TL-NR9700-B02 is a newly developed NR series high-end modular router launched by TP-LINK, which adopts a new generation of high-performance hardware and software platform, provides two service units, dual master control, dual power supply redundancy design, and doubles reliability. At the same time, the passive backplane design is adopted to effectively avoid single points of failure and further improve product reliability. It supports comprehensive security protection mechanisms, flexible traffic control policies, and rich VLAN functions, which are easy to manage and maintain, and can be widely deployed in scenarios such as egress of large and medium-sized campus networks, headquarters or branches of large and medium-sized enterprises.

• Two power modules are provided to support hot-swappable and redundant backup
• Two 10 Gigabit uplink service boards are supported
• 3 service boards (TL-NR9208-7C-BU, TL-NR9208P-7C-BU, TL-NR9208B-7C-BU)
• It supports TP-LINK commercial cloud platform management
• *The picture on the left is full of business boards, and the actual shipment needs to be purchased separately

New hardware architecture, high-speed data forwarding

1. Dual main control and dual power supply, the reliability is doubled

The TL-NR9700-B02 provides two service routing units as the main control board, supporting two working modes: active/standby backup and load balancing. With a complete hardware redundancy design and hot-swap technology, when one service routing unit fails, another can quickly take over its normal operation, and the reliability is doubled.

Load balancing mode is supported, and the resource utilization is 100% higher than that of the active/standby backup mode.

Two service routing units can be configured with multiple primary/standby groups on different interfaces, one service routing unit can be used as both master and backup, and different services can be placed on different service routing units, and when one is abnormal, the other can take over the service to ensure that the service is not interrupted.

It adopts a hot-swappable board and redundant design for key components, including two service routing units, two redundant power supplies, and one removable fan, all of which support hot-swappability.

Passive backplane design

With passive backplane design, the entire backplane system does not have any active components, and the backplane itself does not generate power supply, control signals, etc., and only provides the electrical connection function between each daughter board, effectively avoiding single point of failure.

Rapid fault detection and business recovery mechanism

When a service routing unit fails, another service routing unit can take over its services within a few seconds, detect exceptions, and restart the faulty service routing unit to ensure that services can continue normally without human interference.

2. 10 Gigabit service board access, strong system scalability

The TL-NR9700-B02 has three service boards: TL-NR9208-7C-BU, TL-NR9208P-7C-BU, AND TL-NR9208B-7C-BU. Each service board provides two 10 Gigabit SFP+ fiber module expansion ports, six 10/100/1000M RJ45 ports, customizable port types, binds multiple logical interfaces, configures multiple different types of lines, and provides one console port and two USB 2.0 ports to adapt to more complex networking environments.

The TL-NR9700-B02 can flexibly access 1~2 service boards based on actual needs, and can provide 4 10 Gigabit ports or 12 Gigabit ports in the whole frame to meet the requirements of high-density network access.

All ports on the service board support wire-speed forwarding, which can meet the requirements of high-speed networking in various scenarios.

*TL-NR9208-7C-BU, TL-NR9208P-7C-BU, TL-NR9208B-7C-BU are required to be purchased separately

3. Comprehensive security protection mechanism

Access control: Support access control policies, and set firewall rules to control internal and external network communication security.

Quadernary binding: supports quadruple binding of IP addresses, MAC addresses, VLANs, and ports to filter data packets.

ARP protection: ARP protection is supported against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.

IP source protection: IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.

DoS protection: DoS protection is supported, such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding.

4. A variety of VPNs to ensure the security of remote data transmission

Support IPSec VPN to encrypt confidential data of enterprises and branches to ensure data security; A single TL-NR9208-7C-BU supports 200 IPSec VPN tunnels with an IPSec VPN forwarding performance of up to 3300 Mbps.

It supports PPTP/L2TP VPN, which is convenient for employees on business trips and mobile workers to remotely access the internal server of the enterprise and realize remote work. A single TL-NR9208-7C-BU can establish 200 PPTP/L2TP VPN tunnels.

5. A variety of access authentication methods

Web authentication: Local authentication, Radius authentication, and one-click Internet access are supported, and you can customize jump pages to implement ad pushing.

SMS authentication: It meets the requirements of real-name authentication and can be used for secondary marketing based on mobile phone numbers.

PPPoE server: meets the requirements of intranet users for unified dial-up Internet access.

Third-party authentication system: You can access a third-party authentication system.

6. Efficient online behavior management

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software, video software, music software, shopping and leisure software, news and information software, P2P software, financial software, online games, app stores, basic applications, etc.

One-click control of common applications: Built-in 4 categories, 36 sub-categories, and 3,500 kinds of applications, which can control various PC and mobile Internet applications with one click, and standardize Internet behavior.

One-click restriction of website access: Built-in database of more than 300 URLs in 13 categories, one-click restriction of users' access to the corresponding website.

Prohibit web submissions: Restrict users from logging in to various web-based forums, microblogs, emails, etc., to publish information to avoid the leakage of sensitive data.

Filter file expansion type: Efficiently filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the network and endangering network security.

Behavior audit: Comprehensively record online behaviors and output audit results in a report.

7. Flexible flow control strategy

Intelligent IP bandwidth control: Two-way bandwidth control can be performed for each host (IP) in the network to ensure smooth network operation at all times.

Multi-line load balancing and line backup: WAN/LAN interfaces can be flexibly configured, and rich traffic balancing functions are supported: intelligent traffic steering, special application traffic steering, ISP traffic steering, and interface line backup is supported.

IP-based connection limit: You can limit the number of connections on each computer and reasonably allocate the limited number of NAT connection resources.

8. Integration of wired and wireless applications

Built-in AC function: AC wireless control, which is both a router and a wireless controller, can manage 2000 TP-LINK AP products in a unified manner, and form an enterprise-level wireless network.

It can automatically discover the TP-LINK AP in the network, and uniformly configure and manage the AP, so as to realize zero-configuration AP access and plug-and-play. At the same time, it supports AP status monitoring and upgrade, and is easy to maintain.

Support optical fiber access: support gigabit and 10 gigabit optical interfaces, and flexibly match network access.

Copper cable access is supported.

9. More practical functions

DDNS & Virtual Server: TP-LINK DDNS*, Peanut Shell, Kemai, and 3322 dynamic domain name services are supported, making it easy to build intranet servers and private websites.

UPnP and ALG service functions: ensure that special network applications can smoothly penetrate NAT.

Full Chinese WEB management interface: management and maintenance are more convenient and fast.

Log list: records the network running status in detail.

Ping and Tracert fault detection tools help you quickly find and troubleshoot network faults.

RTC: Real-Time Clock (RTC) is supported to ensure that the device time is normal after the power is turned off and restarted.

File sharing: 4 USB 2.0 ports are provided for easy file sharing.

Hardware specifications

Software Features