HPE JF228A Product Data Sheet

QuickSpecs

HPE MSR20 Series

Overview

Page 1

HPE MSR20 Series

Models

HP MSR20-20 Router

JF283A

HP MSR20-21 Router

JD663B

HP MSR20-40 Router

JF228A

Key features

Product overview

The HPE MSR20 router series is a component of the Hewlett Packard Enterprise FlexBranch solution, which is part of the Hewlet Packard Enterprise FlexNetwork archite offices and small to medium series routers provide a full 100 Mbps encryption. These products offer lasting investment protection, and help reduce capital and operating expenses. MSR2 series routers provide an agile, flex requirements while delivering integrated, concurrent services on a single, easy-to-manage platform.

Features and benefits

Quality of Service

Management

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

• Converged routing, switching, voice, and security

• Embedded encryption, firewall, and security features

• Modular WAN/LAN interface options

• Unified wired and wireless

• Single pane-of-glass management

cture. It features a modular design that delivers unmatched flexibility for small branch

-sized businesses while reducing complexity, simplifying management, and increasing control. MSR20

-featured, resilient routing platform, including IPv6 and MPLS, up to 180 Kpps forwarding capacity, and

ible network infrastructure that offers the ability to quickly adapt to changing business

(QoS)

• Traffic policing: supports Committed Access Rate (CAR) and line rate

• Congestion management: supports FIFO, PQ, CQ, WFQ, CBQ, and RTPQ

• Congestion avoidance: Weighted Random Early Detection (WRED)/Random Early Detection (RED)

• Other QoS technologies: support traffic shaping, FR QoS, MPLS QoS, and MP QoS/LFI

• Industry-standard CLI with a hierarchical structure: reduces training time and expenses, and increases productivity in

multivendor installations

• Management security: restricts access to critical configuration commands; offers multiple privilege levels with password

protection; ACLs provide Telnet and SNMP access; local and remote syslog capabilities allow logging of all access

• SNMPv1, v2, and v3: provide complete support of SNMP; provide full support of industry-standard Management

Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption

• Remote monitoring (RMON): uses standard SNMP to monitor essential network functions; supports events, alarm,

history, and statistics group plus a private alarm extension group

•

FTP, TFTP, and SFTP support: FTP allows bidirectional transfers over a TCP/IP network and is used for configuration

QuickSpecs

HPE MSR20 Series

Overview

Page 2

(NTP): synchronizes timekeeping among distributed time servers and clients; keeps timekeeping

er of severity; outputs the network information

Connectivity

Performance

Resiliency and high availability

Layer 2 switching

IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

updates; Trivial FTP is a simpler method using User Datagram Protocol (UDP)

• Debug and sampler utility: supports ping and traceroute for both IPv4 and IPv6

• Network Time Protocol

consistent among all clock-dependent devices within the network so that the devices can provide diverse applications based on the consistent time

• Info center: provides a central information center for system and network information; aggregates all logs, traps, and

debugging information generated by the system and maintains them in ord to multiple channels based on user-defined rules

• Management interface control: provides management access through modem port and terminal interface; provides

access through terminal interface, telnet, or SSH

• Network Quality Analyzer (NQA): analyzes network performance and service quality by sending test packets, and

provides network performance and service quality parameters such as jitter, TCP, or FTP connection delays; allows network manager to determine overall network performance and diagnose and locate network congestion points or failures

• High-density port connectivity: provides up to 4 interface module slots and up to 18 Fast Ethernet ports

• Multiple WAN interfaces: provide a traditional link with E1, T1, ADSL, ADSL2, ADSL2+, G.SHDSL, ATM, Serial, and

• Packet storm protection: protects against broadcast, multicast, or unicast storms with user-defined thresholds

• Loopback: supports internal loopback testing for maintenance purposes and an increase in availability; loopback

• Flexible port selection: provides a combination of fiber and copper interface modules, 100/1000BASE-X auto-speed

• 3G access support: provides 3G wireless access for primary or backup connectivity via a 3G SIC module certified on

• Powerful encryption capacity: includes embedded hardware encryption accelerator to improve encryption performance

• Flexible chassis selection: offers a choice of three routers, meeting different requirements on enterprise branches

• Excellent forwarding performance: provides forwarding performance up to 180 Kpps; meets current and future

ISDN/AM backup; provide high-density Ethernet access with WAN Fast Ethernet/Gigabit Ethernet and LAN 4- and 9-port Fast Ethernet; provide mobility access with 802.11b/g/n Wi-Fi and 3G

detection protects against incorrect cabling or network configurations and can be enabled on a per-port or per-VLAN basis for added flexibility

selection, and 10/100/1000BASE-T auto-speed detection plus auto duplex and MDI/MDI-X

various cellular networks; optional carrier 3G USB modems available

bandwidth-intensive application demands of enterprise businesses

• Backup Center: acts as a part of the management and backup function to provide backup for device interfaces; delivers

reliability by switching traffic over to a backup interface when the primary one fails

