robustfedora17

DatasheetHPVSR1000VirtualServicesRouterSeriesKeyfeaturesVirtualizedenterprise-classx86routingsoftwareFirewall,IPSec,andMPLSVPNsecurityAgiledeploymentsacrossthebranchoffice,datacenter,andcloudEasytodeployandmanageremotelyVMwareandKVMhypervisorsupportProductoverviewTheHPVSR1000RouterSeriesisavirtualizedapplicationthatprovidefunctionalitysimilartoaphysicalrouter.
TheVSR1000seriesenablessignificantoperationalsavingsasaresultofitsagilityandeaseofdeployment.
Likeothervirtualapplications,theroutersruninavirtualmachineonanindustry-standardx86-basedserver.
ResourcesontheVSR1000seriescanbedynamicallyallocatedandupgradedondemandasperformancerequirementsgrow.
TheVSR1000seriesisavailablein1,4,and8virtualCPUversionsthathavenoexpirationdate.
Robustroutingisprovidedbetweennetworkeddevicesusinganumberofpopularroutingprotocols.
Inaddition,theseriesprovidescriticalnetworkservicesassociatedwithtoday'senterpriserouterssuchasVPNgateway,firewall,andothersecurityandtrafficmanagementfunctions.
Avarietyofdeploymentmodelsaresupported,includingenterprisebranchCPEroutingandcloudoffloadingforsmall-tomedium-sizedworkloads.
2FeaturesandbenefitsVirtualizationHypervisorsupportsupportsthefollowingindustry-standardhypervisors:VMwareESXiversions4.
1,5.
0,and5.
1;LinuxKVM(Linuxkernelversion2.
6.
25orlater)RecommendedLinuxoperatingsystemsCentOS6.
3,Fedora17,Ubuntu12.
10,RedHatEnterpriseLinux(RHEL)6.
3,andSUSELinuxEnterpriseServer11SP2RecommendedvNICsE1000andVirtIOvirtualNICsarerecommendedMaximumof16vNICssupportedprovidesflexiblevirtualconnectivityLayer3routingStaticIPv4routingprovidessimplemanuallyconfiguredIPv4routingStaticIPv6routingprovidessimplemanuallyconfiguredIPv6routingRoutingInformationProtocol(RIP)usesadistancevectoralgorithmwithUDPpacketsforroutedetermination;supportsRIPv1andRIPv2routing;includesloopprotectionRoutingInformationProtocolnextgeneration(RIPng)extendsRIPv2tosupportIPv6addressingOpenshortestpathfirst(OSPF)deliversfasterconvergence;usesthislink-stateroutingInteriorGatewayProtocol(IGP),whichsupportsECMP,NSSA,andMD5authenticationforincreasedsecurityandgracefulrestartforfasterfailurerecoveryOSPFv3providesOSPFsupportforIPv6BorderGatewayProtocol(BGP)providesIPv4BorderGatewayProtocolrouting,whichisscalable,robust,andflexibleBGP+extendsBGP-4tosupportMultiprotocolBGP(MBGP),includingsupportforIPv6addressingIntermediatesystemtointermediatesystem(IS-IS)usesapathvectorInteriorGatewayProtocol(IGP),whichisdefinedbytheISOorganizationforIS-ISroutingandextendedbyIETFRFC1195tooperateinbothTCP/IPandtheOSIreferencemodel(IntegratedIS-IS)IS-ISforIPv6extendsIS-IStosupportIPv6addressingDualIPstackmaintainsseparatestacksforIPv4andIPv6toeasethetransitionfromanIPv4-onlynetworktoanIPv6-onlynetworkdesignIPv6tunnelingallowsasmoothtransitionfromIPv4toIPv6byencapsulatingIPv6trafficoveranexistingIPv4infrastructureMPLSsupportprovidesextendedsupportofMPLS,includingMPLSVPNsandMPLSTrafficEngineering(MPLSTE)IGMPv1,v2,andv3allowindividualhoststoberegisteredonaparticularVLANMulticastRoutingPIMDenseandSparsemodesprovidesrobustsupportofmulticastprotocolsPolicy-basedroutingmakesroutingdecisionsbasedonpoliciessetbythenetworkadministratorLayer3servicesDynamicHostConfigurationProtocol(DHCP)simplifiesthemanagementoflargeIPnetworksDomainNameSystem(DNS)providesadistributeddatabasethattranslatesdomainnamesandIPaddresses,whichsimplifiesnetworkdesign