DM2500
ACCESS ROUTERS
ESPECIFICAÇÕES TÉCNICAS – VERSÃO XX.YYY
DATASHEET
134.0093.05 – Junho/2018
134.4088.08 – November/2021 0
1U high compact design
DM2500
Fanless version
ACCESS ROUTERS
4 to 6 copper ports
10/100/1000Base-T (RJ45)
HIGH PERFORMANCE IN A COMPACT SOLUTION FOR ENTERPRISE INTERNET
AND VPN SERVICES Up to 2 combo ports
1000Base-X (SFP) /
DM2500 Routers are the ideal solution for Service Providers delivering Enterprise Internet 10/100/1000Base-T (RJ45)
Access or VPN Services at customer premises.
LTE support
Implementing a comprehensive feature set including advanced routing protocols like RIP,
OSPF and BGP, the products allow the configuration of advanced Quality of Service (QoS)
policies, multiple Access Control List (ACL) entries and the establishment of private encrypted Integrated AC/DC full range
tunnels through public Internet infrastructure. power supply with automatic
selection
DM2500 product family is composed by four models ranging from 4 to 8 Gigabit Ethernet
Ports and it is designed to make use of the hardware’s advanced packet acceleration engine
to ensure high-performance packet processing. Two of these models feature LTE interface.
Optional redundant external
power supply adapter
Rollback and commit operations, complete AAA with TACACS+, RADIUS, Remote Syslog, NTP,
PPPoE and DHCP clients are available to ease the provisioning, configuration, management Extensive support to
and remote troubleshooting of the devices.
advanced routing protocols
It is also provided support to proactive performance monitoring of IP services including loss,
latency and jitter measurements through TWAMP protocol. Fast convergence times of Tunneling and cryptography
dynamic routing protocols and static routes are possible using BFD. to build VPN services
The products offer a robust Command Line Interface (CLI) accessible through SSHv2, Telnet Comprehensive management
or locally through RS-232 console port and are remotely monitored by DmView or third party
support
management systems through SNMP.
The DM2500 products are 1U high compact devices in a robust metallic enclosure and count
with a built-in universal AC/DC power supply with automatic selection and optional
redundancy available using an external power supply adapter. Up to two devices can be
installed side-by-side in a 19-inch rack when using MA-01 tray.
134.4088.08 – November/2021 1
VIRTUAL PRIVATE APPLICATIONS
NETWORKS INTERNET ACCESS ROUTER
DM2500 routers offer a cost-effective solution for Corporate Internet Access Services with
VPN technologies allow symmetric rates, ensuring flexibility and reliability at the customer premises. Advanced
customer’s private traffic to be routing protocols, security mechanisms, traffic prioritization and management features are
transferred through public IP available, allowing Service Providers to monitor and control the services being offered to
infrastructure in a secure and their customers.
transparent way. The products
of DM2500 router family
support different
encapsulation types, including
modern encryption
mechanisms to ensure data
confidentiality and
authenticity, also preserving
the performance and assuring
the user experience.
ENTERPRISE TRIPLE-PLAY
The solution based on DM2500 router family can be deployed when offering symmetric
point-to-point data, voice and video concentrated all in a single device. The products
allow the prioritization and tunneling of packets traversing both the Service Provider
owned infrastructure and the public Internet.
Additionally the devices offer dedicated support for traffic encryption, user authentication
and Access List Control (ACLs) entries. Such mechanisms when combined can assure
security, integrity and confidentiality of sensitive information being transferred among
separate branches of the same organization.
134.4088.08 – November/2021 2
FEATURE LIST
ETHERNET FILTERS AND SECURITY
WAN or LAN assigned to any Ethernet Port Access Control List (ACL) entries applied to any interface according
Digital Diagnostics Reading to source MAC, VLAN, IP protocol, source/dest IP, and source/dest
TCP/UDP port fields, TCP flags and ICMP codes.
