Product Description
Cradlepoint AER 2100 Advanced Edge Router
The Cradlepoint AER 2100 is designed for the distributed enterprise to intelligently manage converged wired and wireless connectivity for a highly available "connected experience" at the edge. This solution combines routing, WAN diversityTM, advanced security, private network support, and high-performance WiFi in a platform that can be deployed, managed, and optimized via Cradlepoint Enterprise Cloud Manager. Network administrators can extend applications and services to remote branches through the real-time deployment of cloud-enabled services, applications, and analytics.
Deploy & Manage the Intelligent Network
Rapidly deploy and dynamically manage networks at geographically distributed stores and branch locations with Enterprise Cloud Manager, Cradlepoint’s network management and application platform. Improve productivity, reduce costs, and enhance the intelligence of your network and business operations.
- DEPLOYMENT — configure devices by groups or individually, and update firmware easily with a few clicks for zero-touch at installation.
- MANAGEMENT — monitor device statuses in real-time and set proactive alerts for optimized 3G/4G data usage and network uptime.
- INTELLIGENCE — easy-to-use network analytics help optimize WAN traffic, improving network performance and the quality of experience at the edge.
Secure & Reliable
Cradlepoint Enterprise Cloud Manager uses real-time, secure encrypted protocols for managing your Cradlepoint devices. Additional security and reliability features include:
- Secure device registration and authentication
- Enterprise class Tier 4 datacenter, SSAE Type II (SAS 70) compliance
- Redundant systems and architecture to support high availability
- Efficient protocol optimized for management over 3G/4G networks
Management & Alerts
Cradlepoint Enterprise Cloud Manager can help you protect mission-critical applications – improve network uptime and performance while reducing costs:
- Perform remote diagnostics — status reports and error logs
- Troubleshoot without onsite IT support
- Upgrade firmware remotely — ensure up-to-date security and PCI compliance
- Monitor 3G/4G data usage, avoid overages
- Reduce truck rolls, saving time and money
- Prevent poor customer experiences and lost revenue caused by Internet downtime
Analytics
Proactive alerts and reporting enable you to better understand how devices are deployed across your organization. Alerts can notify you of:
- 3G/4G modem connectivity issues
- Data usage thresholds for wireless data plans
- Failed login attempts and modem removal, which can indicate physical or cyber security breaches
- Unauthorized users or configuration changes
Product Documentation
Specifications
WAN
• Integrated 4G LTE (with 3G failover)
• Verizon, AT&T, Sprint, Europe, and generic models available
• Dual integrated modem option
• Dual SIM slot in each modem
• Most models include support for active GPS
• WiFi as WAN
• Failover/Failback
• Load Balancing
• Advance Modem Failure Check
• WAN Port Speed Control
• WAN/LAN Affinity
• IP Passthrough
LAN
• VLAN 802.1Q
• DHCP Server, Client, Relay
• DNS and DNS Proxy
• DynDNS
• UPnP
• DMZ
• Multicast/Multicast Proxy
• QoS (DSCP and Priority Queuing)
• MAC Address Filtering
WiFi
• Dual-Band Dual-Concurrent (3×3 MIMO)
• 802.11ac (a, b, g, n, ac)
• Up to 256 connected devices (128 per channel – 2.4 GHz and 5 GHz)
• WPA2 Enterprise (WiFi)
• Hotspot/Captive Portal
• SSID-based Priority
Management
• Cradlepoint Enterprise Cloud Manager²
• Web UI, API, CLI
• GPS Location
• Data Usage Alerts (router and per client)
• Advanced Troubleshooting (support)
• Device Alerts
• SNMP
• SMS control
• Serial Redirector
VPN and Routing
• IPsec Tunnel – up to 20 concurrent sessions
• OpenVPN (SSL VPN)¹
• L2TP¹
• GRE Tunnel
• OSPF/BGP/RIP¹
