H3C MSR3600-XS series router products
- Classification:H3C Data Router Products
- Release time:2025-11-15
- Page views:0
H3C MSR3600-XS series router products
- Classification:H3C Data Router Products
- Release time:2025-11-15
- Page views:0
The MSR3600-XS series routers utilize the industry's latest high-performance multi-core processors and H3C's advanced hardware and software design technologies, providing superior service forwarding capabilities and an excellent network experience. They integrate routing, switching, security, and wireless features to meet the flexible and integrated networking requirements of enterprises. The advantages of this series of routers in terms of system architecture are mainly reflected in the following aspects:
It adopts an industry-leading network communication processor and combines it with H3C's advanced hardware and software design architecture to provide excellent business concurrency processing capabilities.
It supports integrated routing and switching, and has built-in full gigabit Ethernet switching interfaces, which not only facilitates management but also reduces users' investment costs.
H3C's industry-leading intelligent traffic scheduling and refined service control technologies deliver an exceptional network experience to its customers.
Zero-configuration deployment, supports multiple deployment methods such as USB flash drive, simplifies network deployment complexity, and reduces implementation costs.
Oasis Cloud provides centralized management, supporting device software upgrades, automatic configuration distribution, device operation monitoring, and fault alarms.
A wide range of VPN interconnection technologies, including IPSec, GRE, and L2TP VPN, provide cloud network VPN access for various application scenarios, allowing you to enjoy cloud network services.
The MSR3600-XS multi-service router product line includes: MSR3660-XS, MSR3640-XS, MSR3620-X1-XS, MSR3620-XS, MSR3610-XS, and MSR3600-28-XS.

Features
1、Advanced technical support
*useH3CMatureComwareThe network operating system provides a more intelligent service scheduling and management mechanism, supports loose coupling of service modules, and enables dynamic loading of processes and patches.
*Superior high-performance multi-coreCPUThe processor significantly improves the ability to handle multiple concurrent services.
*Independently developed intelligent link engineCUBETechnology has not only improvedSICThe card's bus bandwidth can also be automatically and flexibly allocated to interface resources.
2、Powerful security features
*Supports filtering based on message 5-tuples.ASPFState filteringMACAddress filtering,URLFiltering, domain-based firewallsIPSwait
*DiverseVPNTechnologies, including:IPsec、L2TP、GRE、ADVPN、MPLS VPNand many otherVPNThe combined use of technologies
*Terminal access security: Supported802.1X/PortalAuthenticationEADSecurity inspection and authentication, terminalMACAddress authentication, etc.
*DDoSAttack prevention: Supports defenseHISFloodingACKFloodingRSTFloodingUDPFlooding and other attacks
*Device management security: Supports role-based access control, enabling resource allocation based on roles, user-role mapping, and flexible and secure access control.
*Supports control plane traffic limiting: Supports traffic control and filtering based on known protocol types and custom protocol packets.
3、Refined business control
*Through refined identification and control, functions such as rate limiting, bandwidth guarantee, and filtering for application-layer services are achieved, and refined statistics guide network optimization.
*Supports load balancing on equal-cost links (ECMP) and non-equivalent link load sharingUCMP),UCMPSupports load balancing based on link bandwidth ratio
*Supports terminal-basedIPLoad balancing based on bandwidth ratio, and load balancing based on carrier address are also supported.
4、Intelligent network management
*supportTelnet/SSH、SNMP、TR069、NetconfMultiple network management methods
*supportEAA(Embedded automation architecture) functionality, possessingTCLandPhythonThe scripting capability allows for the monitoring of internal events and states of system hardware and software components, automatically executing predefined scripts when specific events occur.
5、High reliability
*Link millisecond-level fast fault detection technologyBFD), can achieve the same as static routing,RIP/OSPF/BGP/ISISDynamic routingVRRPLinkage with interface backup
*Intelligent network service quality detection technology (LEVEL), can achieve the same as static routing,VRRPLinkage with interface backup
*Supports redundant backup and load balancing across multiple devices.VRRP/VRRPE)
6、Network virtualization
*To reduce the complexity of user networking and improve management efficiency, support was first implemented on WAN devices.IRF2The (second-generation intelligent elastic architecture) technology virtualizes two physically connected devices into a single logical device, significantly reducing the operational costs of user networks and improving link bandwidth utilization and device availability.
*It supports cross-device Ethernet link aggregation technology, enabling load balancing and mutual backup of multiple uplinks, thereby improving the reliability of the entire network architecture and the utilization of link resources.
7、Green and environmentally friendly
*Advanced air duct design improves space utilization.
The multi-stage fan speed control scheme determines the required fan speed based on the internal temperature of the product, minimizing fan noise and energy consumption.
