IX78 - SIP IAD for SOHO and SMB

Extend Security and Ensure QoS All the Way to Your Remote Workers or to the Home Office of Corporate Employees.

Intertex’ new IX78 is the Multimedia CPE that provides full support for SIP on the LAN and WLAN. The IX78 is a low-cost combination device that provides emergency and local call routing for survivability, QoS, full router with SIP Firewall, remote management and VPN options. It enables Internet, high quality IP TV, and IP Telephony on a single protected LAN with maintained QoS.

The IX78 ensures that all services are available to all terminals on the LAN and that SIP and IMS are generally available over all WAN-pipes . Using Ethernet or a built-in advanced ADSL modem, supports the wireless 802.11b/g office, and provides back-up PSTN connectivity for emergency call handling. Intertex products are the only firewalls in their market segment fully addressing real-time, SIP-based Multimedia applications on the LAN.

The product has a option for FXO and FXS gateways and a small switch for connecting a conventional telephone and PSTN line without the need for an extra gateway. All basic PBX functionality including some advanced functions such as call waiting, 3-way calling, call transfer will continue to function in the event of a broadband outage. Basically the IX78 becomes your local PBX for all SIP phones and other user agents.

The IX78 includes a field proven SIP enabled firewall/router technology with stateful packet inspection (SPI) and packet filtering firewall, assuring that your LAN stays private, secured and protected from malicious attacks via the Internet. The unit also does QOS and has the power to run to route an prioritize about 2 T1s of data and phone traffic.

This broadband router is the first in the world to allow SIP communication, VPN remote CPE management and QOS all in one device. It has a very general and well-proven SIP support and integrates a state of the art SIP proxy and a SIP registrar, dynamically controlling the NAT and firewall.

Its user interface, accessed from your web browser, is highly appreciated for its clarity and ease use and gives you the best overview and full control. Context sensitive help “?” is available to guide you if required. IP networking made easy!

Technology Marketing Corporation’s (TMC®) Internet Telephony magazine has named Intertex SurfinBird IX78 as a recipient of its 2007 Product of the Year Award.

Use it for emergency calls, IP telephony back-up, remote offices and integration with your old telephony. This product is available under ABPS comprehensive ISP - Fulfillment and Provisioning program.

Contact ABP to learn more about the Intertex IX78.

Features

The ADSL modem connects you via your Internet Service Provider to the Internet.

External Splitter. Your ADSL modem comes with an external splitter, separating the data and voice traffic.

PPPoE and PPPoA PPPoE support.

The DHCP Client enables you to get the necessary network settings from your Internet Service provider (ISP) automatically.

Dynamic DNS may be used if you have not received a static global IP address from your Internet service provider, but still want people on the Internet to easily find your network or servers.

4 Ethernet Interface enables you to connect computers, SIP phones or your LAN to the router.

DHCP Server Automatically assigns IP addresses to computers, or other devices, connected to your local network.

The built-in DNS server takes care of resolving your local names to IP addresses.

LAN connected to the SIP world. The firewall with the unique support for the SIP protocol enables SIP communication to all devices on the LAN, whether they are soft clients, SIP phones or telephony adaptors (ATA boxes).

DMZ (DeMilitarized Zone) The X78 has several separate subnets. A DMZ can be set up on ET4. DMZ is useful if you want to have an application, such as a web server, accessible on Internet but shielded from your local network.

The X78 has support for wireless communications through the 802.11b/g standard.

Wireless Security features provided: WEP encryption 64 and 128 bits, WPA-PSK, MAC Address Filtering.

Router Based Firewall The built-in firewall protects your computer or local network from unauthorised access. The firewall uses packet filtering, stateful inspection and application proxies together with address translation to protect your PC or local network.

Powerful Firewall Administration Use the easy-to-use web interface to administrate your firewall. Advanced users can manually add support for applications, open up specific port ranges or even edit the rules controlling the firewall.

Selectable Firewall Tightness Easy change between security profiles with a single keystroke. The Internet connection can be blocked, set to Hi, Lo or Alternative security configurations.