Auto-MDIX and Auto-negotiation
Traffic isolation with NAT (source/destination)
Combo ports with automatic detection
Firewall stateful and zone based policy
Ports and VLANs assigned to virtual bridges
Link Aggregation Control Protocol (LACP)
QOS
MANAGEMENT Packet classification and assignment to queues based on source
Ethernet Port, Ethertype, source/dest MAC, VLAN, DSCP, IP protocol,
CLI (Command Line Interface) source/dest IP, source/dest TCP/UDP port and linked to policy route
Local management through RS-232 console rule
Telnet and SSHv2 management PCP (VLAN) marking
Loopback interfaces DSCP marking for conforming and exceeding traffic
Remote Syslog Rate limiters applied to inbound and outbound traffic
SNMP v2c e v3 FQ (Fair Queueing) and PQ (Priority Queueing) mechanisms
MIBs and traps for CPU and memory usage Queue type Random Detect DSCP based
MIBs and traps for temperature reading and monitoring
MIBs RMON ROUTING
Dying Gasp with trap sending
Static Routing
Management and services accessible via IPv6
RIP, RIPng, OSPFv2, OSPFv3 e BGP-4
Inventory reporting
PBR (Policy-based Routing) (IPv4/IPv6)
Download and upload of configuration files in readable format
IPv6 routing
Storage of up to 2 firmware and up to 20 configuration files in non-
VRRPv2 (IPv4 and IPv6)
volatile memory
VRF-lite
Firmware upgrade through HTTP, TFTP e SCP
Multicast Routing
TACACS+ (AAA)
PIM-SM and PIM-SSM (IPv4)
RADIUS Authentication
SERVICES OAM
Ping and Traceroute
NTP server/client
Traffic counters per physical port, per VLAN and per tunnel
DHCPv4 server/relay/client
TWAMP (Two-Way Active Measurement Protocol) including traffic
DHCPv6 server/client
loss, latency and jitter statistics MIBs
DNS client
BFD (Bidirectional Forwarding Detection) associated to static
PPPoE client (IPv4 and IPv6*) IPv4/IPv6 routes, OSPFv2 or BGP
IPFIX (Flow Accounting) including NetFlow v9 support
ENCAPSULATION AND TUNNELING
VLAN TRAFFIC ENCRYPTION
GRE (Generic Routing Encapsulation) (IPv4 e IPv6) IPsec with authentication and encryption (aes128, aes256 and 3des)
Tunnel and GRE over IPsec modes (IPv4/IPv6)
Authentication with pre-shared keys and certificates
(*) Feature in Roadmap. Contact Datacom for availability information.
134.4088.08 – November/2021 3
STANDARDS
IETF RFC4443 Internet Control Message Protocol (ICMPv6) for the
Internet Protocol Version 6 (IPv6) Specification
draft-grant-tacacs-02 The TACACS+ Protocol RFC4861 Neighbor Discovery for IP version 6 (IPv6)
RFC768 User Datagram Protocol (UDP) RFC4862 IPv6 Stateless Address Auto configuration
RFC791 Internet Protocol (IP) RFC5424 The Syslog Protocol
RFC792 Internet Control Message Protocol (ICMP) (Ping IPv4) RFC5357 A Two-Way Active Measurement Protocol (TWAMP)
RFC793 Transmission Control Protocol (TCP) RFC5880 Bidirectional Forwarding Detection (BFD)
RFC826 An Ethernet Address Resolution Protocol (ARP) RFC5882 Generic Application of Bidirectional Forwarding