Networking for Small and Medium Enterprises
The MSR2600/3600-XS router supports integrated features such as routing, switching, security, and wireless, making it an optimal choice for egress gateway devices for small and medium-sized enterprises. It supports application identification and control functions, enabling granular management and control of internal enterprise traffic. It also supports built-in AC features, providing unified management and access for APs deployed within the enterprise, meeting the requirements of integrated wired and wireless networking. Furthermore, it can be centrally managed, deployed, and monitored through Oasis Cloud, improving the overall network deployment and management efficiency.

Government branch network
In government branch office scenarios, the MSR5600 series routers can be used as downlink aggregation devices for prefecture-level cities or as access devices for prefecture-level units. The MSR2600/3600-XS series routers can be used as access devices for county and township branch offices, such as social security, street offices, industry and commerce, and tax departments. The MSR series supports firewall, QoS, IRF, EAD and other functions to ensure the reliability and security of the wide area network.

Government branch network
MSR3600-XS Series Hardware Specifications
property | MSR3660-XS | MSR3640-XS | MSR3620-X1-XS | MSR3620-XS | MSR3610-XS |
Firewall performance | 30Gbps | 20Gbps | 20Gbps | 6Gbps | 4Gbps |
Encryption performance | 10Gbps | 8Gbps | 8Gbps | 4Gbps | 1.9Gbps |
IPSEC VPN tunnels | 4000 | 4000 | 4000 | 512 | 256 |
Machine quantity | 2000 | 1500 | 1500 | 800 | 600 |
Memory | 4GB | 2GB | 2GB | 2GB | 2GB |
FLASH | 1GB | 1GB | 1GB | 512MB | 512M |
USB2.0 | 1. Supports USB 3/4G Modem Expansion | 1. Supports USB 3/4G Modem Expansion | 1. Supports USB 3/4G Modem Expansion | 1. Supports USB 3/4G Modem Expansion | 1. Supports USB 3/4G Modem Expansion |
WITH | 1 | 1 | 1 | 1 | 1 |
TF card | / | / | / | 1,≥64G | 1,≥64G |
hard drive bay | / | / | / | / | support |
Fixed GE port | 20*10GE light + 10*GE electricity | 3*10GE Optical + 2*GE Optical + 1*GE (Combo) + 8*GE Electric | 6*10GE optical + 16*GE electrical | 4*GE Combo+2*Hikari | 4*GE(2Combo)+2*Hikari |
SiC slot | 4 | 4 | 4 | 4 | 4 |
HMIM slot | 4 | 4 | 2 | 2 | / |
Maximum power consumption | 300W | 300W | 150W | 200W | 54W |
Redundant power supply | Supports (AC/DC) | Supports (AC/DC) | Supports (AC/DC) | support | / |
power supply | AC:100V a.c.~240V a.c.;50Hz/60Hz DC:-48~-60V | AC:100V a.c.~240V a.c.;50Hz/60Hz DC:-48~-60V | AC:100V a.c.~240V a.c.;50Hz/60Hz DC:-48~-60V | AC:100V a.c.~240V a.c.;50Hz/60Hz | AC:100V a.c.~240V a.c.;50Hz/60Hz |
Rack height (U-height) | 2 RU | 2 RU | 1 RU | 1 RU | 1 RU |
External dimensions (W×D×H, mm) | 440×480×88.1 | 440×480×88.1 | 440×470×44.2 | 440×470×44.2 | 440×360×43.6 |
Ambient temperature | 0~45℃ | ||||
Ambient relative humidity | 5-95% (non-condensing) | ||||
property | MSR3600-28-XS |
Firewall performance | 1.5Gbps |
Encryption performance | 400Mbps |
IPSEC VPN tunnels | 128 |
NAT session count | 250,000 |
Machine quantity | 350-450 |
Memory (Default/Maximum) | 1GB |
FLASH | 256MB |
USB2.0 | 1. Supports 3G/4G Modem expansion |
WITH | 1 |
WAN Ethernet interface | 3GE (electric) + 2GE (optical) |
LAN Ethernet interface | 24GE |
SiC slot | 4 |
Maximum power consumption | 54W |
Redundant power supply | / |
power supply | 100V a.c.~240V a.c.;50Hz/60Hz |
Rack height (U-height) | 1 rack height (1RU) |
External dimensions (W×D×H, mm) | 440(W)×360(D)×44.2mm(H) |
Ambient temperature | 0~45℃ |
Ambient relative humidity | 5-95% (non-condensing) |
*Note: The recommended capacity is a comprehensive assessment under specific conditions and may vary depending on the actual on-site environment.