• Per-Interface Routing
• Routing Rules
• NAT-less Routing
• Virtual Server/Port Forwarding
• NEMO/DMNR¹
• IPv6
• VRRP¹
• STP¹
• NHRP¹
Security
• RADIUS and TACACS+
• 802.1x authentication for Ethernet
• Zscaler integration¹
• Certificate support
• ALGs
• MAC Address Filtering
• Advanced Security Mode (local user management only)
• Per-Client Web Filtering
• IP Filtering
• Content Filtering (basic)
• Website Filtering
Cloud Optimized IP Communications
• Automated WAN Failover/Failback support
• WAN Affinity and QoS allow prioritization of VoIP services
• Advanced VPN connectivity options to HQ
• SIP ALG and NAT to allow VoIP and UC communications to traverse firewall
• MAC Address Filtering
• 802.1p/q for LAN QoS segmentation and treatment of VoIP on LAN
• Private Network support (wired and 4G WAN)
• Cloud-based management²
1 – Requires an Extended Enterprise License
2 – Enterprise Cloud Manager requires a subscription
3 – Requires a CP Secure Threat Management license
Specifications
• WAN: Integrated 4G LTE (one modem included; dual-modem option), 10/100/1000 Ethernet ports (cable/DSL/T1/satellite/Metro Ethernet), WiFi (as WAN; Metro WiFi) 3x3 MIMO 2.4 GHz or 5 GHz (802.11 a/b/g/n/ac)
• LAN: Dual-band dual-concurrent WiFi (802.11 a/b/g/n/ac), five 10/100/1000 Ethernet ports (WAN/LAN switchable), serial console support w/ USB-to-serial adapter
• TEMPERATURE:
o 0°C to 50°C (32°F to 122°F) operating
o −20°C to 70°C (−4°F to 158°F) storage
• HUMIDITY (non-condensing):
o 10% to 85% operating
o 5% to 90% storage
• MEMORY: 256 MB DRAM; 16MB SPI Flash; 256 MB NAND Flash
• SIZE: 10.25x8.5x1.75 in (260x214x45 mm)
• CERTIFICATIONS: FCC, WiFi Alliance, CE, IC, carrier certifications
• LAN TO WAN: 940 Mbps
• WAN TO LAN: 940 Mbps
• Stateful Throughput: 940 Mbps
• WIFI POWER: FCC maximum power reported:
• 2.4 GHz band: 24.47 dBm
• Lower 5 GHz band: 16.9 dBm
• Upper 5 GHz band: 27.77 dBm
What's In The Box
• AER 2100 with integrated MC400 4G LTE modem
• External 3G/4G mobile broadband modem antennas (2) (SMA) w/ multiplexing for GPS; finger tighten only
• External dual-band high-gain WiFi antennas (3) reverse SMA (5 dBi, 2.4 GHz, 5 dBi 5 GHz, VSWR ≤ 2); finger tighten only
• 12V 3A AC/DC power adapter
• Multipurpose Retaining Tool
• Ethernet cable
• Quick Start Guide with warranty information
Feature Details
• WAN Security – IPS/IDS & Application Identification (subscription required), NAT, SPI, ALG, inbound filtering of IP addresses, port blocking, service filtering (FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3, SSH), protocol filtering, WAN ping (allow/ignore) • Redundancy and Load Balancing – Failover/failback on all WAN connections with rule selection; advanced load balancing options (round robin, spillover, data usage, rate); WAN failure detection; VRRP (subscription required)
• Intelligent Routing – UPnP, DMZ, virtual server/port forwarding, routing rules, NAT-less routing, wired or wireless WAN-to-LAN IP passthrough, route management, per-interface routing, content filtering, IP filtering, website filtering, per-client Web filtering, local DHCP server, DHCP client, DHCP relay, DNS, DNS proxy; ALGs: PPTP, L2TP, PPPoE passthrough, IPsec passthrough, FTP (passive), FTP (active), SIP, TFTP, IRC, MAC address filtering, Dynamic DNS, LAN/WAN affinity, VLAN support (802.1Q), STP, enterprise routing protocols: BGP/OSPF/RIP (subscription required), multicast proxy support, IP setting overrides, IPv6 support
• Management – Enterprise Cloud Manager: cloud-enabled management and application platform (subscription required); web-based GUI (local management), optional RADIUS or TACACS+ username/password; remote WAN web-based management w/ access control (HTTP, HTTPS); SNMP v1, v2c, & v3; CLI over SSH, SSH to serial, SSH to telnet; API; one-button firmware upgrade; modem configuration, update, and management; modem data usage w/ alerts, per-client data usage; custom AT scripting to modems; SMS for device recovery