RFC854 Telnet Protocol Specification Detection (BFD)
RFC894 A Standard for the Transmission of IP Datagrams over RFC5905 Network Time Protocol Version 4: Protocol and
Ethernet Networks Algorithms Specification
RFC950 Internet Standard Subnetting Procedure RFC7011 Specification of the IP Flow Information Export (IPFIX)
RFC1035 Domain Names – Implementation and Specification Protocol for the Exchange of Flow Information
RFC1212 Concise MIB Definitions RFC7296 Internet Key Exchange Protocol Version 2 (IKEv2)
RFC1213 Management Information Base for Network RFC8200 Internet Protocol, Version 6 (IPv6) Specification
Management of TCP/IP based internets: MIB-II
RFC1215 A Convention for Defining Traps for Use With the SNMP
RFC1441 SNMPv2 Protocol Framework IEEE
RFC1700 Assigned Numbers 802.1d Media Access Control (MAC) Bridge
RFC1812 Requirements for IP Version 4 Routes (IPv4) 802.1p Priority Support
RFC2080 RIPng for IPv6 802.1q Virtual LAN
RFC2131 Dynamic Host Configuration Protocol (DHCP) 802.1ad Provider Bridges
RFC2178 OSPF Version 2 802.3 10Base-T
RFC2403 The Use of HMAC-MD5-96 within ESP and AH 802.3u 100Base-TX
RFC2404 The Use of HMAC-SHA-1-96 within ESP and AH 802.3x Flow Control
RFC2453 RIP Version 2 802.3z 1000 BASE SX/LX
RFC2474 Definition of the Differentiated Services Field (DS Field) 802.3ab 1000Base-T
in the IPv4 and IPv6 Headers
RFC2475 An Architecture for Differentiated Services
RFC2578 Structure of Management Information Version 2 (SMIv2) ANATEL
RFC2579 Textual Conventions for SMIv2 Resolução 242 (30-Nov-2000)
RFC2597 Assured Forwarding PHB Group Rules for Certification and Homologation of
RFC2784 Generic Routing Encapsulation (GRE) Telecommunication Products
RFC2863 The Interfaces Group MIB Resolução 323 (7-Nov-2002)
RFC3022 Traditional IP Network Address Translator (Traditional Standard for Certification of Telecommunication
NAT) Products
RFC3246 An Expedited Forwarding PHB Resolução 442 (21-Jul-2006)
RFC3584 Coexistence between Version 1, Version 2, and Version 3 Rules for the Certification of Telecommunication
Equipment in Aspects of Electromagnetic Compatibility
of the Internet-standard Network Management
Framework
RFC3635 Definitions of Managed Objects for the Ethernet-like
Interface Types ETSI
RFC4250 The Secure Shell (SSH) Protocol Assigned Numbers
EN 300 019-1-1, Class 1.2 Environmental Conditions for
RFC4251 The Secure Shell (SSH) Protocol Architecture
storage
RFC4632 Classless Inter-domain Routing (CIDR): The Internet
EN 300 019-1-2, Class 2.3 Environmental Conditions for
Address Assignment and Aggregation Plan
Transport
RFC4252 The Secure Shell (SSH) Authentication Protocol
EN 300 386 V1.6.1 (2012-09) Electromagnetic compatibility and
RFC4253 The Secure Shell (SSH) Transport Layer Protocol
Radio spectrum Matters (ERM)
RFC4254 The Secure Shell (SSH) Connection Protocol
EN 55022 Information technology equipment.
