H3C | ER3108GW enterprise-class eight Gigabit wireless wifi router |

H3C | ER3108GW enterprise-class eight Gigabit wireless wifi router |

Product description:

Product parameters:

  • Brand: H3C
  • H3C model: SMB-ER3108GW
  • Color classification: dark gray
  • Wireless: Wireless
  • Wireless transmission speed: 300Mbps
  • Cable transmission rate: 10/100 / 1000Mbps
  • Wireless transmission rate: 300Mbps
  • Network standards: 802.11b 802.11g 802.11a 802.11n
  • Wireless network support frequency: 2.4G
  • Applicable to: Broadband VPN Router Enterprise Router Broadband Router
  • USB interface quantity: 1 个
  • Whether to support VPN: support
  • Yes No Built-in firewall: Yes
  • WDS support: Not supported
  • WPS: Not supported
  • Removable: Removable
  • After-sales service: Genius
  • Condition: New
  • Packing volume: 415mm × 335mm × 90mm
  • Gross weight: 2.34kg

The new hardware architecture, Gigabit wire-speed forwarding capability

Using a new hardware architecture, professional network processor, its frequency up to 1.5G, can provide Gigabit wire-speed forwarding capability.

Support a Gigabit WAN port, 8 Gigabit LAN port, also supports through the USB interface.

Built-in high reliability power supply, support 100 ~ 240V voltage input, can eliminate the impact of power grid instability.

300M high-speed wireless access, convenient and safe 'guest mode'

Support 802.11b / g / n wireless technology, the use of 2X2 MIMO architecture, providing up to 300Mbps wireless speed, faster speed, more user access capabilities.

Detachable dual antenna, up to 5dbi gain omnidirectional antenna, a wide signal coverage, penetrating ability, environmental adaptability.

Supports up to four virtual APs, enabling different policy controls for different virtual APs to meet flexible wireless access requirements

Convenient and secure 'guest mode' that isolates wireless users and office networks operating under 'guest mode' virtual APs, such as the company's ability to turn on 'guest mode' virtual APs for partners and vendors, providing them with Limited network access and external network access capabilities, but also to protect the enterprise network information security.

Support WDS wireless relay function, can be achieved between multiple devices to establish a wireless connection, expand the wireless coverage.

IPSec VPN, branch node access

The ER3108GW supports standard IPSec VPN. Users can achieve secure VPN connection between end-to-end and simple configuration through WEB, and support multiple encryption algorithms. It is an ideal branch node access device.

The ER3108GW optimizes the configuration steps for IPSec VPNs. With a straightforward configuration wizard, you can easily configure IPSec VPN connections without professional knowledge of the network.

The combination of H3C's networking features with the domestic users also supports the NAT traversal function of the IPSec VPN connection and NAT-T through the domain name on the ER3108GW. The IPSec VPN link can be established even if neither side has a fixed IP address.

L2TP VPN supports dial-up access

ER3108GW support L2TP dial-up access, to facilitate business travel employees to access the company's internal server

Multi-Local Area Network (VLAN)

ER3108GW supports multi-LAN function, enterprises can easily divide LAN into multiple network segments, reduce the impact of broadcast domain and ARP virus, and configure corresponding firewall policies for different VLANs.

For each LAN can be configured to separate DHCP Server and firewall rules, ER3108GW can support up to 16 internal LAN.

User online behavior management

ER3108GW supports a new user behavior management module to support the Group Policy configuration, the module can be easily developed enterprise users access and strategy.

ER3108GW supports black and white list of website address settings, while supporting a variety of instant messaging software and financial software application control, such as QQ / MSN / great wisdom / Analyst / Flush / GF Xeon / Everbright Securities / State Securities and other financial software Of the application control function.In addition, the user can set the privileged user group to ensure that the key user's use is not affected.

ARP virus double protection

ER3108GW uses IP <-> MAC address binding function to fix the ARP list of the gateway, which can effectively prevent the internal network communication interruption caused by ARP spoofing.

The ER3108GW can identify and discard illegal ARP packets in real time. The ER3108GW can support the millisecond gratuitous ARP timed sending mechanism to prevent ARP attacks caused by LAN PC poisoning and to correct the ARP errors of the PC in time.

