HPE JD431A Product Data Sheet

QuickSpecs

HP MSR20 Series

Overview

Models

HP MSR20-20 Router	JF283A
HP MSR20-21 Router	JD663B
HP MSR20-40 Router	JF228A

Key features

Converged routing, switching, voice, security

Embedded encryption, firewall, security features

Modular WAN/LAN interface options

Unified wired and wireless

Single-pane-of-glass management

Product overview

The HP MSR20 router series is a component of the HP FlexBranch solution, which is part of the HP FlexNetwork architecture. It features a modular design that delivers unmatched flexibility for small branch offices and small to medium-sized businesses while reducing complexity, simplifying management, and increasing control. MSR20 series routers provide a full-featured, resilient routing platform, including IPv6 and MPLS, up to 180 Kpps forwarding capacity, and 100 Mbps encryption. These products offer lasting investment protection, and help reduce capital and operating expenses. MSR20 series routers provide an agile, flexible network infrastructure that offers the ability to quickly adapt to changing business requirements while delivering integrated, concurrent services on a single, easy- to-manage platform.

Features and benefits

Quality of Service (QoS)

Traffic policing: supports Committed Access Rate (CAR) and line rate

Congestion management: supports FIFO, PQ, CQ, WFQ, CBQ, and RTPQ

Congestion avoidance: Weighted Random Early Detection (WRED)/Random Early Detection (RED)

Other QoS technologies: support traffic shaping, FR QoS, MPLS QoS, and MP QoS/LFI

Management

Industry-standard CLI with a hierarchical structure: reduces training time and expenses, and increases productivity in multivendor installations

Management security: multiple privilege levels with password protection restrict access to critical configuration commands; ACLs provide telnet and SNMP access; local and remote syslog capabilities allow logging of all access

SNMPv1, v2, and v3: provide complete support of SNMP; provide full support of industry-standard Management Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption

Remote monitoring (RMON): uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private alarm extension group

FTP, TFTP, and SFTP support: FTP allows bidirectional transfers over a TCP/IP network and is used for configuration updates; Trivial FTP is a simpler method using User Datagram Protocol (UDP)

Debug and sampler utility: supports ping and traceroute for both IPv4 and IPv6

Network Time Protocol (NTP): synchronizes timekeeping among distributed time servers and clients; keeps timekeeping consistent among all clock-dependent devices within the network so that the devices can provide diverse applications based on

DA - 13813 Worldwide — Version 10 — August 9, 2013

Page 1

QuickSpecs

HP MSR20 Series

Overview

the consistent time

Info center: provides a central information center for system and network information; aggregates all logs, traps, and debugging information generated by the system and maintains them in order of severity; outputs the network information to multiple channels based on user-defined rules

Management interface control: provides management access through modem port and terminal interface; provides access through terminal interface, telnet, or SSH

Network Quality Analyzer (NQA): analyzes network performance and service quality by sending test packets, and provides network performance and service quality parameters such as jitter, TCP, or FTP connection delays; allows network manager to determine overall network performance and diagnose and locate network congestion points or failures

Connectivity

High-density port connectivity: provides up to 4 interface module slots and up to 18 Fast Ethernet ports

Multiple WAN interfaces: provide a traditional link with E1, T1, ADSL, ADSL2, ADSL2+, G.SHDSL, ATM, Serial, and ISDN/AM backup; provide high-density Ethernet access with WAN Fast Ethernet/Gigabit Ethernet and LAN 4- and 9-port Fast Ethernet; provide mobility access with 802.11b/g/n Wi-Fi and 3G

Packet storm protection: protects against broadcast, multicast, or unicast storms with user-defined thresholds Loopback: supports internal loopback testing for maintenance purposes and an increase in availability; loopback detection protects against incorrect cabling or network configurations and can be enabled on a per-port or per-VLAN basis for added flexibility

Flexible port selection: provides a combination of fiber and copper interface modules, 100/1000BASE-X auto-speed selection, and 10/100/1000BASE-T auto-speed detection plus auto duplex and MDI/MDI-X

3G access support: provides 3G wireless access for primary or backup connectivity via a 3G SIC module certified on various cellular networks; optional carrier 3G USB modems available

Performance

Powerful encryption capacity: includes embedded hardware encryption accelerator to improve encryption performance Flexible chassis selection: offers a choice of three routers, meeting different requirements on enterprise branches Excellent forwarding performance: provides forwarding performance up to 180 Kpps; meets current and future bandwidthintensive application demands of enterprise businesses

Resiliency and high availability

Backup Center: acts as a part of the management and backup function to provide backup for device interfaces; delivers reliability by switching traffic over to a backup interface when the primary one fails

Virtual Router Redundancy Protocol (VRRP): allows groups of two routers to dynamically back each other up to create highly available routed environments; supports VRRP load balancing

