Description

DESCRIPTION

The UT-6602 creates an encrypted tunnel through IP networks. It features three Ethernet LAN ports, USB ports, mini-pci wifi cards, and a serial port which is used for initial setup.

The UT-6602 encrypts data between private networks using the public Internet or any other UDP/IP network as the transport. The UT-6602 also supports cellular broadband modems and internal Wifi cards. The UT series products operate in server-client pairs (or using multiple clients and servers in a system). The UT-6602 can be a server unit for other UT-6602s, UT-3302s, or PCs running UT-SOFT client software. The UT-6602 can also be a client device bridging it’s local LAN to another UT-6602 or UT-3302 configured as a server. The UT-6602 supports up to 50 client UT locations, the UT-3302 supports 8 client UT units. Other models support 100 or more remote UT client locations.

The UT series uses AES encryption. AES is the US Government standard, selected using an open selection process, to replace DES and 3DES encryption.

The UT-6602 trusted port is ethernet 10/100BaseT. The WAN, or untrusted, data port is an ethernet port, internal Wifi, or cellular broadband. WAN port data can be sent encrypted or unencrypted. The serial port is used only for setup.

The UT series operates through firewalls with only one UDP port of your choice opened. It bridges all ethernet protocols including IPX, IP, NetBEUI, VOIP, and other proprietary protocols as well as multi-cast. The UT series is straight-forward, easy to configure and maintain. The UT series has state-of-the-art AES encryption security without the configuration complexity of typical VPN equipment. One UT encrypts a location for 100s of PCs and other devices.

The server typically has a fixed IP address. Clients may have fixed IP addresses or obtain a dynamic address. Dynamic DNS is also supported for server locations that do not have a fixed address available.

For encryption of serial RS-232 links not involving ethernet or IP, see our SE-6600 product line.

The UT-6602 serial port may be configured as a single port UDP terminal server. This allows the UT-6602 to interoperate with DCB’s EtherPoll SCADA communications system.

Due to the encryption employed in these products, UT series products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. The UT-6602 and UT-3302 are classified as mass market encryption devices and may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are shippable to most other countries.

---

SPECIFICATIONS

General

• One asynchronous DE-9P RS-232 serial port for setup may be reconfigured as a serial server port
• Three ethernet ports, 10/100 BaseT, MDI/MDIX
• USB support for cellular broadband modems (Call for compatability)
• 802.11 Wi-Fi support using internal cards at 900 MHz, 2.4 GHz, 4.9 GHz (public safety licensed band) and 5.8 GHz
• MiniPCI Express internal EVDO modem option
• Sustained throughput of 16 Mbps with AES, greater with encryption disabled
• Supports up to 50 ET client devices
• Bridge/tunnel supports 4,096 MAC address table entries
• Uses just a single port, any port, with port 22 the default port

Protocol Features

• UDP is the transport protocol used between UT devices
• AES 128, 192 or 256 bit encryption
• Dynamic DNS support. Current support is for sitelutions.com and freedns.afraid.org
• Automatic failover for critical links
• Web browser configuration and management from local trusted interface
• Default IP address: 192.168.0.1
• Initial setup via local serial terminal
• Supports 802.1Q VLAN
• Extensive filtering on MAC, IP, and Protocol
• Tunnels multicast packets
• NAT friendly

Performance:

• Sustained greater than 16 Mbps with AES, greater with encryption disabled

Indicators

• Front – Power, port activity, CF Disk (2)
• Rear – LAN connection, LAN activity)

Physical/Electrical

• Power requirements: 7-18 VDC, 4 watts
• Wide range 12, 24, 48, and 125 VDC options are available
• Supplied with 120-240 VAC external power supply
• 6 3/4″ x 6″ x 1″
• Shipping weight two pound

Environmental

• Operational Temperature: -20 to +70 C
• Storage Temperature: -50 to +85 C
• Humidity: Non-condensing

---

APPLICATIONS

How it works

The UT family products create an encrypted tunnel which passes Ethernet packets between two trusted LAN segments. All ethernet protocols are bridged between the UT units. The UT only operates in conjunction with other UT units. One unit is required for each location. Multiple client units may be connected to the same host unit, and a client may be connected to multiple host units (daisy-chained operation). A host unit may be configured to block client-unit to client-unit connections, or to allow them. All UT series units are compatible.

Download a copy of the manual.

The UT series operates similarly to our ET series encrypted tunnel. The main difference between the two product lines is that the UT uses UDP/IP protocol for the tunnel link while the ET uses TCP/IP for the tunnel link protocol. The following ET application notes apply to the UT as well as the ET series.

Using the UT Encrypted Bridges and UT-SOFT with IP Multicast.

Discusses applying the UT products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The UT supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks. The UT-SOFT software client allows any PC to be a securely connected node on a remote network

Motorola MIP 5000 VoIP Radio Console VPN Solution Guide

This Motorola produced MIP 5000 VoIP Radio Console VPN Solution Guide features a virtual private network (VPN) solution that has been tested with MIP 5000 VoIP Radio Console. The VPN solution uses a pair of encrypted Ethernet bridges to provide a secure Ethernet tunnel between the dispatch center and a remote MIP 5000 console. The secure Ethernet tunnel supports a remote console operator receiving audio from and transmitting audio to radio channels and other MIP 5000 consoles using AES encryption.

ET Encrypted Bridge Quick-Start Installation Guide

A cookbook style quick start guide to installing the ET Encrypted Bridges. Illustrates common usage examples with fill-in-the-blank instructions.

ET-3302/6600 Encrypted Bridge Applications

Some ways the ET products are being used to tunnel IP traffic in the real world.

Using the ET-6601 Encrypted Bridge with EVDO & Wifi

Discusses using the ET-6601 with high speed cellular modems and 802.11 Wifi wide area connections.

ET Encrypted Bridge Installation Option

An application note describing an appliance-like installation that allows the ET to be located anywhere on the local LAN. Known around DCB as the “Single-Port Installation”.

Using the ET Encrypted Bridges with 801.Q VLANs

Discusses configuring the ET products to handle 801.Q VLAN traffic. The ET supports 801.Q VLAN tagged packets, and allows a VLAN to span multiple IP networks.

Using the ET Encrypted Bridges with IP Multicast.

Discusses applying the ET products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The ET supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks.

Automating Dial-Up Router and Bridge PPP Connections

An application note that details one common method of automating the use of IP-6600 routers and ET-6600 bridges to dial multiple remote locations on a scheduled or automated basis.

---

T-6602	Encrypted UT Ethernet Tunnel Appliance with Three Ethernet Ports
UT6602-12VDC	9-18 VDC external power supply option
UT6602-24VDC	18-36 VDC input external power supply option
UT6602-48VDC	36-72 VDC external power supply option
UT6602-125VDC	125 VDC external power supply option
UT6602-2.4wifi	Internal 2.4 Ghz Wifi option (Must be ordered with UT-6602)
UT6602-4.9wifi	Internal 4.9 Ghz 802.11 option (Must be ordered with UT-6602)
UT6602-900wifi	Internal 900 Mhz 802.11 option (Must be ordered with UT-6602)