Brand new hardware architecture design
* Adopt brand-new hardware architecture, built-in professional dual-core 64-bit network processor, single-core frequency up to 1GHz, with full Gigabit line-speed forwarding capability;
* Powerful business concurrent processing capabilities, with a capacity of up to 50-100 units;
* Support 2 Gigabit WAN ports, 3 Gigabit LAN ports, and support USB interface at the same time.
Convenient VPN networking capabilities
* Support IPSec VPN, realize end-to-end secure VPN connection through simple WEB configuration, support multiple encryption algorithms, is an ideal access device for branch nodes;
* Support L2TP VPN. Support LNS at the same time（Server mode）, LAC（Client mode）, Making the headquarters + branch network more convenient and safer.
Comprehensive behavior management and safety strategy
* Support brand new user online behavior management module, support group policy configuration, easily formulate enterprise user access rights and policies;
* Support website filtering, communication/financial software application control, such as QQ/Dazhihui/Analyst/Flush/Guangfa Xeon/China Everbright Securities/Guoyuan Securities and other financial software application control functions;
* It can identify and discard illegal ARP packets in real time, which can effectively avoid ARP attacks caused by PC poisoning in the local area network and correct the wrong gateway ARP of the PC in time.
Intelligent QoS strategy
* Through the IP-based network traffic rate limit mechanism and NAT table entry limit mechanism, it can effectively control the excessive occupation of network bandwidth by P2P software such as BT/Xunlei.
* Supports QoS policy configuration for IP network segment/IP range in a specific time period in a shared and exclusive manner to meet the flexible business configuration requirements of users.
Featured commercial marketing platform
* Provide two online marketing authentication methods: authentication-free and WeChat authentication;
* Support visitor surfing behavior analysis, set user black and white list;
* It supports remote viewing of device information, modification of device SSID, precise current limiting of broadband traffic, and remote one-key upgrade of the device.
Built-in AC function, Mini AP unified management
* Routing & AC are combined into one, supporting unified management, configuration and upgrade of H3C Mini series AP;
* Support the detailed configuration of SSID, encryption, power, channel, etc. of Mini series AP;
* Supports automatic discovery and status management of Mini series APs, and can manage 50 APs at the same time.
Energy saving and environmental protection design
* Adopting professional green and low-carbon industrial design, the products meet the EU RoHS standards for environmental protection and safety of materials.
Attributes | ER2200G2 |
Dimensions（H×W×D）mm | 330mm×230mm×44mm |
Fixed port | WAN port: 2 10/100/1000Base-T Ethernet ports LAN port: 3 10/100/1000Base-T Ethernet ports 1 USB port |
processor（CPU） | Professional network processor single core 775MHz |
RAM | DDRIII 256M |
power supply | 100~240V |
fan | No fan, natural heat dissipation |
Working temperature/Storage temperature | 0ºC～40ºC/-40ºC～70ºC |
Working humidity/Storage humidity | 5%~95%（Non-condensing） |
Whole machine power consumption | <20W |
Certification | Telecom network access certificate, 3C certification |
MTBF | >50000H |
Software specifications
Attributes | ER2200G2 |
Network protocol | PPP CHAP PAP MS-CHAP PPPoE DHCP client DHCP server NAPT NTP DDNS（ www.pubyun.com / www.dns0755.net ） |
Firewall | Outbound communication strategy（Source IP/Destination IP/Protocol/Port/Time period） Inbound communication strategy（Source IP/Destination IP/Protocol/Port/Time period） |
VLAN | Support 64 VLANs |
IPSec VPN | Support 50 IPSec connections Support AH, ESP protocol Support manual or automatic establishment of SA through IKE ESP supports multiple encryption algorithms of DES, 3DES, AES Support MD5 and SHA-1 authentication algorithms Support IKE main mode and aggressive mode Support NAT-T traversal Support to configure IPSec connection via domain name（DDNS） |
L2TP VPN | Support LAC Support LNS |
Multi-WAN features | Support up to 5 WAN ports |
cyber security | Static ARP (IP<-> MAC address binding) DHCP authorized ARP (automatically bind the IP assigned by DHCP) ARP anti-attack/free ARP Stateful packet inspection Prevent Ping of WAN port Prevent TCP syn scan Prevent Stealth FIN scanning Prevent TCP Xmas Tree scanning Prevent TCP Null Scan Prevent UDP scanning function Land attack prevention function Prevent Smurf attack function Prevent WinNuke attack function Prevent Ping of Death attacks Prevent SYN Flood attack function Prevent UDP Flood attack function Prevent ICMP Flood attack function Prevent IP Spoofing function Prevent fragmented packet attacks Prevent TearDrop attacks Prevent Fraggle attack function |
User online behavior management | Group Policy Management（Support group policy configuration based on IP/MAC/time period） HTTP download file type filtering URL filtering（Black and white list） MAC address filtering QQ access control Financial software control Big Wisdom/Analyst/Flush/Guangfa Xeon/China Everbright Securities/Guoyuan Securities |
QoS | Historical traffic statistics Traffic statistics (based on IP/port traffic statistics) Smart elastic bandwidth Green channel management/restricted channel management Network traffic rate limit (based on IP, upstream and downstream traffic are limited separately) NAT entry limit |
data monitoring | Traffic statistics based on physical ports IP-based traffic statistics, support automatic sorting function Statistics of IP-based NAT links |
system service | ALG Port trigger UPnP virtual server DMZ host VPN transparent transmission（PPTP, L2TP, IPSec） DNS Server（20 Article） |
Configuration management | Web-based user management interface（Remote management/local management） HTTPS remote management Command line CLI Upgrade system software via HTTP |
routing | Static routing（50 bars） Policy routing（100 pieces） |
Troubleshooting | Ping / Traceroute Equipment self-check One-click export of fault information |