CPU

X86 4-Core 2. 2GHz

X86 8-Core 2. 2GHz

Forwarding performance

9Mpps

15Mpps

Firewall performance

3Gbps

6Gbps

Interface

2GE Combo+6GE

2GE Combo+6GE

PoE

0-40 degrees: 90W

-20-55 degrees: 50W

0-40 degrees: 90W

-20-55 degrees: 50W

Slot

4*SIC

4*SIC

Memory

8GB

16GB

Built-in storage

4GB

64GB

The hard drive slot for 2.5 inch SATA HDD/SSD）

1

1

USB3.0

1

1

Console

1

1

Virtualization operating system

KVM virtualization, support for Windows, CentOS, Ubuntu, RedHat, etc.

KVM virtualization, support for Windows, CentOS, Ubuntu, RedHat, etc.

Maximum power consumption

54W

54W

Redundant power supply

Support

Support

Power supply

AC:100V a.c.～240V a.c.；50Hz/60Hz

AC:100V a.c.～240V a.c.；50Hz/60Hz

Rack height U height

1 rack height 1RU）

1 rack height 1RU）

Dimensions（W×D×H, mm

440×360×43.6

440×360×43.6

Ambient temperature

-30℃～55℃(Enterprise Drive)

Ambient relative humidity

5 to 95%,non-condensing with a hard-10%RH ~ 80%RH）

Storage temperature

-40～70℃

EMC

FCC Part 15 (CFR 47) CLASS A

ICES-003 CLASS A  

VCCI-3 CLASS A  

VCCI-4 CLASS A  

CISPR 22 CLASS A  

EN 55022 CLASS A  

AS/NZS CISPR22 CLASS A  

CISPR 24

En 55024

En 61000-3-2

En 61000-3-3

En 61000-6-1

ETSI EN 300 386

En 301 489-1

En 301 489-17

Security

UL 60950-1

CAN/CSA C22.2 No 60950-1

IEC 60950-1

En 60950-1/A11

AS/NZS 60950

EN 60825-1

EN 60825-2

FDA 21 CFR Subchapter J  

GB 4943 

Layer Protocol

Support  for Ethernet, Ethernet II, VLAN, 802.3 x, 802.1 p, 802.1 Q, 802.1 x,  STP(802.1 D), RSTP(802.1 w), MSTP(802.1 s), PPP, PPPoE Client, PPPoE  Server, HDLC, FR, DDR, Modem, ISDN, etc.

IP services

Support TCP, UDP, IP Option, IP Unnumber

Support policy-based routing, Netstream, sFlow, etc.

Support for ECMP

Support UCMP

IP Application

Supports Ping, Trace, ICMP, DHCP Server, DHCP Relay, DHCP Client, DHCP Snooping, DNS client, DNS Proxy, DDNS, UDP Helper, NTP, and SNTP

IPv4 Route

Static routing

Dynamic routing protocols: RIPv1/v2, OSPFv2, BGP, IS-IS

Route iteration

Routing policy

Multicast routing protocols: IGMPV1/V2/V3, PIM-DM, PIM-SM, MBGP AND MSDP

IPv6

Support IPv6 ND, IPv6 PMTU, IPv6 FIB, IPv6 ACL, NAT-PT, IPv6 tunnel, 6PE, DS-LITE

IPv6 tunneling manual tunnel, automatic tunnel, GRE tunnel, 6to4, ISATAP

Static routing

Dynamic routing protocols: RIPng, OSPFv3, IS-ISv6, and BGP4+

IPv6 multicast Protocol: MLD V1/V2, PIM-DM, PIM-SM

QoS

Support LR, Port-Based Mirroring, the Port Trust Mode, Port Priority, etc.

CAR Support（Committed Access Rate）

Supports FIFO, WFQ, CBQ, etc.

Support GTS（Generic Traffic Shaping）

Supports traffic classification

Wireless controller（AC）

AP management: AP access, the AP configuration parameters issued, AP version upgrade, the AP reboot, the AP display

WLAN access, WLAN user security, WLAN user access authentication, WLAN roaming, etc.;

Voice

Support FXS/FXO/E&M/VE1/VT1, supports R2, DSS1, Q. sig, Digital E&M, etc.

The support G. 711, G. 723, G. 726, G. G. 729AB and G., AMR-NB, GSM-FR, iLBC, RT-Audio, etc.

