features when you require them. To accelerate migration of your private LAN to an e-business network, ePipe's scalable feature sets provide the following functionality:-

Shared Internet Access (SIA)

SIA is a standard feature set that is active in all ePipe models. SIA provides scalable bandwidth Internet access to everyone on the network. A packet-filtering firewall isolates untrusted Internet connections from the LAN. Network Address Translation (NAT) ensures those on the Internet cannot see the internal network. Internet access policies can be implemented.

Secure Remote Access (SRA)

SRA enables mobile workers and telecommuters to securely and cost-effectively access corporate LAN resources from anywhere in the world, through the Internet. SRA provides session-based authentication, using MPP encryption for PPTP clients (Windows 95/98/2000/Me/XP notebook computers and PCs). SRA works in concert with SIA, enabling remote workers to access the network while allowing people on the LAN to access the Internet.

Site-to-Site Intranet VPN access (SSV)

SSV enables organizations with two or more offices to create a secure, fast Virtual Private Network (VPN). SSV includes patent pending technology that allows ePipe to transparently scale multiple dial-up or broadband connections without any special ISP equipment. SSV includes IPSec with Triple DES encryption. SSV works in concert with SIA and SRA to offer a complete e-business access solution from the one product.

Direct Connection Services (DCS)

DCS enables ePipe to function as a terminal server, with complete application-level control of serial ports for UNIX and NT/2000 systems. This allows the integration of Point of Sale, factory automation, data collection etc across a LAN or remotely through a dial-up connection. Using DCS in tandem with SSV, ePipe can also globally distribute these applications through the Internet. DCS also enables an ePipe to accept a direct connection (that is not via the Internet) from a simple PC or another ePipe using the Point to Point Protocol (PPP).

ePipe 2000 Models

ePipe model numbering uses a convention that indicates the model and types of ports. The initial "2" indicates the family and represents the ePipe 2000 family. The last 2 digits indicate the number of serial (RS-232) ports and the number of Ethernet or Hub ports respectively. Thus the 2148 is part of the 100 series of the 2000 family and has 4 serial ports and 8 Ethernet hub ports.

The Feature Sets applicable for each model are indicated below. The Shared Internet Access (SIA) Feature Set is activated in all models. Certain Feature Sets are required as indicated to obtain the capabilities below.

ePipe Feature Table	ePipe 2000 Family Models
	2148	2188	2181	2202	2242	2344
Feature Sets:-
Standard - Shared Internet Access (SIA)
Optional - Secure Remote Access (SRA)
Optional - Site to Site VPN (SSV)
Optional - Direct Connection Services (DCS)				-
Capabilities:-
Connect to Internet with I2B				-
Packet Filtering
Network Address Translation (NAT) & Port Address Translation (PAT)
PPTP Server	SRA	SRA	SRA	SRA	SRA	SRA
IPSec Security Gateway with E2B	SSV	SSV	SSV	SSV	SSV	SSV
IPSec Security Gateway with IKE	-	-	-	SSV	SSV	SSV
Direct Dial In PPP	DCS	DCS	DCS	-	DCS	DCS
Direct Dial on Demand	DCS	DCS	DCS	-	DCS	DCS
Modem Pooling				-

LAN Speed (Mbits/sec)	10	10	10/100	10/100	10	10/100
LAN Segments	1	1	1	2	2	4
In-built LAN hub	8 port	8 port	-	-	-	-
Serial ports for external modems / ISDN / Terminal Adapters (T/As)	4	8	8	-	4	4
Connect to Cable/xDSL Modem or Access Router	-	-	-