• Performance & Health Monitoring – WiPipe™ advanced QoS with traffic shaping, with DSCP/DiffServe QoS, Modem Health Management (MHM) improves connectivity of modem, SSID-based priority, WAN port speed control, several levels of basic and advanced logging for troubleshooting
• VPN (IPsec) – Tunnel, NAT-T, and transport modes; connect to Cradlepoint, Cisco/Linksys, CheckPoint, Watchguard, Juniper, SonicWall, Adtran and others; certificate support; Hash (MD5, SHA128, SHA256, SHA384, SHA512), Cipher (AES, 3DES, DES); support for 20 concurrent connections; GRE tunneling; L2TP support (subscription required); multiple networks supported in a single tunnel; OpenVPN/SSL VPN (subscription required); site-to-site dynamic VPN with NHRP (subscription required)
• GPS – Active GPS supported on most models (see attached); GUI mapping as well as local or remote server logging
Support and Warranty
• CradleCare Support Agreement available with technical support, software upgrades, and advanced hardware exchange – 1, 3, and 5 year options
• One-year limited hardware warranty available in the US and Canada; two-year limited hardware warranty for integrated EU products when purchased from an authorized EU distributor – extend warranty to 2, 3, or 5 years
• Integrated 4G LTE (with 3G failover)
• Verizon, AT&T, Sprint, Europe, and generic models available
• Dual integrated modem option
• Dual SIM slot in each modem
• Most models include support for active GPS
• WiFi as WAN
• Failover/Failback
• Load Balancing
• Advance Modem Failure Check
• WAN Port Speed Control
• WAN/LAN Affinity
• IP Passthrough
LAN
• VLAN 802.1Q
• DHCP Server, Client, Relay
• DNS and DNS Proxy
• DynDNS
• UPnP
• DMZ
• Multicast/Multicast Proxy
• QoS (DSCP and Priority Queuing)
• MAC Address Filtering
WiFi
• Dual-Band Dual-Concurrent (3×3 MIMO)
• 802.11ac (a, b, g, n, ac)
• Up to 256 connected devices (128 per channel – 2.4 GHz and 5 GHz)
• WPA2 Enterprise (WiFi)
• Hotspot/Captive Portal
• SSID-based Priority
Management
• Cradlepoint Enterprise Cloud Manager²
• Web UI, API, CLI
• GPS Location
• Data Usage Alerts (router and per client)
• Advanced Troubleshooting (support)
• Device Alerts
• SNMP
• SMS control
• Serial Redirector
VPN and Routing
• IPsec Tunnel – up to 20 concurrent sessions
• OpenVPN (SSL VPN)¹
• L2TP¹
• GRE Tunnel
• OSPF/BGP/RIP¹
• Per-Interface Routing
• Routing Rules
• NAT-less Routing
• Virtual Server/Port Forwarding
• NEMO/DMNR¹
• IPv6
• VRRP¹
• STP¹
• NHRP¹
Security
• RADIUS and TACACS+
• 802.1x authentication for Ethernet
• Zscaler integration¹
• Certificate support
• ALGs
• MAC Address Filtering
• Advanced Security Mode (local user management only)
• Per-Client Web Filtering
• IP Filtering
• Content Filtering (basic)
• Website Filtering
Cloud Optimized IP Communications
• Automated WAN Failover/Failback support
• WAN Affinity and QoS allow prioritization of VoIP services
• Advanced VPN connectivity options to HQ
• SIP ALG and NAT to allow VoIP and UC communications to traverse firewall
• MAC Address Filtering
• 802.1p/q for LAN QoS segmentation and treatment of VoIP on LAN
• Private Network support (wired and 4G WAN)
• Cloud-based management²
1 – Requires an Extended Enterprise License
2 – Enterprise Cloud Manager requires a subscription
3 – Requires a CP Secure Threat Management license
Specifications
• WAN: Integrated 4G LTE (one modem included; dual-modem option), 10/100/1000 Ethernet ports (cable/DSL/T1/satellite/Metro Ethernet), WiFi (as WAN; Metro WiFi) 3x3 MIMO 2.4 GHz or 5 GHz (802.11 a/b/g/n/ac)
• LAN: Dual-band dual-concurrent WiFi (802.11 a/b/g/n/ac), five 10/100/1000 Ethernet ports (WAN/LAN switchable), serial console support w/ USB-to-serial adapter
• TEMPERATURE:
