Office Cable Modems are multi-functional broadband access solutions. Each OCM integrates a cable modem, a 10Base-T hub, and an enterprise-class firewall, along with the other components required to allow the user to connect multiple PCs and share a single ISP account over a data network. In addition, a content filtering subscription and a VPN solution are available to meet the needs of individual subscribers. The Office Cable Modem not only provides broadband access more cost-effectively over a cable TV infrastructure, but also offers dramatically simplified setup and management for multi-PC homes, small businesses, telecommuters, and remote offices.

Broadband Cable Modem

The ComPORT 5000 Series Series is an integral part of the ComUNITY Access™ system with:

	30 Mbps downstream bandwidth using 64 QAM
	2.56 Mbps upstream bandwidth using QPSK
	Speed programmable service
	QoS (Quality of Service)

back to top

Integrated 4-Port Ethernet Hub

A built-in 10Base-T Ethernet hub with four RJ-45 ports allows quick and easy connectivity to multiple computers and Local Area Networks (LANs).

back to top

NAT/DHCP

NAT allows local network devices to use private addresses for security and easier address management. NAT also allows multiple computers to simultaneously connect to the Internet using a single Internet account. DHCP server and client provide centralized management of Transmission Control Protocol/Internet Protocol (TCP/IP) client configurations and the ability to acquire TCP/IP settings from the Cable Television Internet Service Provider (CATV/ISP).

back to top

Integrated Firewall

An ICSA-certified firewall in the Office Cable Modem uses stateful packet inspection (similar to enterprise-level firewalls) to protect private LANs from Internet hackers. Stateful packet inspection is considered to be the most effective method of protecting a private LAN.

back to top

Web Browser Management

The Office Cable Modem is easily and securely configured and monitored through a Web-based interface. Authentication is established using an MD5-based encrypted security mechanism.

back to top

Static Routing

The Office Cable Modem supports static routing, which segments a LAN or Wide Area Network (WAN) into multiple subnets, either for size or for practical considerations.

back to top

VPN Software Module (optional)

Using data encryption and the Internet, the optional VPN software module provides secure communications between two or more sites without the expense of leased site-to-site lines. Encryption methods include 56-bit Data Encryption Standard (DES) and 56-bit ARCFour (ARC4). The Office Cable Modem VPN can be used with other VPN products with the same IPSec implementation, such as FW-1 from Check Point.

back to top

Content Filter List Subscription (optional)

Content filtering allows residential subscribers as well as businesses and public organizations to create and enforce Internet access policies tailored to their needs. The optional content filter list subscription allows the administrator to block or monitor access to selected sites.

back to top

Options

The Office Cable Modem can do much more than provide high-speed Internet access.  It has been designed from the ground up to help your customers get the most out of their modem when they connect their networks to the Internet.

Virtual Private Networking (VPN) Software

Secure high-speed connectivity was once an exclusive service of the large telecom companies, since it required expensive dedicated lines (fig.1).  Now, thanks to Virtual Private Networking (VPN), you can offer a networking alternative that is both inexpensive and secure.  The key to VPN's success is its ability to use the existing infrastructure of the Internet to do the job of a dedicated line.  Since the Office Cable Modem is VPN-ready, there is no need for additional hardware.

VPN Software for the Office Cable Modem

With the Virtual Private Networking (VPN) software upgrade and an Office Cable Modem, your customer can create an affordable and secure connection between multiple locations.  VPN software lets users construct what is essentially a private network between two or more computers by "tunneling" through the existing public network (fig. 2)  With VPN, companies of any size can tunnel through the existing infrastructure of the Internet to network remote locations both securely and affordably.

Features

• Low cost: no additional hardware required
  
• Easy set-up and management
  
• Intuitive web-browser interface and pull-down menus
  
• Based on the IPSec standard for VPN
  
• Compatible with the IPSec-compliant VPN products, including manual keying and the Internet Key Exchange Protocol (IKE)
  
• Supports both Data Encryption Standard (DES) and ARCFour (ARC4) encryption methods using a 56-bit key
  
• Supports the RFC 1829-compatible DES for communication with Check Point's Firewall-1 ™
  
• Authenticates encrypted data using MD5
  
• Tunneling allows access to IP applications not supported by most firewalls
  
• Supports up to eight security associations for multiple private connections, remote management, or enabling specific applications

Typical Applications

• Secure remote management of the Office Cable Modem over the Internet
  
• Easily link branch office, key business partners, and home offices
  
• Access any host that has a private IP address on the LAN
  
• Enable otherwise unsupported protocols, such as Microsoft NetMeeting ™ and other H.323-based applications
  
• Remote video conferences

Networking Alternatives

back to top

Options (continued)

Secure IP Module for High Speed, Triple DES Encryption

For applications where very high performance DES or triple DES encryption is necessary, Com21 offers a hardware-based secure IP module which can be installed in the Office Cable Modem.  The Secure IP Module is compatible with the Office Cable Modem and offers industry-standard 112-bit/168-bit Triple Data Encryption Standard (DES) as well as full 40-bit/56-bit DES Encryption.  Authentication and access control are provided using Digital Signature (DSS) and x.509 digital certifications, and 4-Mbps encryption throughput is maintained using Red Creek's CryptoCore™ architecture.

Features

Encryption - Supports industry-standard 56-bit and 40-bit DES (Data Encryption Standard) and 168-bit Triple-DES encryption (not legal outside of USA, except for certain foreign financial institutions).

Digital Certification Support - Users x.509 v.4 certificates for client authentication.  Also uses DSS, and the MD5 and SHA-1 hashing algorithms, to verify sender's identity and packets sent during transmission.  Every module comes with a built-in Red Creek certificate.

ISAKMP Exchange Support - Key exchange uses the IPSec ISAKMP standard and Diffie-Hellman public key techniques.

Strong Authentication - Executes packet-by-packet verification using the IPSec standard Authentication Header (AH) protocol.

Data Integrity -  Provides integrity and confidentiality for IP datagrams using the IP Encapsulating Security Payload (ESP) protocol.

Routing Functions - Improves the flexibility of secure network designs through the use of Ravlin NodeManager™ software, with routing tables to provide true next hop support.

Device Management - The Com21 edition of Ravlin NodeManager™ provides comprehensive remote monitoring and configuration for up to five Secure IP Modules in a wide-area network.

NodeManager™ provides:

• unlimited node control from a single workstation
  
• updates of firmware and boot ROMs
  
• maintenance of routing tables
  
• syslog status messages
  
• support for SNMP MIB II

back to top

Options (continued)

CyberNOT™   Content Filtering List Subscription *

The Office Cable Modem has a built-in filtering feature which, when combined with a subscription to the the CyberNOT™ Content Filtering List, puts content control back in your customer's hands.  More effective than a keyword-driven filter, the list is compiled by the CyberNOT™ Oversight Committee, which consists of representatives from a wide range of social, political, and civic organizations.  Together, they closely review the content of thousands of sites and strive to provide intelligent options for content filtering.
Your customers can maintain their personal or institutional values without unduly limiting access to the Internet by electing to block any or all of the twelve content categories of the list.

Features

• Intelligent, human-generated and -maintained filter lists
  
• Protects individual values and reduces institutional liability
  
• Fully customizable lists, using the Office Cable Modem
  
• Operates at the level of the cable modem and so is compatible with most platforms and systems (Macintosh