7850 Network Services
Gateway-E200/300 Series
DATASHEET
7850 Network Services
NSG-E200/300 highlights Gateway-E200/300 Series
Nuage Networks 7850 Network Services Gateway (7850
■ SDN-based branch networking for the cloud IT era
NSG-E200/300 series) enables branch office networking to
■ SFP-based Gigabit Ethernet(GigE) optical uplinks
evolve to meet the challenges of wide area network services
■ Integrated LTE uplink option in Cloud IT environments. Based on the industry’s most
■ Integrated Wi-Fi access point option comprehensive software-defined networking (SDN) solution,
the 7850 NSG-E200/300 series seamlessly integrates into the
■ Flexible configuration of GigE ports
Nuage Networks Virtualized Network Services (VNS) solution.
■ Policy-based branch traffic offload The 7850 NSG-E200/300 series is used to connect private
■ Encryption services for ingress/egress traffic and public datacenters to branch locations. The solution
■ Future expansion support using USB port
offers multiple service scenarios, namely Layer 2 VPN, Layer 3
VPN, and Internet breakout. The 7850 NSG-E200/300 series
is one of the models and form factors for the NSG series,
including the 7850 NSG-C, NSG-E, 7850 NSG-X, and the virtual
NSG. Using the NSG-V software image, the virtual NSG can
be deployed as a software-only form factor on a customer-
7850 NSG-E200/300 provided appliance or as a virtual machine.
Front Back
The Nuage Networks 7850 NSG-E200/300 series has a small
footprint, and can be shipped and installed at an enterprise
branch location without requiring any network engineering
expertise. Because the 7850 NSG-E200/300 series is centrally
managed, it improves the efficiency and productivity of branch
operations while eliminating the need for any on-site IT
support. The 7850 NSG-E200/300 series is on-boarded using
7850 NSG-E202 a secure bootstrapping process that uses zero, one- or two-
Front Back
factor authentication depending on the branch and installer
trust-model and security posture. Once bootstrapped, it
enables instant networking capabilities at the branch.
The 7850 NSG-E200/300 series easily connects to any
provider’s IP underlay network (private, public or hybrid) over
any access using its WAN-facing ports. The policy-based
network automation capabilities are seamlessly extended to
the branch allowing users to automatically connect to any
7850 NSG-E206/306/207/307/208/308
Front Back applications in any cloud (public or private). Thus, the delivery
and consumption of network services is greatly simplified.
Nuage Networks 7850 NSG-E200/300 Datasheet 1
In addition, multiple network functions can be service chained The LAN-facing ports of the 7850 NSG-E200/300 series can
and, using policy-based routing, traffic can be routed to one be used for logical and physical isolation and segmentation
or more appliances, (such as firewalls or IDS/IPS systems), or of users or applications to support creation of security zones
virtualized functions at any location before being forwarded to aligned to the enterprise’s IT practices.
the final destination.
For enterprises that require IPsec encryption for overlay
For branch locations that have high availability requirements, traffic, the 7850 NSG-E200/300 series has built-in hardware-
the 7850 NSG-E200/300 series can be deployed in a based cryptographic acceleration capabilities, ensuring
high-availability configuration providing device, link, and optimized forwarding for both unencrypted and encrypted
subnet-level resiliency models. The 7850 NSG-E200/300 communications. The 7850 NSG-E200/300 series supports
series also supports network uplink redundancy for protection path selection to ensure that priority traffic is forwarded over
of WAN services. the desired underlay network with selectable failover modes.
