- Brand: H3C
- H3C model: SMB-ER3108GW
- Color classification: dark gray
- Wireless: Wireless
- Wireless transmission speed: 300Mbps
- Cable transmission rate: 10/100 / 1000Mbps
- Wireless transmission rate: 300Mbps
- Network standards: 802.11b 802.11g 802.11a 802.11n
- Wireless network support frequency: 2.4G
- Applicable to: Broadband VPN Router Enterprise Router Broadband Router
- USB interface quantity: 1 个
- Whether to support VPN: support
- Yes No Built-in firewall: Yes
- WDS support: Not supported
- WPS: Not supported
- Removable: Removable
- After-sales service: Genius
- Condition: New
- Packing volume: 415mm × 335mm × 90mm
- Gross weight: 2.34kg
The new hardware architecture, Gigabit wire-speed forwarding capability
Using a new hardware architecture, professional network processor, its frequency up to 1.5G, can provide Gigabit wire-speed forwarding capability.
Support a Gigabit WAN port, 8 Gigabit LAN port, also supports through the USB interface.
Built-in high reliability power supply, support 100 ~ 240V voltage input, can eliminate the impact of power grid instability.
300M high-speed wireless access, convenient and safe 'guest mode'
Support 802.11b / g / n wireless technology, the use of 2X2 MIMO architecture, providing up to 300Mbps wireless speed, faster speed, more user access capabilities.
Detachable dual antenna, up to 5dbi gain omnidirectional antenna, a wide signal coverage, penetrating ability, environmental adaptability.
Supports up to four virtual APs, enabling different policy controls for different virtual APs to meet flexible wireless access requirements
Convenient and secure 'guest mode' that isolates wireless users and office networks operating under 'guest mode' virtual APs, such as the company's ability to turn on 'guest mode' virtual APs for partners and vendors, providing them with Limited network access and external network access capabilities, but also to protect the enterprise network information security.
Support WDS wireless relay function, can be achieved between multiple devices to establish a wireless connection, expand the wireless coverage.
IPSec VPN, branch node access
The ER3108GW supports standard IPSec VPN. Users can achieve secure VPN connection between end-to-end and simple configuration through WEB, and support multiple encryption algorithms. It is an ideal branch node access device.
The ER3108GW optimizes the configuration steps for IPSec VPNs. With a straightforward configuration wizard, you can easily configure IPSec VPN connections without professional knowledge of the network.
The combination of H3C's networking features with the domestic users also supports the NAT traversal function of the IPSec VPN connection and NAT-T through the domain name on the ER3108GW. The IPSec VPN link can be established even if neither side has a fixed IP address.
L2TP VPN supports dial-up access
ER3108GW support L2TP dial-up access, to facilitate business travel employees to access the company's internal server
Multi-Local Area Network (VLAN)
ER3108GW supports multi-LAN function, enterprises can easily divide LAN into multiple network segments, reduce the impact of broadcast domain and ARP virus, and configure corresponding firewall policies for different VLANs.
For each LAN can be configured to separate DHCP Server and firewall rules, ER3108GW can support up to 16 internal LAN.
User online behavior management
ER3108GW supports a new user behavior management module to support the Group Policy configuration, the module can be easily developed enterprise users access and strategy.
ER3108GW supports black and white list of website address settings, while supporting a variety of instant messaging software and financial software application control, such as QQ / MSN / great wisdom / Analyst / Flush / GF Xeon / Everbright Securities / State Securities and other financial software Of the application control function.In addition, the user can set the privileged user group to ensure that the key user's use is not affected.
ARP virus double protection
ER3108GW uses IP <-> MAC address binding function to fix the ARP list of the gateway, which can effectively prevent the internal network communication interruption caused by ARP spoofing.
The ER3108GW can identify and discard illegal ARP packets in real time. The ER3108GW can support the millisecond gratuitous ARP timed sending mechanism to prevent ARP attacks caused by LAN PC poisoning and to correct the ARP errors of the PC in time.
Intelligent QoS policy
BT, Thunder and other P2P software on the excessive use of network bandwidth will affect the normal operation of other users within the network, ER3108G through IP-based network traffic rate limiting mechanisms and NAT table entry mechanism can effectively control a single PC on / Downstream traffic and the number of established NAT entries, limiting the P2P software on the network bandwidth over the occupation.
The ER3108GW supports QoS policy configuration based on the IP network segment / IP range in a shared and exclusive manner according to the specific time range to meet the user's flexible service configuration requirements.
ER3108GW uses a professional green low-carbon design, and products meet the environmental and safety of materials EU RoHS standards.
Dimensions (H × W × D) mm
330 mm × 230 mm × 4 mm
1 10/100 / 1000M WAN port
Eight 10/100 / 1000M LAN ports
1 USB interface
1 Console port
2 external removable 5dbi high gain omnidirectional antenna, 2X2 MIMO architecture
The processor (CPU)
Professional network processor clocked at 1.5GHz
No fan, natural cooling
Operating temperature / storage temperature
0oC ~ 40oC / -40oC ~ 70oC
Operating Humidity / Storage Humidity
5% to 95% (non-condensing)
Total power consumption
Master / backup mode (WAN main line, 3G backup line)
300Mbps wireless speed, 2X2 MIMO architecture
Multiple virtual APs
Convenient and secure guest mode
Wds bridging and trunking modes
Wireless MAC filtering
Outbound communication policy (source IP / destination IP / protocol / port / time period)
Inbound traffic policy (source IP / destination IP / protocol / port / time period)
Supports 10 IPSec connections
Support AH, ESP agreement
The SAs can be set up manually or through IKE
ESP supports DES, 3DES and AES encryption algorithms
Supports MD5 and SHA-1 authentication algorithms
Support IKE main mode and brutal mode
Support for NAT-T traversal
Support the configuration of the domain name through the IPSec connection (DDNS)
Static ARP (IP <-> MAC address binding)
DHCP Authorization ARP (automatically bound DHCP assigned IP)
ARP anti-attack / gratuitous ARP
State packet inspection
To prevent WAN port Ping
Prevents TCP syn scanning
Prevent Stealth FIN scanning
Prevents TCP Xmas Tree scanning
Prevents TCP Null scanning
Prevents UDP scanning
Prevent Land attack
Smurf attack prevention function
Prevent WinNuke attack function
To prevent Ping of Death attacks
The SYN Flood attack function is disabled
The UDP Flood attack function is disabled
Prevent ICMP Flood attack
Prevents IP spoofing
Prevents fragmentation packet attacks
Prevents TearDrop attacks
Prevents the Fraggle attack
User online behavior management
Group Policy Management (support for IP / MAC / time-based group policy configuration)
HTTP download file type filtering
URL filtering (black and white list)
MAC address filtering
QQ / MSN access control
Financial Software Control
Big wisdom / analyst / flush / GF Xeon / Everbright Securities / State Securities
Historical traffic statistics
Traffic statistics (based on IP / port traffic statistics)
Smart Elastic Bandwidth
Green Channel Management / Restricted Channel Management
Network traffic rate limit (based on IP, respectively, the upstream and downstream traffic speed limit)
Restrictions on NAT entries
Traffic statistics based on physical ports
IP-based traffic statistics, support for automatic sorting
Statistics of IP - based NAT Links
VPN transparent transmission (PPTP, L2TP, IPSec)
Web-based user management interface (remote management / local management)
HTTPS Remote Management
Command line CLI
SNMP V1 / V2C / V3
Upgrade the system software via HTTP
Ping / Traceroute
Fault information a key export