• Virtual Router Redundancy Protocol (VRRP): allows groups of two routers to dynamically back each other up to create

highly available routed environments; supports VRRP load balancing

• Spanning Tree Protocol (STP)

fully supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and

QuickSpecs

HPE MSR20 Series

Overview

Page 3

Layer 3 services

(ARP): determines the MAC address of another IP host in the same subnet; supports static

(DHCP): simplifies the management of large IP networks and supports client and

Layer 3 routing

Multiprotocol Label Switching (MPLS)

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

• Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) protocol snooping:

effectively control and manage the flooding of multicast packets in a Layer 2 network

• Port mirroring: duplicates port traffic (ingress and egress) to a local or remote monitoring port

• VLANs: support up to 4,094 ports or IEEE 802.1Q-based VLANs

• sFlow: allows traffic sampling

• Address Resolution Protocol

• User Datagram Protocol (UDP) helper: redirects UDP broadcasts to specific IP subnets to prevent server spoofing

• Dynamic Host Configuration Protocol

• Static IPv4 routing

• Routing Information Protocol (RIP)

• Open Shortest Path First (OSPF)

• Border Gateway Protocol 4 (BGP-4)

• Intermediate system to intermediate system (IS-IS)

• Static IPv6 routing

• Dual IP stack

• Routing Information Protocol next generation (RIPng)

• OSPFv3

• BGP+

• IS-IS for IPv6

• IPv6 tunneling

•

ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network

server; DHCP Relay enables DHCP operation across subnets

provides simple, manually configured IPv4 routing

uses a distance vector algorithm with UDP packets for route determination; supports RIPv1 and RIPv2 routing; includes loop protection

Interior Gateway Protocol (IGP) uses link-state protocol for faster convergence; supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for faster failure recovery

Exterior Gateway Protocol (EGP) with path vector protocol uses TCP for enhanced reliability for the route discovery process, reduces bandwidth consumption by advertising only incremental updates, and supports extensive policies for increased flexibility, as well as scales to very large networks

Interior Gateway Protocol (IGP) uses path vector protocol, which is defined by the ISO organization for IS-IS routing and extended by IETF RFC 1195 to operate in both TCP/IP and the OSI reference model (Integrated IS-IS)

provides simple, manually configured IPv6 routing

maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network to an IPv6-only network design

extends RIPv2 to support IPv6 addressing

provides OSPF support for IPv6

extends BGP-4 to support Multiprotocol BGP (MBGP), including support for IPv6 addressing

extends IS-IS to support IPv6 addressing

is an important element for the transition from IPv4 to IPv6; allows IPv6 packets to traverse IPv4-only networks by encapsulating the IPv6 packet into a standard IPv4 packet; supports manually configured, 6to4, and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) tunnels

QuickSpecs

HPE MSR20 Series

Overview

Page 4

Security

tual Private Network): collects, maintains, and distributes dynamic public addresses through the VPN

Convergence

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

uses BGP to advertise routes across Label Switched Paths (LSPs), but uses simple labels to forward packets from any Layer 2 or Layer 3 protocol, thus reducing complexity and increasing performance; supports graceful restart for reduced failure impact; supports LSP tunneling and multilevel stacks

• Multiprotocol Label Switching (MPLS) Layer 3 VPN

allows Layer 3 VPNs across a provider network; uses Multiprotocol BGP (MP-BGP) to establish private routes for increased security; supports RFC 2547bis multiple autonomous system VPNs for added flexibility; supports IPv6 MPLS VPN

• Multiprotocol Label Switching (MPLS) Layer 2 VPN

establishes simple Layer 2 point-to-point VPNs across a provider network using only MPLS Label Distribution Protocol (LDP); requires no routing and therefore decreases complexity, increases performance, and allows VPNs of non-routable protocols; uses no routing information for increased security; supports Circuit Cross Connect (CCC), Static Virtual Circuits (SVCs), Martini draft, and Kompella-draft technologies

• Policy routing

allows custom filters for increased performance and security; supports ACLs, IP prefix, AS paths, community lists, and aggregate policies

• Access control list (ACL): supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traffic to prevent

unauthorized users from accessing the network, or for controlling network traffic to save resources; rules can either deny or permit traffic to be forwarded; rules can be based on a Layer 2 header or a Layer 3 protocol header; rules can be set to operate on specific dates or times

• Terminal Access Controller Access-Control System (TACACS+)

is an authentication tool using TCP with encryption of the full authentication request that provides additional security

• Unicast Reverse Path Forwarding (URPF): allows normal packets to be forwarded correctly, but discards the attaching

packet due to lack of reverse path route or incorrect inbound interface; prevents source spoofing and distributed attacks