Features
Nuage Networks VNS
Small location optimized density Network function optimization
The small footprint and energy The Nuage Networks VNS solution Nuage Networks VNS provides a
efficiency of the 7850 NSG-E200/300 provides SDN-based optimization comprehensive networking service
series provides flexibility for both of network functions. With Nuage that removes the limitations that
cabinet (rack mount) or desktop Networks VNS, complex functions exist with traditional wide area
installations. With the flexibility for can be virtualized and chained into networks. Nuage Networks VNS
dual WAN uplink and four dedicated the branch office connection. For offers:
LAN ports, the 7850 NSG-E200/300 branch- specific requirements,
■ Extensive service functionality
series provides options for both logical the 7850 NSG-E200/300 series
that enables flexible branch
and/or physical separation of network supports advanced functions such as
networking
services within the branch. DHCP server, quality of service, and
advanced firewall rules. The flexibility ■ Unlimited geographic reach
Proven operating system of SDN provides the opportunity for by abstracting the virtualized
The 7850 NSG-E200/300 series deployment of third-party functions on network service from the
utilizes the widely used network the 7850 NSG-E200/300 series should underlying IP connectivity,
operating system of the Nuage market demands arise. enabling freedom to use more
Networks VNS SDN solution. than a single connectivity
Operators can be confident that Selective uplink forwarding with service
the 7850 NSG-E200/300 series is Application Aware Routing
■ Ability to adapt to the dynamic
completely interoperable with global Today’s Cloud IT consumption models
business environment and
IP network services and that its robust are straining traditional IP-VPN uplinks.
respond quickly to simple
networking environment has been With the 7850 NSG-E200/300 series,
move, add and change
field proven. the option to split traffic across a
requests
primary WAN uplink and a secondary
Management efficiencies link, such as business internet services, ■ Support for virtualized
As part of the Nuage Networks VNS, is possible. With options to encrypt network functions, which
the 7850 NSG-E200/300 series this traffic based on the transport eliminates the need for
is centrally managed. Network method, the 7850 NSG-E200/300 additional hardware (firewalls
engineering expertise is not required series provides flexibility to grow and routers) and associated
at the branch during installation or for the bandwidth to the branch without professional services
day-to-day operation. Configuration compromising corporate integrity.
changes are centrally administrated
and pushed to the branch using policy.
Nuage Networks 7850 NSG-E200/300 Datasheet 2
Traffic security High availability at the branch
The 7850 NSG-E200/300 series and the Nuage Networks VNS For branch locations that have high availability requirements,
solution support per-connection encryption based on IPsec. the 7850 NSG-E200/300 series may be deployed in active/
Through the solution’s central policy engine, the enterprise standby pairs, allowing for protection of WAN/LAN services
has complete control of which traffic is encrypted. in the event of device or circuit failure. Seamless failover and
recovery of all failure scenarios provide WAN administrators
Multiple WAN uplink support with peace of mind.
As an SDN-based solution, the 7850 NSG-E200/300 series
supports a mix of multiple WAN uplinks. These can include Physical LAN isolation
a primary link using private and alternative (either active/ With multiple LAN ports, the 7850 NSG-E200/300 series
active or active/standby) connections over diverse access IP provides the versatility to assign specific ports to individual
technologies, such as the Internet or mobile broadband. hosts within the branch environment. This can provide
isolation for IP voice trunks (IP-PBX) or IP security cameras.
It can also be used to provide completely separated network
environment(s) from the business LAN, which could then be
used for public kiosk access or public Wi-Fi® networking.
Software Features
Automation ■ Secure activation and authentication (X.509)
■ Software life cycle management
■ Policy server northbound ReSTful API and push-based notification-driven event bus
Management ■ Unified management plane for data center (VSP) and Wide Area Network (VNS)
■ Centralized, template-based policy management for all managed objects, (including
service, security, and QoS)
■ Multi-tenanted with role-based administration, optional LDAP integration
Network services ■ Full-mesh and hub-and-spoke topologies
■ Layer 2 and Layer 3 Virtual Private Network (VPN) services
■ Local internet breakout service
■ 802.1Q locally significant VLANs
■ Overlay services supporting VXLAN and VXLANoIPsec encapsulation
■ DHCPv4 Server, PAT, 1:1 NAT, underlay offload
■ Dynamic NAT traversal
■ Flow-based WAN uplink load balancing, advanced traffic steering
■ IPv6-ready hardware with software support in future releases
Quality of service ■ DSCP-based classification with DSCP rewrite options
■ Ingress QoS classification and rate limiting
■ Hierarchical QoS color-aware egress shaping based on 4 WRR queues
■ Network control queue for control plane traffic
Nuage Networks 7850 NSG-E200/300 Datasheet 3
Software Features (Cont.)
