DATASHEET

SecureMesh™ WAN Extender Bridge

XBRG-1100
The SecureMesh™ Extender Bridge combines the functionality of a
SecureMesh Wide Area Network (WAN) relay node with the functionality of a
SecureMesh Neighborhood Area Network (NAN) access point to create an
integrated product that simplifies network planning, installation, maintenance,
operations, and troubleshooting, thereby reducing overall costs. More
importantly, the integrated functionality of the Extender Bridge addresses security
in a holistic manner so that end-to-end security across the two tiers is enforced
and the interface between network tiers does not pose a security vulnerability.

Integrated WAN and NAN Capabilities

Each SecureMesh Extender Bridge employs a 5 GHz SecureMesh WAN radio
with an array of 8 directional antennas to interoperate as an element of the
SecureMesh WAN and a 2.4 GHz SecureMesh NAN radio with an omnidirectional
dipole antenna to act as an access point for SecureMesh NAN devices.

Extender Functionality
The Extender Bridge provides the functionality of a SecureMesh WAN Extender,
using its array of eight beam-switched directional antennas to act as a relay node
within the SecureMesh WAN and provide extended range and full 360° coverage.
The SecureMesh WAN Extender Bridge
The Extender Bridge offers an Ethernet port for WAN client devices, allowing a
single client device or, by using an external IP router or Ethernet switch, many
client devices to connect to the WAN. The SecureMesh WAN then supports Extender Functionality
bidirectional communications between its client devices and the head end,
 WAN relay node, extending WAN coverage
allowing either end to initiate communications. The SecureMesh WAN can also
be configured to support peer-to-peer communications without requiring traffic to  Layer 2 Ethernet transport – supports higher
be routed through the head end. layer protocols, including TCP/IP, DNP 3.0,
IEC 61850, SCADA-over-IP, etc.
Collector Functionality  NAN traffic backhaul
The Extender Bridge provides the functionality of a SecureMesh NAN Collector,  Up to 54 Mbps WAN air data rate
supporting SecureMesh electric meters, gas meters, load control switches, and
other SecureMesh NAN devices to create a wireless mesh subnetwork of the Collector Functionality
SecureMesh Neighborhood Area Network. The Extender Bridge establishes time  NAN mesh network coordinator
synchronization and coordinates overall operation of the NAN subnetwork defined  NAN time synchronization
by its associated nodes and then routes NAN traffic to/from the UnitySuite Head-
 NAN data concentrator
End Software via the SecureMesh WAN.
 250 kbps NAN air data rate
Secure Application Domain Partitioning
Intrinsic Reliability
Application domain partitioning within the SecureMesh WAN provides each
 Self-healing mesh supports built in reliability
application group with its own virtual network to prevent unintentional or malicious
and best-path, vector-based routing
access from other application domains. Using IPsec-based VPNs (Virtual Private
Networks) or IEEE 802.1Q VLANs (Virtual Local Area Networks), the partition can  Adaptive link optimization -- dynamic
be easily extended into the utility’s core network at the head end. adjustment of modulation type and FEC
based on RF environment
With application domain partitioning, each application’s communications can be
isolated, allowing inter-application access to be blocked or controlled so that Cost-Reduced Network Operations
access to a particular application does not provide access to devices of other  A single device to install, maintain, and
applications (and so that a compromise of a particular application’s devices does operate to realize dual capabilities
not compromise devices of other applications). Moreover, each application  Supported by
domain partition can use its own security mechanisms, and Quality of Service, as UnitySuite Network Element Mgmt System
enforced by rate shaping and traffic prioritization, can be applied per partition.
Holistic Security
 Application domain partitioning through
IPsec VPNs and 802.1Q VLANs
 No vulnerabilities at WAN/NAN interface

