• 256 MB, DDR3

• 128 MB

• Two 10/100/1000 Ethernet

• Eight 10/100 Ethernet

• IEEE 802.11b/g/n, 2.4 GHz

Two USB 2.0

• USB1: Used for 3G USB modem
• USB2: Reserved for future development

• Power, SYS, WAN0, WAN1, LAN0, LAN1 through LAN8, USB, 3G, WLAN, VPN, NMS

• Power switch button, Reset button

• Product dimensions (H x W x D): 12.16 in. x 7.09 in. x 1.73 in. (308 mm x 180 mm x 44 mm)
• Weight: 3.09 lb (1.4 kg)

• Metal

• External power adapter
• Input: 100 to 240V AC, 50 to 60 Hz
• Output: 12V DC, 3A
• Weight: 3.09 lb (1.4 kg)

• Fanless cooling
• Weight: 3.09 lb (1.4 kg)

• Operational temperature: 0⁰ to 40⁰C (32⁰ to 104⁰F)
• Nonoperational temperature range: -30⁰ to 60⁰C (-22⁰ to 140⁰F)
• Operational humidity range: 0% to 95% (noncondensing)

• New TCP connections per second: 3200
• Concurrent active TCP connections: 50,000
• IPsec VPN tunnels: 50

• IEEE 802.11n with 802.11b/g compatibility

• 2.4 GHz

• 20 MHz and 40 MHz

• 802.11b: 1, 2, 5.5, or 11 Mbps
• 802.11g: 6, 9, 12, 18, 24, 36, 48, or 54 Mbps
• 802.11n: 6.5/15, 13/30, 19.5/45, 26/60, 39/90, 52/120, 58.5/135, 65/150, 78/180, 117/270, or 130/300 Mbps

• Up to 4 SSIDs

• Wired Equivalent Privacy (WEP)
• Wi-Fi Protected Access (WPA)-Personal
• WPA2-Personal
• WPA-Enterprise
• WPA2-Enterprise

• Wi-Fi Multimedia (WMM)

• 2 omnidirectional 2-dBi gain external antennas with SMA connector

• 1 GE WAN port, 1 GE WAN/LAN convertible port.
• 8 FE LAN ports, 802.11b/g/n WLAN, and 2 USB 2.0 interfaces.
• Easily adapt to different network deployment requirements. Provides investment protection in a changing business environment

• Configurable as dual GE WAN ports or GE WAN port plus GE LAN port.
• When working as dual GE WAN ports, the GE ports can be in load balancing mode or failover mode.
• In load balancing mode, the traffic can be distributed to 2 links by TCP connection. The percentage of traffic for each link is configurable to adapt to different link bandwidths.
• In failover mode, redundancy for network connectivity is provided by primary and backup links. When the primary link is disconnected, traffic will automatically fail over to the backup link.
• When only a single WAN port is needed, the WAN1/LAN0 GE port can be configured to LAN trunk mode, connecting to a GE uplink switch to expand the LAN ports.

• Can serve as a backup link for the WAN port. The 3G/LTE USB modem is not connected, and will not generate traffic, until the WAN link fails.
• Can serve as the primary uplink for the device in remote locations where landline Internet is not available.
• Supports a virtual private dialup network (VPDN) to enable Layer 2 Tunneling Protocol (L2TP) VPN with a service provider's 3G/LTE network.
• Supports IP Security (IPsec) VPN tunnels over the 3G/LTE link, helping ensure high availability of VPN service

• VPN hardware acceleration engine supports a variety of cryptographic and hash algorithms, including Data Encryption Standard (DES), Triple DES (3DES), Advanced Encryption Standard (AES), Message Digest Algorithm 5 (MD5), and Secure Hash Algorithm (SHA).
• Reduces CPU load and enables rich services with VPN.
• Increases VPN throughput due to reduced latency.

• Support for VPN tunnel over dual WAN and 3G/LTE uplinks, providing protection against local link failure.
• Support for backup remote peer addresses, helping protect against remote device or link failure.
• Flexible VPN deployment with dynamic local IP address or private IP address behind NAT for VPN connection.
• Support for dead peer detection (DPD) mechanism to detect VPN tunnel status and reconnect as needed.

• Whitelists and blacklists for web filtering, enabling easy implementation of web access policy for the organization.
• Ability to filter file downloads by file type.
• Support for customized file filter types.
• Support for bulk importing of filter lists.

• Limit maximum session number for each IP address according to IP address range.
• Limit maximum session number by physical port number.
• Rate limit based on destination port, MAC address, local port, VLAN, or IP address.
• Rate limit based on protocol type.

• HCP/PPPoE/Static IP/L2TP
• DNS Proxy
• NAT/PAT
• Internet Group Management Protocol (IGMP) v1 and v2 Proxy and Snooping
• Dynamic DNS (DDNS) (TZO and DynDNS)
• Port Forwarding, Port Range Forwarding, Port Triggering
• Port Mirroring
• Hardware and software network edge (DMZ)
• Application Layer Gateway (ALG) (generic routing encapsulation [GRE], Session Initiation Protocol [SIP], H.323, Rapid Spanning Tree Protocol [RSTP])
• Universal Plug and Play (UPnP)

• Static
• Routing Information Protocol (RIP) v1 and v2
• Policy-based routing

• IEEE 802.1Q
• LAN by LAN ports and SSIDs
• 15 active VLANs
• VLAN trunk
•  
• Inter-VLAN routing

• Stateful Packet Inspection
• Block on proxy, Java, ActiveX, and cookies

• SYN flood
• UDP flood
• ICMP flood

• ARP flooding threshold
• ARP broadcast
• IP address and MAC binding

• Blacklist and whitelist
• Time range
• Protocol
• LAN port
• Source IP address and source IP range
• Destination IP address and destination IP range

• Allow or forbid
• Start and end time

• Site-to-site and remote access
• Main mode and aggressive mode
• Pre-shared key
• DES, 3DES, AES-128, AES-192, AES-256
• MD5 and SHA-1
• DH group 1 and DH group 2
• DPD
• NAT-T
• Primary and secondary IP for VPN tunnel peer
• IPsec VPN pass-through

• L2TP VPN pass-through

• CDMA Evolution-Data Optimized (EVDO) and WCDMA USB modem
• Automatic dialing by SIM card default APN, user name, password, and dialing strings
• Manual input by APN, user name, password, and dialing strings
• Automatic dialing
• Manual dialing
• Always online
• Idle to disconnect
• Display of SIM card information
• USB modem information
• VPDN

• 802.1p
• Differentiated services code point (DSCP)
• Uplink rate limit
• 4 queues per port
• 1 strict priority queue
• 10 application queues
• Policy based on destination IP port, MAC address, physical port, VLAN, and IP address
• Application protocol-based policy
• Session control based on IP address, physical port

• HTTP/HTTPS based web GUI
• 2-tier management privilege (administrator and user)
• Import and export of configuration file
• Firmware web upgrade, dual image firmware upgrade
• Diagnostics on ping, traceroute, HTTP get, DNS query, and syslog
• Network Time Protocol (NTP)
• SNMP v1, v2c, and v3
• TR-069 over HTTP