HPE JG531A Product Data Sheet

Data sheet

HPE MSR93x Router Series

Key features

• Converged high-performance routing, switching, security, SIP, and 300 Kpps performance

• Integrated GbE WAN and LAN, ADSL2+, and optional serial port

• Integrated 4G LTE and 3G/dual 3G wireless WAN (WWAN) as well as IEEE 802.11b/g/n WLAN

• Embedded encryption, NAT, DVPN, GDVPN, security features

• Unified OS, zero-touch solution, and single-pane-of-glass management

Product overview

The HPE MSR93x Router Series is a high-performance, small-branch router that delivers integrated
routing, switching, security, SIP, embedded IEEE 802.11b/g/n WLAN connectivity, integrated 4G LTE
and 3G, serial port, ADSL2+ (annex A/M, annex B/J, ADSL2+ over POTS, and ADSL2+ over ISDN),
and an optional dual 3G WAN—all in a single box.

The MSR93x Router Series solutions deliver up to 300 Kpps forwarding with comprehensive IPv4
and IPv6 routing, MPLS, QoS, firewall, Network Address Translation (NAT), VPN, switching, voice,
and wireless capabilities in a compact, fixed form factor. Moreover, this router series is based on
open standards for seamless integration within small-branch deployments.

Data sheet

Page 2

Features and benefits

Quality of Service (QoS)

• Traic policing

Supports Committed Access Rate (CAR) and line rate

• Congestion management

Supports FIFO, PQ, CQ, WFQ, CBQ, and RTPQ

• Weighted random early detection (WRED)/random early detection (RED)

Delivers congestion avoidance capabilities using queue management algorithms

• Other QoS technologies

Support traic shaping, FR QoS, and MP QoS/LFI

Management

• Industry-standard CLI with a hierarchical structure

Reduces training time and expenses, and increases productivity in multivendor installations

• Management security

Restricts access to critical configuration commands; oers multiple privilege levels with password
protection; ACLs provide Telnet and SNMP access; local and remote syslog capabilities allow
logging of all access

• SNMPv1, v2, and v3

Provide complete support of SNMP; provide full support of industry-standard management
information base (MIB) plus private extensions; SNMPv3 supports increased security
using encryption

• Remote monitoring (RMON)

Uses standard SNMP to monitor essential network functions; supports events, alarm, history,
and statistics group plus a private alarm extension group

• FTP, TFTP, and SFTP support

Oer dierent mechanisms for configuration updates; FTP allows bidirectional transfers over a
TCP/IP network; trivial FTP (TFTP) is a simpler method using User Datagram Protocol (UDP);
Secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security

• Debug and sampler utility

Supports ping and traceroute for both IPv4 and IPv6

Data sheet

Page 3

• Network Time Protocol (NTP)

Synchronizes timekeeping among distributed time servers and clients; keeps timekeeping
consistent among all clock-dependent devices within the network so that the devices can
provide diverse applications based on the consistent time

• Information center

Provides a central repository for system and network information; aggregates all logs, traps,
and debugging information generated by the system and maintains them in order of severity;
outputs the network information to multiple channels based on user-defined rules

Connectivity

• Packet storm protection

Protects against broadcast, multicast, or unicast storms with user-defined thresholds

• Loopback

Supports internal loopback testing for maintenance purposes and an increase in availability;
loopback detection protects against incorrect cabling or network configurations and can be
enabled on a per-port basis for added flexibility

• Integrated 3G WWAN capability

– Oers models with built-in 3G and dual 3G WWAN connectivity

– Supports up to four antennas in dual 3G models for improved connectivity and throughput

– Comes with a default 3G antenna; additional 3G antennas are also available

• 3G and 4G LTE access

Support popular 3G and 4G LTE USB modems; for a list of supported products, contact your
local Hewlett Packard Enterprise representative

• Multiple Gigabit Ethernet connection options

Provide GbE WAN and GbE LAN ports onboard

• 4G LTE Verizon and global carrier support

Deliver embedded 4G LTE wireless WAN backhaul connectivity with two dierent carrier
chipset options

