RT-MSR610

The MSR600 series can be deployed as an egress router for small- to medium-sized enterprise networks to operate with VPN, NAT, and IPSec service gateways. Together with other H3C products, the MSR600 series can provide comprehensive network solutions for government, power, financial, tax, public security, railway, and education customers.

Datasheet Download

Advanced technologies

Uses H3C’s leading Comware network operating system to provide intelligent service scheduling management mechanism and supports loose coupling of different service modules as well as the dynamic loading of processes and patches.

Powerful security features

Service security

  • Packet filtering, including stateful filtering, MAC address filtering, IP and port number filtering, and time range filtering.
  • Real-time traffic analysis.

Network security

  • Rich and comprehensive VPN technologies, including IPSec, L2TP, GRE, MPLS VPN and mix usage of different VPN technologies.
  • Routing security protection, including OSPF/RIP/IS-IS/BGP dynamic routing protocol, OSPFv3/RIPng/IS-ISv6/BGP IPSec encryption and rich routing policy control functions.

End device access security

  • Unified endpoint access binding authentication, including EAD secure check authentication, 802.1X authentication, endpoint MAC address authentication, web-based portal authentication, endpoint access static binding, and MAC address auto-learning and binding.
  • ARP attack prevention, including fixed source MAC address, ARP attack protection, ARP source suppression, ARP detection, source MAC consistency check and protection, ARP rate limit, and ARP active acknowledgement mechanism.

Equipment management security

  • Role-based access control that allocates resources based on roles, and provides users and roles mapping.
  • Control plane traffic restriction, traffic control and filtering based on protocol type, queue, known protocol and specific protocol.
  • Remote security management, such as SNMPv3, SSH, and HTTPS remote management.
  • Management behavior control and audit, including AAA server central authentication, command line authority and real-time report of operation records.

Granular control

Uses granular identification and control to rate limit and filter application layer services and ensure bandwidth and provides detailed network statistics for network optimization.

Performs load balancing based on bandwidth, user, user group, service, or application by using asymmetric link, traffic load balancing, and multi-topology dynamic routing technologies.

Supports flexible bandwidth sharing based on service, user, user group, link, and user bandwidth.

Intelligent network management

Cloudnet APP management

Comprehensive network management methods—Supports command line and SNMP.

Zero-configuration setup—Enables zero configuration setup, USB-based and URL-based automatic configuration.

Comware embedded EAA function—Monitors the internal events and status of the system’s software and hardware components. If a fault occurs, it collects diagnostic information and attempts to make automatic repairs as well as sending the diagnostic information to a specific email address.

High availability

Independent hardware processing module for monitoring and programmable components that supports online upgrade and auto loading to strengthen product reliability.

Millisecond link fault detection technology Bidirectional Forwarding Detection (BFD) and Track between BFD and static routing, RIP/OSPF/BGP/ISIS dynamic routing, VRRP, or interface backup.

Network quality analyzer (NQA) and Track between NQA and static routing, VRRP, or interface backup.

Multi-device redundancy and load balancing (VRRP/VRRPE).

Hardware specifications

Item

MSR610

Forwarding Performance In Service (IMIX) 200 Mbps
CPU 800MHz
Memory 1 GB
Internal Flash 256 MB
External Flash NA
USB ports 1
Console ports 1
WAN ports 1 × GE copper port

1 × SFP port

LAN port 4 × GE ports (can be configured as WAN interfaces)
Max power consumption 24W
Power voltage(adapter) External power adapter: 100 VAC to 240 VAC @ 50 Hz/60 Hz
Power voltage(device) DC 12V 2A
Dimensions (W × D × H) 210 x 140 x 44 mm
Operating temperature 0°C to 40°C (32°F to 104°F)
Operating humidity 5% RH to 95% RH, non-condensing
EMC FCC Part 15 (CFR 47) CLASS A

ICES-003 CLASS A

VCCI-3 CLASS A

VCCI-4 CLASS A

CISPR 22 CLASS A

EN 55022 CLASS A

AS/NZS CISPR22 CLASS A

CISPR 24

EN 55024

EN 61000-3-2

EN 61000-3-3

EN 61000-6-1

ETSI EN 300 386

EN 301 489-1

EN 301 489-17

Safety UL 60950-1

CAN/CSA C22.2 No 60950-1

IEC 60950-1

EN 60950-1/A11

AS/NZS 60950

EN 60825-1

EN 60825-2

FDA 21 CFR Subchapter J

GB 4943

Software specifications

Item

Specification

Layer 2 switching Ethernet, Ethernet II, VLAN (port-based VLAN, guest VLAN), 802.3x, 802.1p, 802.1Q, 802.1X, STP (802.1D), RSTP (802.1w), MSTP (802.1s), PPP, PPPoE client, PPPoE server, and DDR
IP services Unicast/multicast, TCP, UDP, IP option, IP unnumbered, policy-based routing, NetStream, and sFlow
IP application Ping, Tracert, ICMP, DHCP server, DHCP relay, DHCP client, DNS client, DNS proxy, DDNS, NTP, and SNTP
IPv4 routing Static routing

Dynamic routing: RIPv1/v2, OSPFv2, BGP, IS-IS

Route iteration

Policy routing

Equal-cost multi-path routing (ECMP)

Multicast routing: IGMPv1/v2/v3, PIM-DM, PIM-SM, MBGP, MSDP

QoS LR, port-based mirroring, Port Trust Mode, and port priority

Committed access rate (CAR)

FIFO, WFQ, CBQ

Generic Traffic Shaping (GTS)

Traffic classification

Security PPPoE client & server, portal, 802.1X

Local authentication, RBAC, RADIUS, TACACS+

Basic Firewall Function, ASPF, ACL, filter, connection limit

IKE, IPsec

L2TP, NAT/NAPT, PKI, RSA, SSH v1.5/2.0, URPF, mGRE, GRE

ARP attack prevention

SSL VPN, GDVPN

AES, DES, 3DES, MD5, SHA1

High availability VRRP, VRRPv3

Bandwidth-based load balancing and backup

IP address-based load balancing and backup

NQA collaboration with routing, VRRP or interface backup

Management and maintenance Couldnet APP management

SNMP v1/v2c/v3, MIB, SYSLOG, RMON

BiMS remote management, booting from USB drive

CLI, file system, and dual image

DHCP, FTP, HTTP, ICMP, UDP public, UDP private, TCP public, TCP private, and SNMP

Console port login, Telnet (VTY) login, SSH login, and FTP login

Chain enterprises wireless marketing solution

For commercial chain enterprises, MSR610 routers are ideal wireless coverage products for their branches and outlets. One MSR610 router itself can provide network security, routing, and switching services for an outlet, simplifying network deployment and management. The IMC and service platforms deployed at the center perform centralized management for the branches and outlets, improving the network deployment and management efficiency.

One MSR610 itself deployed at the outlet can provide network security, wireless connection, routing, and switching services.

The MSR610 can store PHP dynamic webpages, pictures, flashes, videos, etc. and push the advertising and multimedia contents to the clients if they come online, which avoids occupying the network bandwidth.

The router supports online activity management and audit and performs granular traffic control.

Category: