ER3200Yes H3C The company introduced a high-performance router, which is mainly located in Ethernet /optical fiber / ADSL Access SMB Market and government, business organizations, Internet cafes and other network environments, such as the need for high-speed Internet Bandwidth, Internet cafes, businesses, schools and hotels.
ER3200The use of professional 64Bit network processor, clocked at up to 500MHz , And support a wealth of software features, such as IPSec VPN , Multi-local area network, IP <-> MAC Address binding, ARP Anti-attack, traffic rate limiting, dual WAN Load balancing, policy routing, source address routing, etc. It is H3C ER Series routers in the end products, medium-sized Internet cafe users and business users an ideal choice.
lHigh processing performance
ER3200 64-bit network processor, clocked at up to 500MHz, at the same time with DDRII high-speed RAM for high-speed forwarding, you can achieve 100M wire-speed forwarding.
lDual WAN port load balancing
Load balancing can allow enterprise network users to allocate network traffic according to the actual bandwidth of the line to achieve the purpose of full use of bandwidth.With the use of domestic network users and characteristics of H3C, targeted to launch intelligent load balancing and manual load balancing two equilibrium modes , Which meets the flexible application requirements of the dual-line access users. Intelligent load balancing allocates the actual network traffic according to the actual bandwidth ratio of the user. The manual load balancing is forwarded according to the imported routing table. The import / export function of the policy routing table is supported. Just import the appropriate routing table can be achieved 'Netcom walk Netcom, Telecom Telecom' function.
ER3200 supports standard IPSec VPN. Users can achieve secure VPN connection between point-to-point through simple WEB configuration, and support up to 168-bit 3DES encryption. At the same time, H3C supports the configuration on the ER3200 through the domain name IPSec VPN connection and NAT-T NAT traversal function.
lMulti-Local Area Network (VLAN)
The ER3200 supports multiple LAN functions. You can easily partition the LAN into multiple network segments and reduce the impact of broadcast domains and ARP viruses. You can configure separate DHCP servers and firewall rules for each LAN. The ER3200 supports up to 16 internal LANs .
lARP virus double protection
ER3200 IP address binding function, fixed ARP list of the gateway, which can effectively prevent ARP spoofing caused by interruption of network communication; In addition ER3200 free ARP timing transmission mechanism, can effectively avoid the local PC Poisoning caused after the ARP attack.
lNetwork traffic rate limiting
BT, Thunder and other P2P software on the network bandwidth over the occupancy will affect other users within the network of normal business, ER3200 based on IP or NAT-based network traffic rate limiting mechanism can effectively control a PC's upstream / downstream traffic And the establishment of the number of NAT entries, limiting the P2P software on the excessive use of network bandwidth, flexible bandwidth and to ensure that the full use of the busy things on the bandwidth.
lBusiness control (QQ / MSN / financial software)
QQ / MSN and other instant messaging software a large number of popular, resulting in inefficient staff office, can not concentrate on ER3200 unique application control functions, users can easily limit the internal network of applications such as QQ / MSN, ER3200 also supports large Intelligent / analyst / flush / GF Xeon / Everbright Securities / State Securities and other financial software application control functions.In addition, the user can set the privileged user group to ensure that the key user's use is not affected.
Table 1 Product specifications list
Two 10 / 100Base-TX WAN ports
Three 10 / 100Base-TX LAN ports
1 console interface
The processor (CPU)
MIPS 64-bit network processor 500 MHz
DDR II 64M
Per port: Link / Act, Speed
Per Device: Power, W1 / W2
Dimensions (L × W × H)
330 (W) 230 (D) 44 (H) mm
The standard 13-inch rack, 1U high, can be on the rack
100 to 240 V AC, 50/60 Hz
10% to 90% without condensation
5% to 90% without condensation
Active / Standby mode
Intelligent load balancing
Manual load balancing (telecommunications take telecommunications, Netcom go Netcom)
Source address routing
DDNS (www.3322.org, peanut shell)
VPN transparent transmission (PPTP, L2TP, IPSEC)
Outbound communication policy (source interface / IP / MAC / user / destination IP / protocol / port / time range)
Inbound traffic policy (source interface / IP / MAC / user / destination IP / protocol / port / time period)
Support AH, ESP agreement
Support manual or through IKE automatically built?
