1.	GENERAL

A.	Manufacturer:

	Proxicast, LLC
	312 Sunnyfield Drive, Suite 200
	Glenshaw, PA 15116-1936   U.S.A.
	www.proxicast.com
	sales@proxicast.com
	877-777-7694 or 412-213-2477
	Fax: 412-492-9386

B.	All equipment and materials used shall be standard commercial-off-the-shelf (COTS) components that are regularly manufactured and used in the manufacturer’s product(s).

C.	All systems and components shall have been thoroughly tested and proven in actual use.

D.	The 3G/4G cellular wireless VPN router described shall be a Proxicast LAN-Cell 3 Model Number LC3-52U series or equivalent. The router described shall be an industrial grade, full-featured 3G/4G cellular wireless router with VPN and other security features. The router shall include an integrated 802.11 b/g/n wireless access point and at least 4 LAN Ethernet switch ports, 1 Ethernet WAN port and 1 USB WAN port.

2.	3G/4G CELLULAR WIRELESS VPN ROUTER REQUIREMENTS

A.	The router shall be a third/fourth-generation (3G/4G) cellular router capable of transmitting, receiving and forwarding IP packets through a CDMA, GSM, UMTS and/or LTE cellular network. 

B.	The router shall have at least 4 Ethernet LAN switch ports (10/100/1000 Mbps) to connect any Ethernet-based devices, such as IP cameras, video-servers, DVRs, PLCs, sensors VoIP phones, etc.

C.	The router shall have at least 1 Ethernet WAN port (10/100/1000 Mbps) to connect with established Ethernet-based upstream networks such as DSL, Cable, T-1 or other high-speed interfaces.

D.	The router shall have a user-upgradeable cellular modem (preferably via an external USB) that can accept industry standard 3G/4G cellular modems from multiple cellular network operators. 

E.	The 3G/4G modem component shall be securely attached to the main device chassis to prevent accidental removal during transport or via vibration.

F.	The router shall provide a means of securely attaching external 3G/4G cellular antennas to improve signal transmission and reception.

G.	The router shall incorporate an 802.11 b/g/n Wi-Fi access point capable of bridging wireless Ethernet devices to provide WAN or Cellular Internet access. 

H.	The 802.11 b/g/n radio shall also be able to function as an alternate WAN interface, providing 802.11 access to external wireless networks. 

I.	The 802.11 b/g/n access point shall provide a means of securely attaching external antennas to improve signal transmission and reception.

J.	The router must be able to automatically switch between any available WAN interface (Ethernet, Wi-Fi  or Cellular) in the event the primary WAN interface fails. Recovery to the primary WAN interface must also be automatic once it becomes available again. 

K.	The router shall incorporate a stateful packet inspection firewall with user-definable rules to limit and log packet travel among all possible device interfaces.

L.	The router shall incorporate Network Address Translation, Port Forwarding and Port-Translation features to enable LAN-based devices to be accessed on defined ports from any WAN interface. 

M.	The router shall incorporate an IPSec VPN client server capable of establishing at least 32 secure VPN tunnels concurrently with other IPSec-compliant hardware and software products. 

N.	The router shall incorporate DES/3DES and AES encryption technologies.

O.	The router shall support HTTP for remote management. 

P.	The router must provide mechanisms for monitoring and controlling bandwidth utilization on all interfaces to enable specific devices or applications to be allocated a minimum bandwidth and defined priority over other IP traffic. 

Q.	The 3G/4G cellular wireless VPN router shall meet or exceed the design and performance specifications as described in Sections 3 and 4 below.

3.	HARDWARE SPECIFICATIONS

A. Physical
1.	Dimensions: 	Main Unit: 9.1 x 4.3 x 1.0 in (23 x 11 x 2.5 cm)
	With  Mounting Base: 10.3 x 5.25 x 2.4 in (26.2 x 13.4 x 6.1 cm)
2.	Weight: 1.5 lbs (0.7 kg) - w/ mounting base: 3.2 lbs (1.4 kg)
3.	Rugged 18 gauge steel enclosure
4.	Painted with industrial hardened powder coating

B. Power
1.	12V DC – 1500 ma max (vehicle & solar power compatible) 
2.	Includes auto switching 120-240VAC to 12VDC power supply (global plug kit optional)
3.	2.1 mm jack (positive center pin)
4.	Power consumption: 5W (typical), 18W (max)

