IPSec VPN Multi Link Security Gateway (DLL-C372-G5 series) supports wired and wireless access methods to achieve multi link communication, with wired methods implemented through wired dedicated lines and wireless methods implemented through multiple 4G/5G public networks.

In terms of line interfaces, the device comes with three mobile public network air ports and one 100 Base-T network WAN port. All three mobile public network air ports support China Unicom, China Mobile, and China Telecom. The front panel has three pluggable SIM card slots. The device comes with 6 wireless interfaces, which can be directly plugged into the antenna or led out through an RF cable.

In terms of business interfaces, the device comes with one 100 Base-T network LAN port, one USB interface, and one RS232 serial port.

The IPSec VPN multi link security gateway adopts an ARM based CPU chip, paired with a 100Mbps network card, integrates SJK19140 MINI PCI-E password card, and is equipped with the Linux operating system. Supports SM2 algorithm, SM3 algorithm, SM4 algorithm, and true random number generation algorithm. Supports tunnel working mode, ESP encapsulation protocol, NAT traversal and other functions. It can provide security services such as identification, access control, data confidentiality, data integrity, data source authentication, and prohibition of denial.

IPSec VPN multi link security gateway can be widely used in government, large and medium-sized enterprises and institutions, and can be widely used in remote work, mobile communication and other scenarios.

2. Product features:

(1) Multi link communication. IPSec VPN multi link security gateway supports multi-channel 4G/5G communication and wired broadband communication to achieve the goal of multi link communication.

(2) Security services. The security services used by IPSec VPN multi link security gateway consist of the following parts:

Access control: Control user access to resources through authorization

Data source verification: Authenticate the sender’s identity to ensure that the communication counterpart is locally trusted.

Confidentiality: Using encrypted data packets instead of plaintext data packets for transmission in the network improves data security.

Integrity: Verify whether network data has been modified to ensure that the number of arrivals has not been tampered with.

E-resistant replay: prevents duplicate reception of malicious or redundant IP packets, which can cause harm to oneself.

(3) Password algorithm. Implement password algorithms for SM2, SM3, SM4, and true random number generation through password cards.

(4) Key management. Support the management of device keys, work keys, and session keys, and support functions such as key generation, key import, key clearing, key update, key recovery, key backup, and key destruction.

(5) Tunnel working mode. Support ESP tunnel working mode.

(6) NAT traversal. Support NAT traversal, allowing IPSec data streams to traverse NAT devices in the network. NAT traversal consists of three parts: first, determine whether the communication parties support NAT traversal; second, detect the presence of NAT on the path between the two parties; and finally, decide how to use UDP encapsulation to handle NAT traversal.

(7) Log management. IPSec VPN multi link security gateway integrates comprehensive logging services, providing various types of logs such as information logs, alarm logs, error logs, and debugging logs, including operation behavior, security events, abnormal events, etc.

(8) Decentralized management. The IPSec VPN multi link security gateway has set up administrators and achieved decentralized management of system administrators, security administrators, and audit administrators.

(9) Security mechanism. The security mechanism of IPSec VPN multi link security gateway mainly includes main mode, encryption algorithm, and data transmission. The three aspects constitute a comprehensive security mechanism, enabling data to be securely protected from negotiation processes to data transmission.

(10) Device self check. The IPSec VPN multi link security gateway performs a self check every time it is started. Self inspection is divided into pre operation self testing and conditional self testing. The content of pre run self-test includes software integrity verification and password card detection.