ESP supports DES, 3DES and AES encryption algorithms
Supports MD5 and SHA-1 authentication algorithms
Support IKE main mode and brutal mode
Support NAT traversal
Support the configuration of the domain name through the IPSec connection (DDNS)
IP <-> MAC address binding
ACL access control policy (based on time range / protocol / port)
MAC address filtering
QQ / MSN access control
Financial software control (great wisdom / Analyst / Flush / GF Xeon / Everbright Securities / State Securities)
ARP anti-attack / gratuitous ARP
State packet inspection
To prevent WAN port Ping
Prevents TCP sync scanning
Prevent Stealth FIN scanning
Prevents Xmas Tree scanning
Prevents Null scanning
Prevents UDP scanning
Prevent Land attack
Smurf attack prevention function
Prevent WinNuke attack function
To prevent Ping of Death attacks
The SYN Flood attack function is disabled
The UDP Flood attack function is disabled
Prevent ICMP Flood attack
Prevents IP spoofing
Prevents fragmentation packet attacks
Prevents TearDrop attacks
Prevents the Fraggle attack
Traffic statistics (based on IP / port traffic statistics)
Network traffic rate limit (based on IP, respectively, the upstream and downstream traffic speed limit)
Restrictions on NAT entries
Apply channel limit (green channel / restricted channel)
Web-based user management interface (remote management / local management)
Command line CLI
Upgrade the system software via HTTP
SNMP V1 / V2V3
Static NAT (One-to-One NAT)
Ping / Tracert
Fault information a key export
Many Internet cafes are asking friends a question, why is my Internet bar is always dropped? Dropped for a variety of reasons, but one can not be ignored because the bandwidth is insufficient.Then why bandwidth is insufficient? The first story in ancient times, a family of three brothers, met the disaster year, the remaining food must be saved to stay in the coming year to eat. Boss calculations, three meals per meal can only eat five rice, did not expect, The youngest is a long body, a meal to eat five rice, this look, the other two brothers can only go hungry.
Similarly, Internet cafes inside the BT, Thunder, streaming media on demand, games ... ... these will take up a lot of bandwidth, as long as there are a few people in use, other users will not get the bandwidth, naturally lead to dropped calls. We say back to the story of the three brothers, the boss made a decision: the youngest per meal to eat thirty-two rice, other people eat a meal or two meals per meal, are not allowed to eat other people's Thus, although the three brothers can not eat Saturated, but also to the.
In fact, Internet cafes is to take this approach, the traditional QoS is the allocation of static bandwidth to different users, so users will not affect each other. On the surface of Internet cafes seem to solve the problem.But the three brothers and new problems again Facing the third of the remaining bowl of rice, the two brothers need to solve a problem: eat or keep points, because the boss said not to eat other people's.
Perhaps the problem will be ridiculous, it is not good to eat the points, but the same problem into the Internet cafes this scene is not so simple.For traditional QoS, the solution is like leaving the youngest to stay in the rice, even if The third does not need, others can not eat starve to death.This will inevitably bring a huge waste of bandwidth.
Is not there a new way to solve the problem of uneven rice brother point? H3C (China 3 Communications), based on the new flexible QoS design concept introduced ER series routers completely solve this problem.
Assume that A and B are two IP addresses and each is allocated a bandwidth of 2 M. When both A and B currently require more than 2 Mbps of bandwidth, both A and B can only use 2 Mbps of bandwidth. If one of them is free, Such as B only 1M bandwidth, then the remaining 1 M bandwidth can be used by A. This is a good solution to the problem of Internet cafes because of insufficient bandwidth dropped, that is, so that the three brothers have the possibility to eat.
In addition, the ER Series Routers combine resilient QoS with more applications to deliver a range of very practical QoS features, so let's take a look at the application of the Green Channel feature.
According to statistics, in Internet cafes to play online games accounted for 59% of the proportion, compared with other applications, online games with small packets, occupy less bandwidth characteristics.I believe in the Internet peak, many Internet cafes will encounter online games Very card situation, the business has a great impact.There is no way to ensure that the network is busy in the network game smooth?
In fact, Internet cafes encountered this problem in the supermarket also has a similar situation.Some customers only buy a few commodities, had to checkout soon, but more people in time, had to buy things and a lot of customers ranked Supermarkets and customers are reluctant to see.So, many supermarkets provide a fast-track, designed for those who buy less goods, customers quickly checkout.
In the Internet cafes equipment applications, this method has also been transplanted, some professional server has been widely used. Similarly, ER series routers also provide a green dedicated channel function, you can message the smaller network games Not only to avoid bandwidth waste, green dedicated channel also incorporates the design of flexible QoS to ensure network quality at the same time, make full use of limited bandwidth.
Through the above description we can easily see, ER series router is tailored for the Internet cafes network equipment is still dropped for Internet cafes, slow distressed friends, your troubles left ER series routers it.I believe me, That's right.