HPE JG402A Product Data Sheet

QuickSpecs

HPE FlexNetwork MSR4000 Router Series

Overview

1

HPE FlexNetwork MSR4000 Router Series

The HPE FlexNetwork MSR4000 Router Series, the next generation of router from Hewlett Packard Enterprise (HPE), is a component
of the HPE FlexBranch solution, which is a part of the comprehensive HPE FlexNetwork architecture. These routers feature a modular
design that delivers unmatched application services for

branch offices, headquarters, and campuses. This gives your IT
personnel the benefit of reduced complexity, and simplified configuration, deployment, and management. The MSR4000 series
leverages separated data and control planes, dual main processing units (MPUs), and support for up to four power supplies, which
provides o
The MSR4000 routers provide a full-featured, resilient routing platform with the latest multicore CPUs, offer 10 Gigabit SFP+
integrated, provide an enhanced PCI bus, and ship with the latest version of HPE Comware software to help ensure high performance
with concurrent services. The MSR4000 series provides a full-featured, resilient routing platform, including IPv6 and MPLS, with up to
36 Mpps forwarding capacity and 28 Gbps of IPSec VPN encrypted throughput. These routers also support HPE Open Application
Platform (OAP) modules to deliver integrated industry-leading HPE AllianceOne partner applications such as virtualization, unified
communications and collaboration (UC&C), and application optimization capabilities.
The MSR4000 series provides an agile, flexible network infrastructure that enables you to quickly adapt to your changing business
requirements while delivering integrated concurrent services on a single, easy-to-manage platform.

HPE FlexNetwork MSR4080 Router Chassis (SPU-200) - Front View

extra-large

utstanding performance and reliability.

Page

QuickSpecs

HPE FlexNetwork MSR4000 Router Series

Overview

2

HPE FlexNetwork MSR4060 Router Chassis (SPU-100) - Front View

Models

HPE FlexNetwork MSR4060 Router Chassis

JG403A

HPE FlexNetwork MSR4080 Router Chassis

JG402A

Key features

• Zero-touch solution with single pane-of-glass management

• Up to 36 Mpps forwarding performance; support for multiple concurrent services

• High reliability with separated hardware data and control planes, and dual MPUs

• Open Application Platform for HPE AllianceOne applications

• Powerful aggregation capacity; integrated 10GbE; support for up to 64 E1 or eight E3/T3 ports

Page

QuickSpecs

HPE FlexNetwork MSR4000 Router Series

Standard Features

3

Features and benefits

Performance

100, 3Gbps for

The MSR4000 series is available with standard or high encryption, an embedded hardware encryption accelerator to improve
encryption performance; IPSec encryption throughput can be up to 28 Gb/s with a maximum of 10,000 IPSec VPN tunnels

Product architecture

Defined

based

employs a separate controller to make routing decisions. OpenFlow matches packets against one or

provides multicore processors, gigabit switching, and PCIE bus; dual Main Processing Units, four internal power supplies (N+1

the potential to deliver the functionality of multiple devices,

ilitates near continuous operation and zero service disruption during planned or

plane events; service processing units (SPUs) perform data forwarding, encryption/decryption, and

perform route calculation, forward table maintenance, and configure

improves the bandwidth of I/O module slots from 100 Mb/s to 1000 Mb/s, and improves uplink performance from 1 Gb/s to

T and four SFP (Combo) slots, two voice processing module slots, and 2 GB DDR3 memory; SPU

-

300)

Layer 2 switching

supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE

allows traffic sampling

• Excellent forwarding performance

excellent full service performance (NAT + QoS + ACL Performance by Platform, IMIX Traffic), 1Gbps for SPU­SPU-200, 8Gbps for SPU-300.

• Powerful security capacity

• SDN/OpenFlow

OpenFlow is the communications interface defined between the control and forwarding layers of a SDN (Software­Networking ) architecture. OpenFlow separates the data forwarding and routing decision functions. It keeps the flow­forwarding function and
more flow tables. MSR support OpenFlow 1.3.1

• Ideal multiservice platform

provides WAN router, Ethernet switch, stateful firewall, VPN, and SIP/voice gateway all in one device

• Advanced hardware architecture

configuration), and internal and external CF cards are offered; new high-performance MIM modules (HMIM) supported

• New operation system version

ships with new Comware v7 operating system delivering the latest in virtualization and routing

• Open Application Platform architecture

provides unmatched application and services flexibility, with
creating capital and operational expense savings and lasting investment protection

• Distributed architecture with separation of data and control planes

delivers enhanced fault tolerance and fac
unplanned control­analyzing/filtering of data packets; main processing units
and monitor the SPU