RFC4271 A Border Gateway Protocol 4 (BGP-4)
Radio disturbance characteristics -
RFC4291 IP Version 6 Addressing Architecture Class A
RFC4301 Security Architecture for the Internet Protocol
RFC4302 IP Authentication Header
RFC4303 IP Encapsulating Security Payload (ESP)
RFC4309 Using Advanced Encryption Standard (AES) CCM Mode
with IPsec Encapsulating Security Payload (ESP)
134.4088.08 – November/2021 4
IEC
60825-1 Laser Safety Class
61000-4-11 Voltage dips, short interruptions and voltage
variations immunity tests
61000-4-6 Immunity to conducted disturbances, induced
by radio-frequency fields
EN 61000-4-2 Electrostatic Discharge Immunity Test
EN 61000-4-4 Electrical fast transient/burst immunity test
EN 61000-4-5 Surge immunity test
134.4088.08 – November/2021 5
TECHNICAL SPECIFICATIONS
DM2500 DM2500 DM2500 DM2500
4GT 6GT+2GC 4GT+LTE 4GT+2GX+LTE
AC/DC Power Input 100 to 240Vac / 48 to 60Vdc
DC Power Input 11.4 to 12.6Vdc
Maximum Power Consumption 17W 28W 21W 30W
Typical Power Consumption 10W 15W 13W 17W
Fanless Yes No Yes No
HARDWARE
Operational Temperature 0 to 45°C
CHARACTERISTCS
Operational Relative Humidity 10 to 90%, non-condensed
Operational Altitude 0 to 3000m
Storage Temperature -20 to 70°C
Storage Relative Humidity 10 to 90%, non-condensed
Dimensions 43 x 189 x 191mm (H x W x DP)
10/100/1000Base-T (RJ45) 4 6 4 4
1000Base-X (SFP) - - - 2
Combo 1000Base-X (SFP) /
- 2 - -
INTERFACES 10/100/1000Base-T (RJ45)
LTE - - Yes Yes
USB 2.0 Host Tipo A 1
Console (RJ45) 1
Flash 4GB
MEMORY
RAM 1GB
LTE TECHNICAL SPECIFICATIONS
DM2500 4GT+LTE and
DM2500 4GT+2GX+LTE
Module Quectel
Data rate LTE Cat.4 – 150Mbps downlink and 50Mbps uplink
LTE-FDD B1 / B2* / B3 / B4 / B5 / B7 / B8 / B28
LTE-TDD B40
WCDMA B1 / B2 / B5 / B8
GSM/EDGE Quad-band
Region** Latin America, Australia, New Zealand, Taiwan
Carrier: Telstra
Certification Regulatory: FCC/ Anatel/ NCC/ RCM/ GCF
Others: WHQL
(*) RX-diversity is not supported
(**) Contact Datacom for other regions
134.4088.08 – November/2021 6
ORDERING INFORMATION
Model Description Picture
Router with 4 10/100/1000Base-T
DM2500 4GT
ports, 1 USB port type A and RJ-45
800.5181.xx
console port.
Router with 6 10/100/1000Base-T
DM2500 6GT+2GC ports, 2 combo 10/100/1000Base-T or
800.5182.xx 1000Base-X SFP ports, 1 USB port
type A and RJ-45 console port.
Router with 4 10/100/1000Base-T
DM2500 4GT+LTE + Panel antennas ports, 1 USB port type A, RJ-45
810.3814.xx console port and LTE interface with
panel antennas
Router with 4 10/100/1000Base-T
DM2500 4GT+LTE + Desktop antennas 3m ports, 1 USB port type A, RJ-45
810.3815.xx console port and LTE interface with
desktop antennas 3m
Router with 4 10/100/1000Base-T
ports, 2 optical 1000Base-X SFP ports,
DM2500 4GT+2GX+LTE + Panel antennas
1 USB 2.0 port type A, RJ-45 console
810.3816.00
port and LTE interface with panel
antennas
Router with 4 10/100/1000Base-T
ports, 2 optical 1000Base-X SFP ports,
DM2500 4GT+2GX+LTE + Desktop antennas 3m
1 USB 2.0 port type A, RJ-45 console
810.3817.00
port and LTE interface with desktop
antennas 3m
134.4088.08 – November/2021 7
ACCESSORIES
Accessory Description Picture
Optical Gigabit Ethernet SFP modules. Several models
SFP 1GE
with varying power and reach specifications are
PN: inquiry
offered.
Tray for installing up to two devices side-by-side on 19-
MA-01 Tray
inch 1U racks. Tray with holes designed to fasten the
800.0141.xx
devices using screws.
Tray for installing one unit on 19-inch 1U racks with
MA-04 Tray
additional space for accommodating cables. Tray with
800.0300.xx
holes to allow flexible installation.
MA-06 Tray Tray for installing one unit on 19-inch 1U racks with
800.0463.xx additional space for accommodating cables.
External AC PSU Optional 100-240Vac / 50-60Hz input to 12Vdc output
820.8007.xx external power supply unit for redundancy.