o 0°C to 50°C (32°F to 122°F) operating
o −20°C to 70°C (−4°F to 158°F) storage
• HUMIDITY (non-condensing):
o 10% to 85% operating
o 5% to 90% storage
• MEMORY: 256 MB DRAM; 16MB SPI Flash; 256 MB NAND Flash
• SIZE: 10.25x8.5x1.75 in (260x214x45 mm)
• CERTIFICATIONS: FCC, WiFi Alliance, CE, IC, carrier certifications
• LAN TO WAN: 940 Mbps
• WAN TO LAN: 940 Mbps
• Stateful Throughput: 940 Mbps
• WIFI POWER: FCC maximum power reported:
• 2.4 GHz band: 24.47 dBm
• Lower 5 GHz band: 16.9 dBm
• Upper 5 GHz band: 27.77 dBm
What's In The Box
• AER 2100 with integrated MC400 4G LTE modem
• External 3G/4G mobile broadband modem antennas (2) (SMA) w/ multiplexing for GPS; finger tighten only
• External dual-band high-gain WiFi antennas (3) reverse SMA (5 dBi, 2.4 GHz, 5 dBi 5 GHz, VSWR ≤ 2); finger tighten only
• 12V 3A AC/DC power adapter
• Multipurpose Retaining Tool
• Ethernet cable
• Quick Start Guide with warranty information
Feature Details
• WAN Security – IPS/IDS & Application Identification (subscription required), NAT, SPI, ALG, inbound filtering of IP addresses, port blocking, service filtering (FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3, SSH), protocol filtering, WAN ping (allow/ignore) • Redundancy and Load Balancing – Failover/failback on all WAN connections with rule selection; advanced load balancing options (round robin, spillover, data usage, rate); WAN failure detection; VRRP (subscription required)
• Intelligent Routing – UPnP, DMZ, virtual server/port forwarding, routing rules, NAT-less routing, wired or wireless WAN-to-LAN IP passthrough, route management, per-interface routing, content filtering, IP filtering, website filtering, per-client Web filtering, local DHCP server, DHCP client, DHCP relay, DNS, DNS proxy; ALGs: PPTP, L2TP, PPPoE passthrough, IPsec passthrough, FTP (passive), FTP (active), SIP, TFTP, IRC, MAC address filtering, Dynamic DNS, LAN/WAN affinity, VLAN support (802.1Q), STP, enterprise routing protocols: BGP/OSPF/RIP (subscription required), multicast proxy support, IP setting overrides, IPv6 support
• Management – Enterprise Cloud Manager: cloud-enabled management and application platform (subscription required); web-based GUI (local management), optional RADIUS or TACACS+ username/password; remote WAN web-based management w/ access control (HTTP, HTTPS); SNMP v1, v2c, & v3; CLI over SSH, SSH to serial, SSH to telnet; API; one-button firmware upgrade; modem configuration, update, and management; modem data usage w/ alerts, per-client data usage; custom AT scripting to modems; SMS for device recovery
• Performance & Health Monitoring – WiPipe™ advanced QoS with traffic shaping, with DSCP/DiffServe QoS, Modem Health Management (MHM) improves connectivity of modem, SSID-based priority, WAN port speed control, several levels of basic and advanced logging for troubleshooting
• VPN (IPsec) – Tunnel, NAT-T, and transport modes; connect to Cradlepoint, Cisco/Linksys, CheckPoint, Watchguard, Juniper, SonicWall, Adtran and others; certificate support; Hash (MD5, SHA128, SHA256, SHA384, SHA512), Cipher (AES, 3DES, DES); support for 20 concurrent connections; GRE tunneling; L2TP support (subscription required); multiple networks supported in a single tunnel; OpenVPN/SSL VPN (subscription required); site-to-site dynamic VPN with NHRP (subscription required)
• GPS – Active GPS supported on most models (see attached); GUI mapping as well as local or remote server logging
Support and Warranty
• CradleCare Support Agreement available with technical support, software upgrades, and advanced hardware exchange – 1, 3, and 5 year options
• One-year limited hardware warranty available in the US and Canada; two-year limited hardware warranty for integrated EU products when purchased from an authorized EU distributor – extend warranty to 2, 3, or 5 years