• Field-programmable gate array (FPGA)

10 Gb/s

• Multi Gigabit Fabric (MGF)

eases utilization of the main processor by transmitting Layer 2 packets directly via the MGF

• Main processing unit (MPU)

provides 1 GbE management port; has default of 512 MB internal flash and 2 GB DDR3 memory

• Service processing units (SPU)

includes four 1000BASE­200/300 also has one 10GbE SFP+ slot; Forwarding performance: 10Mpps (SPU-100), 20Mpps (SPU-200), 36Mpps (SPU

• Spanning Tree Protocol (STP)

802.1s Multiple Spanning Tree Protocol (MSTP)

• Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) protocol snooping

controls and manages the flooding of multicast packets in a Layer 2 network

• Port mirroring

duplicates port traffic (ingress and egress) to a local or remote monitoring port

• VLANs

supports up to 4,094 VLANS or IEEE 802.1Q-based VLANs

• sFlow

Page

QuickSpecs

HPE FlexNetwork MSR4000 Router Series

Standard Features

4

Connectivity

density Ethernet access with WAN Fast Ethernet and Gigabit

IP technology that provides Layer 2 connectivity between distant Layer 2 network sites across an IP routed

scale data center that requires Layer 2

based network, using the "MAC in UDP" package

of Layer VPN technology. VXLAN can be based on an existing ISP or enterprise IP networks for decentralized physical site

multipoint L2VPN service over an MPLS or IP backbone. The backbone

communicate with each other as if they were on the same LAN. The following

VPLS),

Network mobility (NEMO) enables a node to retain the same IP address and maintain application connectivity when the node

supports internal loopback testing for maintenance purposes and an increase in availability; loopback detection protects

uses USB memory disk to download and upload configuration/OS image files; supports an external USB 3G/4G modem for a

-

Quality of Service (QoS)

manages traffic uniformly, and hierarchically schedules traffic by user, network service, and application; provides more

supports traffic shaping, MPLS QoS, MP QoS/LFI and Control Plane Policing (CoPP)

• Powerful aggregation capacity

supports integrated 10GbE LAN, and up to 64 E1 or eight T3 ports, and up to 148 Giga ports on one chassis.

• High-density port connectivity

provides up to eight interface module slots and up to four on-board Gigabit Ethernet and one 10GbE ports

• Multiple WAN interfaces

provides traditional links with E1, T1, Serial, ATM and ISDN; high­Ethernet with POE/POE+; and high-speed T3, 155 Mb/s OC3 access options

• Ethernet Virtual Interconnect (EVI)

EVI is a MAC-in­network. It is used for connecting geographically dispersed sites of a virtualized large­adjacency.

• VXLAN (Virtual eXtensible LAN)

VXLAN (Virtual eXtensible LAN, scalable virtual local area network) is an IP-

provides Layer 2 communication, and can provide service isolation for different tenants.

• Virtual Private LAN Service (VPLS)

Virtual Private LAN Service (VPLS) delivers a point-to­is transparent to the customer sites, which can
protocols support on MSRs, RFC4447, RFC4761 and RFC4762, BFD detection in VPLS, Support hierarchical HOPE(H­MAC address recovery in H-VPLS to speed up convergence.

• NEMO (Network Mobility)

travels across networks. It allows location-independent routing of IP datagrams on the Internet

• Packet storm protection

protects against broadcast, multicast, or unicast storms with user-defined thresholds

• Loopback

against incorrect cabling or network configurations and can be enabled on a per-port or per-VLAN basis for added flexibility

• USB interface

3G/4G WAN uplink

• Flexible port selection

provides a combination of fiber and copper interface modules, 100/1000BASE-X support, and 10/100/1000BASE-T auto
speed detection plus auto duplex and MDI/MDI-X

• Hierarchical quality of service (HQoS)/Nested QoS

granular traffic control and quality assurance services than traditional QoS

• Traffic policing

supports Committed Access Rate (CAR) and line rate

• Congestion management

supports FIFO, PQ, CQ, WFQ, CBQ, and RTPQ

• Weighted random early detection (WRED)/random early detection (RED)

delivers congestion avoidance capabilities through the use of queue management algorithms

• Other QoS technologies

Page

QuickSpecs

HPE FlexNetwork MSR4000 Router Series

Standard Features

5

Layer 3 routing

for route determination; supports RIPv1 and RIPv2 routing; includes loop

state routing Interior Gateway Protocol (IGP), which supports ECMP, NSSA, and

delivers an implementation of the Exterior Gateway Protocol (EGP) utilizing path vectors; uses TCP for enhanced reliability

process; reduces bandwidth consumption by advertising only incremental updates; supports extensive

