UT-3302 Encrypted Ethernet Tunnel Tunnels All Ethernet Protocols Through Any IP Network

Ideal for LAN, voice, and video tunneling applications UT Client software is available for PCs Tunnels multicast + all other Ethernet protocols UT-3302 temperature range of -20 to +70 C Input voltage 10-18 VDC (12 Volt nominal), external 48 and 125 VDC power options UT-3302 is a small, five ethernet port version with VLAN port functionality Integral 4 port switch on the trusted interface AC and DC power supply options Multicast Unicast conversion/tunneling Much simpler multicast tunnel than multicast GRE tunnel Ethernet ports: 10/100BaseT, MDI/MDIX One asynchronous serial port for setup, UDP or TCP Server functionality Extensive security features for CIPS compliance Can be set to either client mode or server mode Server unit supports up to 8 remote client UTs Extensive statistics logging and diagnostic tools AES 128, 192 or 256 bit encryption Can be used with or without encryption Uses UDP as the transport protocol Remote PC appears to be on the local network Stand alone, rack mount, DIN clip mount Bridges 802.1Q tagged V-LAN trunks or use VLAN tagging at the port level Extensive filtering on MAC, IP, and Protocols NAT friendly	UT-3302 Top View UT-3302 Side View The UT-3302 was released in 2009 and discontinued in 2019. We've depleted our inventory. We recommend the higher performing XT-hEX as a replacement. The newer XT Family of encrypters offers increased throughput and is 100% compatible with all UT products at a similar price. click here!
Features Description Specifications General Protocol Features Performance Indicators Physical/Electrical Application Notes and Manual How To Order	Common Applications VOIP dispatch terminals and consoles Encrypted VOIP and encrypted ROIP VOIP multicast applications Encrypting video connections Gas and oil production, pipelines Alternative to GRE tunnel installations Retail – Stores, credit card readers Law Enforcement– Remote offices and multicast ROIP Medical: Meets HIPAA encryption requirements for securely sending medical data Secure remote sales and maintenance staff connections NERC and CIPS compliant WAN connections Support a remote office with one UT device More security to sensitive locations within a corporate network Securely bridge networks over the Internet for lower line costs Remote network monitoring using the Internet for data transport

DESCRIPTION

The UT-3302 is a compact, industrial temperature rated device (Internet Appliance) that tunnels all ethernet protocols (layer2 ethernet) through any UDP/IP connection. The tunnel can be encrypted with AES or non-encrypted. The UT-3302 features five Ethernet LAN ports, a 4 port switch on trusted interface and a serial setup port.

The UT-3302 encrypts data between private networks using the public Internet or any other network as the transport. This creates a flat, bridged network, a private network within public or private networks.

Each UT-3302 can be a client or server. All UT series products operate in server-client combinations (or using multiple clients and servers in a system). The UT-3302 can be a server unit for other UT-3302s, or PCs running UT-SOFT client software. The UT-3302 can also be a client device bridging it's local LAN to another UT-3302 or UT-6602 configured as a server. The UT-3302 supports up to 8 client UT locations, the UT-6602 supports 50 client UT units. Other models support 100 or more remote UT client locations.

The UT series uses AES 128, 192 or 256 bit encryption. AES is the US Government standard required for Critical Infrastructure Protection (CIPS) networks used in electrical power and utility communications. Additional features support the CIPS requirements such as password criteria, login banners, individual port enable/disable, and others.

Each of the four ethernet ports on the trusted side of the UT may be VLAN tagged (802.1q tagging) and interoperate with other VLAN equipment. Or, the UT connection can be configured as a VLAN trunk.

The UT-3302 network interfaces are Ethernet only. The UT-3302 has external 12, 24 and 48 volt options.

The UT series operates through firewalls with only one port of your choice opened. It bridges all Ethernet protocols including IPX, IP, NetBEUI, SIP, streaming, and other proprietary protocols. The UT series is straight-forward, easy to configure and maintain. The UT series has state-of-the-art AES encryption security without the configuration complexity of VPN.

The serial port of the UT-3302 functions as a TCP/IP or UDP/IP serial port "serial-server" or may be used for initial setup of IP address. The serial port may be used for initial IP address configuration. It interoperates with other DCB EtherPath or EtherPoll serial servers, and may be used to provide an AES encrypted serial link through any UDP/IP network.