Layer 2 switching

Spanning Tree Protocol (STP)

fully supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) protocol snooping: effectively control and manage the flooding of multicast packets in a Layer 2 network

Port mirroring: duplicates port traffic (ingress and egress) to a local or remote monitoring port VLANs: support up to 4,094 ports or IEEE 802.1Q-based VLANs

sFlow: allows traffic sampling

Layer 3 services

DA - 13813 Worldwide — Version 10 — August 9, 2013

Page 2

QuickSpecs

HP MSR20 Series

Overview

Address Resolution Protocol (ARP): determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network

User Datagram Protocol (UDP) helper: redirects UDP broadcasts to specific IP subnets to prevent server spoofing

Dynamic Host Configuration Protocol (DHCP): simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation across subnets

Layer 3 routing

Static IPv4 routing

provides simple, manually configured IPv4 routing

Routing Information Protocol (RIP)

uses a distance vector algorithm with UDP packets for route determination; supports RIPv1 and RIPv2 routing; includes loop protection

Open Shortest Path First (OSPF)

Interior Gateway Protocol (IGP) uses link-state protocol for faster convergence; supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for faster failure recovery

Border Gateway Protocol 4 (BGP-4)

Exterior Gateway Protocol (EGP) with path vector protocol uses TCP for enhanced reliability for the route discovery process, reduces bandwidth consumption by advertising only incremental updates, and supports extensive policies for increased flexibility, as well as scales to very large networks

Intermediate system to intermediate system (IS-IS)

Interior Gateway Protocol (IGP) uses path vector protocol, which is defined by the ISO organization for IS-IS routing and extended by IETF RFC 1195 to operate in both TCP/IP and the OSI reference model (Integrated IS-IS)

Static IPv6 routing

provides simple, manually configured IPv6 routing

Dual IP stack

maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network to an IPv6-only network design

Routing Information Protocol next generation (RIPng) extends RIPv2 to support IPv6 addressing

OSPFv3

provides OSPF support for IPv6

BGP+

extends BGP-4 to support Multiprotocol BGP (MBGP), including support for IPv6 addressing

IS-IS for IPv6

extends IS-IS to support IPv6 addressing

IPv6 tunneling

is an important element for the transition from IPv4 to IPv6; allows IPv6 packets to traverse IPv4-only networks by encapsulating the IPv6 packet into a standard IPv4 packet; supports manually configured, 6to4, and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) tunnels

Multiprotocol Label Switching (MPLS)

uses BGP to advertise routes across Label Switched Paths (LSPs), but uses simple labels to forward packets from any Layer 2 or Layer 3 protocol, thus reducing complexity and increasing performance; supports graceful restart for reduced failure impact; supports LSP tunneling and multilevel stacks

Multiprotocol Label Switching (MPLS) Layer 3 VPN

allows Layer 3 VPNs across a provider network; uses Multiprotocol BGP (MP-BGP) to establish private routes for increased security; supports RFC 2547bis multiple autonomous system VPNs for added flexibility; supports IPv6 MPLS VPN

Multiprotocol Label Switching (MPLS) Layer 2 VPN

establishes simple Layer 2 point-to-point VPNs across a provider network using only MPLS Label Distribution Protocol (LDP);

DA - 13813 Worldwide — Version 10 — August 9, 2013

Page 3

QuickSpecs

HP MSR20 Series

Overview

requires no routing and therefore decreases complexity, increases performance, and allows VPNs of non-routable protocols; uses no routing information for increased security; supports Circuit Cross Connect (CCC), Static Virtual Circuits (SVCs), Martini draft, and Kompella-draft technologies

Policy routing

allows custom filters for increased performance and security; supports ACLs, IP prefix, AS paths, community lists, and aggregate policies

Security

Access control list (ACL): supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traffic to prevent unauthorized users from accessing the network, or for controlling network traffic to save resources; rules can either deny or permit traffic to be forwarded; rules can be based on a Layer 2 header or a Layer 3 protocol header; rules can be set to operate on specific dates or times

Terminal Access Controller Access-Control System (TACACS+)

is an authentication tool using TCP with encryption of the full authentication request that provides additional security Unicast Reverse Path Forwarding (URPF): allows normal packets to be forwarded correctly, but discards the attaching packet due to lack of reverse path route or incorrect inbound interface; prevents source spoofing and distributed attacks

Network login: authentication of multiple users per port

RADIUS: eases security access administration by using a user/password authentication server

Network address translation (NAT): supports one-to-one NAT, many-to-many NAT, and NAT control, enabling NAT-PT to support multiple connections; supports blacklist in NAT/NAT-PT, a limit on the number of connections, session logs, and multiinstances

Secure Shell (SSHv2): uses external servers to securely login into a remote device; with authentication and encryption, it protects against IP spoofing and plain text password interception; increases the security of SFTP transfers