IS routing and extended

only network design

standard IPv4 packet; supports

Site Automatic Tunnel Addressing Protocol (ISATAP) tunnels; is an important element

across Label Switched Paths (LSPs), but uses simple labels to forward packets from any Layer

2 or Layer 3 protocol, which reduces complexity and increases performance; supports graceful restart for reduced failure

BGP) to establish private routes for increased

point VPNs across a provider network using only MPLS Label Distribution Protocol (LDP);

routable protocols;

tini

allows custom filters for increased performance and security; supports ACLs, IP prefix, AS paths, community lists, and
aggregate policies

Ease of deployment

supports TR069, both USB disk auto deployment and 3G SMS auto deployment

• Static IPv4 routing

provides simple manually configured IPv4 routing

• Routing Information Protocol (RIP)

uses a distance vector algorithm with UDP packets
protection

• Open shortest path first (OSPF)

delivers faster convergence; uses this link­MD5 authentication for increased security and graceful restart for faster failure recovery

• Border Gateway Protocol 4 (BGP-4)

• Intermediate system to intermediate system (IS-IS)

• Static IPv6 routing

• Dual IP stack

• Routing Information Protocol next generation (RIPng)

• OSPFv3

• BGP+

• IS-IS for IPv6

• IPv6 tunneling

• Multiprotocol Label Switching (MPLS)

for the route discovery
policies for increased flexibility; scales to very large networks

uses a path vector Interior Gateway Protocol (IGP), which is defined by the ISO organization for IS­by IETF RFC 1195 to operate in both TCP/IP and the OSI reference model (Integrated IS-IS)

provides simple manually configured IPv6 routing

maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network to an IPv6-

extends RIPv2 to support IPv6 addressing

provides OSPF support for IPv6

extends BGP-4 to support Multiprotocol BGP (MBGP), including support for IPv6 addressing

extends IS-IS to support IPv6 addressing

allows IPv6 packets to traverse IPv4-only networks by encapsulating the IPv6 packet into a
manually configured, 6to4, and Intra­for the transition from IPv4 to IPv6

uses BGP to advertise routes

impact; supports LSP tunneling and multilevel stacks

• Multiprotocol Label Switching (MPLS) Layer 3 VPN

allows Layer 3 VPNs across a provider network; uses Multiprotocol BGP (MP­security; supports RFC 2547bis multiple autonomous system VPNs for added flexibility; supports IPv6 MPLS VPN

• Multiprotocol Label Switching (MPLS) Layer 2 VPN

establishes simple Layer 2 point-to­requires no routing and therefore decreases complexity, increases performance, and allows VPNs of non­uses no routing information for increased security; supports Circuit Cross Connect (CCC), Static Virtual Circuits (SVCs), Mar
draft, and Kompella-draft technologies

• Routing policy

• Zero-touch deployment

Page

QuickSpecs

HPE FlexNetwork MSR4000 Router Series

Standard Features

6

Security

in Intrusion Prevention System (IPS) detects and protects the branch office from security threats. Optional HPE

Application layer protocol inspection, Transport layer protocol inspection, ICMP error message check, andTCP SYN check.

Lite, ICMPv4/ICMPv6, SCTP, DCCP, RAWIP, HTTP, FTP, SMTP, DNS,

based model to a more flexible, more

moving

zone policies offer considerable flexibility and granularity, so different inspection policies can be

distributes dynamic public addresses through the VPN Address Management (VAM) protocol, making

VPN establishment available between enterprise branches that use dynamic addresses to access the public network;

technology is more flexible and has richer features, such as NAT traversal

supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traffic to prevent unauthorized users from

er deny or permit traffic to be

forwarded; rules can be based on a Layer 2 header or a Layer 3 protocol header; rules can be set to operate on specific dates

allows normal packets to be forwarded correctly, but discards the attaching packet due to lack of reverse path route or

many NAT, and NAT control, enabling NAPT to support multiple connections; supports

to securely log in into a remote device; with authentication and encryption, it protects against IP spoofing

and plain text password interception; increases the security of SFTP transfers

Convergence

Specific Multicast (SSM) to manage IPv4 multicast networks; supports

nsmission of information;

allows multicast traffic to be forwarded across BGP networks and kept separate from unicast traffic

• IPS

Built­integration filters for client-side, branch protection from exploits and vulnerabilities

• Enhanced stateful firewall

Support more L4 and L7 protocols like TCP, UDP, UDP­SIP, H.323, SCCP.

