Agenda
• Difficulties encountered by SMBs and individual studios in
the Work From Home era
• The market exclusive functions brought by QHora-301W
fulfills your needs
• Hardware advantages
• Dual-port 10GbE meets all your application scenarios
• High speed Wi-Fi 6 routing
• The powerful QuRouter OS
• Enable subscription-free QNAP SD-WAN on QHora-301W
Difficulties encountered by
SMBs and individual studios in
the Work From Home era
Site-to-site VPN were only used by a few
branches and remote officers
HQ
Tokyo Taipei
VPN
Remote
Worker
Remote
Worker
During the pandemic, number of remote workers
dramatically increased due to working from home
HQ VPN
No one in
office
Remote
Worker
Remote
Worker
Remote
Worker
HQ VPN
Distributed remote working style creates many issues
Machine delivery and
maintenance is
time-consuming
IT admin cannot manage
organization-wise network
devices efficiently.
VPN connection
frequently crashed
Data security
issues
Setting up site to
site VPN is time
consuming
Current router only has
one 10GbE, unable to do
remote backup.
Wireless connection
cannot afford the sudden
increase of wireless
device from home users
Existing Wi-Fi routers cannot handle the sudden increase in
network equipment and transmission demand
• Multiple devices can only take turns to
connect to the network. This condition
causes network congestion.
• The transmission speed of existing routers
is slow, and data cannot be backed up
efficiently through wireless network.
• Affect family members’ experience of
watching movies or play games.
Remote backup is needed but common Wi-Fi 6 router
usually only has one 10GbE port
• Only has one 10GbE
• 10GbE WAN corresponding to 2.5GbE and 1GbE LAN cannot play
the high-speed internal and external network transmission speed
Common
router
Slow
VPN
VPN
connection
crashed
• More remote clients connect and exchange traffic through a single or few VPN routers in HQ.
• Increasing overload & performance bottleneck on the HQ site.
• More network stability & reliability issues resulted from the overloaded VPN router in HQ site.
VPN
VPN
VPN
VPN
VPN
HQ
More work-from-home
More distributed remote workers
Designers store files and images
PM get data
Sales use ERP
RD uses server to develop software
Purchasing dept. use ERP
Server connects via VPN
Lack of effective ways to manage large
number of external devices
• IT administrators cannot manage equipment usage and connection status
• Not every remote worker has the knowledge to set up and maintain the on-prem devices
• Device & network troubleshooting can be time-consuming
VPN
VPN
VPN
VPN
VPN
VPN
HQ
IT Overload
Designers store files and images
PM gets data
Salespersons use ERP
RD uses server to develop software
Procurement dept. use ERP
Server connects via VPN
Setting up site-to-site VPN is
time and labor consuming
??
??
Employees who need to exchange data frequently within the group would need to create site to site
VPN network by themselves. But setting up VPN is not easy, and special equipment may be
required, hence, deploying a large mesh VPN solution can be very time and labor consuming.
Router
Employee
Productivity
Decreased!
Router
Router
Router
Enterprise level VPN solution is expensive
SMB start to look for VPN solutions on the market to solve these problems, but not every
SMB can afford the high cost for extending or building a complete VPN solution.
New Generation WiFi 6
and Dual 10GbE SD-WAN Router
• Wireless connectivity: support WiFi 6 (802.11ax)
• Flexible network deployment: Dual 10GbE ports
• VPN deployment: built-in SD-WAN technology
QHora-301W
New-gen Router Requires WiFi 6
1200 Mb/s
867 Mb/s
160MHz channels comparison
Wi-Fi 5
Wi-Fi 6
Support WiFi 6 dual-band 802.11ax (2.4GHz & 5GHz), delivering max. 3600Mb/s transfer speeds. WiFi 6 is
1.38 times faster than WiFi 5.
In 2020, most new client devices will support WiFi 6,
including computers, mobile phones and tablets.