• Multiple advanced WAN interfaces

Provide traditional connection options including serial, ADSL2+ (Annex A/M, annex B/J, over POTS,
or over ISDN), four-pair, and WAN Gigabit Ethernet ports; and oer wireless access with 4G LTE
and 3G connectivity

Data sheet

Page 4

Performance

• Forwarding performance

Provides up to 300 Kpps; and meets current and future bandwidth-intensive application demands
for enterprise businesses

• Embedded encryption

Supports up to 100 VPN tunnels and up to 160 Mbps encryption throughput

• Gigabit Ethernet interface

Provides a connection to the network that eliminates the network as a bottleneck

Resiliency and high availability

• Backup center

Acts as a part of the management and backup function to provide backup for device interfaces;
delivers reliability by switching traic over to a backup interface when the primary one fails

• Virtual Router Redundancy Protocol (VRRP)

Allows groups of two routers to back each other up dynamically to create highly available routed
environments; and supports VRRP load balancing

• WWAN with integrated 3G

Allows small-branch users to maintain remote oice-data connectivity to the data center or
headquarters, using integrated carrier connections

Layer 2 switching

• Spanning Tree Protocol (STP)

Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster
convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

• Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD)
protocol snooping

Control and manage the flooding of multicast packets in a Layer 2 network

• Port mirroring

Duplicates port traic (ingress and egress) to a local or remote monitoring port

• Port isolation

Increases security by isolating ports within a VLAN while still allowing them to communicate
with other VLANs

• VLANs

Supports IEEE 802.1Q-based VLANs

• sFlow®

Allows traic sampling

Data sheet

Page 5

Layer 3 services

• Address Resolution Protocol (ARP)

Determines the MAC address of another IP host in the same subnet; supports static ARPs;
gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP
operation between subnets or when subnets are separated by a Layer 2 network

• Dynamic Host Configuration Protocol (DHCP)

Simplifies the management of large IP networks and supports client and server; DHCP Relay
enables DHCP operation across subnets

• Built-in applications support

– Device management controller (DMC)

Acts as the gateway of a virtual “network training room”

– Wisdom Network (WiNet) technology

Helps manage a large number of scattered network devices centrally

– Remote terminal connection (RTC) and true type terminal (TTY) access

Allows the connection of a terminal to a router through an asynchronous interface for data
exchange with a front-end processor (FEP) or another terminal through the router

Layer 3 routing

• Static IPv4 routing

Provides simple manually configured IPv4 routing

• Routing Information Protocol (RIP)

Uses a distance vector algorithm with UDP packets for route determination; supports RIPv1
and RIPv2 routing; includes loop protection

• Open Shortest Path First (OSPF)

Delivers faster convergence; uses this link-state routing Interior Gateway Protocol (IGP), which
supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for
faster failure recovery

• Border Gateway Protocol 4 (BGP-4)

Delivers an implementation of the Exterior Gateway Protocol (EGP) utilizing path vectors; uses
TCP for enhanced reliability for the route discovery process; reduces bandwidth consumption
by advertising only incremental updates; supports extensive policies for increased flexibility;
scales to very large networks

Data sheet

Page 6

• Intermediate system to intermediate system (IS-IS)

Uses a path vector Interior Gateway Protocol (IGP), which is defined by the ISO organization
for IS-IS routing and extended by IETF RFC 1195 to operate in both TCP/IP and the OSI
reference model (Integrated IS-IS)

• Static IPv6 routing

Provides simple manually configured IPv6 routing

• Dual IP stack

Maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network
to an IPv6-only network design

• Routing Information Protocol next generation (RIPng)

Extends RIPv2 to support IPv6 addressing

• OSPFv3

Provides OSPF support for IPv6

• BGP+

Extends BGP-4 to support Multiprotocol BGP (MBGP), including support for IPv6 addressing