;supportsclientandserverAddressResolutionProtocol(ARP)determinestheMACaddressofanotherIPhostinthesamesubnetUserDatagramProtocol(UDP)helperredirectsUDPbroadcaststospecificIPsubnetstopreventserverspoofingAdditionalIPservicesdeliversforwarding/fastforwarding(unicast/multicast),TCP,FTPserver,FTPclient,TFTPclient,Telnetserver,Telnetclient,andNTP/SNTPQualityofService(QoS)Trafficclassificationutilizesport,MACaddress,IPaddress,IPpriority,DSCPpriority,TCP/UDPportnumber,andprotocoltypeTrafficpolicingsupportscommittedaccessrate(CAR)andlinerate(LR)Trafficshapingsupportsgenerictrafficshaping(GTS)CongestionmanagementsupportsFIFO,weightedfairqueuing(WFQ),andclass-basedqueuing(CBQ)Congestionavoidancesupportstaildropandweightedrandomearlydetection(WRED)MPLSQoSallowsMPLStrafficclassification3Virtualprivatenetwork(VPN)GenericRoutingEncapsulation(GRE)transportsLayer2connectivityoveraLayer3pathinasecuredway;enablesthesegregationoftrafficfromsitetositeIPSecprovidessecuretunnelingoveranuntrustednetworksuchastheInternetorawirelessnetwork;offersdataconfidentiality,authenticity,andintegritybetweentwonetworkendpointsSite-to-siteconnectivityconfigurestwoIPSecVPNgatewaystoprovidesecuresite-to-sitecommunicationbetweenoffices,partners,orsuppliers;bothIPSecorGREtunnelsareavailableSecurityAccesscontrolsupportsACL,AAA(localauthentication,RADIUS,HWTACACS,LDAP),RBAC,portal,andIPsourceguardAccesscontrollists(ACLs)provideIPLayer3filteringbasedonsource/destinationIPaddress/subnetandsource/destinationTCP/UDPportnumberFirewall–Applicationspecificpacketfirewalltracksoutboundsessionrequestsandtemporarilyenablessessioncontrolanddataexchangeacrossthefirewallboundary–PacketfilterfirewalldeliversstaticACLfirewallpolicysupportSecuremanagementaccessdeliverssecureencryptionofallaccessmethods(CLI,GUI,orMIB)throughSSHv2,SSL,and/orSNMPv3UnicastReversePathForwarding(URPF)limitsmalicioustrafficonanetworkNetworkaddresstranslation(NAT)providesamethodfortranslatingprivateIPaddressestopublicIPaddresses,reducingthenumberofIPaddressesused,andisolatestheenterpriseaddressingenvironmentAdditionalsecurityfeaturessupportsSSH(v1.
5and2.
0),GRE,L2TP,NAT/NAPT,sessionmanagement,connectionlimit,andpasswordmanagementResiliencyandhighavailabilityVirtualRouterRedundancyProtocol(VRRP)allowsagroupofrouterstodynamicallybackeachotheruptocreatehighlyavailableroutedenvironmentsBidirectionalForwardingDetection(BFD)supportsBFD,enablinglinkconnectivitymonitoringandreducesnetworkconvergencetimeManagementLocalmanagementsupportsCLI,automaticconfiguration,andfilesystemNetworkmanagementsupportsHPIntelligentManagementCenter,SNMPv1/v2c/v3,andNETCONFHPIntelligentManagementCenter(IMC)integratesfaultmanagement,elementconfiguration,andnetworkmonitoringfromacentralvantagepoint;built-insupportforthird-partydevicesenablesnetworkadministratorstocentrallymanageallnetworkelementswithavarietyofautomatedtasks,includingdiscovery,categorization,baselineconfigurations,andsoftwareimages;thesoftwarealsoprovidesconfigurationcomparisontools,versiontracking,changealerts,andmoreNetworkmonitoringsupportsSNMPv1/v2c/v3,RMON,Syslog,NQA,sFlow,NetStream,andEAASNMPv1,v2,andv3providecompletesupportofSNMP;providefullsupportofindustry-standardManagementInformationBase(MIB)plusprivateextensions;SNMPv3supportsincreasedsecurityusingencryptionWarrantyandsupportSoftwarereleasestofindsoftwareforyourproduct,refertowww.
