Overview of new additions to the ESR service routers and firewalls lineup

The extensive range of Eltex service routers and firewalls has been expanded with two new models – ESR-3250 and ESR-3350. Designed for deployment in large-scale, distributed infrastructures, these devices combine the functionality of an edge router and a firewall in a single unit.

Both models are based on the same hardware platform but offer different performance levels. With the firewall enabled, the ESR-3250 processes traffic at speeds of up to 52.6 Gbps (for standard 1518 byte packets), while the ESR-3350 reaches up to 106.5 Gbps. This high performance is achieved by optimal distribution of functions between hardware and software: hardware acceleration and dedicated CPU threads (up to 23 on the ESR-3350) allow for advanced security and routing features without slowing down the system.

Technical features:

• 8 combo 1G ports (1000BASE-T/X)
• 4 × 25G SFP28 ports
• Power supply – AC/DC for up to two hot-swappable power supplies

The key advantage of Eltex service routers is support for DMVPN technology, enabling flexible and secure connections between head office and multiple branch offices. With high encryption performance (up to 5.3 Gbps for ESR-3250 and up to 14.5 Gbps for ESR-3350 over IPsec in IMIX mode) both models can operate as DMVPN-HUB devices.

For secure connectivity of remote employees and branch locations, the routers support various VPN protocols including IPsec, WireGuard, and OpenVPN.

ESR-3250 and ESR-3350 can be used as edge routers, supporting the creation of private virtual networks and efficient packet processing via label-based data forwarding (MPLS). The devices are compatible with L2VPN and L3VPN technologies and offer traffic classification which is relevant for service provider networks using dedicated channels.

ESR series routers can also be used as full-featured firewalls. The devices use a set of security mechanisms without reducing throughput.

Supported security features:

• Access Control Lists (ACL)
• Zone-based firewall with logging and counters
• Protection against DoS, DDoS, and IP spoofing
• NAT for secure internet access
• IPS/IDS with signature traffic analysis*
• Application-level traffic control (Firewall AppControl)
• Site categorization (Web Filtering)

The new devices support clustering in Active/Standby (1+N) and Active/Active (1+1) modes, which allows building a fault-tolerant architecture. Reliability is achieved through continuous redundancy and scaling of service and function states, including configuration and software version synchronization.

The ESR-3250 and ESR-3350 routers offer flexible management options for both local and remote administration. Devices can be managed via CLI or the Track Manager interface. Monitoring is performed via SNMP, Track Manager, and built-in IP-SLA mechanisms.

The devices can also be managed via ECCM system. This is a software solution that automates the processes of configuration, software version updates and device monitoring.

To learn more about the new additions to the ESR lineup or to join the testing program, contact Eltex Sales Department at foreign.sales@eltex-co.ru.

*activated by license