EMC and Safety Standards
EMC | FCC Part 15 (CFR 47) CLASS A ICES-003 CLASS A VCCI-3 CLASS A VCCI-4 CLASS A CISPR 22 CLASS A EN 55022 CLASS A AS/NZS CISPR22 CLASS A CISPR 24 EN 55024 EN 61000-3-2 EN 61000-3-3 EN 61000-6-1 EN 300 386 EN 301 489-1 EN 301 489-17 |
Safety | UL 60950-1 CAN/CSA C22.2 No 60950-1 IEC 60950-1 EN 60950-1/A11 AS/NZS 60950 EN 60825-1 EN 60825-2 FDA 21 CFR Subchapter J GB 4943 |
MSR3600-XS Series Software Specifications
property | Function |
Layer 2 protocol | 支持Ethernet、Ethernet II、VLAN,802.3x、802.1p、802.1Q、802.1x、STP(802.1D) 、RSTP(802.1w) 、MSTP(802.1s) 、PPP、PPPoE Client、PPPoE Server、HDLC、FR、DDR、ModemN等 |
IP service | Supports TCP, UDP, IP Option, and IP Unnumber. Supports policy routing, Netstream, sFlow, etc. Support ECMP Supports UCMP |
IP Applications | 支持Ping、Trace、ICMP、DHCP Server、DHCP Relay、DHCP Client、DNS client、DNS Proxy、DDNS、UDP Helper、NTP、SNTP等 |
IPv4 routing | Static Routing Dynamic routing protocols: RIPv1/v2, OSPFv2, BGP, IS-IS Route iteration Routing policy Multicast routing protocols: IGMPv1/v2/v3, PIM-DM, PIM-SM, MBGP, MSDP |
IPv6 | Supports IPv6 ND, IPv6 PMTU, IPv6 FIB, IPv6 ACL, NAT-PT, IPv6 tunnel, 6PE, DS-LITE IPv6 tunneling technologies: manual tunneling, automatic tunneling, GRE tunneling, 6to4, ISATAP Static Routing Dynamic routing protocols: RIPng, OSPFv3, IS-ISv6, BGP4+ IPv6 multicast protocols: MLD V1/V2, PIM-DM, PIM-SM |
QoS | 支持LR、Port-Based Mirroring 、Port Trust Mode,Port Priority等 支持CAR(Committed Access Rate) Supports FIFO, WFQ, CBQ, etc. Supports GTS (Generic Traffic Shaping) Supports traffic categorization |
Wireless controller (AC) | AP Management: AP access, AP configuration parameter distribution, AP version upgrade, AP restart, AP display WLAN access, WLAN user security, WLAN user access authentication, WLAN roaming, etc.; |
voice | Supports FXS/FXO/E&M/VE1/VT1, R2, DSS1, Q.sig, Digital E&M, etc. Supports G.711, G.723, G.726, G.729AB, AMR-NB, GSM-FR, iLBC, RT-Audio, etc. Supports a wide range of voice services, voice backup, DTMF transmission (supports RFC2833), smart dial-up router, 1:1 binding of FXS and FXO, power failure escape, SIP server local survival, IVR, etc. |
3/4/5G | Supports extended 3G/4G and 5G access, supports 5G NR NSA/SA, and supports TDD/FDD LTE, TD-SCDMA, CDMA2000/EVDO, WCDMA/HSPA+ networks. |
Safety features | PORTAL、802.1x Local authentication, RBAC, Radius, Tacacs+ ASPF, ACL, FILTER, Domain-based Firewall, Connection Limiting, IPS IKE/IPSec VPN、ADVPN、GDVPN、L2TP VPN、GRE VPN NAT/NAPT, PKI, RSA, URPF Supports DDoS attack prevention, ARP attack prevention, and URL filtering. Support EAD endpoint admission defense function Supports DPI (Deep Packet Inspection) for rate limiting and filtering of service flows. Chinese national cryptographic SM1/2/3/4 algorithm |
MPLS | LDP、Static LSP L3VPN: Cross-domain MPLS VPN (Option 1/2/3), Nested MPLS VPN, Layered PE (HoPE), Dual-homed CE, MCE, Multi-role Host, etc. L2VPN: Martini, Kompella, CCC, and SVC methods MPLS TE, RSVP TE |
reliability | Support IRF2 Supports VRRP and VRRPv3 Supports load balancing and backup based on multiple links. Supports the linkage function of NQA co-routing, VRRP and interface backup to realize end-to-end link detection and backup functions. Support GR |
Management and maintenance | Supports SNMP V1/V2c/V3, TR069, SYSLOG, and RMON. Supports Telnet, SSHv1.5/2.0, and FTP. Supports EAA embedded automation architecture Supports command-line management, file system management, and dual image processing. NQA supports testing of protocols such as DHCP, FTP, HTTP, ICMP, UDP public, UDP private, TCP public, TCP private, and SNMP. |