ZYXEL SBG3300-NB00 Wireless N VDSL2 Combo WAN Small Business Security Gateway

VDSL Compliance

• G.993.1 VDSL Annex A
• G.993.2 VDSL2 band plan Annex A, Annex B
• G.994.1 (G.hs) Handshake, G.997.1
• Supports VDSL profiles up to 17a
• Seamless Rate Adaption (SRA)
• INP: Up to 16 symbols
• G.INP, G.Vector

• PhyR configurable

ADSL Compliance

• G.992.1 (G.dmt), G.992.2 (G.lite) Annex A, B
• G.992.3 (ADSL2), G.992.5 (ADSL2+) Annex A, B
• Reach-Extended ADSL (RE ADSL)
• Seamless Rate Adaptation (SRA)
• PPP over ATM AAL5 (RFC2364)
• Supports VC-based and LLC-based multiplexing
• ATM traffic shaping (CBR, VBR-rt/nrt, UBR)

• PhyR configurable

WLAN

• Two external 3 dbi detachable antennas
• IEEE 802.11 b/g/n compliance
• WMM for QoS configuration of each SSID
• Multi SSID: Up to 4
• Hidden SSID support
• Guest Wi-Fi access
• Web portal for terms of service
• WPA/WPA2-PSK with TKIP & AES
• WPA/WPA2-enterprise, supports EAP-MD5/ TLS/TTLS
• 32 MAC filter
• Wireless scheduling

• High gain power option for specific regions

High Availability WAN

• Three WAN interface (VDSL, Ethernet and mobile USB) options

• User configurable multi-WAN load balancing with one WAN for failover/fallback

Bridge/Router

• Dynamic learning for up to 2014 MAC address
• PPPoE, PPPoA, IPoE, IPoA (RFC 1483)
• DHCP client/server/relay
• DHCP option 43/60/61/125
• DNS proxy, DDNS
• RIP I/RIP II supported
• UPnP
• Static/Policy route
• Adjustable MTU size (max 1518 byte)
• QoS classification route, queueing and scheduling
• Interface grouping

• IPv6 support

VPN

• Simple wizard support (Express wizard)
• 20 concurrent IPSec VPN tunnels (Can set up to 35)
• IPSec, PPTP and L2TP over IPSec VPN
• Dead peer detection/replay detection
• IPSec HW engine
• Algorithm: AES (128/192/256)/3DES/DES
• Authentication: SHA-1/MD5

• VPN failover/fallback

Firewall & Security

• Full cone NAT/symmetric NAT/restrict cone NAT, NAT ALGs
• 16000 NAT sessions supported
• Virtual server (port forwarding)
• Configurable DMZ
• PPTP/IPSec/L2TP pass through
• PAP/CHAP/MS-CHAP v1 and v2
• Stateful packet inspection
• DoS/DDoS protection
• URL/key word filtering
• Access control: up to 256 ACL rules

• Report via Syslog, GUI, and email daemon

USB

• Two USB 1.1/2.0 ports
• FTP file sharing
• Supported file system: FAT16/32, EXT2/3
• Support mobile broadband dongle

• 3G budget control

Management

• 2-tier log in
• Login privilege
• Dual image
• Text based configuration (XML based)
• Configurable access control for remote management
• Supports TR-069, TR-098, TR-064 and TR-111
• SNMP v1, v2c
• Centralized log
• User management (user data base/profile)