XGPON FTTR Terminal

Item

Master ONT-ATR-4100XW

Edge ONT-AFRG-4000XW

Port

Uplink：XG-PON Port

Downlink：1*GPON，4*GE LAN，1*USB，AX3000 WiFi6，1*POTS Port

Uplink：GPON Port

Downlink：4*GE LAN，AX3000 WiFi6

Processor

Dual-core 1G Hz

Dual-core 1G Hz

Memory

4Gbit SDRAM

4Gbit SDRAM

Flash

2Gbit Nand Flash

2Gbit Nand Flash

Power

AC：Input 90～264V，47～67Hz；

AC：Input 90～264V，47～67Hz；

consumption

≤10W

≤7W

Weight

≤0.7kg

≤0.5kg

Environmental parameters

Operating temperature：-15°C～55°C

Storage temperature：-40°C～70°C

relative humidity：10%～90%，Non condensing

Operating temperature：-15°C～55°C

Storage temperature：-40°C～70°C

relative humidity：10%～90%，Non condensing

Item

Master ONT-ATR-4100XW

WAN

WAN mode

Support routing mode, bridging mode and hybrid mode of bridging and routing;

Support each WAN to specify different VLANs and address acquisition methods;

WAN Isolation characteristic

Support data isolation between different WAN connections

Support the isolation of network side and user side ARP messages

Layer-2 characteristic

VLAN

Support receiving untagged, priority tagged and tagged messages;

Support adding p-bit and/or VID to uplink untagged message, adding VID to priority tagged message, and supporting discarding tagged message;

Support the removal of tags from tagged messages received by downlink;

Support the switching function of VLAN on the network side and user side;

Package forwarding

Support port binding data forwarding;

Support VLAN binding data forwarding;

Support routing forwarding data forwarding;

WLAN

WLAN

AX3000 WiFi6，Comply with 802.11ax protocol requirements;

Support WLAN function enable/disable；

Working frequency

2.4GHz frequency band supports 20MHz, 40MHz, 20/40M adaptive bandwidth mode, the default is 20MHz bandwidth;

5GHz frequency band supports 20MHz, 40MHz, 80MMHz, 160MHz bandwidth mode;

Both the 2.4G frequency band and the 5G frequency band support the uplink and downlink OFDMA function, and support concurrent scheduling of STAs based on RUs;

2. Both 4G and 5G uplink and downlink should support 1024-QAM modulation;

Air interface function

Support WLAN transmit power adjustable;

Support automatic rate adjustment;

Support Target wake time (TWT);

Support configuration of Beacon beacon frame transmission interval and DTIM interval;

Support DCM and Extended Range functions;

Support multi-antenna beamforming technology;

Multiple SSID Features

Support multi-SSID function, support default 2.4G and 5G dual-band integration;

Supports configuring different VLANs for different SSIDs;

The BSSID, sending queue, security mechanism, configuration parameters, and binding relationship between WAN connections can be independently set for each SSID;

Support to start and stop any SSID, can not affect other SSID;

Sharing and Roaming

Support WLAN sharing to provide users with WLAN coverage;

802.11k, 802.11v, 802.11r protocols are supported between the main gateway and sub-gateway devices, enabling STA to roam between devices;

QoS

Support priority-based data processing and forwarding;

Support WLAN air interface fairness;

Support Long OFDM symbol sending mechanism;

Support Spatial Reuse/Bss Color function;

Supports distinction based on Bss Color;

load balancing

The main gateway and the sub-gateway cooperate to achieve load balancing;

Support load balancing based on the number of access users;

Support flow-based load balancing;

Support 2.4G/5G intelligent load balancing;

Address Management

IPv4/v6 dual protocol stack

Support IPv4/v6 dual protocol stack;

Support the creation of IPv4 and IPv6 network connections;

DS-Lite function

Support DS-Lite function;

Support independent opening and closing based on WAN connection;

IPv4 address management

WAN supports independent IP address acquisition;

The WAN side supports three methods: static IP address configuration, DHCP and PPPoE dynamic IP address acquisition;

LAN side supports DHCPv46 server function;

IPv6 address management

The WAN side supports independent acquisition of IPv6 address prefixes;

The WAN side supports obtaining IPv6 address prefixes from the server through DHCP-PD;

The WAN side supports obtaining the IPv6 address prefix from the server through PPPoE;

The LAN side supports DHCPv6 server function;

NAT

Support NAT/NAPT function;

Support ALG function;

Support Virtual Server (Port Forwarding) function

DNS

Support DNS relay;

DNS client supporting IPv4 and IPv6;

Support each WAN connection to use the corresponding DNS Server;

QoS

traffic tag

Supports traffic classification based on IP address, L4 port number, physical interface, and SSID;