134.4088.08 – November/2021 8
SUPPORTED PROTOCOLS SCALABILITY
DM2500 DM2500 DM2500 DM2500
Group Feature
4GT 6GT+2GC 4GT+LTE 4GT+2GX+LTE
Maximum number of DHCPv4/v6 Server pools 100 ¹ 100 ¹ 100 ¹ 100 ¹
Maximum number of DHCPv4/v6 sessions 2000 2000 2000 2000
Maximum number of DHCPv4/v6 Relay
1 1 1 1
instances
SERVICES
Maximum number of associated servers in
2 2 2 2
DHCPv4/v6 Relay
Maximum number of TWAMP sessions in
10 10 10 10
Sender mode
Maximum number of TWAMP sessions in
64 64 64 64
Reflector mode
Maximum number of registred local users 32 32 32 32
Maximum number of TACACS+ servers 8 8 8 8
Maximum number of RADIUS servers 8 8 8 8
Maximum number of SNMP servers 6¹ 6¹ 6¹ 6¹
MANAGEMENT
Maximum number of Syslog servers 6¹ 6¹ 6¹ 6¹
Maximum number of NTP servers 3¹ 3¹ 3¹ 3¹
Maximum number of IPFIX collectors 2 2 2 2
Maximum number of SSH sessions 8 8 8 8
Maximum number of TELNET sessions 8 8 8 8
Maximum number of characters configured in
2000 2000 2000 2000
banner
Maximum number of ACL-Based Firewall
10 10 10 10
instances
Maximum number of rules per ACL-Based
SECURITY
1000 1000 1000 1000
Firewall instances
Maximum number of Source NAT (SNAT) rules 100 100 100 100
Maximum number of Destination NAT (DNAT)
100 100 100 100
rules
Maximum number of QoS Rate-Control
8 8 8 8
instances
Maximum number of QoS Shaper instances 8 8 8 8
Maximum number of QoS Limiter instances 8 8 8 8
QoS
Maximum number of classes per instance QoS
8 8 8 8
Shaper
Maximum number of classes per instance QoS
8 8 8 8
Limiter
Maximum number of rules per policy route 100 100 100 100
Maximum number of VLANs 802.1Q 4094 4094 4094 4094
ENCAPSULATION
Maximum Ethernet frame size
9000 9000 9000 9000
MTU [Bytes]
Maximum number of PPPoE Client sessions 15 15 15 15
Maximum number of GRE Tunnels 50 50 50 50
134.4088.08 – November/2021 9
Maximum number of Bridge Groups 4 8 4 4
Maximum number of static routes IPv4 100 100 100 100
Maximum number of static routes IPv6 100 100 100 100
Maximum number of RIP/RIPng routes 10000 ² 10000 ² 10000 ² 10000 ²
Maximum number of OSPFv2/v3 areas 32 ¹ 32 ¹ 32 ¹ 32 ¹
Maximum number of OSPFv2 neighbors 20 ¹ 20 ¹ 20 ¹ 20 ¹
Maximum number of OSPFv3 neighbors 32 ¹ 32 ¹ 32 ¹ 32 ¹
Maximum number of OSPFv2/v3 routes 10000 ² 10000 ² 10000 ² 10000 ²
ROUTING
Maximum number of BGP IPv4/IPv6 peers 32 ¹ 32 ¹ 32 ¹ 32 ¹
Maximum number of BGP IPv4/IPv6 routes 10000 ² 10000 ² 10000 ² 10000 ²
Maximum number of BFD sessions per node 10 20 10 10
Maximum number of VRRPv2/v3 Groups 255 255 255 255
Maximum number of VIPs per VRRPv2/v3
20 20 20 20
Group
Maximum number of VRFs 7 7 7 7
Maximum number of multicast groups (PIM) 20 60 20 20
Maximum number of Site-to-Site VPNs with
VPN
64 128 64 64
IPv4
¹ - Recommended maximum value.
² - Recommended maximum value, but it is possible to reach a greater number of routes.
Rua América, 1000 | 92990-000 | Eldorado do Sul | RS | Brazil
+55 51 3933 3000
[email protected] 134.4088.08 – November/2021 10