Security services ■ Directional Layer 2 to Layer 4 traffic classification with accept/deny/redirect actions
■ Template-based domain-wide ingress and egress reflexive ACL
■ Advanced dynamic security policy creation
■ Policy auditing through template inheritance
Encryption ■ Secure key generation and distribution
■ IPsec authentication: SHA1, SHA2
■ IPsec encryption: 3DES, AES-128, AES-192 and AES-256
■ Authenticated and encrypted control plane connections
Analytics and visibility ■ Central usage statistics collection for ports, flows, QoS queues Event-based logging
■ Secure syslog integration
■ Remote port mirroring
High availability ■ Cluster-based policy and statistics collection infrastructure
■ Policy federation supporting geo-redundancy and load-balancing
■ Scale-out control-plane architecture leveraging federation based on MP-BGP
■ High availability configuration for 7850 NSG-X with per-subnet resiliency
■ WAN uplink redundancy options with selective uplink forwarding
■ Independent active/active management and contro lplane connections per system
NSG-E200/300 series models
802.11ac
Model Part number CPU Memory Storage Cat 6 LTE uplink
Access point
NSG-E200 3HE11897AB
NSG-E202 3HE13533AA
C2558
NSG-E206 3HE13959AA (4 cores, 4GB
2.4 GHz)
NSG-E207 3HE14989AA
NSG-E208 3HE15341AA 16GB
NSG-E300 3HE11898AB
NSG-E306 3HE13960AA C2758
(8 cores, 8GB
NSG-E307 3HE13961AA 2.4 GHz)
NSG-E308 3HE15342AA
Nuage Networks 7850 NSG-E200/300 Datasheet 4
Hardware Specifications
CPU ■ Intel C2000 Series
Interfaces ■ 2 x dual PHY (10/100/1000 BASE-X or 10/100/1000BASE-T ) GigE4 x
10/100/1000BASE-T GigE (RJ45)
■ 1 x USB 2.0 Standard-A female
■ 1 x RS-232 RJ-45 console
Dimensions ■ 250 mm x 190.4 mm x 44 mm/9.8 in. x 7.5 in. x 1.7 in. (width x depth x height)
Wi-Fi access point ■ Supports 2.4GHz or 5GHz channel operation
■ 2.4GHz channels: 1 to 13
■ 5GHz channels: 36, 38, 40, 42, 44, 46, 48, 149, 151, 153, 155,157,159,161,165
■ Antennae: 2x Omni-directional Dual Band (peak gain = 3.5 dBi @5GHz; 2.5 dBi @ 2.4GHz)
■ Standards: 802.11a/b/g/n/ac
■ Max BSSID: 8SSIDs (7configurable)
■ Encryption: AES, TKIP, CCMP
■ Authentication methods: PSK (PreSharedKey) – WPA/WPA2, WEP, Open, Passthrough
Captive Portal
Integrated LTE uplink ■ Bands supported NSG-E206/306:1,2,3,4,5,7,8,12,13,20,25,26,29,30,41
■ Bands supported NSG-E207/307/208/308:1,3,5,7,8,11,18,19,21,28,38,40,41
■ Antennae: 2x Omni-directional (peak gain = 2.3dBi)
■ Standards: LTE Category6, HSPA+, UMTS
■ SIM slot: 2FF (mini)
■ Dual (primary/backup) slots, Standard size
■ Tamper resistant
Weight ■ 2.3 kg/5.06 lb
