Intelligent H3C MSR5600 Series Multi Core SD WAN Router With Integrated Routing

MSR5600 router series is designed to meet the new challenges and requirements that wide deployment of cloud services brings to networking. The router has the following benefits:

• Uses the most up-to-date high-performance multi-core processor, together with H3C advanced software and hardware architecture, to provide superb concurrent service processing capabilities and unparalleled network performance.
• Integrates routing and switching in one device and provides multiple Gigabit Ethernet (GE) ports to simplify management and protect user investment.
• Uses industry-leading H3C intelligent flow control and granular service access control technologies to provide users excellent networking experience.
• Supports multiple startup options such as zero-configuration startup and USB drive startup to lower network deployment complexity and cost.
• Supports Branch Intelligent Management System (BiMS) that features batch software upgrade, automatic configuration issuing, configuration rollback, operation monitoring, and fault alarm.
• Has embedded intelligent network management platform for LAN device and user management.
• Supports abundant VPN interconnection technologies and data encryption to provide cloud network VPN access in various scenarios.

• The router runs H3C's state-of-the-art Comware network operating system, provides intelligent service scheduling management mechanism, and supports loose coupling of service modules and dynamic loading of processes and patches.
• The high-performance multicore processor with the non-blocking switching architecture enhances the concurrent service processing capability significantly.
• The OAA architecture supports open applications such as CVK, VMware, WAN optimization, Lync, and third-party services.
• Dual MPU system architecture allows millisecond MPU switchover and process-level backup.
• Integrated routing and switching fabric technology and separation of routing and switching planes help achieving 10 Gbps data transmission.
• Multiple protocol processing engines, such as data encryption engine.

• Packet filtering, including stateful filtering, MAC address filtering, IP and port number filtering, and time based filtering.
• Real-time traffic analysis.

• Comprehensive VPN technologies, including IPsec, L2TP, GRE, ADVPN, MPLS VPN, and combinations of multiple VPN technologies.
• Routing protocol security protection, such as OSPF/RIP/IS-IS/BGP authentication, OSPFv3/RIPng/IS-ISv6/BGP IPS encryption, and rich routing policy control functions.

• Integrated terminal access binding authentication, including EAD security check authentication, 802.1X authentication, endpoint MAC address authentication, Web-based portal authentication, endpoint access static binding, and MAC address auto-learning and binding.
• ARP attack protection, including source MAC address binding, ARP defense against IP packet attacks, address conflict detection and protection, ARP packet rate limit, ARP detection, ARP packet source MAC consistency check, ARP source suppression, ARP active acknowledgment.

• Role-based access control that allocates resources based on roles, and provides users and roles mapping.
• Control plane traffic control and filtering based on protocol type, queue, known protocol and specific protocol.
• Remote security management, such as SNMPv3, SSH, and HTTPS remote management.
• Behavior control and audit, including AAA server central authentication, command line authority and real-time report of operation records.

• Uses granular identification and control to rate limit and filter application layer services and ensure bandwidth and provides detailed network statistics for network optimization.
• Supports equal cost multiple path (ECMP) and unequal cost multiple path (UCMP) load balancing. UCMP allows the device to perform bandwidth-based load balancing.
• Performs load balancing based on bandwidth, user, user group, service, or application by using asymmetric link, traffic load balancing, and multi-topology dynamic routing technologies.
• Supports flexible bandwidth sharing based on service, user, user group, link, and user bandwidth.

• Supports 1+1 MPU redundancy.
• Supports hot swapping of interface modules and 1+1 CF card backup.
• Separation of the control place and forwarding plain maximizes the fault isolation capability and enhances system reliability.
• Independent hardware processing module for the monitoring system and programmable components that supports online upgrade and auto loading to strengthen product reliability.
• Supports bidirectional forwarding detection (BFD), which can detect faults in milliseconds and can collaborate with static routing, RIP/OSPF/BGP/ISIS dynamic routing, VRRP, and interface backup through the track module.
• Supports network quality analyzer (NQA), which can collaborate with static routing, VRRP, and interface backup through the track module.
• Supports multi-device redundancy and load balancing (VRRP/VRRPE).
• Supports fast reroute, and GR/NSR.

Multichassis link aggregation enables the device to perform load balancing and backup among multiple uplinks to increase reliability of the overall network architecture and enhance link resources efficiency.

• Fully compliant with the RoHS standard.
• Space efficient by using separate airflow aisles designed in unique L shape for the system and power modules.
• Minimizes fan tray noises and power consumption by fan tray redundancy, multi-level fan speed regulation, and fan speed adaption to the internal temperatures.
• Minimizes the system power consumption by intelligent power management and flexible HMIM/MPU/interface module energy saving policy.