For encryption of serial RS-232 links not involving ethernet or IP, see our SE-6600 product line.

The UT-3302 is also compatible with our newest XT encrypter series which offer increased throughput. See all XT options here.

Due to the encryption employed in these products, UT series products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. The UT-6602 and UT-3302 are classified as mass market encryption devices and may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are shippable to most other countries.

SPECIFICATIONS

General

• One asynchronous DE-9P RS232 serial port provides TCP/IP or UDP/IP serial server functions or initial IP address setup
• Two Ethernet ports, 10/100BaseT, MDI/MDIX, half/full duplex, with 4-port switch on the trusted interface
• Sustained throughput of 10 Mbps with AES encryption mode
• Up to 6,000 PPS throughput, depending upon packet size
• Connect up to 8 remote client UTs to one UT configured as a server
• MAC bridging table supports 2,048 entries
• Ethernet ports configurable as 802.1q VLAN
• Traverses firewalls through a single port, any port, with port 22 the default port
• Communicates with UT-6600,UT-6601, UT-3300 and UT-Soft products

Protocol Features

• AES 128, 192, and 256 bit encryption
• Dynamic DNS support
• Auto-Disconnect timers
• Automatic fail-over for critical links
• Web browser configuration and management from local or remote trusted interface
• Default IP address: 192.168.0.1
• Initial IP address may be configured via local serial terminal
• Supports 802.1Q VLAN as a trunk or individual ports
• Extensive filtering on MAC, IP, and Protocol
• Tunnels multicast packets and all ethernet protocols
• Serial Port is compatible with DCB EtherPoll and EtherPath serial server functionality
• NAT and firewall friendly

Performance

• Sustained throughput greater than 10 Mbps with AES encryption
• Up to 6,000 packets per second throughput, depending upon packet size
• MAC table supports 2,048 entries
• Trusted interface four port switch is wire-speed

Indicators

• Side - Power, port activity (2)
  
• Front - LAN connection, LAN activity (per port)
  

Physical/Electrical

• Power requirements: 12 VDC, 6 watts
• Wide range 24, 48, and 125 VDC options are available
• Supplied with 120-240 VAC external power supply
• 5" x 3.75" x 1"
• Shipping weight one pound

Environmental

• Operational Temperature: -20 to +70 C
• Storage Temperature: -50 to +85 C
• Humidity: Non-condensing
• Power Supply Options may affect temperature specifications

APPLICATIONS

How it works

Download a copy of the manual.

Just The Facts, Please.

Read the encryptor FAQ for quick answers to questions others have asked. Just click here.

---

Quick-start guide to the XT family products.

This application note guides the new XT user from opening the boxes to having a working encrypted tunnel between two XT units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process. Uses the XT-hEX as an example, but also covers other XT products.

Troubleshooting guide for the above Quick-start.

If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

What Do Those Tunnel Log Entries Mean?

When analyzing logs from DCB Tunnels (XT, UT, ET, and FT), there are often log entries that are surprising to the new user. We discuss those here.

Configuring the LAN3 on the XT-hEX, a Quick-start guide.

Most people won't need this, but if you want to use the third LAN port on the XT-hEX, this information will help you configure it.

All DCB ethenet encryptors operate similarly, with differences being in the protocols, capabilities, and authentication methods. Since the topology is comparable for all of them, we show application notes for all these products together.

DCB's Encryption Product Export Statement

Some of our encryption products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. Some are classified as mass market encryption devices and may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are exportable to most other countries. Read our Encryption Product Export Statement here for more specifics.

Using XT Tunnels with IP Radio Dispatch Systems.

Radio installers rely on DCB tunnel products to implement secure networks for mission critical applications. DCB Encryptors (XT, UT, and ET roducts) enable IP dispatching across multiple networks. They remove the multi-cast problem faced in many IP network installations so are frequently used along with Telex, Motorola, Kenwood, Harris, Zetron, AVTEC, and other two-way radio consoles. This document describes some of those techniques with examples we've seen at PSAPs and other dispatch centers.

Tunnel Product Security In Perspective.

Our encrypted tunnel appliances provides a LAN -to- LAN encrypted tunnel between locations. It employs a layer three (UDP/IP or TCP/IP) connection between two or more tunnel devices to create a secure, AES encrypted tunnel. For export purposes, the Some models are considered a Mass Market Encryption Device by the Department of State Bureau of Industrial Security and are export limited.