DP-1314
SecureMesh™ WAN Extender Bridge

Functionality SecureMesh WAN Radio Performance

 SecureMesh WAN relay node  SecureMesh WAN Network layer
 SecureMesh NAN collector and access point  SecureMesh WAN MAC layer (beam-switched
connectivity protocols
 10/100Base-T port to/from WAN client devices TDMA)
 RS-232 serial console port for maintenance  IEEE 802.11a PHY
WAN transport Layer 2 Ethernet frames modulation OFDM with adaptive modulation
WAN clock synch integrated GPS receiver up to 54 Mbps
data rates
(6 / 9 / 12 / 18 / 24 / 36 / 48 / 54 Mbps)
 synched via NTP over SecureMesh WAN
NAN clock synch  provides clock to all associated SecureMesh throughput Up to 20 Mbps per Gateway
NAN meters and devices 5.2500 to 5.850 GHz, including:
firmware over-the-air upgradable frequency  US: 5.250 – 5.350 GHz U-NII mid
network mgmt SNMP v2c bands  US: 5.470 – 5.725 GHz U-NII worldwide
 US: 5.725 – 5.850 GHz U-NII upper
by IEEE 802.1p, protocol type, IP port, IP
traffic channel width 20 MHz
DiffServ/ToS field, and/or IP address or MAC
prioritization
address or VLAN ID  24 dBm typical (at radio antenna port)
traffic filtering by protocol type, IP port, and/or IP address transmit power  configurable as needed for worldwide regulatory
compliance
traffic shaping upstream and downstream per-node rate control
receive  -93.0 dBm @ 6 Mbps  -83.0 dBm @ 24 Mbps
 certificate-based node-to-node authentication sensitivity  -90.5 dBm @ 9 Mbps  -81.0 dBm @ 36 Mbps
WAN security
 AES-128 encryption (3% FER;  -89.0 dBm @ 12 Mbps  -73.0 dBm @ 48 Mbps
ANSI C12.22 128-bit AES/EAX’ (combined at ant. port)  -87.0 dBm @ 18 Mbps  -71.0 dBm @ 54 Mbps
NAN security
authentication/encryption)  8 integrated antenna sectors, 360° coverage
VLAN IEEE 802.1Q tagging antennas  +18 dBi gain per antenna sector
 45 azimuth, 6 elevation per antenna sector
o o
 IPsec for WAN management traffic
VPN
 IPsec for NAN management and data traffic
SecureMesh NAN Radio Performance
Power, Physical, & Environmental  SecureMesh NAN Transport layer
 24 VDC Power-over-Ethernet  SecureMesh NAN Network layer
protocols
input voltage
 RJ45 connector  IEEE 802.15.4 MAC
 IEEE 802.15.4 PHY (2.4 GHz)
power  maximum 25 Watts
modulation DSSS – OQPSK
requires Trilliant p/n: 620-00705-01 or equivalent
surge protection weatherproof PoE-compatible 10/100Base-T CAT5 data rate 250 kbps (transmit/receive)
lightning protector (RJ-45 or unterminated) freq band 2.400 - 2.483 GHz (unlicensed operation)
 height: 37” / 94.0 cm (including NAN antenna) freq channels 14
dimensions
 base diameter: 12.4” / 31.5 cm channel width ~3 MHz
weight 14.5 lbs / 6.6 kg transmit power +30 dBm (at antenna port)
operating temp -40 °F / -40 °C to +158 °F / +70 °C receive
-97 dBm (@ 1% PER; at antenna port)
humidity 5 to 95% non-condensing sensitivity
installation mast, tower, utility pole, streetlight pole arm, rooftop  single external antenna (N-type female connector)
antenna
wind loading up to 150 mph / 242 km/h  +6 dBi omni antenna (included with unit)
sealing / locking tamper seal
enclosure NEMA Type 4X / IP66

Compliance
general  CE Mark
 FCC Part 15 Class A
unintentional
 Industry Canada ICES-003 Class A
emissions
 EN 301 289
 FCC Part 15 Subpart C (NAN); Subpart E (WAN)
 Industry Canada RSS-210
radio operation
 EN 301 489
certifications
 Various worldwide approvals
FCC AND  FCC: RV7-5G1100, IC:6028A-5G1100 (WAN:
Industry Canada 5.250-5.350 GHz; 5.470-5.850 GHz)
device IDs  TMB-EM0069 || 6028A-EM0069 (NAN: 2.4 GHz)
 UL 60950-1, UL 60950-22
safety  CSA C22.2 No. 60950-1, CSA C22.2 No. 60950-22
 EN 60950-1, EN 60950-22
environmental RoHS

® ® ®
Trilliant™, CellReader , CellGateway™, SecureMesh™, SerViewCom , UnitySuite™, SkyPilot , SyncMesh™, the Trilliant logo, and the
SkyPilot logo are trademarks of Trilliant Incorporated and/or its subsidiaries. All other trademarks are the property of their respective owners.
Trilliant Incorporated This material is provided for informational purposes only; Trilliant assumes no liability related to its use and expressly disclaims any implied
1100 Island Drive, Redwood City, CA 94065 USA warranties of merchantability or fitness for any particular purpose.
+1.650.204.5050 All specifications, descriptions, and information contained herein are subject to change without prior notice.
www.trilliantinc.com
Copyright © 2009 - 2013 Trilliant Incorporated. ALL RIGHTS RESERVED.