New-gen Router Requires WiFi 6
By using OFDMA & MU-MIMO, multiple
sets of devices can transmit data at the
same time, thereby improving network
efficiency and reducing connection delay
User 1
(Message)
User 2
(Online
Shopping)
User 3
(Social Media)
Traditional
OFDM
OFDMA
Waiting… Waiting…
• By increasing the amount of data that can
be carried in each packet, the speed will
definitely increased.
• Compared with Wi-Fi 5 (11ac) which uses
256-QAM, 1024-QAM can increase the
rate by 1.25 times.
1.25 X
Faster speed
11ax
1024-QAM
11ax
256-QAM
10bits
8bits
1.25x
New-gen Router Requires WiFi 6
Support high-speed internal and external network transmission
Meet the needs of remote backup of large business files
QHora-301W
New-gen Router Requires Dual 10GbE Port
ＷＡＮ
ＬＡＮ
No need to purchase
other devices for multi-
site VPN
• Auto VPN tunneling
• Support network optimization to
ensure connection quality
QuWAN Orchestrator
New-gen Router needs to provide
SD-WAN service
Built-in SD-WAN solution (QuWAN), supporting full Mesh VPN for easy multi-site VPN deployment.
Subscription-Free Center ManagedFlexible Deployment
QHora-301W
Hardware
Advantages
Hardware Appearance
WiFi Enabled
10GbE Connectivity
2 x USB
3.2 Gen 1
4 x 1 GbE Ports
(1000/100/10Mbps)
2 x 10 GbE Ports
(10G/5G/2.5G/1G/100M)
8 x 5dBi
Internal Antennas
1GbE Connectivity
Status
Power
12V DC Input
Power Switch
WPS
Reset Button
Configurable
Ports for WAN
Eight Internal Antennas
• Professionally tuned
• Powerful Performance
Powerful Performance
• Powered by Hawkeye v2
IPQ8072A quad-core 2.2GHz 64-bit
processor
• Can quickly handle 10G throughput
network transmission
RAM
1GB
2.2GHz
64-bit
Quad-core
• 1GB system memory.
QHora-301W can
reliably support more
concurrent users
• 4GB eMMC Flash Storage
• Provide multiple funcions on
Qhora-301W. ex, QVPN,
SD-WAN
Fanless Design:
Quiet Operation x Maintain Performance
• Fanless with unique ventilated
construction allows QHora-301W to
maintain its throughput efficiency
within 0-40°C operating temperature.
• Quiet operation makes QHora-301W
the perfect home routing solution for
worldwide use.
Hardware Specifications
Function QHora-301W
Network Interface (RJ45)
• 4 x RJ-45 GbE ports (WAN/LAN configurable)
• 2 x RJ-45 10GbE ports (10G/5G/2.5G/1G/100Mbps, WAN/LAN configurable)
Antenna
8 Internal 5dBi Antennas
Processor
Qualcomm IPQ8072A Hawkeye 2 Quad-core 2.2 GHz 64-bit CPU
Memory
1GB RAM
Flash Storage
4GB eMMC
Wireless
• Dual-band AX3700
5G (2475Mbps): 4x4 (80MHz), 2x2 (160MHz)
2.4G (1182Mbps): 4x4 (40MHz)
• WPS button
Mounting Support
VESA 75 x 75 mm
(Optional third-party mounting kits are available for wall-mount, table mount and pole mount).
Fanless Design Maintain consistent system performance within 0-40C operating temperature
SD-WAN Max VPN Tunneling 30
QHora-301W
Unboxing
Dual 10GbE ports meets all
your application scenarios
Scenario One: 2 x 10GbE LAN Connections
1G WAN
Multiple LAN Users
10G LAN
10G LAN
• Build a high-speed 10GbE Intranet by connecting 2 x 10GbE ports to 10GbE devices in LAN environment.
• Benefits: accelerate file access and sharing within LAN.