• IS-IS for IPv6

Extends IS-IS to support IPv6 addressing

• IPv6 tunneling

Allows IPv6 packets to traverse IPv4-only networks by encapsulating the IPv6 packet into a
standard IPv4 packet; supports manually configured, 6 to 4, and Intra-Site Automatic Tunnel
Addressing Protocol (ISATAP) tunnels; is an important element for the transition from IPv4 to IPv6

• Policy routing

Allows custom filters for increased performance and security; supports ACLs, IP prefix, AS paths,
community lists, and aggregate policies

• BGP-4+ support

Utilizes the BGP-4 (RFC 4271) exterior routing protocol for routing integrity and reliability
between dierent autonomous systems

Security

• Access control list (ACL)

Supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traic to prevent
unauthorized users from accessing the network, or for controlling network traic to save resources;
rules can either deny or permit traic to be forwarded; rules can be based on a Layer 2 header
or a Layer 3 protocol header; rules can be set to operate on specific dates or times

Data sheet

Page 7

• Terminal Access Controller Access-Control System (TACACS+)

Delivers an authentication tool using TCP with encryption of the full authentication request,
providing additional security

• Network login

Allows authentication of multiple users per port using the IEEE 802.1X standard

• Remote Authentication Dial In User Service (RADIUS) login

Eases security access administration by using a password authentication server

• NAT enablement

Facilitates one-to-one NAT, many-to-many NAT, and NAT control—enabling NAT-PT to support
multiple connections; supports blacklisting in the NAT/NAT-PT; and enables a limit on the number
of connections, session logs, and multiple instances

• SSHv2

Uses external servers to safely log in to a remote device or MSRs from a remote location;
protects against IP spoofing and plain text password interception, with authentication and
encryption; and increases the security of SFTP transfers

• Unicast Reverse Path Forwarding (URPF)

Allows normal packets to be forwarded correctly, but discards the attaching packets due
to lack of a reverse path route or an incorrect inbound interface; and helps prevent source
spoofing and distributed attacks

• IPSec VPN

Supports DES, 3DES, and AES 128/192/256 encryption as well as MD5 and SHA1 authentication

• DVPN

Collects, maintains, and distributes dynamic public addresses through the VPN Address
Management (VAM) protocol, making the VPN establishment available between enterprise
branches that use dynamic addresses to access the public network; compared to traditional
VPN technologies, the DVPN technology is more flexible and has richer features, such as NAT
traversal of DVPN packets, AAA identity authentication, IPSec protection of data packets, and
multiple VPN domains

Data sheet

Page 8

Convergence

• Internet Group Management Protocol (IGMP)

Utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4
multicast networks; supports IGMPv1, v2, and v3

• Protocol Independent Multicast (PIM)

Defines modes of Internet IPv4 and IPv6 multicasting to allow one-to-many and many-to-many
transmission of information; supports PIM Dense Mode (DM), Sparse Mode (SM), and
Source-Specific Mode (SSM)

• Multicast Source Discovery Protocol (MSDP)

Allows multiple PIM-SM domains to interoperate; is used for inter-domain multicast applications

• Multicast Border Gateway Protocol (MBGP)

Allows multicast traic to be forwarded across BGP networks and kept separate from unicast traic

• Internet Group Management Protocol (IGMP) snooping and proxy

– Monitor and observe IGMP network traic, allowing the network device to listen in on the

IGMP conversation between hosts and routers—enabling better IP multicast stream control

– Allow a multicast router to learn multicast group membership information; and enables it to

forward multicast packets

• Multicast VPN and bidirectional protocol-independent multicasting (PIM)

– Allow rich multicast services such as video conferencing and data sharing amongst

enterprise VPN-based deployments

– Improve scalability of various applications through the use of bidirectional PIM

Integration

• Embedded NetStream

Improves traic distribution using powerful scheduling algorithms, including Layer 4 to 7 services;
monitors the health status of servers and firewalls

• Embedded VPN firewall

– Provides enhanced stateful packet inspection and filtering

– Delivers advanced VPN services with Triple DES (3DES) and Advanced Encryption Standard

(AES) encryption at high performance and low latency

– Oers Web content filtering and application prioritization and enhancement