Ruijie gateway key specifications Network Interface 5 × 10/100/1000 Base-T

Ruijie gateway key specifications
Network Interface - 5 × 10/100/1000 Base-T
RAM - 128MB DDRIII
Recommended Bandwidth - 600Mbps
PoE Out - 802.3af/at on LAN1-4
Dimension - 206.5 mm × 108.5 mm × 28 mm
Power Supply - 100～240V AC, 50/60Hz
Certifications - CE, ROHS
Max. WAN Ports - 2 × 10/100/1000 Base-T
Storage - 16MB Flash
Recommended Concurrent Users - 100
Operating Temperature - 0°C~40°C
Weight - 0.43kg
Power Consumption <60 W (with PoE Load)
Warranty - 3 Years
Recommended users up to 80 users can use it at the same time
Ruijie features

1. 
   Ruijie AP features > AP eWeb
   
   1. 
      Gateway
      

11. 
    Overview
    

1. 
   URL log (history of user connection)
   
2. 
   real-time flow (port real-time flow, user real-time flow, app
   

real-time flow),

3. 
   flow history (port flow history, user flow history, app flow history)
   

1.12 Network

1. 
   WAN. Single Line, Dual Line > WAN and WAN1, ISP/Load Settings. Traffic will be routed based on ISP settings preferentially. The remaining traffic will be managed according to load mode.
   

• 
  Balanced mode: The traffic will be spread across multiple links according to the weight of each WAN port. For example, if WAN and WAN1 weight are set to 3 and 2 respectively, 60% of the total traffic will be routed over WAN and 40% over WAN1.
  
• 
  Primary & secondary mode: All traffic is routed over the primary interface. Once the primary interface fails, traffic will be switched over to the secondary interface. If there are multiple primary and secondary interfaces, please configure their weight (See balanced mode).
  
• 
  Load Balancing Policy (Based on Link, Src IP Add, Src and Dest IP Add, Smart Load Balancing).
  

2. 
   LAN. LAN Settings, DHCP clients, Static IP add, DHCP Options, DNS proxy
   
3. 
   IPv6 Addresses
   
4. 
   PoE
   
5. 
   Port VLAN (Tagged, Untagged)
   
6. 
   Port Settings (Basics > Duplex Mode/ Rate, Flow Control. Port info)
   
7. 
   IPTV
   

1.13 Security

1. 
   ARP List. ARP Guard > The device learns IP-MAC mapping of all devices connected to its interfaces. You can bind or filter the MAC address. Enable ARP guard and configure IP-MAC binding to improve network security. If ARP Guard enabled Only the devices configured with IP-MAC binding are allowed to access the Internet.
   
2. 
   MAC Filtering. Enable MAC address filtering and configure the filtering type to control the host's access to the Internet. If MAC Filtering enabled the following hosts are not allowed to access the Internet. (Blacklist or Whitelist)
   
3. 
   Local protection, Local safety > Prohibit ping from LAN or WAN. Admin IP Address.
   

Attack Defense > Anti Session Attack, Anti Flood Attack, Anti Suspicious Packet Attack, ICMP Packet management.
Attack Defense statistics.
1.14 Behavior

1. 
   App Control. View and manage application control settings, You can block: communication, video, shopping, play, databank(online storage), AppStore and payment kind of application group. For User group, IP address group or only one IP, in exact time.
   

Custom. Here you can block IP, TCP, UDP protocol. Control type: Dest IP + Dest Port, Src IP + Src Port, Src IP + Dest IP.
Custom Application Group. Here you can block application group for user group.

2. 
   Website managnment
   

Website filtering here you can block: games, finance, social, shopping, life, music, entertainment, community, mailbox, story, sports, news, video types of websites for user group or custom in exact time.
Website group. Here you can modify website group, for example you can add, delete new website to group, even you can delete, add new website group.

3. 
   Flow control
   

Smart Flow Control - intelligently adjust the network speed to ensure that each user shares the network fairly. Also you can manually set WAN bandwidth: Uplink and Downlink.
Custom policy. Normal policy here you can control bandwidth (for video: youtebu or neftlix 10 mbps, for communication: WhatsApp or instagram 2 mbps). VPN policy also has similar to normal policy.

4. 
   Access control
   

ACL
Configure ACL based on IP addresses. Reverse flow mismatches .
The L2TP/PPTP/OpenVPN VPN only supports the IP-based ACL. The effective interface must be configured in the internal network.
Example: Configure a deny ACL entry containing source IP address 192.168.1.0/24 and destination IP address 192.168.2.0/24. Device configured with IP address 192.168.1.x will fail to access device 192.168.2.x. But device 192.168.2.x will be allowed to access device 192.168.1.x.
Tips: Configure one more deny ACL entry containing source IP address 192.168.2.0/24 and destination IP address 192.168.1.0/24. The two devices will be mutually unreachable.

5. 
   User management. Here you can add, delete or modify user and user group.
   
6. 
   Time management. Here you can manage time settings.
   
7. 
   Application library management. Here you can update application online or offline.
   

15. 
    PN
    

1. 
   IPSec Policy Up to 3 entries with the policy type of client can be configured. Up to 1 entry with the policy type of server can be configured. The server and client cannot be configured at the same time.
   
2. 
   L2TP. Here you can enable and disable L2TP VPN and manage tunnel list.
   
3. 
   PPTP. Here you can enable and disable PPTP VPN and manage tunnel list.
   
4. 
   OpenVPN. Here you can enable and disable OpenVPN and manage tunnel list.
   
5. 
   VPN clients. Here you can create, delete, edit VPN clients. Up to 50 clients can be created.
   

15. 
    Advanced.
    

1. 
   Routing. PBR (Policy Based Routing)
   

Route Priority: PBR > Static Routing > ISP Routing.
Description PBR is more flexible than destination-based routing.
Static Routing. When a packet arrives, the device checks the destination field and compares it with routing table. If it finds a match for destination network then it will forward that packet from the specified interface.

2. 
   PPoE Server. Here you can configure and manage PPoE server.
   
3. 
   Authentication. Ruijie Cloud supports voucher authentication, local account authentication, SMS authentication and one-click authentication.
   
4. 
   Session limit. Here you can configure session limit to exact IP addresses.
   
5. 
   Port mapping. Here you can configure port mapping and NAT-DMZ.
   
6. 
   Dynamic DNS. Here you can configure dynamic DNS.
   
7. 
   UPnP. UPnP（Universal Plug and Play) is a new Internet protocol aimed at improving communication between devices.
   
8. 
   Local DNS. Here you can configure local DNS.
   
9. 
   TTL rule. Here you can configure ttl rule.
   
10. 
    Audit log. The port ID of the device must be consistent with that of the peer server. The server logs can be divided into three levels: high, medium and low.