WiFi 6
Scenario Two: 1 x 10GbE WAN
& 1 x 10GbE LAN Connections
10G LAN
Ta ipe i
10G WAN
10G LAN
Ne w Yo r k
10G WAN
• High-speed inter-office VPN network with 10GbE Internet and 10GbE Intranet connectivity.
• Benefits: streamlined cross-site file backup, synchronization and sharing.
Scenario Three: Multi-WAN with SD-WAN &
2 x 10GbE LAN Connections
Dual 1G WAN
Multiple LAN
Users
10G LAN
10G LAN
• WAN optimization with WAN aggregation, WAN failover & load balancing, and flexible static routing to increase data
transfer efficiency across WANs
• Auto mesh VPN for easy multi-site VPN network deployment
• Benefits: Secure cross-site VPN network with optimized WAN connections
WiFi 6
Wi-Fi 6
High speed wireless
transmission
High-performance Wireless Network
5GHz
160 MHz80 MHz
2.4GHz
20 MHz 40 MHz
• 802.11ax dual-band (2.4GHz & 5GHz)
• Up to 160MHz channel bandwidth with
maximum 3600 Mb/s total throughput
• MU-MIMO allowing for more concurrent WiFi clients
• OFDMA technology and eight antennas increase
WiFi signal coverage
• Perfect solution for smart IoT home
***160MHz channel will be supported in 2020/Q4
Enterprise-grade Feature: Virtual Access Point
• QHora-301W supports VAP (Virtual AP) function, allowing for running up to 6 virtual APs. Each VAP
has its own SSID & access right profiles and customized routes/policy to WAN Internet.
• By connecting to a wireless SSID, different group of users (or device clients) will be bridged
to a different VLAN, such as office-intranet, home & guest network.
VAP Set 1 (Smart Connect)
SSID: Family (2.4G & 5G)
VAP Set 2
SSID: Work_1F (2.4G)
SSID: Work_2F (5G)
VAP Set 3
SSID: School (2.4G)
SSID: School (5G)
VLAN 10
QHora-301W
VLAN 20
VLAN 30
The Powerful
QuRouter OS
VAP (Multiple SSID)
QRouter OS
QuRouter Architecture
Orchestrator
2.4G/5G Wi-Fi 6 AX3600 Dual 10GbE Ethernet Ports 9.4Gbps Forwarding Rate
Linux kernel
AQR 113C IPQ8072AQCN5054
NAT offloadMU-MIMO OFDMA Crypto Engine USB Mgmt
Wi-Fi 6
L2 Networking
L3 Networking
QuWAN SD-WAN802.1Q VLAN
Static Routing
Protocol Base Firewall
FTP Server
Ipsec VPN HW Acceleration
The Powerful QuRouter OS
Fullfills all the functions you need just like other common router
Features
QuRouter OS
Common Router
Dashboard & Status
Device and system
status
WAN Status
WiFi/Guest
WiFi Status
Connected
devices info
v v
Advanced Network Settings
Selectable
WAN (1G & 10G) v v
VLAN Setting
802.3Q VLAN (Support
for wire and wireless interface) v v
Routing
IPv4
Static Routing v v
FIrewall
Protocol
based firewall v v
NAT
IPv4 NAT
Port
Forwarding
v v
Access Control
Parental
control. Website and schedule control. v v
Wireless Settings
2.5G/5G
configurable SSID
Up
to 6 VAP (Multiple SSID)
Guest
WiFi
802.3Q VLAN
supported
v v
AP Mode
Set router to bridge mode for extending wireless coverage
v v
QuRouter OS has a friendly
graphical router management
• A user-friendly graphical web management interface helps users quickly grasp the network connection status.
• Not only can you effectively manage the wired and wireless networked devices in the internal and external
networks, but also perform advanced function settings such as firewall, VPN, security, and QuWAN network.
