WD4500 Series Router

WDs state-of-the-art network operating system provides intelligent service scheduling and management, supports loose coupling of service modules, and enables dynamic loading of processes and patches for greater flexibility and scalability. The router is powered by an industry-leading multicore processor that significantly enhances concurrent service processing through a non-blocking switching architecture. Its routing matrix architecture separates the routing plane from the switching plane and enables high-speed and efficient data transmission. In addition, a variety of built-in acceleration engines, such as data encryption engines and voice DSP processing engines, significantly accelerate service processing and improve overall system performance.

The router provides flexible management by supporting management and control protocols such as OpenFlow, Telemetry, and NETCONF, and allows centralized management through WD SD-WAN or third-party controllers. It delivers powerful forwarding capabilities by supporting advanced forwarding and routing technologies such as segment routing, VXLAN, and EVPN, and allows customization of multiple forwarding models to meet diverse business requirements. The router also supports zero-touch provisioning through URL, USB drive, and DHCP, enabling fast, bulk, and low-cost deployment. With deep packet inspection, it provides precise traffic identification and enables traffic visibility, customization, and flexible orchestration. In addition, the router supports SR and SRv6 technologies, including EVPN L2VPN and EVPN L3VPN over SRv6 policy or best-effort networking solutions.

The router employs a comprehensive set of advanced security features to ensure robust network protection. It supports rich security rules, including filtering based on five-tuple parameters, ASPF state, MAC addresses, URLs, domain-based firewall policies, and intrusion prevention system rules. The router also offers diversified VPN technologies such as IPsec, L2TP, GRE, ADVPN, and MPLS VPN, as well as flexible combinations of multiple VPN technologies to meet different deployment requirements. For endpoint access security, it provides strict access control through 802.1X and portal authentication, endpoint admission defense solutions, and endpoint MAC address authentication. Built-in DDoS protection safeguards the network against SYN, ACK, RST, and UDP flood attacks. Secure device management is achieved through role-based permission control, resource assignment based on roles, and user-to-role mapping. In addition, the router supports traffic control on the control plane, allowing customization and filtering of protocol messages to enhance overall network stability and security.