C. Environmental 
1.	Operating Temperature: -22 to 140 F (-30 to 60 C)
2.	Operating Humidity 10%~90% (non-condensing)

D. I/O Connections
1.	(1) User accessible USB 2.0 for 3G/4G modems
2.	(4) 10/100/1000 Mbps Ethernet LAN switch ports (auto-negotiate / auto MDI/MDIX)
3.	(1) 10/100/1000 Mbps Ethernet WAN port (auto-negotiate / auto MDI/MDIX)
4.	(2) SMA Reverse Polarity Male Wi-Fi 802.11 b/g/n wireless antenna connectors
5.	(4) SMA Female bulkhead antenna connector holes (external SMA Female antenna connector optional)

E. Wireless LAN
1.	IEEE 802.11 b/g/n compliant wireless access point built-in (300 Mbps max)
2.	Detachable 2T2R MIMO Antennas 
3.	Operating Modes: Access Point (AP), Repeater, Client 
4.	Wi-Fi is available as both a LAN and WAN interface (AP + Client) 
5.	WPS, WDS, WMM 
6.	SSID’s: 2 (isolated) 
7.	Security: WPA, WPA2, WPA- PSK, WPA2-PSK, WEP 64 /128-bit, 802.1x 
8.	Output Power (max): 802.11b - 110 mW / 802.11g - 285 mW / 802.11n - 320 mW

4.	SOFTWARE SPECIFICATIONS

A. Cellular WAN Management
1.	Auto-failover routing between Ethernet, Cellular and Wi-Fi interfaces (user selectable routing priority)
2.	Auto-connect on demand or stay connected 24x7 with "always-on" feature
3.	ICMP heartbeat (ping continuity) monitor to ensure persistent cellular connections
4.	Configurable load balancing between WAN interfaces
5.	MAC address access control list
6.	Bandwidth utilization and bandwidth throttling controls

B. Virtual Private Networks
1.	VPN Over 3G/4G and Ethernet Interfaces 
2.	IPSec Server and Client Modes 
3.	32 Simultaneous VPN connections (IPSec)
4.	DES, 3DES, AES encryption
5.	SHA1/MD5 VPN Authentication 
6.	Dead Peer Detection (DPD) 
7.	Router initiated/terminated IPSec VPNs and client pass-through VPN support
8.	IPSec NAT Traversal + Keep-alive packet support
9.	Interoperable with standard IPSec-based VPN products (e.g. Cisco, SonicWall, Juniper, WatchGuard, NetScreen, etc.)
10.	PPTP Server and Client Modes (32 simultaneous clients) 
11.	MS-CHAPv2 & MPPE 128 bit security

C. Firewall
1.	Stateful Packet Inspection (SPI) Firewall 
2.	Anti-DoS and Anti-spoofing Protection 
3.	L2 / L3 / L4 ACL Filtering 
4.	Static DHCP and static ARP IP-MAC binding 
5.	DMZ and Port Forwarding (virtual server) 

E. IP & Routing
1.	LAN DHCP Server, Cache, Proxy Server, Relay 
2.	WAN DHCP, Static IP, PPPoE, Wi-Fi Client 
3.	WAN Fail-over Detection Limits & Controls 
4.	WAN Load Balancing (Ethernet + USB) 
5.	Static Routing 
6.	L3 / L4 IP/Port Policy-based Routing 
7.	Port-Forwarding & Port-Translation 
8.	VLAN Support 
9.	Spanning Tree Protocol Support 
10.	Dynamic DNS (DynDNS, NoIP, TZO, etc) 
11.	Permanent DNS Address (serial#.proxidns.com) 
12.	Bandwidth Mgmt. & Throughput Optimization 
13.	Content Filtering (OpenDNS) 
14.	NTP Time Service Support

F. Device Management
1.	Web-based Management (Local & Remote) Tablet Friendly GUI 
2.	Configuration Backup and Restore 
3.	Firmware Upgrade and Downgrade 
4.	SNMP Support 
5.	Syslog Support 
6.	Real-Time Logging 
7.	Scheduled System Restarts 
8.	Ping, ARPing, Traceroute Utilities

Document revision: 02/26/13