Support flow classification based on MAC and 802.1p;

Supports traffic classification based on DSCP;

Supports traffic classification based on protocol type;

Supports the use of DSCP or 802.1p priority marking based on the above classification results;

Service flow rate limit

Support bandwidth guarantee and restriction mechanism based on data flow;

Supports upstream and downstream data flow rate limiting based on user-side physical ports, VLANs, and IP addresses;

queue scheduling

Supports 8 priority queues

Support for mapping data streams to different hardware queues;

Support SP, WRR, SP+WRR queue scheduling mode;

Session limitation

Support to limit the total number of sessions

VoIP

VoIP

The main gateway supports built-in voice gateway, and adopts SIP protocol to realize IP telephone service;

The main gateway supports basic calls, abnormal calls and supplementary services. Support calling number display, call waiting, three-way call, hotline and other supplementary business functions;

The main gateway supports T.30 transparent transmission fax and T.38 encoding fax, and supports fax signal tone detection;

The main gateway supports MODEM services, supports MODEM signal tone detection, and supports transparent transmission mode MODEM services;

VPN

IPSec

Support to provide secure encrypted channel based on IPSec;

Support transmission mode AH, tunnel mode AH, transmission mode ESP, tunnel mode ESP working modes;

Supports VPN networking forms such as Site to Site and Remote Access;

Support pre-shared key and X.509 digital certificate for VPN authentication;

Support DES, 3DES, AES 128, AES 192, AES 256 and other encryption algorithms that comply with the relevant regulations of national password management;

Support the establishment of IPSec tunnels based on fixed IP addresses and domain names;

Support IPSec packets transparently traverse NAT gateway;

Support disconnection detection (DPD) protocol;

Support prioritization of different VPN tunnels and non-VPN traffic;

Support Internet traffic forwarding;

VxLAN

Support the VxLAN packet encapsulation format specified in the RFC7348 protocol;

Support enabling or disabling the specified VNI;

Support VxLAN MAC entry management function;

Support fragmentation processing of large packets;

L2TP

Support LAC and LNS;

Support L2TPv2 function;

Support L2TP packet transparent traversal through NAT gateway;

Security feature

firewall

Support firewall level setting and firewall rule setting;

Support packet filtering based on packet characteristics;

Anti-attack

Support anti-DoS attack function;

Support enough to provide anti-port scanning function;

Support the function of opening and closing the service port;

Support to limit the number of source MAC addresses learned by each user LAN port;

Support static binding of IP address and MAC address;

Support the suppression of broadcast/multicast packets of specific protocols;

network access security

Support DMZ function;

Support access control based on MAC address and IP address;

Support setting black and white list to realize URL access control function;

WLAN Security

Support SSID broadcast on/off function;

Support Open System, Shared Key, WPA-PSK, WPA2-PSK, WPA-PSK/ WPA2-PSK mixed mode and other authentication methods;

Support WEP(64bit), WEP(128bit), AES, TKIP, AES/TKIP mixed mode and other encryption modes;

Support China's national wireless LAN security standards, in line with the provisions of GB15629.11-2003;

Voice Security

Support setting to enable OPTION60 to carry encrypted voice account authentication information function;

account password

debug account disabled;

The account password should meet the length requirement of at least 8 characters, including characters, numbers and special characters;

Device Port Security

The device closes remote management protocols such as SSH and telnet by default;

Manage channel security

Prohibit login with empty or weak passwords;

It does not support the existence of backdoors in any form, such as hidden backdoors, secret channels, etc.;

User Authentication

Support local Portal authentication based on Web Portal;

Support user terminal online and offline information to be sent to relevant servers;

Support authentication for access users on different SSIDs or other interfaces;

Support authentication-free whitelist;

Network security

Support trunk fiber protection switching function;

Support long light ONU detection capability;

OAM

OAM

Support Dying Gasp power failure alarm function;

Support emulation test function of built-in service port;

NTP

NTP

Support SNTP Client function.

Supports configuring multiple NTP server addresses;

Supports synchronization with the NTP server when the device is powered on;

device sync

Master Sub-Gateway Sync

Wi-Fi synchronization: Wi-Fi configuration synchronization, automatic adjustment of Wi-Fi roaming switching;

Account synchronization: WEB account synchronization, automatically synchronize the user account and password of the main gateway;

Time synchronization: master and slave device time synchronization, including time, time zone and other information;

Item

Edge ONT-AFRG-4000XW

Interface features

Uplink GPON Interface

SC-UPC interface；

Meet the GPON technical equipment requirements of telecom operators;

Supported abnormal light emission detection and processing flow, support to turn off the optical transmitter;

User side interface

Ethernet interface, supporting 4 GE electrical ports;

Support the isolation of ARP packets on the network side and the user side;