Secospace Security Routing Gateway

Secospace®

USG2100/2200/5100

BSR/HSR

Security Routing Gateway

Huawei Symantec Secospace BSR/HSR

Security Routing Gateway Security Level

2010-7-20 Huawei Symantec Confidential Page 2 of 9

Product Overview

The USG2100/2200/5100 BSR/HSR is a family of next-generation multi-service gateway

solution for integrated functions of security, routing and switching, wireless access and voice

services.

• The USG2100BSR/HSR is designed to meet the needs of small and medium-sized enterprises

and their branches, and SOHO users.

• The USG2200 BSR/HSR is designed to function as a core security device of a small or

medium-sized enterprise, or serves as a gateway to secure data transmission between the

branches of a small or medium-sized enterprise and the headquarters.

• The USG5100 BSR/HSR services large and medium-sized enterprises as a security gateway,

or it can be used to provide high-performance and multi-service integrated network security

solution.

• The USG2100/2200/5100 BSR/HSR is an all-in-one device that provides IP routing, flexible

network connections, and security. It can also grow its capacity to support the applications

requirements of enterprises. Based on an integrated, modular, and scalable system architecture,

the USG2100/2200/5100 BSR/HSR provides enterprises with on-demand services and

investment protection.

Through redesigned network access and security solution, the USG2100/2200/5100

BSR/HSR delivers a set of service standards for integrated end-to-end security for modern

enterprises. In addition to powerful routing and switching features, the USG2100/2200/5100

BSR/HSR also offers firewall, VPN, NAT, identity authentication, access control and UTM

capabilities. These security features protect networks against DDoS attacks, worm, Trojan horse,

virus, illegitimate access, and network violations. The seamless integration of the security features

and WAN, LAN, WWAN, and WLAN interfaces improves network performance and reliability




Product Family

USG2120 BSR

USG2130 BSR/BSR-W

USG2130 HSR/HSR-W

USG2160 BSR/BSR-W

USG2160 HSR/HSR-W

USG2205 BSR/HSR

USG2220 BSR/HSR

USG5120 BSR

USG5120 HSR

USG5150 BSR

USG5150 HSR




Product Features

Multi-service access and end-to-end integration

The USG 2100/2200/5100 BSR/HSR combines a multi-core hardware platform and

carrier-class routing software platform with the functions of security, routing, switching, wireless

access, and voice services with high speed and stability.

� The USG2100/2200/5100 BSR/HSR improves operational efficiency and total cost of

ownership (TCO) by lowering operational costs and energy usage, and simplifying

maintenance.

� Improves service interoperability by utilizing versatile and normalized modular

components.

� Helps optimize enterprises’ investment with highly flexible and scalable software

and hardware.

Abundant routes and spreading connections

� Enhances network flexibility with extensive routing features, such as static routing

and dynamic routing (RIP, OSPF, and BGP), and supports routing policies and routing

iteration.

� Session flows’ policy-based routing function enables the interworking of

policy-based routing and security features (such as NAT and ASPF) to achieve

interface-level load balancing. When one link fails, the traffic auto-switch to other

normal links.

� The built-in Layer-2 forwarding chip maintains the express switching capability at

Layer 2. This feature enables Layer-2 forwarding, routing, and security functions on one

device. The USG2100 BSR/HSR provides eight fixed Layer-2 switching interfaces, and

up to 18 Layer-2 downstream interfaces. The USG2100 BSR/HSR also supports 5FE

interface cards through extension. The USG2200 BSR/HSR supports up to 40 Layer-2




downstream interfaces through extension slots, while the USG5100 BSR/HSR up to

108.

Extensive interfaces and pace-keeping investment protection

The USG2100/2200/5100 BSR/HSR combines a scalable architecture with secure

connections, and allows users to choose access modes (WAN, WWAN, LAN, and WLAN) to

secure investment and high performance for enterprises and SOHO users. Features include:

� FE, GE, ADSL2+, E1/CE1, SA, G.SHDSL, 3G, and WiFi interface cards.

� WiFi: enabling WLAN access through WPA-PSK, WPA2-PSK, WEP, AES, and TKIP

encryptions; supporting 802.11a, 802.11b, 802.11g, and 802.11n; providing reliable

WLAN AP function through dual antennas, automatic rate adjustment, wireless channel

selection, transmit power adjustment, encryption, broadcast suppression, and SSID

hiding.

� Extended USB 3G interface: supporting all 3G standards such as WCDMA,

CDMA2000, and TD-SCDMA; compatible with WCDMA HSUPA/HSDPA/UMTS

2100/900 MHZ and EDGE/GPRS/GSM 1900/1800/900/850 MHz, CDMA2000 CDMA

800/1900 MHz, 1x RTT, 1x EV-DO Rev.0, and 1x EV-DO Rev.1, and TD-SCDMA

2010 to 2025 MHz and GSM/GPRS/EDGE 900/1800/1900 MHz.

� Open collaboration service release platform based on the high performance and stability

x86 board: compatible with PC standards; offering lower Total cost of Ownership (TCO)

and protects investment. The platform’s built-in industry application programs and open

application software supports Linux- and Windows-based new services and third-party

services. The platform also saves space occupation, power consumption, and

condensation costs, as well as simplifying maintenance and service complexity.