Use Qfinder Pro to find QHora-301W
It doesn’t matter if you forget the network settings. You can find your
QHora-301W IP location in seconds through QNAP Qfinder Pro. The MAC
information and firmware version are clear at a glance. You can also
directly update QuRouter OS to the latest version through Qfinder Pro
Demo:
QuRouter OS
QHora-301W
is More Than
Just a Powerful
Router
QNAP QuWAN is a complete SD-WAN solution that provides enterprise IT managers with a
simple, fast, secure and efficient network connection structure. You can easily and quickly build
a multi-site VPN network and centrally manage it from a cloud platform.
QVPN
QVPN
Auto VPN Network
QHora-301W
QHora-301W
QuWAN is a complete SD-WAN solution
Efficiently build multi-site VPN
As long as QHora-301W is connected
to QuWAN Orchestrator, a private
network can be established in the
same organization
*** Maximum VPN tunnel scale: 30
Editing siteDevelopment site
Data sharing
Germany
Japan
Material creation
site
• Mesh VPN topology is suitable for
a network architecture that requires fast
and multiple route network.
• Mesh VPN can be formed by multiple
hubs automatically
• Public IP is required for being hub
HQ
Branch
Mesh
QHora-301W
Home office
Flexible VPN Topology: Mesh VPN
Home office
• Hub & Spoke topology is suitable for a network architecture that requires fast deployment,
extension and backup route.
• All data transmission between edges will go through a hub
• If your device uses private IP, it can connect to network topology as Edge
Edge
Hub
Edge
QHora-301W
Flexible VPN Topology: Hub & Spoke
QHora-301W
Network Topology Case
100Mbps
100Mbps
200Mbps
Auto Mesh VPN WAN Optimization Cloud Management
Cost Optimization Intuitive Web Management Networking Security
QuWAN’s Features and Benefits
WAN aggregation to improve
data transmission rate
WAN aggregation is effective in achieving a faster data transmission for remote
backup and remotely mounted file system
10 G
QＨora-301W QＨora-301W
10 G
ISP WAN 2
WAN Aggregation
ISP WAN 1
WAN Failover
• Multi-site connection can form a backup system automatically that allow uninterrupted
collaborative operations.
• The central management platform sends warnings and notifications in real time
QHora-301W QHora-301W
ISP WAN 2
ISP WAN 1
10 G
10 G
WAN Load Balancing
ISP WAN 2
ISP WAN 1
• Using Multipath TCP (MPTCP) technology to automatically detect current network jitter, delay, and
packet loss conditions, so that each packet takes the best network path to the destination, so as to
achieve intelligent routing and uninterrupted connection for transmission
• Maintain long-term and efficient transmission by distributing traffic through multiple WANs
10 G
QHora-301W
Good Network Status！
ISP WAN 2
High latency, jitter and packet loss！
Deep Packet Inspection
** QoS and L7 Firewall is supported on 2021/Q1
Packet Flow
DPI engine for content inspection
Match:
Pattern 3
Match:
Pattern 2
Found
blacklist
packet
…
Match:
Pattern 1
• Through using deep packet
inspection technology, it can identify
and control network services based
on the characteristics of the
application layer to achieve L7
firewall and intelligent QoS
functions.
• Blacklist specific applications to
protect corporate network security.
Intelligent QoS and L7 Firewall
QＨora-301W
QoS
50% VoIP
30% ERP
20% File transfer
QＨora-301W
QＨora-301W
• Through the settings of different Service Classes, a
certain percentage of the network bandwidth is reserved
for important applications to keep important meetings
online. For example: Streaming / VoIP
** QoS and L7 Firewall will be supported on 2021/Q1
• Create L7 firewall based on
distinguishing application
characteristics
Connect Multiple Devices to SD-WAN
Network with QVPN
QVPN is QNAP's VPN solution with a pair of server and client. Multiple devices such as PC, mobile phone
and tablet can join and access to SD-WAN network for a more secure and reliable data transmission.
