Encrypted Ethernet Tunnel


Note: The UT-3300 encrypted ethernet tunnel has been replaced with the new UT-3302 model. The new UT-3302 increases performance to greater than 10 Mbps, adds new features, and is fully interoperable with the older UT-3300 with no price increase. See the data sheet for this exciting new product here!


UT Family Encrypted Ethernet Tunnel

  • UT-3300 creats encrypted ethernet tunnels via UDP/IP
  • Industrial temperature -20 to +70 C
  • AC and DC power supply options
  • 10/100BaseT ethernet ports
  • Each port is independent
  • Easy to setup and maintain
  • ET-3300 Host unit supports up to 8 client UT locations
  • Supports USB cellular broadband modems
  • Support for 900 MHz, 2.4, 4.9 and 5.8 GHz WiFi mini-PCI cards from Ubiquiti
  • Supports dynamic DNS
  • Set up unit as server or client device
  • Extensive statistics logging and diagnostic tools
  • Tunnels multicast and all ethernet protocols
  • AES-128, AES-192, and AES-256 bit encryption
  • Ethernet to ethernet
  • Bridge/Tunnel supports 4,096 MAC addresses
  • Remote PCs appear to be on the local network
  • Bridges 802.1Q tagged V-LAN trunks
  • Extensive filtering on MAC, IP, and Protocols
img
UT-3300 Top View
img
UT-3300 Rear View

Features
Description
Specifications
How To Order
General
Protocol Features
Indicators
Physical/Electrical
Application Notes and Manual


Common Applications

  • Tunneling multicast voice and video through public and/or private networks using efficient UDP/IP
  • VLAN – Ideal for tunneling multiple VLAN segments through an external IP network
  • Serving remote offices over tunneled networks to ease network administration, provide remote file and device access
  • Utilities – Gas and oil production, pipelines, electric generation, transmission and distribution
  • Retail – Stores, kiosks, credit card machines --- especially those using wireless links
  • Law Enforcement – Small remote offices
  • Medical – AES encryption of the UT-6600 meets HIPAA requirement for securing data over open networks such as the Internet. Ideal for emergency and portable medical operations.
  • Field sales personnel working out of the home, hotel rooms wired for high speed Internet access or cellular broadband.
  • Financial industry – Additional security on internal corporate links, branch offices, ATM machines, key personnel remote secure access.
  • Added security within a large corporate network
  • Office to Home
  • 2 nets at each end, bridged via the Internet
  • Remote network monitoring via the Internet

DESCRIPTION

The UT-3300 creates an encrypted tunnel through IP networks. It features three Ethernet LAN ports, USB ports, mini-pci wifi cards, and a serial port which is used for initial setup.

The UT-3300 encrypts data between private networks using the public Internet or any other UDP/IP network as the transport. The UT series products operate in server-client pairs (or using multiple clients and servers in a system). The UT-3300 can be a server unit for other UT-3300s or UT-6602s. The UT-3300 can also be a client device bridging it's local LAN to another UT-3300 or UT-6602 configured as a server. The UT3300 supports up to 8 client UT locations, the UT-6602 supports 50 client UT units. Other models support 100 or more remote UT client locations. The UT-6602 is the higher performance companion product. It's data sheet is here.

The UT series uses AES encryption. AES is the US Government standard, selected using an open selection process, to replace DES and 3DES encryption.

The UT-3300 trusted port is ethernet 10/100BaseT. The WAN, or untrusted, data port is a 10BaseT ethernet port. WAN port data can be sent encrypted or unencrypted. The serial port is used only for setup.

The UT series operates through firewalls with only one UDP port of your choice opened. It bridges all ethernet protocols including IPX, IP, NetBEUI, VOIP, and other proprietary protocols as well as multi-cast. The UT series is straight-forward, easy to configure and maintain. The UT series has state-of-the-art AES encryption security without the configuration complexity of typical VPN equipment. One UT encrypts a location for 100s of PCs and other devices.

The server typically has a fixed IP address. Clients may have fixed IP addresses or obtain a dynamic address. Dynamic DNS is also supported for server locations that do not have a fixed address available.

For encryption of serial RS-232 links not involving ethernet or IP, see our SE-6600 product line.

Due to the encryption employed in these products, UT series products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. The UT-6602 and UT-3300 are classified as mass market encryption devices and may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are shippable to most other countries.


SPECIFICATIONS

General


Protocol Features


Performance:



Indicators


Physical/Electrical

Environmental


APPLICATIONS

How it works

The UT family products create an encrypted tunnel which passes Ethernet packets between two trusted LAN segments. All ethernet protocols are bridged between the UT units. The UT only operates in conjunction with other UT units. One unit is required for each location. Multiple client units may be connected to the same host unit, and a client may be connected to multiple host units (daisy-chained operation). A host unit may be configured to block client-unit to client-unit connections, or to allow them. All UT series units are compatible.

Download a copy of the manual.


