Interface

1 configuration port（CON）

8 Gigabit electrical

1 configuration port（CON）

The host comes with 8 Gigabit Power+2 Gigabit Combo+2 Gigabit electric Bypass

1 configuration port（CON）

The host comes with 8 Gigabit Power+2 Gigabit Combo+2 Gigabit electric Bypass

1 configuration port（CON）

The host comes with 1 MGMT+8 Gigabit optical ports+15 Gigabit electrical port

1 configuration port（CON）

The host comes with 1 MGMT +8 Gigabit optical ports+15 Gigabit electrical ports+2 Gigabit optical port

1 Console interface, RJ45 or MicroUSB）

1 RJ45 management port

The host comes 2MGMT +14 Gigabit Ethernet electrical ports+8 Gigabit Ethernet Optical ports+8 Gigabit Ethernet Optical port

Expansion slot

N/A

N/A

N/A

2 out of F1020 an extension slots

Four

Storage medium

F1003-L does not support Hard Disk/F1005-L Support 1*500G HDD

1*500G HDD

1*500G HDD

1*（480G SSD/500G HDD/1T HDD）

Note: F1020 does not support 1T hard disk

2*（480G SSD/500G HDD/1T HDD）

2*480G SSD

4G LTE

4G FDD LTE/TDD LTE

4G FDD LTE/TDD LTE

Not supported

Ambient temperature

Working: 0 to 45℃

Non-operating: -40 to 70℃

Operating mode

Routing mode, transparent mode, mixed mode

AAA service

Portal authentication, RADIUS authentication, HWTACACS authentication, PKI /CA X. 509 format certificate,

Domain authentication, CHAP authentication, with PAP authentication

Firewall

SOP virtual firewall technology, support the CPU, memory, storage, and other hardware resources are divided into the fully virtualized

Safe zoning

Can the defense of Land, Smurf And Fraggle, Ping of Death, Tear Drop, IP Spoofing, IP fragmented packets, ARP spoofing, ARP active reverse lookup, TCP packet flags unlawful super large ICMP packet, address scan, port scan, SYN Flood, UPD Flood, ICMP Flood, DNS Flood, etc. a variety of malicious attacks

Basic and extended access control list

Based on the time period of Access Control List

Based on User, Application Access Control List

ASPF application-layer packet filtering

Static and dynamic blacklist function

IP and MAC binding function

MAC-based Access Control List

Support 802. 1q VLAN transparent transmission

Virus protection

Based on the characteristics of the virus were detected

Support the virus database manually and automatically upgrade

Message stream processing mode

Supports HTTP, FTP, SMTP, POP3 protocols

Support virus type: Trojan, Email-Worm, IM-Worm, P2P-Worm, Trojan And AdWare, Virus, etc.

Support the virus log and report

The depth of invasion defense

Support for hacker attacks, worms/viruses, Trojan horses, malicious code, spyware/adware, DoS/DDoS and other common attack defense

Supports buffer overflow, SQL injection, IDS/IPS evasion attack defense

To support the attack signature database classification according to the type of attack, the target system for classification, grading（division of high, medium, low, prompt fourth grade）

To support the attack signature database manually and automatically upgrade TFTP and HTTP

Support for BT and other P2P/IM the identification and control

E-mail/Web page/application layer filtering

Mail filtering

SMTP e-mail address filter

Title of e-mail filtering

Mail content filtering

Mail attachment filtering

Web filtering

HTTP URL filtering

HTTP content filtering

Application layer filtering

Java Blocking

ActiveX Blocking

SQL injection attack prevention

NAT

Support for multiple internal addresses are mapped to the same public address

Support for multiple internal address is mapped to multiple public addresses

Support internal address to public IP address mapping

Supported source and destination addresses at the same time conversion

Support external network host to access the Internal Server

Support the internal address is mapped directly to the interface to public IP address

Support DNS mapping function

Can be configured to support NAT of the effective time

Support multiple NAT ALG, including DNS, FTP, H. 323, ILS, MSN, NBT, PPTP, SIP, etc.

VPN

L2TP VPN, IPsec VPN, GRE VPN, SSL VPN

IPv6

IPv6-based stateful firewall and attack prevention

IPv6 Protocol: IPv6 forwarding, ICMPv6, the PMTU, the Ping6, and DNS6, the TraceRT6, the Telnet6, DHCPv6 Client, DHCPv6 Relay, etc.

IPv6 routing: RIPng, OSPFv3, and BGP4+, static routing, policy routing, PIM-SM, PIM-DM, etc.

IPv6 security: NAT-PT, IPv6 Tunnel, IPv6 Packet Filter, Radius, IPv6 Inter-domain policy, IPv6 connection limits, etc.

High reliability

Support SCF 2:1 virtualization

Supports dual-system state hot backup Active/Active and Active/Backup two kinds of work mode

Supports dual-configuration synchronization

Supports IPsec VPN IKE status synchronization

Support VRRP

Easy to maintain

Support command line-based configuration management

Support Web remote configuration management

Support H3C SSM Security Management Center device management

Supports standard network management SNMPv3, and is compatible with SNMP v1 and v2

Intelligent security policy

Environmental and certification

The support of the European strict RoHS environmental protection certification