TP-LINK TL-NR9500-B02 NR series high-end frame router (frame type)

• 2 16-core 64-bit network dedicated processors, single-core clocked at 1.5GHz
• 16GB DDRIV high-speed memory
• 8 10 Gigabit SFP+ optical fiber expansion ports, 12 10/100/1000M RJ45 electrical ports, customizable port types
• Access authentication (Web authentication, SMS authentication, PPPoE server)
• Multiple VPNs (IPSec / PPTP / L2TP VPN)
• Online behavior management (application restriction / website filtering / web security)
• Internal and external network ARP protection and common attack protection
• Intelligent IP bandwidth management and connection limit
• 7KV lightning protection capability
• The whole machine has a capacity of 20,000 units and can control 500 TP-LINK APs

TL-NR9500-B02 is the NR series high-end rack router newly developed and launched by TP-LINK. It adopts a new generation of high-performance hardware and software platform, provides two TL-NR9410-BU service routing units, dual main control, dual power supply redundancy The redundant design doubles the reliability; at the same time, the passive backplane design is adopted to effectively avoid single point of failure and further improve product reliability. It supports comprehensive security protection mechanisms, flexible traffic control policies and rich VLAN functions, and is easy to manage and maintain.

New hardware architecture, high-speed data forwarding

1. Double master control and dual power supply, the reliability is doubled

TL-NR9500-B02 provides two service routing units as the main control board and supports two working modes: active and standby backup and load balancing. With complete hardware redundancy design and hot-swap technology, when one service routing unit fails, the other can quickly take over its service and work normally, and the reliability is doubled.

Support load sharing mode, the resource utilization rate is increased by 100% compared with the active and standby backup mode

Two service routing units TL-NR9410-BU can configure multiple active and standby groups on different interfaces. One service routing unit can be used as both master and backup, and different services can be placed on different service routes. When one unit is abnormal, the other unit can take over the business to ensure that the business is not interrupted.

The board is hot-swappable and the key components are redundantly designed. It includes two service routing units, two redundant power supplies, and a removable fan. Both support hot-swap.

Passive backplane design

Passive backplane design, the entire backplane system does not have any active components, the backplane itself does not generate power, control signals, etc., only provides the electrical connection function between each daughter card, effectively avoiding a single point of failure

Fast fault detection and service recovery mechanism

When a business routing unit fails, another business routing unit can take over its services within a few seconds, detect anomalies, and restart the failed business routing unit to ensure that the business can continue to operate normally without human intervention.

2.Next-generation high-performance hardware architecture

TL-NR9500-B02 adopts a new hardware architecture, including two TL-NR9410-BU service routing units, a single TL-NR9410-BU built-in 1 professional 16-core 64-bit network dedicated processor, with 32MB flash memory and 8GB DDRIV high-speed memory , the data packet processing capability is greatly improved, effectively meeting the high-speed data forwarding requirements in a high-bandwidth environment. In the actual environment, the typical capacity of the whole machine is as high as 20,000 units. The body size is 442.8mm*442mm*131.6mm, suitable for 19-inch standard racks.

Each TL-NR9410-BU provides 4 10 Gigabit SFP+ fiber module expansion ports, 6 10/100/1000M RJ45 ports, can customize the port type, bind multiple logical interfaces, configure multiple different types of lines, It also provides 1 console port and 2 USB 3.0 ports to adapt to more complex networking environments.

3. Comprehensive security protection mechanism

Access control: Supports access control policies, can independently set firewall rules, and control internal and external network communication security.

Quaternary binding: supports quaternary binding of IP address, MAC address, VLAN and port to filter data packets.

ARP protection: Supports ARP protection, and protects against ARP spoofing and ARP flood attacks such as gateway spoofing and man-in-the-middle attacks common in LANs.

IP source protection: Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC / IP spoofing.

DoS protection: Supports DoS protection, protecting against Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.

4. Multiple VPNs to ensure remote data transmission security

Support IPSec VPN, encrypt the confidential data of enterprises and branches, and ensure data security; a single TL-NR9410-BU can support 200 IPSec VPN tunnels, and the IPSec VPN forwarding performance is up to 1650Mbps.

Support PPTP/L2TP VPN, which is convenient for traveling employees and mobile office personnel to remotely access the internal server of the enterprise and realize remote office. A single TL-NR9410-BU can establish 200 PPTP/L2TP VPN tunnels.

5. Diverse access authentication methods

Web authentication: Support local authentication, Radius authentication, and one-click Internet access. You can customize the jump page to achieve ad push.

SMS authentication: meet real-name authentication requirements, and can conduct secondary marketing based on mobile phone numbers.

PPPoE server: Meets the needs of intranet users for unified dial-up Internet access.

Third-party authentication system: Supports access to third-party authentication systems.

6. Efficient online behavior management

Built-in common Internet application database, one-click control of various desktop and mobile Internet applications, including social software / video software / music software / shopping and leisure software / news software / P2P software / financial software / online games / application store / Basic application categories.

One-click control of common applications: Built-in 10 categories and more than 70 applications, one-click control of various PC-side and mobile-side Internet applications, standardizing Internet behavior

One-click Restriction of Website Access: Built-in database of more than 300 URLs in 13 categories, one-click restriction of user access to the corresponding website.

Prohibition of web page submission: Restrict users from logging in to various web-based forums, microblogs, emails, etc. to prevent leakage of sensitive data.

Filter file extension type: Efficiently filter various small files embedded in web pages to prevent viruses and Trojans from invading the network and endangering network security.

Behavior auditing: comprehensively record online behaviors and output audit results in a report format.

7.Flexible flow control strategy

Intelligent IP bandwidth control: BiDirectional bandwidth control can be performed for each host (IP) in the network to ensure smooth network access at all times.

Multi-line load balancing and line backup: Flexible configuration of WAN / LAN interfaces, support for rich traffic balancing functions: intelligent routing, special application routing, ISP routing, support interface line backup.

Supports IP-based connection limit: It can limit the connection occupied by each computer and reasonably allocate limited NAT connection number resources.

8.Wired and wireless application integration

Built-in AC function: AC wireless control, both router is a wireless controller, can unify 500 TP-Link AP products, and form an enterprise-class wireless network.

It can automatically discover TP-LINK APs in the network, and perform unified configuration and management of APs to achieve zero-configuration access for APs, plug and play. It also supports AP status monitoring and upgrade, which is easy to maintain.

Support fiber access: support Gigabit and 10 Gigabit optical interfaces, and flexibly match network access.

Support copper cable access.

9.More practical functions

DDNS and Virtual Server: Supports TP-LINK DDNS *, Peanut Shell, Kemai, 3322 dynamic domain name services, which can easily build intranet servers and private websites.

UPnP and ALG service functions: ensure that special network applications can pass through NAT smoothly.

Full Chinese WEB management interface: more convenient and fast management and maintenance.

Log list: Record the network operation status in detail.

Ping and Tracert multiple fault detection tools: help quickly find and troubleshoot network faults.

RTC: Support RTC (Real-Time Clock) to ensure that the device time is normal after power off and restart.

File sharing: Provides 4 USB 3.0 interfaces for easy file sharing.