VPN Pass through Virtual Private Networking (VPN) uses a public network (i.e. the Internet) to securely connect two different networks as if they were the same network. The router supports VPN pass-through for SSH, PPTP, IPSec (ESP tunnelling mode), IPsec NAT-T.

The front panel gives you a presentation of the current status of the product and its connected networks.

The front panel keys and display are useful for diagnostics and configuration.

The built-in web server provides a way to easily configure the product.

The product runs on upgradeable firmware, which means that you easily can take advantage of new features in coming firmware releases.

Auto login and Keep-alive These features prevent operators from timing out your Internet connection when it is not used. You enter your log in details (if any) once in the web interface and the connection is kept alive by accessing an Internet site at regular intervals.

Advanced logging of all system events. The firewall log gives you an opportunity to see what packets have been treated by the firewall and what actions have been taken. The logs can be sent to an external syslog server.

Email Notification Get a notification on the display when new email messages arrive to your mailbox.

With support for SIP, you can communicate using telephony, presence, instant messaging, voice and video applications all the way into your private local network and still being protected by a vigorous firewall.

If you have a registered domain name you may use the Internet Gate as a SIP server for that domain. With a DNS record pointing to the SIP server, all registered SIP users can be globally reached with the user's SIP address.

A number dialling plan or emergency call routing can easily be set up.

Upgradeable to SIP Switch. Upgrade your IX78 with the SIP Switch software add-on to get a number of PBX-like features. QoS Prioritiziation of media streams. Tag traffic for prioritization in subsequent network equipment (DiffServ). Call Admission Control.

The IX78 may include FXS ports where you can connect analogue phones making them into SIP clients.

The IX78 may includes a FXO port for routing of calls to and from the telephony network (POTS).

TOP

Technical Specifications

Access Router
NAT/PAT
DHCP Server / Client
Local DNS Server
Dynamic DNS Client
LAN Support - Separate Ethernet Subnets
Additional Public IP Addresses on LAN
DMZ
4 Ethernet Ports 4
1 USB Host Port
PPPoE, PPPoA
RIP1, RIP2
Up to 8 ADSL WAN PVCs with QoS Routing
RTSP Proxy (e.g. for Video-on-Demand)
Multicast Support with IGMP Proxy and Unicast Conversion (for IPTV)
Up to 8 Ethernet WAN VLANs 802.1p/q with QoS Routing
Up to 90 Mbps Throughput (WAN ↔ LAN through firewall)

Firewall
Router-based
Packet Filtering
Statefull Inspection
Proxy Firewall
Game and Application Support
Selectable Firewall Security Levels
Port and IP Redirections
Manual Firewall Rule Edit
VPN Pass Through (multiple clients): SSH, PPTP, IPSec ESP Tunneling Mode, IPSec NAT-T (IPSec over UDP)

VPN Server & Client (Upgrade)
Protocol: IPSec
Crypto: DES, 3DES, AES Hardware accelerated Diffie-Hellman: group 1, 2 and 5
Identification: X.509 Certificate, Pre-shared key
Authentication: RSA, DSS
RSA Key Length: 2048, 1024, 512
Authentication
Methods: HMAC with MD5, HMAC with SHA-1
20 simultaneous Live Connections
VPN Server & Client Configuration:
EasyServer - Create a Complete VPN Server with One Click
EasyClient - Connect to Common VPN Servers Easily
Creation of Client Certificates

Wireless
IEEE 54Mb/s 802.11b/g Access Point
MAC Address Filtering
WEP encryption 64 and 128 bits
WPA / WPA2 Encryption, 802.11
WiFi Protected Setup
Antenna: 1 Fixed,1 Internal 1 Fixed,1 Internal

Status and Logging
Network Status
Logging: System Log, Firewall Log, SIP Log, VPN Log
Export to External Syslog Server

Quality of Service (QoS) for VoIP
Tag Traffic for Prioritization of SIP Media Streams in Subsequent Network Equipment (DiffServ and TOS)
Prioritization of SIP Media Streams (Automatic)
Call Admission Control for SIP
Reduces data traffic upstream to allow SIP voice and video

