APPro 2401 Outdoor Client

APPro 2401 includes tools required for network configuration, administration, and diagnostics. Thanks to installed Linux system, it offers much more features (bandwidth management, port filtering, firewall, NAT) than typical solutions.

Hardware

• RTL8186 CPU, 2 MB Flash, 8 MB SDRAM;
• integrated 12 dBi antenna (4 km range);
• single WLAN port (2,4 GHz);
• single LAN port (10/100 Mbit/s);
• 12 V PoE support (over Ethernet cable);
• two-port PoE Injector with power supply.

Software

• Linux kernel v2.4.18;
• Busybox v.1.0.0;
• Iptables v1.2.9 (MASQUERADE, SNAT, DNAT, MAC, TTL, iplimit, IPP2P);
• Iproute2 (HTB, WRR, PRIO, ESFQ);
• traceroute, ping, arping, tcpdump, and nslookup tools;
• Bash-compatible shell;
• available gcc compiler.

Features

• APC (client station), Bridge Slave, and Mikrotik client modes;
• device is MAC-transparent when configured for MikroTik and Ubiquiti stations;
• routing, NAT, DHCP in WISP mode;
• hardware NAT enables high-speed routing and adderss translation (up to 50 Mbit/s);
• MAC address cloning on each interface;
• adjustable sensitivity and transmitter power for CCK (802.11b) and OFDM (802.11g) modulation;
• packet aggregation in bridge mode;
• "network neighborhood" filtering: RPC, and others (NETBIOS Filtering);
• broadcast traffic filtering;
• selectable transmission speeds (Tx Operation Rate);
• watchdog that restarts device in case of lost connectivity;
• automatic device restarts at given time;
• PPPoE protocol support (client on WLAN and Relay that allows more PPPoE clients on LAN);
• PPPoE client is compatible with MikroTik systems, supprots pap, chap, mschap, and mschapv2;
• easy to use Web interface for editing configuration tables (DHCP server, Traffic Manager, etc).

Bandwidth management

• QoS that fully exploits Linux system capabilities;
• flexible Traffic Manager that can limit bandwidth, number of connections and packets transmitted per second to each host or host group;
• traffic priorities;
• limiting total amount of packets per second flowing through the device can protect against network overload caused by P2P, VoIP, viruses or other malicious programs;
• limiting total traffic volume enables network-wide traffic management optimizatins;
• automatic selection of queue algorithm, based on available network performance;
• traffic filtering for addresses without assigned bandwidth;
• traffic statistics available for each entry from Traffic Manager.

Security

• static ARP table based on DHCP settings;
• advanced firewall/NAT;
• traffic filtering for unauthorized IP addresses;
• traffic filtering on selected ports;
• P2P traffic filtering;
• Windows' network neighbourhood filtering;
• filtering ports used by known viruses and trojan horses;
• filtering incoming connections;
• filtering of all traffic types except e-mail and WWW;
• port forwarding;
• DMZ (forwarding of all ports to a selected IP address);
• static ARP, when combined with filtering of unauthorized IP/MAC pairs, reduces possibility of network abuse.

Flexibility

• presets for typical configurations, that include proper network addressing, DHCP, and Traffic Manager settings;
• device management via Web interface, FTP, SSH, or telnet;
• central configuration management via FTP or Telnet;
• custom QoS, NAT, firewall and routing rules;
• config files, system files and user scripts can be saved in flash memory.