• Zone based firewall

Zone-Based Policy Firewall changes the firewall configuration from the older interface­easily understood zone-based model. Interfaces are assigned to zones, and inspection policy is applied to traffic
between the zones. Inter­applied to multiple host groups connected to the same router interface.

• Auto Discover VPN (ADVPN)

collects, maintains, and

compared to traditional VPN technologies, ADVPN
of ADVPN packets, AAA identity authentication, IPSec protection of data packets, and multiple VPN domains

• IPSec VPN

supports DES, 3DES, and AES 128/192/256 encryption, and MD5 and SHA-1 authentication

• Access control list (ACL)

• Terminal Access Controller Access-Control System (TACACS+)

• Unicast Reverse Path Forwarding (URPF)

• Network login

• RADIUS

• Network address translation (NAT)

• Secure Shell (SSHv2)

• Internet Group Management Protocol (IGMP)

• Protocol Independent Multicast (PIM)

• Multicast Source Discovery Protocol (MSDP)

• Multicast Border Gateway Protocol (MBGP)

accessing the network, or for controlling network traffic to save resources; rules can eith

or times

delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security

incorrect inbound interface; prevents source spoofing and distributed attacks

allows authentication of multiple users per port

eases security access administration by using a user/password authentication server

supports one-to-one NAT, many-to­blacklist in NAT, a limit on the number of connections, session logs, and multi-instances

uses external servers

utilizes Any-Source Multicast (ASM) or Source­IGMPv1, v2, and v3

defines modes of Internet IPv4 and IPv6 multicasting to allow one-to-many and many-to-many tra
supports PIM Dense Mode (DM), Sparse Mode (SM), and Source-Specific Multicast(SSM)

allows multiple PIM-SM domains to interoperate; is used for inter-domain multicast applications

Page

QuickSpecs

HPE FlexNetwork MSR4000 Router Series

Standard Features

7

Layer 3 services

compression to provide the bandwidth

optimization for file service and web applications. The policy engine module determines which traffic can be optimized and

h other automatically and

PT) enables communication between IPv4 andIPv6 nodes by

performs IP address translation, and according to different protocols, performs

semantic translation for packets. This technology is only suitable for communication between a pure IPv4 node and a pure

s the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection

of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a

ross

Resiliency and high availability

ng

allows groups of two routers to dynamically back each other up to create highly available routed environments; supports

monitors the internal event and status of system hardware and software, identifying potential problems as early as possible;

the issues; based on the user configuration, onsite information

layer protocols such as

e customer build an IRF stack, namely a logical device, by interconnecting multiple
devices through stack ports. The customer can manage all the devices in the IRF stack by managing the logical device, which
is cost-effective like a box-type device, and scalable and highly reliable like a chassis-type distributed device.

Warranty and support

for warranty and support information included with your

e releases

http://www.hpe.com/networking/warrantysummary

• WAN Optimization

MSR performs optimization using TFO and a combination of DRE, Lempel-Ziv (LZ)

which optimization action should be taken. A pair of WAN optimization equipment can discover eac
complete the negotiation to establish a TCP optimization session.

• NAT-PT

Network Address Translation – Protocol Translation (NAT­translating between IPv4 and IPv6 packets. It

IPv6 node.

• Address Resolution Protocol (ARP)

determine

Layer 2 network

• User Datagram Protocol (UDP) helper

redirects UDP broadcasts to specific IP subnets to prevent server spoofing

• Dynamic Host Configuration Protocol (DHCP)

simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation ac
subnets

• Backup Center

acts as a part of the management and backup function to provide backup for device interfaces; delivers reliability by switchi
traffic over to a backup interface when the primary one fails

• Virtual Router Redundancy Protocol (VRRP)

VRRP load balancing

• In-Service Software Upgrade (ISSU)

lowers downtime caused by planned maintenance and software upgrades

• Embedded Automation Architecture (EAA)

collects field information and attempts to automatically repair
will be sent to technical support

• Multiple internal power supply slots

delivers higher reliability with a maximum of four internal power supplies, which can be installed

• Bidirectional Forwarding Detection (BFD)

detects quickly the failures of the bidirectional forwarding paths between two devices for upper­routing protocols and MPLS.

• Intelligent Resilient Fabric (IRF)

Intelligent Resilient Fabric (IRF), allows th

• 1-year Warranty

See http://www.hpe.com/networking/warrantysummary
product purchase.

• Software releases

to find software for your product, refer to http://www.hpe.com/networking/support
available with your product purchase, refer to

; for details on the softwar

Page