• Network login: authentication of multiple users per port

• RADIUS: eases security access administration by using a user/password authentication server

• Network address translation (NAT): supports one-to-one NAT, many-to-many NAT, and NAT control, enabling NAT-

PT to support multiple connections; supports blacklist in NAT/NAT-PT, a limit on the number of connections, session logs, and multi-instances

• Secure Shell (SSHv2): uses external servers to securely login into a remote device; with authentication and encryption, it

protects against IP spoofing and plain text password interception; increases the security of SFTP transfers

• IPSec VPN: supports DES, 3DES, and AES 128/192/256 encryption, and MD5 and SHA-1 authentication

• DVPN (Dynamic Vir

Address Management (VAM) protocol, making VPN establishment available between enterprise branches that use dynamic addresses to access the public network; compared to traditional VPN technologies, DVPN technology is more flexible and has richer features, such as NAT traversal of DVPN packets, AAA identity authentication, IPSec protection of data packets, and multiple VPN domains

• Internet Group Management Protocol (IGMP): is used by IP hosts to establish and maintain multicast groups; supports

• Protocol Independent Multicast (PIM): is used for IPv4 and IPv6 multicast applications; supports PIM Dense Mode (PIM-

• Multicast Source Discovery Protocol (MSDP): is used for inter-domain multicast applications, allowing multiple PIM-SM

•

IGMPv1, v2, and v3; utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4 multicast networks

DM), Sparse Mode (PIM-SM), and Source-Specific Mode (PIM-SSM)

domains to interoperate

Multicast Border Gateway Protocol (MBGP): allows multicast traffic to be forwarded across BGP networks and kept

QuickSpecs

HPE MSR20 Series

Overview

Page 5

Integration

Additional information

f a common operating system that simplifies and streamlines deployment,

Product architecture

Warrant

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

separate from unicast traffic

• Embedded NetStream: local and global server load-balancing module improves traffic distribution using powerful

scheduling algorithms, including Layer 4 to 7 services; monitors the health status of servers and firewalls

• Embedded VPN firewall: provides enhanced stateful packet inspection and filtering; delivers advanced VPN services

with Triple DES (3DES) and Advanced Encryption Standard (AES) encryption at high performance and low latency, Web content filtering, and application prioritization and enhancement

• OPEX savings: are delivered through the use o

management, and training, thereby cutting costs as well as reducing the chance for human errors associated with having to manage multiple operating systems across different platforms and network layers

• High reliability: provides a state-of-the-art unified code base

• Faster time to market: engineering efficiencies allow new and custom features to be brought rapidly to the market with

better initial and ongoing stability

• Green initiative support: provides support for RoHS and WEEE regulations

• Ideal multiservice platform

provides WAN router, Ethernet switch, wireless LAN, 3G WAN, firewall, VPN, and SIP/voice gateway all in one box

• High-density voice interfaces

provide flexible analog and digital voice interface options for easy integration within a wide range of deployments

• USB interface

uses USB memory disk to download and upload configuration files; supports an external USB 3G modem for a 3G WAN uplink

• SIP trunk

the SIP trunk link can carry multiple concurrent calls; the carrier authenticates only the link, rather than carrying each SIP call on the link

• Embedded service modules for security and voice

embedded Voice Co-Processing Modules (VCPMs) and Voice Processing Modules (VPMs) accommodate digital signal processor (DSP) modules for voice packet processing; embedded hardware encryption modules, Standard Network Data Encryption (SNDE) cards, and Advanced Network Data Encryption (ANDE) cards do not occupy I/O slots

y and support

• 1-year warranty:

See http://www.hpe.com/networking/warrantysummary for warranty and support information included with your product purchase.

• Software releases:

to find software for your product, refer to http://www.hpe.com/networking/support releases available with your product purchase, refer to http://www.hpe.com/networking/warrantysummary

; for details on the software

QuickSpecs

HPE MSR20 Series

Configuration

Page 6

Build To Order:

BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or Rack solution.

HP MSR20-20 Router

JF283A

See Configuration

Russian Reduced Encryption

JF283A#A59

HP MSR20-21 Router

JD663B

See Configuration

Russian Reduced Encryption

JD663B#A59

HP MSR20

See Configuration

Russian Reduced Encryption

JF228A#A59

Configuration Rules:

Note 1

AC Power Supply included

Note 2

If this product is ordered for delivery to Russia, it must be order countries desiring Low Encryption), then #A59 is the required option in addition to Localization options.