QVPN Client
QVPN Client
QVPN Client
QVPN
QVPN
QVPN
QHora-301W QHora-301W
QuWAN Orchestrator
Go to quwan.qnap.com and log in with QID to
view the QHora-301W device, network and VPN
connection status, organization-wise topology,
connection method. You can also perform
remote debugging through the cloud platform
Enable QuWAN to manage QHora-301W
through the cloud platform
Orchestrator
QHora-301W
QHora-301W
QHora-301W
A centrally managed platform solves the
management issues of multiple devices
Geological location
of each device
Overview
connection status
of all devices
Simultaneously
execute various
parameter settings
Intuitive graphical user
interface
Set once and apply to
all. Save time to set
device one by one.
Remote
troubleshooting (e.g.
packet capture)
01
05
02
03
04
06
Instant
Notification
IT Admin
Geological location of each device
Device and Network Status
QHora-301W Traffic Report
Organizational IP Segment Allocation
Remote Packet Capture Tool
QuWAN Network Topology
China Domain
Beijin
Japan
Global Domain
Organization
USA
One company can be an
organization
QuWAN network is divided
into two main domain: Global
and China
Multiple regions can be created
inside a domain.
Domain
Region
Organization
Chongqing
Chongqing
China Domain
Beijing
Japan
Global Domain
Organization
USA
QuWAN Network Topology
Site
Site
Device
Device
Site
Site
Device
Device
Site
Site
Device
Device
Site
Site
Device
Device
Site
Site
Device
Device
Site
Site
Device
Device
Usually One office or a smaller
area within a region is called site.
Each site can have one QuWAN
router enabled.
Site
Device
Chongqing
China Domain
Beijing
Japan
Global Domain
Organization
USA
QuWAN Network Topology
Hub & Edge
• All Hubs under the same domain automatically form Mesh VPN connections.
• Public IP is required for a device to be Hub.
• First device deployed in a region needs to be a Hub. This Hub will serve as the
primary Hub.
Hub
Site
Site
Site
Site
Site
Site
Hub
Hub
Hub
Hub
Mesh
Site
Site
Site
Site
Hub
Hub
Hub
Hub
Mesh
Site
Site
Chongqing
China Domain
Beijin
Japan
Global Domain
Organization
USA
QuWAN Network Topology
Hub & Edge
• A device can connect to QuWAN network as an Edge using private IP.
• An Edge needs to connect to a Hub under Hub & Spoke network structure.
• Edge automatically connects to the primary Hub.
• All data will be transferred through Hub.
Hub & Spoke
Edge
Site
Site
Edge
Edge
Site
Site
Site
Site
Hub
Hub
Hub
Hub
Mesh
Site
Site
Site
Site
Hub
Hub
Hub
Hub
Mesh
Site
Site
Edge
Edge
Hub & Spoke
QuWAN Network Topology
China Domain
Global Domain
Organization
Hub & Spoke
Site
Site
Edge
Edge
Site
Site
Site
Site
Hub
Hub
Hub
Hub
Mesh
Site
Site
Site
Site
Hub
Hub
Hub
Hub
Mesh
Site
Site
Edge
Edge
Hub & Spoke
MPLS
Beijin
JapanUSA
⚫ To comply to China network regulation, user needs to apply for Inter-Domain
Link by his or herself for the two domain to have VPN connection.
⚫ Inter-domain Link can only be set on hub.
Inter-Domain
Link
Chongqing
** Inter-Domain Link is supported on 2021/Q1
QuWAN Inter-Domain Link
Set the applied MPLS to
QuWAN Inter-Domain Link to
establish a cross china and
global domain private network
between the two QuWAN Hubs
Enable QuWAN on QHora-301W
Just select the organization, region and connection role, and your QHora-301W can build
VPN tunnel with other QuWAN devices within the same organization
***If your QHora-301W is a LAN device of another router, make sure to allow destination UDP Port 500, 4500, 5555, 7788
Demo:
Enable QuWAN on
QHora-301W
Loading...