TL-NR5300 is a new generation of x86 architecture high-performance 2.5G enterprise router product launched by TP-LINK, which is mainly positioned in medium-sized enterprises, campus exits and other network environments that require high-speed Internet access, high-concurrency authentication Internet access, VPN remote secure communication and Internet behavior management.

TL-NR5300 uses a multi-core x86 network-specific processor, with 16GB DDRV high-speed memory, 32 GB eMMC+128GB UFS storage, powerful network data forwarding capabilities, and supports web authentication, IPSec/PPTP/L2TP VPN, Internet behavior management, firewall, traffic control, and other features are suitable for building a secure, efficient, and easy-to-manage all-gigabit enterprise network.

• Multi-core x86 architecture high-performance network-specific processor, AZB Atom
• 16GB DDRV high-speed memory
• 32GB eMMC + 128GB UFS
• 4 x 2.5G RJ45 ports, the port type can be customized
• DPDK is supported to accelerate network forwarding
• Access Authentication (Web Authentication, SMS Authentication, PPPoE Server)
• Multiple VPNs (IPSec/PPTP/L2TP VPN/SSL VPN）
• Online behavior management (app restrictions/website filtering/web security)
• Intranet and intranet ARP protection and common attack protection
• Intelligent IP bandwidth management and limit the number of connections

New hardware architecture, high-speed data forwarding

Using a new hardware architecture, professional multi-core x86 network dedicated processor, 16GB DDRV high-speed memory, 32GB eMMC+128GB UFS storage, the packet processing capacity has been greatly improved, and the number of new connections can reach 130,000 cps, effectively meeting the data forwarding requirements in high-bandwidth environments.

It provides four 2.5G RJ45 ports, and you can freely customize the port type according to your needs to adapt to more complex networking environments.

THE BUILT-IN AC FUNCTION ALLOWS YOU TO MANAGE TP-LINK ENTERPRISE APS IN A UNIFIED MANNER

The built-in AC function is both a router and a wireless controller, which can control up to 1,500 TP-LINK enterprise APs in a unified manner, making it easy to expand the enterprise wireless network.

It can automatically discover the TP-LINK AP in the network, and perform unified configuration and management of the AP, realize zero-configuration AP access, plug and play, and support AP status monitoring and upgrade, which is easy to maintain.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

Safe and reliable IPSec/PPTP/L2TP VPN

It provides standard IPSec VPN functions, supporting data integrity verification, data source authentication, anti-packet replay, and data encryption functions (AES128, AES192, AES256 and other encryption algorithms). It supports IKE and manual mode to establish VPN connections, and allows domestic users to access the network by dynamic IP, PPPoE dial-up, etc., and allows VPN connections to be configured through domain names. It can meet the needs of remote and secure communication between the corporate headquarters and branches, and between the enterprise and its business partners/suppliers.

PPTP/L2TP server and client functions are supported. Users can flexibly choose to use server and client functions according to actual needs: when deployed in the enterprise headquarters, the PPTP/L2TP server function is generally used to meet the needs of employees on business trips or branches to remotely and securely access the company's network; If you want to establish a VPN connection with a remote PPTP/L2TP server, you need to use the PPTP/L2TP client function.

Rich security policies

Support access control policies, and set firewall rules based on network protocol type, port number, source/destination IP address, and time period to control internal and external network communication security;

It provides automatic scanning of IP and MAC addresses and one-click binding functions, which can bind the IP and MAC address information of LAN port (intranet) and WAN port (extranet) hosts at the same time, effectively preventing intranet/extranet ARP spoofing and avoiding network disconnection caused by ARP spoofing. In the event of ARP spoofing, you can send ARP correction messages at a specified frequency to restore the normal state of the network in a timely manner and effectively reduce the degree of harm.

Supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks, such as TCP syn floods, UDP floods, ICMP floods, WinNuke attacks, fragment packet attacks, WAN port pings, TCP scan (stealth FIN/Xmas/Null), and IP spoofing.

MAC address-based filtering is supported to effectively block the access of unauthorized hosts.

Flexible flow control

It supports the intelligent IP bandwidth control function, flexibly enables the bandwidth control policy according to the actual bandwidth utilization, and can carry out two-way bandwidth control for each host (IP) in the network, effectively inhibiting the excessive bandwidth occupation of P2P applications such as BT and Thunderbolt, avoiding the problem of online game cards and slow Internet speed, and ensuring that the network is smooth at all times.

It provides an IP-based connection restriction function, which can limit the number of connections occupied by each computer, make reasonable use of the limited NAT connection resources, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet access, chat, video and voice, etc.

It supports multiple load balancing strategies, such as intelligent balancing, special application traffic selection, and ISP traffic selection, to effectively improve network service quality, make full use of interface bandwidth, improve network experience, and protect user investment.

Convenient and practical management and maintenance

Adopting the full Chinese web interface operation style, all functions can be configured through the graphical interface, and each configuration provides necessary help and explanation information to facilitate the user to configure the router.

Provide log list and log server functions, detailed log records to supervise network operation, help quickly find network anomalies, locate the source of problems, and eliminate network faults in time. Provides a graphical interface to monitor key router resources such as CPU utilization in real time, and detect potential dangers and attacks in a timely manner.

Support local LAN or Internet remote management router, convenient chain operation and remote assistance; It supports a variety of fault detection tools such as ping detection and traceroute detection, and can back up and import router configuration files for daily maintenance and management.

Hardware specifications

Software Features