H3C MSR 830 Router
With the maturity and large-scale application of new technologies such as SDN, cloud computing, and artificial intelligence, more and more enterprises recognize the necessity of digital transformation and have formulated clear digital transformation strategies and plans. At the same time, digital transformation has also put forward new requirements for enterprise wide area networks, which are mainly reflected in the following aspects:
SDN: Enterprise wide area network has AD-WAN capability, achieving visualization of wide area network link quality, visualization of business traffic, controllable and schedulable business traffic, providing a good user experience for enterprise business
• Higher network performance: With the development of enterprises, traffic models are becoming increasingly complex, and the demand for network services is becoming more integrated and diversified, requiring network devices to support higher forwarding performance
Network management: A simpler and more automated management approach is needed to simplify the management and maintenance of network devices, improve efficiency, and reduce management costs
Faced with these opportunities and challenges, H3C has launched a new generation of MSR830 series multi service routers, relying on over a decade of in-depth understanding of enterprise and operator networks, as well as solid technical accumulation
Full support for AD-WAN capabilities, including Openflow, Telemetry, Segment Routing, Netconf, zero configuration, etc., in conjunction with H3C AD-WAN controllers, providing excellent AD-WAN wide area network management and user experience;
• Support H3C IMC management platform and Oasis Cloud management platform to achieve centralized device management and monitoring, batch software upgrades, automatic configuration distribution, configuration rollback, fault alarms, etc., improve network operation and maintenance management efficiency, and reduce TCO costs
Rich VPN interconnection technologies, including IPSec, L2TP, ADVPN, etc., support encryption algorithms from the National Cryptography Office, and provide secure VPN access in various application scenarios
• Support the recognition and control of over a thousand common applications on PC and mobile phones, and finely control network traffic; Support online log auditing to meet wireless non audited requirements
The MSR830 series routers mainly include the MSR830-10HI.
Product Features
Comprehensive SDN capabilities
Supports management and control protocols such as Telemetry and Netconf, which can be managed and controlled by H3C AD-WAN controllers and third-party controllers
• Supports segment routing, VxLAN, EVPN and other forwarding services, and can define multiple forwarding models to meet different business networking requirements
• Supports zero configuration deployment of URLs, USB drives, and DHCP to meet batch, low-cost, and fast start requirements
• Support DPI application recognition capability, accurately identify network traffic, achieve network traffic visualization, customization, and flexible scheduling
Internet behavior management and auditing
• Fine grained application recognition and control, supporting the recognition and control of over a thousand common PC and mobile applications, such as IM applications, streaming media applications, stock and wealth management applications, gaming applications, and P2P applications. The identified application traffic is filtered and limited
• Support URL filtering, website blacklist and whitelist, and keyword fuzzy matching
• Internet behavior audit, which supports recording the log of end users' access to the Internet, including source IP address, time stamp, domain name visited, URI, etc., to meet the wireless unaudited requirements
Professional firewall functions: support packet filtering firewall, state firewall, domain based firewall and other security filtering functions
Powerful security features
• Support filtering based on message quintuples, ASPF status filtering, MAC address filtering, URL filtering, domain firewall based, IPS, etc
Diversified VPN technologies, including IPsec, L2TP, GRE, ADVPN, MPLS VPN, and the combination of multiple VPN technologies
Terminal access security: supports 802.1X/Portal authentication, EAD security check authentication, terminal MAC address authentication, etc
DDoS attack prevention: supports preventing SYN flooding, ACK flooding, RST flooding, UDP flooding and other attacks
• Device management security: Supports role-based permission management, enabling resource allocation and user role correspondence based on roles, and flexible and secure control of permissions
• Support control plane traffic restriction: Support traffic control and filtering based on known protocol types and custom protocol messages
Intelligent network management
• Supports multiple network management methods such as Telnet/SSH, SNMP, TR069, Netconf, etc
• Supports EAA (Embedded Automation Architecture) functionality, with TCL and Phython script self programming capabilities, capable of monitoring internal events and states of system software and hardware components, and automatically executing pre-defined scripts when specific events occur