IPSec support by AR series routers

27

Huawei AR series routers support IPSec. Among which, the AR502EG-L, AR502EGW-L, and AR550C-2C6GE do not support Efficient VPN.
To support the IPSec protocol standard regulated by the State Cryptography Administration, the AR must have a Network Data Encryption (NDE) card or high-performance Network Data Encryption card installed in a SIC slot. Efficient VPN does not support the IPSec protocol standard regulated by the State Cryptography Administration.
The AR510 does not support the IPSec tunnel that is established using an ACL or a virtual tunnel interface. It supports only the IPSec tunnel that is established using Efficient VPN and can only be used as a remote device.
Efficient VPN function requires a license. To use the Efficient VPN function, apply for and purchase the following license from the Huawei local office:
- AR150&AR160&AR200&AR150-S&AR160-S&AR200-S: AR150&160&200 value-added service package for security services
-AR1200&AR1200-S: AR1200 value-added service package for security services
-AR2200&AR2200-S: AR2200 value-added service package for security services
-AR3200&AR3200-S: AR3200 value-added service package for security services
-AR3600: AR3600 value-added service package for security services
-AR531-2C-H and AR531-F2C-H: AR530 value-added router package
-AR550: AR550 value-added service package for routing services
Note: The IPSec function can be used without a license on the AR120, AR503, AR509, and AR510 series, AR531GPe-U-H, AR531GR-U-H, AR531G-U-D-H, AR100-S, AR110-S, AR120-S series, and AR2500 series.
In V200R007C00, the AR150-S, AR160-S, AR200-S, and AR1200-S do not require a license.
In V200R008 and later versions, the AR150-S series, AR160-S series, AR200-S series, and AR1200-S series do not require a license.

For details on how to apply for a license, see License Request guide.

Other related questions:
Working mechanism of IPSec on AR series routers
Huawei AR series routers support IPSec. Most data is transmitted in plain text on the Internet. This transmission mode has many potential risks. For example, bank account and password data may be intercepted or tampered, and user identities are used, and malicious attacks occur. After IPSec is deployed on the network, transmitted IP data is protected to reduce risks of information leakage. IPSec is a security protocol suite defined by the Internet Engineering Task Force (IETF). IPSec secures data transmission on the Internet through data origin authentication, data encryption, data integrity check, and anti-replay functions. For details, see Configuration Guide-VPN.

Which models of AR series routers support PoE
In V200R001C00, only AR1220V supports PoE. From V200R001C01, AR1220W, AR1220V, and AR1220VW support PoE. In V200R002C00, the AR207V-P supports PoE. From V200R006C10, AR1220E, AR1220EV, and AR1220EVW support PoE.

Do AR series routers support ATM OAM
AR series routers support the following operation, administration, and maintenance (OAM) functions: OAMPing, OAM Loopback, OAM CC, alarm indication signal (AIS), and remote defect indication (RDI). In earlier versions of V200R002C02, the G.SHDSL boards support all the ATM OAM functions. The ADSL and VDSL boards support only the OAMPing function. In V200R002C02 or later versions, the ADSL, VDSL and G.SHDSL boards support all the ATM OAM functions.

Does the AR support the web
Starting from V200R002C01, the AR supports the web platform. You can use the web platform to manage and maintain AR routers on the GUI. V200R005C20SPC200 is recommended. For details, see Access Router Product Information Center.

Which STP protocols do AR series routers support
AR series routers support Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP).

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top