This product line meets HIPPA and most government standards for non-classified data transfer. However, it is not NIST FIPS 140-2 approved. For a FIPS 140 approved product, the (more expensive) FT line of encryption appliances is required. This note discusses the security implications of using our encrypted tunnels.

Redundancy Techniques Using DCB Tunnel Devices and Software.

Users have come to rely on DCB tunnel products to implement secure networks for mission critical applications in which downtime must be kept to a minimum. Thus it is not unusual for customers to ask questions about techniques that may be applied to make the tunnel network more robust. This document describes some of those techniques with examples.

Quick-start guide to the XT-3306.

This application note guides the new XT-3306 user from opening the boxes to having a working encrypted tunnel between two XT-3306 units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process. One difference between the XT and the UT/ET families is that the XT allows the selection of TCP and UDP protocols for the tunnel path.

Troubleshooting guide for the above Quick-start.

If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

Quick-start guide to the UT-3302.

This application note guides the new UT-3302 user from opening the boxes to having a working encrypted tunnel between two UT-3302 units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process.

Troubleshooting guide for the above UT-3302 Quick-start.

If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

Encrypted Bridge Installation Option

An application note describing an appliance-like installation that allows the Tunnel to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".

Using the UT Encrypted Bridges and UT-SOFT with IP Multicast.

Discusses applying the UT products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The UT supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks. The UT-SOFT software client allows any PC to be a securely connected node on a remote network

Motorola MIP 5000 VoIP Radio Console VPN Solution Guide

This Motorola produced MIP 5000 VoIP Radio Console VPN Solution Guide features a virtual private network (VPN) solution that has been tested with MIP 5000 VoIP Radio Console. The VPN solution uses a pair of encrypted Ethernet bridges to provide a secure Ethernet tunnel between the dispatch center and a remote MIP 5000 console. The secure Ethernet tunnel supports a remote console operator receiving audio from and transmitting audio to radio channels and other MIP 5000 consoles using AES encryption.

UT Tunnel Installation Note - "Living On a Wild Feed... Safely"

This short application note summarizes the options and requirements for directly connecting the untrusted interface of UT encrypted tunnels to the Internet. Yes, the UT tunnels may be safely living on the wild side of your firewalls and if properly configured appear to be a "black hole" to your adversaries!

Using the UT for Remote Management Applications Since the UT along with UT-Soft enables a remote workstation to have a virtual presence on a remote LAN segment, it's quite useful for network monitoring and analysis, similar to a RMON without the headaches. Download an application note that discusses using UT-Soft and our UT servers for remote LAN network montoring.

ET Encrypted Bridge Quick-Start Installation Guide

A cookbook style quick start guide to installing the ET Encrypted Bridges. Illustrates common usage examples with fill-in-the-blank instructions.

ET-3302/6600 Encrypted Bridge Applications

Some ways the ET products are being used to tunnel IP traffic in the real world.

Using the ET-6601 Encrypted Bridge with EVDO & Wifi

Discusses using the ET-6601 with high speed cellular modems and 802.11 Wifi wide area connections.

ET Encrypted Bridge Installation Option

An application note describing an appliance-like installation that allows the ET to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".

Using the ET Encrypted Bridges with 801.Q VLANs

Discusses configuring the ET products to handle 801.Q VLAN traffic. The ET supports 801.Q VLAN tagged packets, and allows a VLAN to span multiple IP networks.

Using the ET Encrypted Bridges with IP Multicast.

Discusses applying the ET products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The ET supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks.

Automating Dial-Up Router and Bridge PPP Connections

An application note that details one common method of automating the use of IP-6600 routers and ET-6600 bridges to dial multiple remote locations on a scheduled or automated basis.

Data Comm for Business Inc. 2949 County Road 1000 E Dewey, Il 61840	Voice: 217-897-6600 Toll Free: 800-4-DCB-NET Toll Free: 800-432-2638	Email: Contact Page Web: www.dcbnet.com Fax: 217-897-8023
All DCB web pages copyright ©1995- Data Comm for Business, All rights reserved. EtherPath®, EtherSeries®, EtherPoll®, EtherBridge® and EtherModem® are Registered Trademarks of Data Comm for Business, Inc.