Support  rich voice service, voice, backup, DTMF transmission support RFC2833,  smart dial-up router, FXS and FXO 1:1 binding, power outages, escape,  SIP Sever local survival, IVR, etc.

3/4G

Support extended 3/4G access, support TDD/FDD LTE, TD-SCDMA, CDMA2000/EVDO, WCDMA/HSPA+ network

Security features

PORTAL, 802.1 x

Local authentication, RBAC, Radius, Tacacs+

ASPF, ACL, FILTER, domain-based firewall, connection limits, IPS

The IKE/IPSec VPN, ADVPN, the GDVPN, L2TP VPN, GRE VPN

NAT/NAPT, PKI, RSA, URPF

Support DDoS attack defense, ARP attack prevention, and URL filtering

Support EAD endpoint admission defense

Support DPI deep packet identification, the traffic rate-limiting and filtering

State Key SM1/2/3/4 algorithm

MPLS

LDP、Static LSP

L3VPN: cross-domain MPLS VPN（Option1/2/3, the nested MPLS VPN, layer PE（HoPE）, CE dual-home, MCE, multi-role host, etc.

L2VPN: the Martini And Kompella, CCC and SVC way

MPLS TE AND RSVP TE

Reliability

Support IRF2

Support VRRP, VRRPv3

Support based on a multi-link load-sharing and backup

Support  NQA routing, VRRP and the interface backup of the linkage function, to  achieve end-to-end Link Detection and backup function

Support BFD fast-link-detection of a master switchover

Support GR/NSR

Management and maintenance

Support SNMP V1/V2c/V3, TR069, SYSLOG, RMON

Support Telnet, SSHv1. 5/2. 0, FTP

Support EAA embedded automation architecture

Supports command line management, file system management, Dual Image

NQA support DHCP, FTP,HTTP,ICMP,UDP public, UDP, private, TCP public, TCP, private, SNMP and other protocols test

Virtualization

Integrated  high-reliability, High-Performance Open virtualization platform that  supports third-party standard operating system, such as: Windows,  CentOS, Ubuntu, RedHat, etc.;

Supports  a complete virtual machine lifecycle management, support for virtual  machines to create, modify, start, pause, resume, hibernate, restart,  shut down, power down; and

Support  for virtual performance condition monitoring, provide virtual machine  CPU, memory, disk I/O, Network I/0 key resources such as comprehensive  performance monitoring;

Support  for high-performance virtualized NICs that support SR-IOV physical NIC  of the Virtual into a plurality of pass-through to the virtual machine  using the

Application  support Rapid Deployment, Support U disk to automatically deploy the  application to a virtual machine that supports the application of a  unified whole network deployment

Support  the improvement of fault detection and recovery mechanisms, support for  automatic scheduled backups and manual intervention of an immediate  backup, the virtual machine status real-time monitoring, and virtual  machine exception automatic restart

Industrial Protocol identification and treatment

Supports Modbus RTU, Modbus TCP Protocol

Support EtherNet/IP, CIP Protocol

Supports OPC UA Protocol-containing OPC DA, OPC HDA, OPC AE functionality

Support the DNP3 Protocol

Support the MQTT Protocol

Industrial security software

Industrial  control Protocol instruction-level detection and auditing. Support 15  kinds of industrial environment Protocol, Modbus TCP, OPC, DNP3, MQTT  and other communication packets depth analysis, it can detect the data  packet payload characteristics, load, and can be used to match  information.

Whitelist  mode quick audit of the flow. The system uses a whitelist approach as  assets whitelist, protocols white list, port whitelist, function code  white list, only the attention of the assets and the flow rate audit.

Network  attacks and illegal operations audit. A comprehensive record of the  industrial control network of the important operational behavior,  network communication session, industrial control cyber attacks and  abnormal alarm, easy Security Incident Investigation and evidence  collection.

Machine  self-learning. The system supports a learning mode, alarm mode, by  learning the traffic to establish the normal business model, for failure  to comply with IPC communication baseline exception, the instruction  operation, the new device IP, abnormal connection behavior, abnormal  communication port address for alarm.  

Malicious  code check. Industrial control information of the devices for  known/unknown malicious file attacks, and all kinds of Trojans, worms,  spyware, WEB and other malicious code check.