H3C MSR 5600 Router

With the large-scale application of cloud services, significant changes have taken place in the WAN to support these applications. Users have put forward new requirements for traditional routing equipment, which are mainly reflected in the following aspects:

Network performance requirements. On the basis of basic bandwidth, performance and reliability requirements, pay more attention to network indicators such as network delay and jitter to ensure the service experience in the cloud wide area network

Network security requirements. With the further development of wireless communication access technology, the form of network access terminals has developed from a single PC to a variety of intelligent terminals, PADs, scanners and other rich terminal access forms. BYOD (Bring your own devices) is becoming increasingly popular, the security boundary of the network has been broken, and customers have put forward higher requirements for the security of network equipment

Network management requirements. Customers need more simple and automated management methods to simplify the configuration, change, management and maintenance of network devices and hosted applications, and to automate the deployment and management of network devices, so as to improve efficiency and reduce management costs

Cloud support technology requirements. Network equipment should have rich supporting technologies of cloud network and cloud computing to meet the needs of cloud network applications and computing, such as technologies related to virtualization, open architecture platform, etc

Faced with such opportunities and challenges, H3C Company has developed MSR 5600 multi service router relying on more than ten years of in-depth understanding of enterprise network and operator network and solid technology accumulation. The MSR 5600 can not only be used as an export router for small and medium-sized enterprises, but also as a branch access router for governments or enterprises, and can also be used as a business gateway for enterprise networks such as VPN, NAT, IPSec. Together with other network equipment of H3C, it provides a comprehensive network solution for users in government affairs, power, finance, tax, railway, education and other industries and users of large and medium-sized enterprises.

MSR5600 router products include MSR 56-80, MSR 56-60 and MSR 5620 models.

Advanced technical support

• The mature H3C Comware network operating system is adopted to provide a more intelligent business scheduling management mechanism, support the loose coupling of business modules, and realize the dynamic loading of processes and patches

• Excellent high-performance multi-core CPU processor, adopting non blocking switching architecture, greatly improving multi service concurrent processing capability

• Support OAA open application architecture and open applications such as cloud business platform CVK, VMWARE, WAN, Lync cooperative office, and customer third-party services

• Dual master and modular system architecture, realizing the millisecond level switch of the main control board and the process level backup

• MSR56-60/56-80 supports redundant switching network boards

• Integrate the routing and switching matrix technology, separate the routing and switching planes, and achieve 10 gigabit transmission rate

• Multi service co processing engine, including data encryption engine and voice DSP processing engine

Strong security features

• Business security

• Message filtering function, supporting status filtering, MAC address filtering, IP and port number filtering, time slot filtering, etc

• Support real-time analysis of business flow, etc

• Network security

• Diversified VPN technologies, including IPsec, L2TP, GRE, ADVPN, MPLS VPN, and the superposition of multiple VPN technologies

• Support router protocol security protection, OSPF/RIP/IS-IS/BGP dynamic routing protocol authentication, OSPFv3/RIPng/IS-ISv6/BGP IPSec encryption, and rich routing policy control functions

• Terminal access security

• Integrated terminal access binding authentication, including EAD security check authentication, 802.1x authentication, terminal MAC address authentication, Web based Portal authentication, terminal access static binding, MAC automatic learning binding

• ARP attack prevention supports source MAC address fixation, ARP message attack prevention, address conflict detection and protection, ARP port speed limit, ARP detection, ARP source MAC address consistency check, ARP source suppression, ARP active confirmation mechanism, etc

• Equipment management safety

• Support role-based permission management, and enable role-based resource allocation, user role correspondence, and two-dimensional permission allocation

• Support control plane flow restriction, and support flow control and filtering based on protocol type, different queues, known protocol messages, specified protocol messages, etc

• Remote security management, support SNMPv3, support SSH, TR069 remote management, etc

• Management behavior control audit, support AAA server centralized verification, execution of command line authorization, real-time reporting of operation records, etc

• Encryption algorithm of the National Security Office

• Support the encryption algorithms of SM1, SM2, SM3 and SM4 proposed by the State Encryption Administration

Fine business control

• Through fine identification and fine control, it realizes speed limit, bandwidth guarantee, filtering and other functions for application layer services, and guides network optimization through fine statistics

• Support equivalent link load sharing (ECMP) and non equivalent link load sharing (UCMP). UCMP supports load sharing according to link bandwidth ratio;

• Service intelligent routing can make full use of network links in different scenarios through technologies such as asymmetric link load sharing, traffic intelligent load sharing, and multi topology dynamic routing. It supports multi link load sharing and service and application based load sharing

• Support elastic sharing of network bandwidth based on multiple modes, including service based elastic sharing, user and user group based elastic sharing, link based elastic bandwidth sharing, and user based bandwidth restriction

• Support SDN scheme, segment routing, BGP-LS and other WAN SDN related technologies

Intelligent network management

• Perfect network management mode, supporting command line, SNMP, TR069, etc

• It supports zero configuration deployment, and can realize batch device start under zero configuration mode. It can realize zero device start through wireless SMS, and automatically realize device configuration rollback in case of misconfiguration

• The built-in EAA function of Comware monitors the internal events and status of the system hardware and software components, collects the on-site information when problems occur, attempts to repair them automatically, and sends the on-site information to the designated email address

• Support the automatic startup of USB disk system, automatic import of USB disk configuration and USB Console interface

high reliability

• Support redundant master control, and the failover time is milliseconds

• Support the hot plug of main control, interface module, fan and power supply, and support dual CF card backup

• The physical separation of control plane and forwarding plane greatly improves the fault isolation capability and reliability of the system

• Independent hardware processing module monitoring system, programmable devices support online upgrade and automatic loading, and enhance product reliability

• Link millisecond level fast fault detection technology (BFD) can realize linkage with static routing, RIP/OSPF/BGP/ISIS dynamic routing, VRRP and interface backup

• Network service quality intelligent detection technology (NQA), which can achieve linkage with static routing, VRRP and interface backup

• Support redundant backup and load sharing of multiple devices (VRRP/VRRPE)

• Support fast rerouting, GR/NSR and other reliability technologies

Network virtualization

• In order to reduce the complexity of user networking and improve management efficiency, IRF2 (the second generation intelligent elastic architecture) technology is first supported on WAN devices, which virtualizes two physical devices into a logical device, greatly reducing the operation and maintenance costs of user networks, and improving the utilization of link bandwidth and equipment utilization.

• Support the cross device Ethernet link aggregation technology to realize the load sharing and mutual backup of multiple uplink, so as to improve the reliability of the entire network architecture and the utilization of link resources;

Inter cloud connectivity

• Support the scalable virtual local area network (VxLAN) technology to complete the two-layer interconnection requirements of the data center. The VxLAN solution has simple networking and low cost. Only one or more devices supporting the VxLAN function need to be deployed at the site edge, and the enterprise network and service provider network do not need to make any changes; At the same time, the VxLAN solution also provides a combined solution of data encryption IPsec technology to improve the security of data center data transmission on public networks Green

• Fully meet RoHS standards

• Advanced air duct isolation design, power supply and system air duct isolation design, unique double L-shaped air duct design, power supply air duct and system air duct two L-shaped air ducts improve space utilization

• Fan level redundant backup design, multi-level fan speed regulation scheme, the system will determine the fan speed required by the system according to the internal temperature of the product, which greatly reduces fan noise and energy consumption

Intelligent power saving management, flexibly define the power saving strategy of HMIM/main control board/forwarding board, and greatly reduce the energy consumption of equipment