The UT series operates similarly to our ET series encrypted tunnel. The main difference between the two product lines is that the UT uses UDP/IP protocol for the tunnel link while the ET uses TCP/IP for the tunnel link protocol. The following ET application notes apply to the UT as well as the ET series.

The Facts, Please.

Read the encryptor FAQ for quick answers to questions others have asked. Just click here.


All DCB ethenet encryptors operate similarly, with differences being in the protocols, capabilities, and authentication methods. Since the topology is comparable for all of them, we show application notes for all these products together.

UT Product Security In Perspective
This document provides an overview of the UT security perspective as well as best practices for configuring UT encryptors.

Redundancy Techniques Using DCB Tunnel Devices and Software.
Users have come to rely on DCB tunnel products to implement secure networks for mission critical applications in which downtime must be kept to a minimum. Thus it is not unusual for customers to ask questions about techniques that may be applied to make the tunnel network more robust. This document describes some of those techniques with examples.


Quick-start guide to the XT-3306.
This application note guides the new XT-3306 user from opening the boxes to having a working encrypted tunnel between two XT-3306 units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process. One difference between the XT and the UT/ET families is that the XT allows the selection of TCP and UDP protocols for the tunnel path.

Troubleshooting guide for the above Quick-start.
If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

Encrypted Bridge Installation Option
An application note describing an appliance-like installation that allows the Tunnel to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".

Using the UT Encrypted Bridges and UT-SOFT with IP Multicast.
Discusses applying the UT products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The UT supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks. The UT-SOFT software client allows any PC to be a securely connected node on a remote network

Motorola MIP 5000 VoIP Radio Console VPN Solution Guide
This Motorola produced MIP 5000 VoIP Radio Console VPN Solution Guide features a virtual private network (VPN) solution that has been tested with MIP 5000 VoIP Radio Console. The VPN solution uses a pair of encrypted Ethernet bridges to provide a secure Ethernet tunnel between the dispatch center and a remote MIP 5000 console. The secure Ethernet tunnel supports a remote console operator receiving audio from and transmitting audio to radio channels and other MIP 5000 consoles using AES encryption.

UT Tunnel Installation Note - "Living On a Wild Feed... Safely"
This short application note summarizes the options and requirements for directly connecting the untrusted interface of UT encrypted tunnels to the Internet. Yes, the UT tunnels may be safely living on the wild side of your firewalls and if properly configured appear to be a "black hole" to your adversaries!

Using the UT for Remote Management Applications Since the UT along with UT-Soft enables a remote workstation to have a virtual presence on a remote LAN segment, it's quite useful for network monitoring and analysis, similar to a RMON without the headaches. Download an application note that discusses using UT-Soft and our UT servers for remote LAN network montoring.

The UT series operates similarly to our ET series encrypted tunnel. The main difference between the two product lines is that the UT uses UDP/IP protocol for the tunnel link while the ET uses TCP/IP for the tunnel link protocol. The following ET application notes apply to the UT as well as the ET series.

ET Encrypted Bridge Quick-Start Installation Guide
A cookbook style quick start guide to installing the ET Encrypted Bridges. Illustrates common usage examples with fill-in-the-blank instructions.


ET-3302/6600 Encrypted Bridge Applications
Some ways the ET products are being used to tunnel IP traffic in the real world.


Using the ET-6601 Encrypted Bridge with EVDO & Wifi
Discusses using the ET-6601 with high speed cellular modems and 802.11 Wifi wide area connections.

ET Encrypted Bridge Installation Option
An application note describing an appliance-like installation that allows the ET to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".


Using the ET Encrypted Bridges with 801.Q VLANs
Discusses configuring the ET products to handle 801.Q VLAN traffic. The ET supports 801.Q VLAN tagged packets, and allows a VLAN to span multiple IP networks.


Using the ET Encrypted Bridges with IP Multicast.
Discusses applying the ET products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The ET supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks.

Automating Dial-Up Router and Bridge PPP Connections
An application note that details one common method of automating the use of IP-6600 routers and ET-6600 bridges to dial multiple remote locations on a scheduled or automated basis.


Applications Drawing


Questions? Phone us toll free at 800-432-2638

Due to the nature of this product,
we prefer that you phone us and discuss your application prior to ordering this product.

Note: The UT-3300 encrypted ethernet tunnel was replaced with the new UT-3302 model. The new UT-3302 increases performance to greater than 10 Mbps, adds new features, and is fully interoperable with the older UT-3300 with no price increase. See the data sheet for this exciting new product here!

img
Data Comm for Business Inc.
2949 County Road 1000 E
Dewey, Il 61840
Voice: 217-897-6600
Toll Free: 800-4-DCB-NET
Toll Free: 800-432-2638
Email: Contact Page
Web: www.dcbnet.com
Fax: 217-897-8023
All DCB web pages copyright ©1995--2017 Data Comm for Business, All rights reserved.
EtherPath®, EtherSeries®, EtherPoll®, EtherBridge® and EtherModem® are Registered Trademarks of Data Comm for Business, Inc.