SIP Support
IP Telephony (VoIP), Video, Presence, Instant Messaging and more
True SIP Transparent Firewall (between LAN and the Internet) NAT and Firewall controlled by SIP Proxy and registrar
Common SPAM/SPIT Control (blacklist, white list, authentication)
3 Simultaneous global SIP calls (Can be extended by session licenses)

SIP Server Upgrade
Register SIP phones and soft clients
Routing of SIP calls globally, outgoing and incoming
Dialling Plan (Trap Number, Route to PSTN Gateway)
ENUM lookup
Dial 0 or 9 for Outside PSTN Line (like a PBX, Optional)
Mix SIP URL, PSTN Number and Extension Numbers
Use Service Provider’s Ordinary SIP Account as Gateway to the Telephone Network (PSTN) for All Users

Seat User License Functions
(Upgrade to add PBX-like functionality per user. Included with FXS ports.)
Internal Extension Numbers
Incoming Call Processing (forward in sequence or parallel)
Match Incoming Calls from PSTN Gateway to Users
Route to external voice mail server
Individual SPAM/SPIT Control (blacklist, white list, authentication)

Other Upgrades
C+S+F+SIP Server Included in SIP Switch Upgrade (also available as separate upgrades)
C: Crypto pack: TLS, SRTP pass through
S: LAN SIParator*
F: FENT (Far-End NAT Transversal)
Ingate SIP Trunking (connect IP-PBX on the LAN to outside)

SIP - Telephone Network Gateway (FXO port)
FXO Port accessible from LAN and WAN with authorization
For Emergency Calling and Other Locals Calls
Integrate Incoming Calls on Existing Number with SIP VoIP
Back up if VoIP Provider’s Service Unavailable
Forward incoming calls and collect extension numbers

FXS Port for Analog Telephone
(Becomes SIP Client)
Up to 2 FXS Port accessible from LAN and WAN
Can register at Internal or Service Providers SIP Server
Dial Using DTMF or GUI (e.g. for URL calling)
Caller ID methods: V.23, Bell 202, DTMF
FAX pass through
Fallback to telephone line at power loss
Telephony Functions (Caller-id, Call Waiting, Call Hold, 3-way Calling, Attended and Blind Transfer)

Voice Features
Voice Codecs: G.711, G.729, G.729A,
G.168 Echo Canceling,
Silence suppression and comfort noise generation,
In or Out of Band DTMF,
Digest Authentication

Other Features
Email Notification
Web Based Configuration
Telnet CLI Configuration
TR-069
SNMP v2
Upgradeable Firmware
Keys and Display
Independent Operating System Support

Upgrades
Software upgrades can be purchased additionally. These are the available software upgrades:
• SIP Server license for unlimited users - Allows the IX78 to be used as Registrar for a domain. No limit on number of registrations once license is bought. Note that the IX78 cannot be used as SIP Server without this license. Includes Outgoing call number processing (unlimited), Dialplan (unlimited), ENUM, advanced fallback.
• Session license - Number of simultaneous traversals with media through the firewall. 3 traversals included from the start.
• Far End NAT Traversal - Module used when connecting SIP devices from the outside through a non SIP capable router.
• LAN SIParator - Module used when adding the IX78 to the LAN while keeping an existing firewall that is thereby made SIP capable. Requires minimal changes in the existing firewall.
• VPN termination - IPSec only, max 40 configured tunnels, 20 simultaneous tunnels. No per user license.
• Crypto pack: TLS+SRTP - Allows for encrypted SIP based communication through the IX78. At the moment only SRTP pass-through is supported, SRTP encryption is a future feature, which will be included in the crypto pack. Not user limited.
• Seat license - SIP Accounts and Incoming Call Processing for 1 user. Requires the SIP Server license. Whitelist and blacklist for this user. Seat licenses for FXS ports included for free from start.
• SIP Switch - Includes the following:
o SIP Server license
o Far End NAT Traversal license
o LAN SIParator license
o Crypto pack
o 5 seat licenses
o 2 extra session licenses

TOP

Product Application Scenarios

SOHO Scenario

Multi Tennant / Dwelling Scenarios

SME Scenarios

Branch Office Scenarios

Downloads

IX78 Datasheet 3.2MB

TOP