hp.
com/networking/support;fordetailsonthesoftwarereleasesavailablewithyourproductpurchase,refertowww.
hp.
com/networking/warrantysummaryElectronicandtelephonesupportlimitedelectronicandbusiness-hourstelephonesupportisavailablefromHPfortheentirewarrantyperiod;toreachoursupportcenters,refertowww.
hp.
com/networking/contact-support;fordetailsonthedurationofsupportprovidedwithyourproductpurchase,refertowww.
hp.
com/networking/warrantysummary4HPVSR1000VirtualServicesRouterSeriesSpecificationsHPVSR1001Comware7VirtualServicesRouterE-LTU(JG811AAE)HPVSR1004Comware7VirtualServicesRouterE-LTU(JG812AAE)HPVSR1008Comware7VirtualServicesRouterE-LTU(JG813AAE)ManagementIMC-IntelligentManagementCenter;command-lineinterface;SNMPManager;Telnet;RMON1;FTP;IEEE802.
3EthernetMIBIMC-IntelligentManagementCenter;command-lineinterface;SNMPManager;Telnet;RMON1;FTP;IEEE802.
3EthernetMIBIMC-IntelligentManagementCenter;command-lineinterface;SNMPManager;Telnet;RMON1;FTP;IEEE802.
3EthernetMIBNotesIPv4forwardingperformance:maximum183KppsforVMwarehypervisor;maximum133KppsforKVMhypervisor.
ResultswithHPDL360G8Server(CPUE5-2690at2.
9GHz).
Higher-performanceserversmayyieldimprovedperformanceIPSecperformance:upto268Mb/sfor1518ByteswithVMwarehypervisorNumberofvirtualCPUssupported:1MinimumhardwarerequirementsCPU:2.
0GHzMemory:1GBDiskspace:8GBNetworkinterfaces:2virtualNICsIPv4forwardingperformance:maximum227KppsforVMwarehypervisor;maximum172KppsforKVMhypervisor.
ResultswithHPDL360G8Server(CPUE5-2690at2.
9GHz).
Higher-performanceserversmayyieldimprovedperformance.
IPSecperformance:Upto580Mb/sfor1518ByteswithVMwarehypervisorNumberofvirtualCPUssupported:4MinimumhardwarerequirementsCPU:2.
0GHzMemory:2GBDiskspace:8GBNetworkinterfaces:2virtualNICsIPv4forwardingperformance:maximum200KppsforVMwarehypervisor;maximum95KppsforLinuxKVMhypervisor.
ResultswiththeHPDL360G8Server(CPUE5-2690at2.
9GHz)Higher-performanceserversmayyieldimprovedperformanceIPSecperformance:Upto926Mb/sfor1518ByteswithVMwarehypervisorNumberofvirtualCPUssupported:8MinimumhardwarerequirementsCPU:2.
0GHzMemory:4GBDiskspace:8GBNetworkinterfaces:2virtualNICsServicesRefertotheHPwebsiteatwww.
hp.
com/networking/servicesfordetailsontheservice-leveldescriptionsandproductnumbers.
Fordetailsaboutservicesandresponsetimesinyourarea,pleasecontactyourlocalHPsalesoffice.
RefertotheHPwebsiteatwww.
hp.
com/networking/servicesfordetailsontheservice-leveldescriptionsandproductnumbers.
Fordetailsaboutservicesandresponsetimesinyourarea,pleasecontactyourlocalHPsalesoffice.
RefertotheHPwebsiteatwww.
hp.
com/networking/servicesfordetailsontheservice-leveldescriptionsandproductnumbers.
Fordetailsaboutservicesandresponsetimesinyourarea,pleasecontactyourlocalHPsalesoffice.
4AA4-8850ENW,CreatedSeptember2013Copyright2013Hewlett-PackardDevelopmentCompany,L.
P.
Theinformationcontainedhereinissubjecttochangewithoutnotice.
TheonlywarrantiesforHPproductsandservicesaresetforthintheexpresswarrantystatementsaccompanyingsuchproductsandservices.
Nothinghereinshouldbeconstruedasconstitutinganadditionalwarranty.
HPshallnotbeliablefortechnicaloreditorialerrorsoromissionscontainedherein.
Tolearnmore,visithp.
com/networking