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

-Shippable

• 2 - SIC module slots

• 1 - ESM Slot

• 0 - VCPM slots

• 0 - VPM slot

• 256MB DDR SDRAM included

• 1 - Compact Flash Slot

NOTE:1, 2, 9

• 8 - RJ45 LAN ports

• 2 - SIC module slots

• 1 - ESM Slot

• 0 - VCPM slots

• 0 - VPM slot

• 256MB DDR SDRAM included

• 1 - Compact Flash Slot

-40 Router JF228A

4 - SIC Module slots

•

• 2 - ESM Slot

• 1 - VCPM slots

• 2 - VPM slot

• 256MB DDR SDRAM included

• 1 - Compact Flash Slot

NOTE:1, 2,9

NOTE:1, 2, 9

ed with the A59 option (also allowed for other

QuickSpecs

HPE MSR20 Series

Configuration

Page 7

Note 9

Localization required. (See Localization Menu)

CTO Models

CTO Solution Sku

HP MSR CTO Router Solution

JG500A

•

See Configuration

CTO Base Sku

HP MSR20-20 Router

JF283A

See Configuration

HP MSR20-21 Router

JD663B

See Configuration

HP MSR20-40 Router

JF228A

•

See Configuration

Configuration Rules:

Note 1

If this Switch is accessory must be ordered and integrated to CTO chassis. See Menu below, option must have a #0D1 to be integrated to the CTO Chassis.

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

SSP trigger sku

• 2 - SIC module slots

• 1 - ESM Slot

• 0 - VCPM slots

• 0 - VPM slot

• 256MB DDR SDRAM included

• 1 - Compact Flash Slot

• AC Power Supply included

• 2 - SIC module slots

• 1 - ESM Slot

• 0 - VCPM slots

• 0 - VPM slot

• 256MB DDR SDRAM included

• 1 - Compact Flash Slot

• AC Power Supply included

NOTE:10

NOTE:1, 2, 11

4 - SIC Module slots

• 2 - ESM Slot

• 1 - VCPM slots

• 2 - VPM slot

• 256MB DDR SDRAM included

• 1 - Compact Flash Slot

• AC Power Supply included

selected integrated to the CTO Switch Solution, Then a Minimum of 1 factory integrated

NOTE:1, 2, 11

QuickSpecs

HPE MSR20 Series

Configuration

Page 8

Note 2

Localization required

Note 10

This HPN CTO switch cannot be factory racked. (Future Release)

Note 11

If the Router Chassis is to be Box Level Factory Integrated (CTO), Then the #0D1 is required on the Router Chassis and integrated to the J

Internal Power Supplies

Internal Power Supplies included

Modules

SIC Modules

HP MSR 4-port 10/100 SIC Module

JD573B

See Configuration

NOTE:1

HP MSR 9-port 10/100 DSIC Module

JD574B

See Configuration

NOTE:2, 3, 15, 16

HP MSR 1-port 10/100 SIC Module

JD545B

See Configuration

NOTE:

HP 1-port 100Mbt SFP SIC Router Module

JF280A

See Configuration

NOTE:

HP MSR 1-port 10/100/1000 SIC Module

JD572A

See Configuration

NOTE:1, 5

HP MSR 2-port FXO SIC Module

JD558A

HP MSR 1-port FXO SIC Module

JD559A

HP MSR 2-port FXS SIC Module

JD560A

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

. (See Localization Menu)

G500A - HP MSR CTO Enablement. (Min 1/Max 1 Router per SSP)

• None

• min=0 \ max=1 SFP Transceivers

• None

1, 4

QuickSpecs

HPE MSR20 Series

Configuration

Page 9

HP MSR 1-port FXS SIC Module

JD561A

•

HP MSR 1-port E1-Voice SIC Module

JD575A

See Configuration

HP MSR 1-port T1-Voice SIC Module

JD576A

•

See Configuration

HP 2p ISDN-S/T Voice Interface SIC Mod

JF821A

See Configuration

HP MSR 2FXS + 1FXO Voice Intfc SIC Mod

JD632A

See Configuration

HP MSR 1-port Fractional E1 SIC Module

JD634B

iguration

HP MSR 1-port Fractional SIC Module

JD538A

See Configuration

NOTE:

HP MSR 2-port Fractional E1 SIC Module

JF842A

See Configuration

NOTE:

HP MSR 1-port Enhanced Serial SIC Mod

JD557A

See Configuration

NOTE:

HP A-MSR 1-port ADSL over POTS SIC Module

JD537A

See Configuration

NOTE:

HP MSR 1-port ISDN-S/T SIC Module

JD571A

See Configuration

NOTE:

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

• None

None

• min=0 \ max=1 E1 Cable

min=0 \ max=1 E1 Cable

• None

NOTE:3, 6, 11

NOTE:3, 7

NOTE:3

• min=0 \ max=1 E1 Cable See Conf

• min=0 \ max=1 T1 Cable

• min=0 \ max=2 Cable

• min=0 \ max=1 Cable

• None

NOTE:3, 6 11

3, 7

3, 12

3, 8

• None

+ 21 hidden pages