Features
1. Advanced technical support
* Adopt H3C's mature Comware network operating system, provide a more intelligent business scheduling management mechanism, support loose coupling of business modularization, and enable dynamic loading of processes and patches
* Excellent high-performance multi-core CPU processor, which greatly improves the concurrent processing capability of multiple services
* Independently innovative intelligent link engine CUBE technology not only improves the bus bandwidth of the SIC card, but also automatically and flexibly allocate interface resources
2. Powerful security features
* Business security
* Message filtering function, support status filtering, MAC address filtering, IP and port number filtering, time period filtering, etc.
* Support real-time analysis of business traffic, etc.
* cyber security
* Diversified VPN technologies, including IPsec, L2TP, GRE, ADVPN, MPLS VPN, and the superimposed use of multiple VPN technologies
* Support router protocol security protection, support OSPF/RIP/IS-IS/BGP dynamic routing protocol authentication, support OSPFv3/RIPng/IS-ISv6/BGP IPSec encryption, support rich routing policy control functions
* Terminal access security
* Integrated terminal access binding authentication, including EAD security check authentication, 802.1x authentication, terminal MAC address authentication, WEB-based Portal authentication, terminal access static binding, MAC automatic learning binding
* ARP attack prevention, support source MAC address fixation, ARP message attack prevention, address conflict detection and protection, ARP port speed limit, ARP Detection, ARP source MAC address consistency check, ARP source suppression, ARP active confirmation mechanism, etc.
* Equipment management security
* Support role-based permission management, which can allocate resources based on roles, the correspondence between users and roles, and the two-dimensional permission distribution method
* Support control plane flow restriction, support flow control and filtering based on protocol types, different queues, known protocol messages, designated protocol messages, etc.
* Remote security management, support SNMPv3, support SSH, HTTPS remote management, etc.
* Management behavior control audit, support AAA server centralized verification, execution of command line authorization, real-time reporting of operation records, etc.
3. Refined business control
* Through refined identification and refined control, realize the speed limit, bandwidth guarantee, filtering and other functions of application layer services, and guide network optimization through refined statistics
* Support equal cost link load sharing (ECMP) and non-equivalent link load sharing (UCMP), UCMP supports load sharing based on the link bandwidth ratio;
* Intelligent business routing uses technologies such as asymmetric link load sharing, traffic intelligent load sharing, and multi-topology dynamic routing to make full use of network links in different scenarios, and supports load sharing based on bandwidth ratios, and load based on users and user groups. Sharing and load sharing based on services and applications
* Support flexible sharing of network bandwidth based on multiple methods, including business-based flexible sharing, user and user group-based flexible sharing, link-based flexible bandwidth sharing, and user-based bandwidth restriction
4. Intelligent network management
* Complete network management methods, support command line, SNMP, etc.
* Support zero configuration deployment, which can realize batch device deployment in zero configuration mode, realize zero deployment of devices through wireless SMS, and automatically implement device configuration rollback in case of misconfiguration
* Comware's built-in EAA function monitors the internal events and status of the system's hardware and software components, collects on-site information when a problem occurs, tries to automatically repair it, and can send the on-site information to the designated Email mailbox
* Support U disk system automatic startup, U disk configuration automatic import and USB Console interface
5. High reliability
* Independent hardware processing module monitoring system, programmable devices support online upgrade and automatic loading, enhancing product reliability
* Link millisecond-level fast fault detection technology (BFD), which can realize linkage with static routing, RIP/OSPF/BGP/ISIS dynamic routing, VRRP and interface backup
* Network service quality intelligent detection technology (NQA), which can realize linkage with static routing, VRRP and interface backup
* Support redundant backup and load sharing of multiple devices (VRRP/VRRPE)
* Support fast rerouting, GR/NSR and other reliability technologies
6. Network Virtualization
* In order to reduce the complexity of user networking and improve management efficiency, we are the first to support IRF2 (second-generation intelligent flexible architecture) technology on WAN devices, virtualizing two physical devices into one logical device, greatly reducing users The cost of network operation and maintenance improves link bandwidth utilization and equipment utilization.
* Support cross-device Ethernet link aggregation technology to realize load sharing and mutual backup of multiple uplinks, thereby improving the reliability of the entire network architecture and the utilization of link resources;
7. Cloud-to-cloud interconnection
* Support the scalable virtual local area network VxLAN technology to complete the data center layer two interconnection requirements. The VxLAN solution has simple networking and low cost. It only needs to deploy one or more devices that support the VxLAN function at the edge of the site, and there is no need to make any changes to the enterprise network and service provider network. At the same time, the VxLAN solution also provides data processing. A combined solution of encrypted IPsec technology to improve the security of data center data transmission on public networks
8. Green
* Fully meet RoHS standards
* Advanced air duct isolation design, power supply and system air duct isolation design, unique double L-shaped air duct design, power duct and system air duct two L-shaped air ducts improve the space utilization
* Fan-level redundant backup design, multi-level fan speed control scheme, the system will determine the fan speed required by the system according to the internal temperature of the product, which reduces fan noise and energy consumption to the greatest possible extent
Specifications
|
Attribute |
MSR3600-28-XS |
|---|---|
| Firewall performance | 1.5Gbps |
| Cryptographic performance | 400Mbps |
| NUMBER OF IPSEC VPN TUNNELS | 128 |
| NUMBER OF NAT SESSIONS | 250,000 |
| With machine capacity | 350-450 |
| Memory | 1G |
| FLASH | 256M |
| USB2.0 | 1, support 3/4G Modem extension |
| CON | 1 |
| WAN ETHERNET INTERFACE | 3GE (ELECTRICAL) + 2GE (OPTICAL) |
| LAN ETHERNET INTERFACE | 24GE |
| SIC SLOT | 4 |
| Maximum power consumption | 240 |
| Redundant power supplies | / |
| Power supply |
AC 100V a.c.～240V a.c.；50Hz/60Hz |
| RACK HEIGHT (U HEIGHT) | 1 RACK HEIGHT (1RU) |
| Dimensions (W×D×H, mm) | 440(W)×360(D)×44.2mm(H) |
| Ambient temperature | 0～45℃ |
| Ambient relative humidity | 5~95% (non-condensing) |
| EMC |
FCC Part 15 (CFR 47) CLASS A ICES-003 CLASS A VCCI-3 CLASS A VCCI-4 CLASS A CISPR 22 CLASS A EN 55022 CLASS A AS/NZS CISPR22 CLASS A CISPR 24 EN 55024 EN 61000-3-2 EN 61000-3-3 EN 61000-6-1 ETSI EN 300 386 EN 301 489-1 EN 301 489-17 |
| safe |
UL 60950-1 CAN/CSA C22.2 No 60950-1 IEC 60950-1 EN 60950-1/A11 AS/NZS 60950 EN 60825-1 EN 60825-2 FDA 21 CFR Subchapter J GB 4943 |