H3C MSR1000 series router
With the maturity and large-scale application of new technologies such as SDN, cloud computing, and artificial intelligence, more and more enterprises recognize the necessity of digital transformation and have formulated clear digital transformation strategies and plans. At the same time, digital transformation has also put forward new requirements for enterprise wide area networks, which are mainly reflected in the following aspects:
SDN: The enterprise wide area network has AD-WAN capability, which enables visualization of wide area network link quality, business traffic, controllable and schedulable business traffic, providing a good user experience for enterprise business
• Higher network performance: With the development of enterprises, traffic models are becoming increasingly complex, and the demand for network services is becoming more integrated and diversified, requiring network devices to support higher forwarding performance
Network management: A simpler and more automated management approach is needed to simplify the management and maintenance of network devices, improve efficiency, and reduce management costs
Faced with these opportunities and challenges, H3C has launched a new generation of MSR1000 series multi service routers based on over a decade of in-depth understanding of enterprise and operator networks, as well as solid technical accumulation
• With rich access capabilities such as 4/5G, WiFi6, Ethernet, etc., one device can meet the networking requirements of branch sites
• Fully supports AD-WAN capabilities, including Netconf, Telemetry, Yang, GRPC, zero configuration, etc., combined with H3C SeerEngine WAN controller, providing excellent AD-WAN wide area network management and user experience
• Support H3C IMC management platform and cloud management platform, achieve centralized device management and monitoring, batch software upgrades, automatic configuration distribution, configuration rollback, fault alarms, etc., improve network operation and maintenance management efficiency, and reduce TCO costs
Rich VPN interconnection technologies, including IPsec, L2TP, ADVPN, etc., support national encryption algorithms, and provide secure VPN access in various application scenarios
• Support the recognition and control of over a thousand common applications on PC and mobile phones, and finely control network traffic; Support online log auditing to meet wireless non audited requirements
The MSR1000 series routers mainly include: MSR1104-G、MSR1004-G、MSR1004-G-5GCN、MSR1008、MSR1104S-W、MSR1104S-5G-CN、MSR1104S-W-5G-CN、MSR1004S-5G-CN、MSR1004S-5G。
Product Features
Advanced technological support
Adopting H3C's mature Comware network operating system, it provides a more intelligent business scheduling and management mechanism, supports loose coupling of business modules, and can dynamically load processes and patches
Excellent high-performance multi-core CPU processor, adopting non blocking switching architecture, greatly enhancing the concurrent processing capability of multiple businesses
Comprehensive SDN capabilities
Supports management and control protocols such as Telemetry and Netconf, which can be managed and controlled by H3C AD-WAN controllers and third-party controllers. Supports batch issuance of SRv6 Policy tunnels by SDN controllers
• Support segment routing, EVPN and other forwarding services, and can define multiple forwarding models to meet different business networking needs
• Supports zero configuration deployment of URLs, USB drives, and DHCP to meet batch, low-cost, and fast start requirements
• Support DPI application recognition capability, accurately identify network traffic, achieve network traffic visualization, customization, and flexible scheduling
• Supports SRv6 protocol and has EVPN L2VPN/L3VPN over SRv6 BE/Policy networking capability
Support wide area network optimization features such as TFO, LZ, DRE, etc., reduce transmission costs of network services, and improve application experience
Internet behavior management and auditing
Fine grained application recognition and control, supporting the recognition and control of over a thousand common applications on PC and mobile phones, such as IM applications, streaming media applications, stock and wealth management applications, gaming applications, and P2P applications, filtering and limiting the traffic of identified applications
• Support URL filtering, website blacklist and whitelist, and keyword fuzzy matching
• Internet behavior audit, which supports recording the log of end users' access to the Internet, including source IP address, time stamp, domain name visited, URI, etc., to meet the wireless unaudited requirements
Professional firewall functions: support packet filtering firewall, state firewall, domain based firewall and other security filtering functions
Powerful security features
• Support filtering based on message quintuples, ASPF status filtering, MAC address filtering, URL filtering, domain firewall based, IPS, etc
Diversified VPN technologies, including IPsec, L2TP, GRE, ADVPN, MPLS VPN, and the combination of multiple VPN technologies
Terminal access security: supports 802.1X/Portal authentication, EAD security check authentication, terminal MAC address authentication, etc
DDoS attack prevention: supports preventing SYN flooding, ACK flooding, RST flooding, UDP flooding and other attacks
• Device management security: Supports role-based permission management, enabling resource allocation and user role correspondence based on roles, and flexible and secure control of permissions
• Support control plane traffic restriction: Support traffic control and filtering based on known protocol types and custom protocol messages
Intelligent network management
• Supports multiple network management methods such as Telnet/SSH, SNMP, TR069, Netconf, etc
• Supports EAA (Embedded Automation Architecture) functionality, with TCL and Python script self programming capabilities, capable of monitoring internal events and states of system software and hardware components, and automatically executing pre-defined scripts when specific events occur
high reliability
• Link millisecond level fast fault detection technology (BFD), which can achieve linkage with static routing/RIP/OSPF/BGP/ISIS dynamic routing, VRRP, and interface backup
Network Service Quality Intelligent Detection Technology (NQA), which can achieve linkage with static routing, VRRP, and interface backup
• Support redundant backup and load sharing for multiple devices (VRRP/VRRPE)
• Support fast rerouting