Operating temperature ■ 0° to 40°C / 32° to 104°F
Operating relative ■ 5% to 90%, non-condensing
humidity
Storage temperature ■ -20° to +70°C/-4° to +158°F
Power ■ Draw: 60W (maximum)
■ Input: 100-240V @ 50-60Hz
■ Connector: C14
Cooling ■ 1 x fan; maximum 37.5 dBA
Security ■ Built-in Trusted Platform Module to ensure integrity of system, operating system, and
confidentiality of management and data-plane encryption
Installation ■ Optional rack mount kit that mounts the 7850 NSG-E200/300 in 1 Rack Unit
Rack screws are not included and M5 is the maximum usable screw size
Nuage Networks 7850 NSG-E200/300 Datasheet 5
Compliance agency certifications
Type Standard 200 202 206 207 208 300 306 307 308
EN 60950-1 2nd Ed CE-Mark
Safety
IEC 60950-1 2nd Ed CB Scheme
(all National Deviation, including the Australia
AS/NZS 60950.1)
CSA/UL 60950-1 2nd Ed NRTL
FCC OET/ RSS-102/ EN62311 RF Exposure
CCC
EN 55032 class B
EMC
CISPR 32 class B
IC ICES-0003 Class B
FCC Part 15 Class B
EN 55024
IEC 61000-3-2
IEC 61000-3-3
EN 301 489-1
EN 301 489-17 (WiFi)
EN 301 489-52 (LTE)
AS/NZS CISPR 32 Class B
VCCI- CISPR32 (Japan)
BSMI CNS 13438 (Taiwan)
TCVN 7189 (Vietnam)
KN32, KN35 (South Korea)
KN 301 489-1
KN 301 489-17 (WiFi)
KN 301 489-52 (LTE)
CCC
RSS-GEN
Wi-Fi
RSS-247
FCC Part 15C (802.11b/g/n)
FCC Part 15E (802.11a/n, bands 1 and 4)
FCC Part 15E (802.11ac)
FCC ID: RYK-WPEQ257ACN
EN 300 328 (2.4GHz)
EN 301 893 (5GHz)
SRRC(MII)
FCC Part 22
LTE
FCC part 24
FCC part 27
FCC part 90
FCC ID: N7NEM7455
RSS-GEN
RSS-132 (Band 5)
RSS-133 (Band 2)
RSS-139 (Band 4)
RSS-199 (Band 7)
RSS-130 (Band 12 & 13)
EN 301 908-1 (WCDMA+LTE) EN
908-2/13 (LTE) AS/CA S042.1, AS/CA S042.4
SRRC(MII)
Nuage Networks 7850 NSG-E200/300 Datasheet 6
Compliance agency certifications
Type Standard 200 202 206 207 208 300 306 307 308
Directives, EU Directive 2014/53/EU (RED)
Regional EU Directive 2014/30/EU (EMC)
Approvals, and EU Directive 2014/35/EU (LVD)
Certifications EU Directive 2012/19/EU (WEEE)
Compliance
EU Directive 2011/65/EU (RoHS2)
China RoHS
China: CCC, NAL
China: SRRC
Taiwan: BSMI Mark
Australia/NZ: RCM Mark
South Korea: KC Mark
Japan: VCCI Mark
Europe: CE Mark
USA: FCC
Canada: IC
www.nuagenetworks.net Nuage Networks and the Nuage Networks logo are trademarks of the Nokia group of companies.
Nokia is a registered trademark of Nokia Corporation. Other product and company names mentioned herein may be
trademarks or trade names of their respective owners. © 2020 Nokia
Document Code: SR2007045407EN (September) CID201441
Nokia Solutions and Networks Oy · Karakaari 7 · 02610 ESPOO · FINLAND · Tel. +358 7140 04000 · VAT ID NL817330495B01