Intelligent QoS policy

BT, Thunder and other P2P software on the excessive use of network bandwidth will affect the normal operation of other users within the network, ER3108G through IP-based network traffic rate limiting mechanisms and NAT table entry mechanism can effectively control a single PC on / Downstream traffic and the number of established NAT entries, limiting the P2P software on the network bandwidth over the occupation.

The ER3108GW supports QoS policy configuration based on the IP network segment / IP range in a shared and exclusive manner according to the specific time range to meet the user's flexible service configuration requirements.

Green design

ER3108GW uses a professional green low-carbon design, and products meet the environmental and safety of materials EU RoHS standards.

Hardware specifications




Dimensions (H × W × D) mm

330 mm × 230 mm × 4 mm

Fixed port

1 10/100 / 1000M WAN port

Eight 10/100 / 1000M LAN ports

1 USB interface

1 Console port

Wireless Rate





2 external removable 5dbi high gain omnidirectional antenna, 2X2 MIMO architecture

The processor (CPU)

Professional network processor clocked at 1.5GHz

power supply


Power consumption



No fan, natural cooling

Operating temperature / storage temperature

0oC ~ 40oC / -40oC ~ 70oC

Operating Humidity / Storage Humidity

5% to 95% (non-condensing)

Total power consumption



CCC certification



Software specifications




Operating mode

Master / backup mode (WAN main line, 3G backup line)

Network protocol






DHCP client

DHCP server






300Mbps wireless speed, 2X2 MIMO architecture

Multiple virtual APs

Convenient and secure guest mode

Wds bridging and trunking modes

Wireless MAC filtering


Outbound communication policy (source IP / destination IP / protocol / port / time period)

Inbound traffic policy (source IP / destination IP / protocol / port / time period)


Supports 10 IPSec connections

Support AH, ESP agreement

The SAs can be set up manually or through IKE

ESP supports DES, 3DES and AES encryption algorithms

Supports MD5 and SHA-1 authentication algorithms

Support IKE main mode and brutal mode

Support for NAT-T traversal

Support the configuration of the domain name through the IPSec connection (DDNS)


L2TP Server

L2TP Client

cyber security

Static ARP (IP <-> MAC address binding)

DHCP Authorization ARP (automatically bound DHCP assigned IP)

ARP anti-attack / gratuitous ARP

State packet inspection

To prevent WAN port Ping

Prevents TCP syn scanning

Prevent Stealth FIN scanning

Prevents TCP Xmas Tree scanning

Prevents TCP Null scanning

Prevents UDP scanning

Prevent Land attack

Smurf attack prevention function

Prevent WinNuke attack function

To prevent Ping of Death attacks

The SYN Flood attack function is disabled

The UDP Flood attack function is disabled

Prevent ICMP Flood attack

Prevents IP spoofing

Prevents fragmentation packet attacks

Prevents TearDrop attacks

Prevents the Fraggle attack

User online behavior management

Group Policy Management (support for IP / MAC / time-based group policy configuration)

HTTP download file type filtering

URL filtering (black and white list)

MAC address filtering

QQ / MSN access control

Financial Software Control

Big wisdom / analyst / flush / GF Xeon / Everbright Securities / State Securities


Historical traffic statistics

Traffic statistics (based on IP / port traffic statistics)

Smart Elastic Bandwidth

Green Channel Management / Restricted Channel Management

Network traffic rate limit (based on IP, respectively, the upstream and downstream traffic speed limit)

Restrictions on NAT entries

data monitoring

Traffic statistics based on physical ports

IP-based traffic statistics, support for automatic sorting

Statistics of IP - based NAT Links

system service


Port Trigger


virtual server

DMZ host

VPN transparent transmission (PPTP, L2TP, IPSec)

Configuration management

Web-based user management interface (remote management / local management)

HTTPS Remote Management

Command line CLI

SNMP V1 / V2C / V3

Upgrade the system software via HTTP


Static routes


Ping / Traceroute

Equipment self-test

Fault information a key export