H3C MSR1000 router series

Full support for SDN

The router supports a full range of SDN features, including:

Flexible management—Supports management and control protocols such as OpenFlow, Telemetry, and NETCONF and allows management from H3C AD-WAN or third-party controllers.

Powerful forwarding capability—Supports advanced forwarding and routing technologies such as segment routing, VXLAN, and EVPN and allows customization of multiple forwarding models to adapt to different business requirements.

ZTP—Supports ZTP through URL, USB drive, and DHCP to enable fast, bulk, and low-cost deployment.

DPI—Provides precise traffic identification and enables traffic visibility, customization, and flexible orchestration.

SRv6—Supports EVPN L2VPN over SRv6 policy/BE and EVPN L3VPN over SRv6 policy/BE networking.

Online behavior management and audit

Granular application identification and control—Provides the capability to identify, filter, and rate limit over 1000 common PC and mobile phone applications such as IM applications, streaming media applications, stock and financing applications, game applications, and P2P applications.

URL filtering—Allows you to use a website allowlist and denylist that support fuzzy matching to ensure access to secure websites.

Online behavior audit—Logs detailed information, including source IP addresses, timestamps, destination domain names, and URLs, about users' internet access behaviors, to meet wireless non-economic audit requirements.

High security

The router employs the following advanced features to ensure high security:

Rich security rules—Supports filtering rules based on 5-tuple, ASPF state, MAC address and URL, domain-based firewall rules, and IPS rules.

Diversified VPN technologies—Supports IPsec, L2TP, GRE, ADVPN, MPLS VPN, and combination of multiple VPN technologies.

Endpoint access security—Provides strict access control for endpoints through 802.1X/portal authentication, endpoint admission defense (EAD) solution, and endpoint MAC address authentication.

DDoS attack protection—Guards against SYN, ACK, RST, and UDP flood attacks.

Secure device management—Provides flexible and secure control of permissions by managing permissions based on roles, assigning resources based on roles, and mapping users to roles.

Traffic control on the control plane—Allows customization of protocol messages for traffic control and filtering.

Robust firewall functionalities—Provides packet filtering firewall, stateful firewall, and security-zone based firewall functionalities.

5G/4G wireless communications

The router provides the following features to support 5G/4G wireless communications:

Built with high speed, stable 5G/4G interfaces to support TDD/FDD 4G LTE networks of all carriers.

SIM/USIM binding with devices.

GPS.

Device deployment, management, and maintenance through SMS.

Intelligent network management

The router supports multiple network management methods, including Telnet/SSH, SNMP, TR069, and NETCONF.

With EAA, the router allows you to define monitor policies with Tcl and Python scripts to monitor the internal events and status of the system's software and hardware components and execute the pre-defined actions in response to specific events automatically.

Hardware specifications

Software specifications

Deployment in an AD-WAN headquarters-branch network

In an AD-WAN headquarters-branch network, you can deploy MSR5600 routers as aggregation devices at headquarters or access devices at medium and large branches, MSR810/830/2600/3600 routers as access devices at branches, and MSR1000 routers as backup access devices at medium and large branches or access devices at small branches.

These routers, working in conjunction with H3C AD-WAN controllers, allow MSTP, Internet, and 5G core hybrid networking, enables unified device management, offers link quality and traffic visibility and intelligent traffic scheduling, and delivers good use experience with enterprise businesses.

AD-WAN headquarters-branch network

Deployment in a typical WAN

In a typical WAN, you can deploy MSR routers as follows:

Deploy MSR1000 routers as access devices at small branches or branches where wired connection can hardly reach.

Deploy MSR2600 or MSR3600 routers as access devices at common branches.

Deploy MSR5600 routers at tier-2 branches as aggregation devices or devices connecting to the upper layer.

With outstanding concurrent service processing capability and high availability solutions such as IRF, BFD, and link aggregation, MSR routers ensure stable and smooth services at branches. Support of remote secure access technologies such as ADVPN, IPSec VPN, and L2TP VPN in combination with robust encryption algorithms ensures security of sensitive businesses. This topology is widely used in finance, transport, and enterprise verticals.

Typical WAN network