TP-LINK TL-SRU8206 Service Routing Unit

• The routing function uses an eight-core 64-bit network dedicated processor, with a single-core frequency of 1.2GHz
• The network management function uses a quad-core 64-bit network dedicated processor with a single-core frequency of 1.2GHz
  
• 8GB DDRIV high-speed memory
• 2 10 Gigabit SFP+ optical fiber expansion ports, 4 10/100/1000M RJ45 electrical ports, customizable port types
• Access authentication (Web authentication, SMS authentication, PPPoE server)
• Multiple VPNs (IPSec / PPTP / L2TP VPN)
• Online behavior management (application restriction / website filtering / web security)
• Internal and external network ARP protection and common attack protection
• Intelligent IP bandwidth management and connection limit
• 7KV lightning protection capability
• The whole machine has a capacity of 10,000 units and can control 1000 units TP-LINK AP
• Built-in network management function, can control 1000 TP-LINK commercial network devices
  

TL-SRU8206 is a service routing unit developed for the TP-LINK frame switch TL-NS8803. It adopts a new generation of high-performance hardware and software platforms to support comprehensive security protection mechanisms, flexible flow control strategies and rich VLAN functions. It is easy to manage and maintain, and is widely deployed in scenarios such as large and medium-sized campus networks, headquarters or branches of large and medium-sized enterprises.

New hardware architecture, high-speed data forwarding

1. A new generation of high-performance hardware architecture

TL-SRU8206 adopts a new hardware architecture, a single TL-SRU8206 built-in a professional 8-core 64-bit network dedicated processor and a 4-core 64-bit processor, with 48MB flash memory and 8GB DDRIV high-speed memory, the packet processing capacity is greatly improved , which can effectively meet the high-speed data forwarding requirements in a high-bandwidth environment. In the actual environment, the typical capacity of the whole machine is as high as 10,000.

Each TL-SRU8206 provides 2 10G SFP+ fiber module expansion ports, 4 10/100/1000M RJ45 ports, can customize the port type, bind multiple logical interfaces, configure multiple different types of lines, and provide 1 console port, 1 management port and 1 USB 3.0 port to adapt to more complex networking environments.

2. Comprehensive security protection mechanism

Access control: Supports access control policies, can independently set firewall rules, and control internal and external network communication security.

Quaternary binding: supports quaternary binding of IP address, MAC address, VLAN and port to filter data packets.

ARP protection: Supports ARP protection, and protects against ARP spoofing and ARP flood attacks such as gateway spoofing and man-in-the-middle attacks common in LANs.

IP source protection: Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC / IP spoofing.

DoS protection: Supports DoS protection, protecting against Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.

3. a variety of VPN, to ensure the security of remote data transmission

Support IPSec VPN, encrypt confidential data of enterprises and branches, and ensure data security; a single TL-SRU8206 can support 200 IPSec VPN tunnels, and the IPSec VPN forwarding performance is up to 1650Mbps.

Support PPTP/L2TP VPN, which is convenient for traveling employees and mobile office personnel to remotely access the internal server of the enterprise and realize remote office. A single TL-SRU8206 can establish 200 PPTP/L2TP VPN tunnels.

4. Various access authentication methods

Web authentication: Support local authentication, Radius authentication, and one-click Internet access. You can customize the jump page to achieve ad push.

SMS authentication: meet real-name authentication requirements, and can conduct secondary marketing based on mobile phone numbers.

PPPoE server: Meets the needs of intranet users for unified dial-up Internet access.

Third-party authentication system: Supports access to third-party authentication systems.

5. efficient online behavior management

Built-in common Internet application database, one-click control of various desktop and mobile Internet applications, including social software / video software / music software / shopping and leisure software / news software / P2P software / financial software / online games / application store / Basic application categories.

One-click control of common applications: Built-in 10 categories and more than 70 applications, one-click control of various PC-side and mobile-side Internet applications, standardizing Internet behavior

One-click Restriction of Website Access: Built-in database of more than 300 URLs in 13 categories, one-click restriction of user access to the corresponding website.

Prohibition of web page submission: Restrict users from logging in to various web-based forums, microblogs, emails, etc. to prevent leakage of sensitive data.

Filter file extension type: Efficiently filter various small files embedded in web pages to prevent viruses and Trojans from invading the network and endangering network security.

Behavior auditing: comprehensively record online behaviors and output audit results in a report format.

6. Flexible flow control strategy

Intelligent IP bandwidth control: BiDirectional bandwidth control can be performed for each host (IP) in the network to ensure smooth network access at all times.

Multi-line load balancing and line backup: Flexible configuration of WAN / LAN interfaces, support for rich traffic balancing functions: intelligent routing, special application routing, ISP routing, support interface line backup.

Supports IP-based connection limit: It can limit the connection occupied by each computer and reasonably allocate limited NAT connection number resources.

7. Integration of wired and wireless applications

Built-in AC function: AC wireless control, which is both a router and a wireless controller, can uniformly manage 1000 TP-LINK AP products and form an enterprise wireless network

It can automatically discover TP-LINK APs in the network, and perform unified configuration and management of APs to achieve zero-configuration access for APs, plug and play. It also supports AP status monitoring and upgrade, which is easy to maintain.

Support fiber access: support Gigabit and 10 Gigabit optical interfaces, and flexibly match network access.

Support copper cable access.

7. built-in network management

Built-in network management function: it is both a router and a network management system, which can manage 1000 TP-LINK commercial network products uniformly

TL-NS8803 has a built-in intent-driven engine, which intelligently translates user intent into network configuration, completes automatic deployment of network configuration based on SDN architecture, and truly realizes plug-and-play with TP-LINK commercial network products

9.More practical functions

DDNS and Virtual Server: Supports TP-LINK DDNS *, Peanut Shell, Kemai, 3322 dynamic domain name services, which can easily build intranet servers and private websites.

UPnP and ALG service functions: ensure that special network applications can pass through NAT smoothly.

Full Chinese WEB management interface: more convenient and fast management and maintenance.

Log list: Record the network operation status in detail.

Ping and Tracert multiple fault detection tools: help quickly find and troubleshoot network faults.

RTC: Support RTC (Real-Time Clock) to ensure that the device time is normal after power off and restart.

File Sharing: Provides 1 USB 3.0 interface for easy file sharing.