IPSec VPN: supports DES, 3DES, and AES 128/192/256 encryption, and MD5 and SHA-1 authentication

DVPN (Dynamic Virtual Private Network): collects, maintains, and distributes dynamic public addresses through the VPN Address Management (VAM) protocol, making VPN establishment available between enterprise branches that use dynamic addresses to access the public network; compared to traditional VPN technologies, DVPN technology is more flexible and has richer features, such as NAT traversal of DVPN packets, AAA identity authentication, IPSec protection of data packets, and multiple VPN domains

Convergence

Internet Group Management Protocol (IGMP): is used by IP hosts to establish and maintain multicast groups; supports IGMPv1, v2, and v3; utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4 multicast networks

Protocol Independent Multicast (PIM): is used for IPv4 and IPv6 multicast applications; supports PIM Dense Mode (PIM-DM), Sparse Mode (PIM-SM), and Source-Specific Mode (PIM-SSM)

Multicast Source Discovery Protocol (MSDP): is used for inter-domain multicast applications, allowing multiple PIM-SM domains to interoperate

Multicast Border Gateway Protocol (MBGP): allows multicast traffic to be forwarded across BGP networks and kept separate from unicast traffic

Integration

Embedded NetStream: local and global server load-balancing module improves traffic distribution using powerful scheduling algorithms, including Layer 4 to 7 services; monitors the health status of servers and firewalls

Embedded VPN firewall: provides enhanced stateful packet inspection and filtering; delivers advanced VPN services with Triple DES (3DES) and Advanced Encryption Standard (AES) encryption at high performance and low latency, Web content filtering, and application prioritization and enhancement

Additional information

DA - 13813 Worldwide — Version 10 — August 9, 2013

Page 4

QuickSpecs

HP MSR20 Series

Overview

OPEX savings: are delivered through the use of a common operating system that simplifies and streamlines deployment, management, and training, thereby cutting costs as well as reducing the chance for human errors associated with having to manage multiple operating systems across different platforms and network layers

High reliability: provides a state-of-the-art unified code base

Faster time to market: engineering efficiencies allow new and custom features to be brought rapidly to the market with better initial and ongoing stability

Green initiative support: provides support for RoHS and WEEE regulations

Product architecture

Ideal multiservice platform

provides WAN router, Ethernet switch, wireless LAN, 3G WAN, firewall, VPN, and SIP/voice gateway all in one box

High-density voice interfaces

provide flexible analog and digital voice interface options for easy integration within a wide range of deployments

USB interface

uses USB memory disk to download and upload configuration files; supports an external USB 3G modem for a 3G WAN uplink

SIP trunk

the SIP trunk link can carry multiple concurrent calls; the carrier authenticates only the link, rather than carrying each SIP call on the link

Embedded service modules for security and voice

embedded Voice Co-Processing Modules (VCPMs) and Voice Processing Modules (VPMs) accommodate digital signal processor (DSP) modules for voice packet processing; embedded hardware encryption modules, Standard Network Data Encryption (SNDE) cards, and Advanced Network Data Encryption (ANDE) cards do not occupy I/O slots

Warranty and support

1-year warranty: with advance replacement and delivery (available in most countries)

Electronic and telephone support: limited electronic and telephone support is available from HP; to reach our support centers, refer to: www.hp.com/networking/contact-support; for details on the duration of support provided with your product purchase, refer to: www.hp.com/networking/warrantysummary

Software releases: to find software for your product, refer to: www.hp.com/networking/support; for details on the software releases available with your product purchase, refer to: www.hp.com/networking/warrantysummary

DA - 13813 Worldwide — Version 10 — August 9, 2013

Page 5

QuickSpecs

HP MSR20 Series

Configuration

Build To Order:

BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or Rack-Shippable solution.

HP MSR20-20 Router		JF283A
2	- SIC module slots	See Configuration
1	- ESM Slot	Note:1, 9
0	- VCPM slots
0	- VPM slot
256MB DDR SDRAM included
1	- Compact Flash Slot
Russian Reduced Encryption		JF283AA59
		See Configuration
		Note:2
HP MSR20-21 Router		JD663B
8	- RJ45 LAN ports	See Configuration
2	- SIC module slots	Note:1, 9
1	- ESM Slot
0	- VCPM slots
0	- VPM slot
256MB DDR SDRAM included
1	- Compact Flash Slot
Russian Reduced Encryption		JD663BA59
		See Configuration
		Note:2
HP MSR20-40 Router		JF228A
4	- SIC Module slots	See Configuration
2	- ESM Slot	Note:1, 9
1	- VCPM slots
2	- VPM slot
256MB DDR SDRAM included
1	- Compact Flash Slot
Russian Reduced Encryption		JF228AA59
		See Configuration
		Note:2
Configuration Rules:
Note 1	AC Power Supply included
Note 2	If this product is ordered in Russia, Then the #A59 must replace existing Localization.

