H3C MSR830-10HI-GL Modular SDN OpenFlow SD-WAN Ready VxLAN Carrier Cloud Enterprise Router

H3C MSR830-10HI-GL router

The MSR830 router series can be deployed as an egress router for small- to medium-sized enterprise networks to operate with VPN, NAT, and IPSec service gateways. Together with other H3C products, the MSR830 can provide comprehensive network solutions for government, power, financial, tax, public security, railway, and education customers.

The MSR830 series has the following models: MSR830-6HI-GL, and MSR830-10HI-GL.

Advanced technologies

Uses H3C's leading Comware network operating system to provide intelligent service scheduling management mechanism, and supports loose coupling of different service modules as well as the dynamic loading of processes and patches.

Adopts an outstanding high-performance, multi-core CPU processor, which greatly enhances concurrent multi-service processing capabilities.

Powerful security features

Service security

• Packet filtering, including stateful filtering, MAC address filtering, IP and port number filtering, and time range filtering.
• Real-time traffic analysis.

Network security

• Rich and comprehensive VPN technologies, including IPSec, L2TP, GRE, MPLS VPN and mix usage of different VPN technologies.
• Routing security protection, including OSPF/RIP/IS-IS/BGP dynamic routing protocol, OSPFv3/RIPng/IS-ISv6/BGP IPSec encryption and rich routing policy control functions.

End device access security

• Unified endpoint access binding authentication, including EAD secure check authentication, 802.1X authentication, endpoint MAC address authentication, web-based portal authentication, endpoint access static binding, and MAC address auto-learning and binding.
• ARP attack prevention, including fixed source MAC address, ARP attack protection, ARP source suppression, ARP detection, source MAC consistency check and protection, ARP rate limit, and ARP active acknowledgement mechanism.

Equipment management security

• Role-based access control that allocates resources based on roles, and provides users and roles mapping.
• Control plane traffic restriction, traffic control and filtering based on protocol type, queue, known protocol and specific protocol.
• Remote security management, such as SNMPv3, SSH, and HTTPS remote management.
• Management behavior control and audit, including AAA server central authentication, command line authority and real-time report of operation records.

Granular control

Uses granular identification and control to rate limit and filter application layer services and ensure bandwidth and provides detailed network statistics for network optimization.

Supports equal cost multiple path (ECMP) and unequal cost multiple path (UCMP) load balancing. UCMP allows the device to perform bandwidth-based load balancing.

Performs load balancing based on bandwidth, user, user group, service, or application by using asymmetric link, traffic load balancing, and multi-topology dynamic routing technologies.

Supports flexible bandwidth sharing based on service, user, user group, link, and user bandwidth.

Intelligent network management

Comprehensive network management methods—Supports command line and SNMP.

Zero-configuration setup and configuration rollback—enables zero-configuration batch device startup, and automatic fallback in the event of configuration errors.

Comware embedded EAA function—Monitors the internal events and status of the system's software and hardware components. If a fault occurs, it collects diagnostic information and attempts to make automatic repairs as well as sending the diagnostic information to a specific email address.

Configuration from a USB drive—provides a USB console port and supports booting and automatic configuration loading from a USB drive.

High availability

Supports 1+1 MPU redundancy.

Supports hot swapping of interface modules and 1+1 CF card backup.

Separation of the control place and forwarding plain maximizes the fault isolation capability and enhances system reliability.

Independent hardware processing module for the monitoring system and programmable components that supports online upgrade and auto loading to strengthen product reliability.

Supports bidirectional forwarding detection (BFD), which can detect faults in milliseconds and can collaborate with static routing, RIP/OSPF/BGP/ISIS dynamic routing, VRRP, and interface backup through the track module.

Supports network quality analyzer (NQA), which can collaborate with static routing, VRRP, and interface backup through the track module.

Supports multi-device redundancy and load balancing (VRRP/VRRPE).

Supports fast reroute, and GR/NSR

Network virtualization

Intelligent Resilient Framework 2 (IRF2)—virtualizes two devices into one logical device. This technology significantly decreases networking complexity, reduces the operation and maintenance cost, enhances bandwidth and equipment utilization, and improves management efficiency.

Multichassis link aggregation—enables the device to perform load balancing and backup among multiple uplinks to increase reliability of the overall network architecture and enhance link resources efficiency.

Cloud interconnection

The device can use VXLAN to provide Layer 2 network connectivity between data centers. The VXLAN solutions are easy to deploy and cost efficient. You just need to deploy one or more VXLAN-capable devices on the site edge and no modifications for the enterprise or the service provider networks are required. The VXLAN solution combined with the IPSec solution can enhance the data transmission security between data centers over the public network.

Hardware Specifications

Software specifications