MPsec VPN Series Security Gateway can secure the network from access layer to aggregation layer. It can be deployed in the aggregation layer of carrier or large-medium-small enterprise and can secure the large- scale site VPN access and SOHO VPN access. It includes MPsec VPN3030, MPsec VPN3020B, MPsec VPN3010E, MPsec VPN3005C-104, and MPsec VPN3005C models.

MPsec VPN3030 has four MIM slots and three Gigabit optical/electrical optional Ethernet interfaces. It supports 8-port Gigabit routing board card and up to 17 Gigabit ports. The plain text throughput reaches 600 Mbps. It supports the line rate forwarding of 128 or above-byte packets. The ciphertext throughput is up to 400Mbps. It supports dual-power supply redundancy and service card hot-swap.

MPsec VPN3020B has four MIM slots and two Gigabit Ethernet optical/electrical optional interfaces. It supports up to six Ethernet interfaces. The plain text throughput reaches 600 Mbps. It supports the line rate forwarding of the packets with 128 or above bytes. The ciphertext throughput is up to 200Mbps. It supports dual-power supply redundancy and service card hot-swap.

MPsec VPN3010E is configured with four 100M Ethernet interfaces. It supports up to four Ethernet interfaces. The plain text throughput of 64-byte packets can reach 40Mbps and 65Mbps for 128-byte packets. It supports the 100M line rate forwarding of the packets with 256 or above bytes. The ciphertext throughput reaches 50Mbps.

MPsec VPN3005C is configured with two 100M Ethernet interfaces. It supports up to three Ethernet interfaces. The plain text throughput of 64-byte packets can reach 25Mbps, 40Mbps for 128-byte packets, and 72Mbps for 256-byte packets. It supports the 100M line rate forwarding of the packets with 512 or above bytes. The ciphertext throughput reaches 10Mbps. It also provides VoIP slots for VoIP modules to realize the aggregation of VoIP and VPN.

MPsec VPN3005C-104 is configured with five 100M Ethernet interfaces. The plain text throughput of 64-byte packets can reach 55Mbps and 90Mbps for 128-byte packets. It supports nearly 100 M line rates forwarding of the packets with 256 or above bytes. The ciphertext throughput reaches 2Mbps.

The MPsec VPN series security gateway adopts IPsec VPN tunnel technology. It can connect headquarters with the staff on business or at home or in branches and partners by setting up virtual private secure channel. Cooperating with MPsec VRC (VPN remote client software), the system can meet the requirements for mobile offices of users and provide security guarantee for enterprise information platform and e-governance system.

MPsec VPN3030 and MPsec VPN3020B support dual-power supply redundancy, hot-swap of service cards and virtual security domain, and dual-system and dual-line backup. MPsec VPN3030 supports VRF-AWARE IPsec. The two devices are fit for telecom-level VPN networks and provide high-reliability, easy-management, strong-expansibility and low-cost VPN networks.

MPsec VPN3030

MPsec VPN3020B

MPsec VPN3010E

MPsec VPN3005C

  MPsec VPN3005C-104

Key Features

• Supports forced identity authentication based on pre-share key and digital certificate
• Supports IPsec VPN traversing NAT technology
• Supports remote dynamic IP address access and DDNS function support
• Supports virtual security domain technology
• Supports tunnel auto-negotiation, DPD and VPN tunnel deleting notice technologies
• Supports network crisis processing mechanism
• Supports DHCP over IPsec to realize internal IP auto configuration of mobile users
• Realizes "0 configuration" of VPN security network
• Supports routing protocol and firewall
• Adopts English graphical network management system, and supports SNMP V3 protocol and the management based on user group
• Provides rich software protocols, and standard encryption and authentication algorithms

Product Features

Supports IPsec encryption software speedup engine

High-performance communication CPU supports ASIC hardware encryption card. The IPsec fast forwarding engine technology makes IPsec packets not need to be forwarded at system IP layer, which improves the forwarding efficiency and processing capability, and optimizing IPsec performance.

Supports the forced identity authentication based on pre-share key and digital certificate

It can provide PKI technologies such as online certificate application, certificate canceling, and CRL auto-update. It also supports third-party CA and can work with CA centers such as MPsec CMS, China Telecom CA and Windows2000/2003 CA.

IPsec VPN traversing NAT technology

It supports IPsec VPN traversing NAT for VPN tunnel traversing NAT without making special configuration to NAT equipment. As the writer of IPsec VPN traversing NAT national standards, Maipu is committed to promote IPsec VPN traversing NAT standards, aiming at making the present C/S and B/S information system of enterprises expand to the world seamlessly.

Supports remote dynamic IP address access and DDNS functions

It can accept tunnel negotiation requirement from peer VPN equipment with dynamic IP address, and simultaneously supports Dynamic Domain Name System (DDNS) function. It can solve the problem that the IP addresses of the two parties for tunnel negotiations are not fixed. In this way, users do not need to apply for fixed IP addresses and the network construction investment is saved.

Supports virtual security domain technology

It supports virtual security domain technology isolating IPsec VPN tunnel as per user ID providing solution to enterprise VPN network isolation and enterprise VPN interior network address reusing. It can ensure that one VPN equipment works for independent companies or departments and all companies or departments retain old IP address allocation.

Supports tunnel auto-negotiation, DPD and VPN tunnel deleting notice technologies

It supports auto-dialup, auto tunnel setup and VPN tunnel deletion under ADSL accessing environment. Based on the standard DPD message, it detects VPN tunnel disconnection caused by network fault to avoid asynchronous states of two peers.

Supports various network crisis processing mechanism

It can realize link backup, tunnel backup and load balance functions, and support dual-system hot backup protocol VRRP (VBRP) to improve network stability.

Supports DHCP over IPsec

It helps to automatically allocate an internal IP address to mobile users when accessing internal network through VPN.

It integrates routing, security and DHCP function to one device, which saves the investments for users and simplifies the configuration.

Realizes "0 configuration" of security network

The "0 configuration" solution is to draw VPN network topology on Maipu configuration software. According to the prompts, the user inputs a few key parameters, and the software automatically generates configuration file, which is loaded to the related device. In this way, the configuration is complete.

Supports routing protocol and firewall

It controls VPN IPsec packets via source/destination address, port and IP protocol number ensuring network security. MPsec VPN supports AAA authentication, L2TP and GRE security protocols.

Adopts English graphical network management system, and supports SNMP V3 protocol and the management based on user group

It supports the centralized network management mode based on SNMP V3. It adopts English graphical network management system and users can configure the networks of MPsec VPN series security gateway, and monitor, measure, charge, and maintain VPN tunnel. It also supports the management based on user group. That is, use the wildcards to divide users to several groups according to the different IDs of peer users.

When distinguishing and authenticating user identities are needed, the security policy that needs several tens even hundreds of configurations in the past can be reduced to one or several. Besides, it has more flexible key management modes. Managing VPN tunnel based on user group can reduce configuration difficulty and improve the system security.

Provides rich software protocols, and standard encryption and authentication algorithms

It supports international standard IPsec security protocols, ESP, AH or ESP+AH load encapsulation format, transmission mode and tunnel mode, manual configuration session key and IKE auto-negotiation encryption key and IKE main mode and active mode negotiation. MPsec series security gateways support international standard encryption and authentication algorithms, providing up to 256 bits of symmetrical key and 2048 bits of asymmetrical key.

Technical Information

Order Information