Comprehensive dedicated security technologies

The USG2100/2200/5100 BSR/HSR equips users with diversified security-dedicated

technologies.




� Status check firewall function: defends against network attacks and DDoS attacks;

providing mature NAT function; detects and defends against application-layer attacks in

real time.

� VPN (IPSec and SSL) function: delivers industry-leading encryption performance based

on the high-performance hardware encryption chip; supports multiple encryption

algorithms such as the DES, 3DES, AES, and RSA; ensures free and secure connections

with encrypted transmission. the USG2200/5100 -BSR/HSR default provides

2000 IPSec VPN tunnels

� IPS: detects information on the network in real time and implementing analysis and

comparison to identify the occurrence of intrusion and suspicious activities; provides

real-time alarms in multiple delivery methods; logs attack behaviors, blocks attacks;

further protects networks against internal and external attacks, viruses, spyware, and

malware.

� Anti-spam: defends against virus-, spyware-, and malware-infected mails, spam, and

other malicious mails.

� URL filtering and P2P/IM traffic control: prevents network security threats; eases

network violations; optimizes service bandwidths; promotes employees' working

efficiency; reduces legal liability as a result of illegitimate access.

Note: The SSL VPN function is optional. You can purchase related license to apply this function.




Typical Network Architecture

Product Specifications

Item USG2120 BSR USG2130 BSR/HSR USG2160 BSR/HSR

Forwarding

performance 160 Kpps 160 Kpps 180 Kpps

VPN

performance 10 Mbps 30 Mbps 50 Mbps

Fixed WAN

interface 1 x 10/100 WAN 1 x 10/100 WAN 1 x 10/100 WAN

Fixed LAN

interface 8 x 10/100 LAN 8 x 10/100 LAN 8 x 10/100 LAN

Maximum LAN

interface

intensity

13 13 18

Extension slot 1 MIC 1 MIC+3G Express 2 MIC+3G Express

USB interface 1 (v2.0) 1 (v2.0) 1 (v2.0)

VPN function Optional Optional Optional

WiFi function n y y

3G function y y y

InternetInternetInternetInternet Regional branchRegional branchRegional branchRegional branch

PartnerPartnerPartnerPartner HeadquartersHeadquartersHeadquartersHeadquarters Remote siteRemote siteRemote siteRemote site OfficeOfficeOfficeOffice

SA

GE/FE

ADSL2+

E1/CE1

3G

WAN connection

Encrypted connection




Item USG2120 BSR USG2130 BSR/HSR USG2160 BSR/HSR

Hardware

encryption n y y

WAN interface

support

FE, ADSL2+, G.SHDSL,

E1/CE1, SA, and 3G


E1/CE1, SA, and 3G


E1/CE1, SA, and 3G

Dimensions

(width x depth x

height)

420 mm x 255 mm x 44.45

mm

420 mm x 255 mm x 44.45

mm

420 mm x 255 mm x 44.45

mm

Weight 5.0 kg 5.0 kg 5.0 kg

Rated input

voltage AC: 100 V to 240 V 50/60 Hz

AC: 100 V to 240 V 50/60

Hz

AC: 100 V to 240 V 50/60

Hz

MTBF 12.67 years 12.67 years 12.67 years

Item USG2205 BSR/HSR USG2220 BSR/HSR USG5120 BSR/HSR USG5150 BSR/HSR

Forwarding

performance 250 Kpps 350 Kpps 800 Kpps 1500 Kpps

VPN

performance 300 Mbps 350 Mbps 1 Gbps 2 Gbps

Fixed interface 2 GE combo 2 GE combo 2 GE+2 GE combo 4 GE combo

Maximum LAN

interface

intensity

22 GE+20 FE 22 GE+20 FE 64 GE+20 FE 84 GE+28 FE

Extension slot 4 MIC+1 FIC 4 MIC+2 FIC 2 DFIC+2 FIC+4

MIC

4 DFIC+2 FIC+4

MIC

USB interface 2 (v2.0) 2 (v2.0) 2 (v2.0) 2 (v2.0)

VPN function Optional Optional Optional Optional

WiFi function 802.11a/b/g/n

3G function WCDMA, TD-CDMA, and CDMA2000

Hardware

encryption y y y y

Interface support FE, GE, ADSL2+, G.SHDSL, E1/CE1, SA, and 3G

Dimensions

(width x depth x

height)

442 mm x 420 mm x

44.45 mm

442 mm x 420 mm

x 44.45 mm

442 mm x 414 mm x

86.1 mm

442 mm x 414 mm x

130.5 mm

Weight 5.4 kg 5.4 kg 6.5 kg 8.3 kg

Rated input

voltage

AC: 100 V to 240 V

50/60 Hz

AC: 100 V to 240 V

50/60 Hz

DC: –48 V to –60 V

AC: 100 V to 240 V

50/60 Hz

AC: 100 V to 240 V

50/60 Hz

MTBF 12.67 years 12.67 years 12.67 years 12.67 years




Copyright© Huawei Symantec Technologies Co., Ltd. 2010

All rights reserved.

All statements, information, and recommendations in this document

are for reference only, and do not constitute the warranty of any

kind, expressed or implied.

Documents

Secospace Security Routing Gateway