H3C MSR 800 Router
With the large-scale application of cloud services, wide area networks have undergone significant changes to support these applications. Users have put forward new demands for traditional routing devices, which are mainly reflected in the following aspects:
• Network performance requirements. On the basis of basic bandwidth, performance, and reliability requirements, pay more attention to network latency, jitter, and other network indicators to ensure the experience of business in cloud wide area networks
• Network security requirements. With the further development of wireless communication access technology, the form of network access terminals has evolved from a single PC to diversified intelligent terminals PAD、 With the increasing popularity of various terminal access forms such as scanning guns and BYOD (Bring Your Own Devices), the boundaries of network security have been broken, and customers have put forward higher requirements for the security of network devices
Network management requirements. Customers need simpler and more automated management methods to simplify the configuration, changes, management, and maintenance of network devices and applications, and to automate the deployment and management of network devices to improve efficiency and reduce management costs
Faced with such opportunities and challenges, H3C Company has developed the MSR800 multi service router with more cost-effective advantages, relying on more than ten years of in-depth understanding of enterprise networks and operator networks, as well as solid technical accumulation. The MSR800 router is mainly suitable for application environments such as small and medium-sized enterprise office network exports, government county and township branches, and commercial chain business outlets. This series of products can also be connected to 3G/4G modems through USB interfaces to achieve high-speed and stable wireless communication, providing an integrated comprehensive solution for enterprise networks with minimal investment, fully meeting the diversified application needs of future business expansion, in line with the current situation and trends of enterprise IT construction, and also adapting to the growing needs of 3G/4G wireless communication and cloud network business development.
The MSR800 series routers mainly include: MSR800, MSR800-W, MSR800-10, and MSR800-10-W
Product Features
Superb business processing concurrency capability
Adopting advanced network communication processors in the industry, combined with H3C's advanced software and hardware technology, providing a wide range of concurrent business processing capabilities and network experiences
Firewall performance: 800Mbps
VPN encryption performance: 40Mbps
• Number of NAT sessions: 250000
Support wireless 3G/4G wireless communication function
Supports wireless communication by connecting 3G/4G modems via USB interface, including CDMA 2000, WCDMA, TD-SCDMA, TDD-LTE, and FDD-LTE
• Support the function of binding SIM/USIM cards to devices
• Support multi factor binding authentication function under VPDN, achieving binding authentication of username/password/SIM card number/device serial number or MAC address
• Support base station positioning function
• Support SMS opening and abnormal alarm
WLAN wireless access and management
• Supports 802.11n standard and is backward compatible with 802.11b/g
• Support the built-in wireless AC controller function in the software, providing solutions for WLAN wireless coverage and management
• Support rich WLAN encryption algorithms and secure authentication methods to ensure the security of wireless applications
Refined business control
Through refined identification and control, achieve functions such as speed limit, bandwidth guarantee, and filtering for application layer business, and guide network optimization through refined statistics
Business intelligent routing achieves full utilization of network links in different scenarios through technologies such as asymmetric link load sharing and traffic intelligent load sharing. It supports load sharing based on bandwidth ratio, user or user group, and business and application based load sharing
• Support elastic sharing of network bandwidth based on multiple methods, including business based elastic sharing, user or user group based elastic sharing, link based elastic sharing, and user based bandwidth limitation
Zero configuration deployment
• Can achieve batch device setup in zero configuration mode
• Zero configuration setup of devices can be achieved through wireless SMS
• Automatic rollback of device configuration in case of misconfigured
• Remote centralized management of devices behind dynamic addresses or NAT gateways
Embedded WiNet intelligent network management platform
• Support automatic discovery and presentation of device network topology
• Implement local user access authentication and network access control
• Support device and link fault alarms
Full Chinese WEB interface, friendly and intuitive, easy to operate and convenient
Rich business control capabilities and network security prevention measures
Diversified firewall functions: support packet filtering firewall, stateful firewall, etc
• Comprehensive built-in anti attack measures: supports various ARP anti attack, single packet attack, scan attack, and flood attack prevention measures, and supports traffic statistics to assist in attack prevention
• Supports URL filtering and black and white list functionality
• Complete user behavior tracking records
• Support endpoint admission defense (EAD) based on wide area network
• Refined business identification and control
Application recognition and control, supporting the recognition of multiple applications, including Citrix, DHCP, DNS, Exchange, FTP, SIP, HTTP, and nearly a hundred other protocols
Network traffic monitoring, statistics and reporting of network forwarding traffic
Complete VPN network construction capability
• Supports rich and comprehensive VPN technologies, including IPsec VPN, L2TP VPN, GRE VPN, ADVPN (Auto Discovery VPN), SSL VPN, and GDVPN (Group Domain VPN)
• Support VPN networking in various application scenarios:
IPSec over GRE supports running dynamic routing protocols and dynamically learning network topology between branches and headquarters, which not only solves the complexity problem of a large number of static routing configurations between branches and headquarters, but also ensures the security of business data between branches and headquarters
L2TP over IPSec establishes a secure layer 2 tunnel between clients and network devices, allowing remote office or business travelers to easily and securely access the internal network of the enterprise
GRE over IPSec supports branch networks to establish VPN tunnels with headquarters gateways using dynamic or private addresses. While ensuring the security of business data, it can also run dynamic routing protocols and dynamically learn network topology
IPSec tunnel mode supports running dynamic routing protocols and dynamically learning network topology directly through IPSec tunnels, improving the efficiency of network bandwidth utilization
ADVPN supports VPN interconnection between branches and between branches and headquarters. The VPN tunnel is centrally managed by the central device, and an authentication mechanism based on usernames and passwords is also added, making device configuration and maintenance more flexible and simple
GDVPN achieves centralized management of keys and security policies, ensuring security while improving network forwarding efficiency, enhancing network scalability, and simplifying management
SSL VPN supports multiple methods such as HTTP, TCP, and IP proxy, allowing clients to securely access internal network resources using a browser
high reliability
Link millisecond level fast fault detection technology (BFD) can achieve linkage with static routing, dynamic routing (RIP/OSPF/BGP/ISIS), VRRP, and interface backup
Network Service Quality Intelligent Detection Technology (NQA), which can achieve linkage with static routing, VRRP, and interface backup
• Support redundant backup and load sharing for multiple devices (VRRP/VRRPE)