DA - 13813 Worldwide — Version 10 — August 9, 2013

Page 6

QuickSpecs

Configuration

Note 9

Localization required. (See Localization Menu)

CTO Models

CTO Solution Sku

HP MSR CTO Router Solution

SSP trigger sku

CTO Base Sku

HP MSR20 Series

JG500A

See Configuration

Note:10

HP MSR20-20 Router		JF283A
2	- SIC module slots	See Configuration
1	- ESM Slot	Note:1, 2, 11
0	- VCPM slots
0	- VPM slot
256MB DDR SDRAM included
1	- Compact Flash Slot
AC Power Supply included
HP MSR20-21 Router		JD663B
2	- SIC module slots	See Configuration
1	- ESM Slot	Note:1, 2, 11
0	- VCPM slots
0	- VPM slot
256MB DDR SDRAM included
1	- Compact Flash Slot
AC Power Supply included
HP MSR20-40 Router		JF228A
4	- SIC Module slots	See Configuration
2	- ESM Slot	Note:1, 2, 11
1	- VCPM slots
2	- VPM slot
256MB DDR SDRAM included
1	- Compact Flash Slot
AC Power Supply included
Configuration Rules:
Note 1	If this Switch is selected integrated to the CTO Switch Solution, Then a Minimum of 1 factory integrated accessory
	must be ordered and integrated to CTO chassis. See Menu below, option must have a #0D1 to be integrated to the
	CTO Chassis.
Note 2	Localization required. (See Localization Menu)

DA - 13813 Worldwide — Version 10 — August 9, 2013

Page 7

QuickSpecs

HP MSR20 Series

Configuration

Note 10	This HPN CTO switch cannot be factory racked. (Future Release)
Note 11	If the Router Chassis is to be Box Level Factory Integrated (CTO), Then the #0D1 is required on the Router Chassis
	and integrated to the JG500A - HP MSR CTO Enablement. (Min 1/Max 1 Router per SSP)
	EMEA doesn't support CTO of this switch at this time.

Internal Power Supplies

Internal Power Supplies included

Modules

SIC Modules

HP MSR 4-port 10/100 SIC Module	JD573B
None	See Configuration
	Note:1
HP MSR 9-port 10/100 DSIC Module	JD574B
	See Configuration
	Note:2, 3, 15, 16
HP MSR 1-port 10/100 SIC Module	JD545B
None	See Configuration
	Note:1
HP 1-port 100Mbt SFP SIC Router Module	JF280A
min=0 \ max=1 SFP Transceivers	See Configuration
	Note:1, 4
HP MSR 1-port 10/100/1000 SIC Module	JD572A
min=0 \ max=1 SFP Transceivers	See Configuration
	Note:1, 5
HP MSR 2-port FXO SIC Module	JD558A
None
HP MSR 1-port FXO SIC Module	JD559A
None
HP MSR 2-port FXS SIC Module	JD560A
None
HP MSR 1-port FXS SIC Module	JD561A
None
DA - 13813 Worldwide — Version 10 — August 9, 2013	Page 8

QuickSpecs

HP MSR20 Series

Configuration

HP MSR 1-port E1-Voice SIC Module	JD575A
min=0 \ max=1 E1 Cable	See Configuration
	Note:3, 6, 11
HP MSR 1-port T1-Voice SIC Module	JD576A
min=0 \ max=1 E1 Cable	See Configuration
	Note:3, 7
HP 2p ISDN-S/T Voice Interface SIC Mod	JF821A
None	See Configuration
	Note:3
HP MSR 2FXS + 1FXO Voice Intfc SIC Mod	JD632A
None	See Configuration
	Note:3
HP MSR 1-port Fractional E1 SIC Module	JD634B
min=0 \ max=1 E1 Cable	See Configuration
	Note:3, 6 11
HP MSR 1-port Fractional SIC Module	JD538A
None	See Configuration
	Note:3, 7
HP MSR 2-port Fractional E1 SIC Module	JF842A
min=0 \ max=2 Cable	See Configuration
	Note:3, 12
HP MSR 1-port Enhanced Serial SIC Mod	JD557A
min=0 \ max=1 Cable	See Configuration
	Note:3, 8
HP A-MSR 1-port ADSL over POTS SIC Module	JD537A
None	See Configuration
	Note:1
HP MSR 1-port ISDN-S/T SIC Module	JD571A
None	See Configuration
	Note:3
HP A-MSR 8-port Async Serial SIC Module	JF281A
None	See Configuration
	Note:3, 9
HP 802.11b/g/n Wireless AP SIC Module	JF819A
DA - 13813 Worldwide — Version 10 — August 9, 2013	Page 9