TL-NS7903 is a modular multi-service intelligent routing switch developed by TP-LINK for next-generation enterprise network architecture, which has strong scalability, high reliability, and high security. Dual main control, dual power supply, redundant backup of key components; It supports the insertion of three full 10 Gigabit service boards, which can flexibly expand port density. It can be widely used in the core and aggregation nodes of data centers, campuses, and large and medium-sized enterprise networks.

• It provides 2 main control processing units and 2 power modules, and supports hot-swappable and redundant backup
• Supports three 10 Gigabit service boards (TL-ST8022F-LPU)
• THE MOTHERBOARD PROCESSING UNIT HAS A BUILT-IN AC FUNCTION AND CAN MANAGE 1000 TP-LINK APS
• It supports TP-LINK commercial cloud platform management
• *The picture of the business board on the left side is for illustration only, and the business board needs to be purchased separately for actual shipment

The service board has full 10 Gigabit access and strong system scalability

The TL-NS7903 provides 3 service board slots, and users can flexibly select 1~3 service boards according to actual networking requirements.

The service board TL-ST8022F-LPU provides 22 10 Gigabit optical ports, and the chassis provides 66 10 Gigabit SFP+ optical ports.

Service boards are hot-swappable, and you can easily increase the density and bandwidth of access ports by adding service boards, helping you build elastically expanded networks.

All ports support wire-speed forwarding to meet the requirements of high-speed networking.

*The TL-ST8022F-LPU of the service board must be purchased separately

Redundant design of key components, greatly improving reliability

Two MCUs are provided, and when one of the MCUs fails, the backup MCU can quickly take over the business.

Three service boards are supported, and multiple service boards work together through intelligent stacking technology to implement load balancing and mutual backup.

Two power modules are provided to support load balancing and redundant backup, reducing the risk of equipment downtime and service interruption.

The fan module has two built-in fans to dissipate heat from the whole machine, and supports automatic speed adjustment to ensure that the chassis works within the normal temperature range.

It supports TP-LINK commercial cloud platform management, and the operation and maintenance is simple and convenient

Support login to TP-LINK commercial cloud platform through PC web and mobile APP, only need a TP-LINK ID, and easily realize remote management.

Real-time monitoring and display of the working status of each board, and the equipment running status is clear at a glance.

When network security, devices go offline, or configuration is abnormal, alarm information is automatically pushed, and faulty devices are highlighted in the topology, so that O&M personnel can quickly locate them.

Built-in AC function to meet wireless networking requirements

The TL-NS7903 has built-in AC function and can manage 1000 APs without purchasing additional AC hardware.

When the active AC fails, the standby AC can take over services in a timely manner without affecting AP access requirements.

It supports intelligent roaming, and the system intelligently detects the wireless link quality of terminals, and automatically roams terminals with poor wireless Internet experience to other preferred APs, effectively improving the wireless Internet experience.

Supports radio calibration, which automatically optimizes the channel allocation and transmit power of APs with one click, maximizing coverage and reducing co-channel interference between APs, improving the wireless network Internet experience.

It supports automatic channel adjustment, which can automatically select the wireless channel with the least interference according to the surrounding wireless environment when the AP is turned on.

Weak signal rejection is supported, which can reject clients whose signals are lower than the set threshold.

Spectrum navigation is supported, and dual-band clients are preferentially associated with 5 GHz radios.

AP load balancing is supported, and the AP load is reasonably distributed to prevent individual APs from being overloaded, thereby improving the performance of the entire wireless network.

APs can be restarted at regular intervals to regularly clean up network junk and zombie clients to ensure that APs are running properly.

Strong business processing capabilities

Supports BGP/OSPF/RIP dynamic routing protocols and static routing protocols to solve the routing and routing problems after complex networks are divided into subnets.

Host route entries up to 16K.

DHCP servers are supported, which assign IP addresses to hosts in the network.

DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.

Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.

IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.

GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.

The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.

It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.

ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.

It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

IPv6 is supported, meeting the requirements of smooth IPv4 to IPv6 upgrade and IPv4/IPv6 hybrid networking.

Complete security protection mechanism

Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.

Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.

IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.

DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.

It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.

Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.

Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Multiple access authentication methods

The TL-NS7903 supports a variety of access authentication methods, such as SMS authentication, web authentication, remote post authentication, and MAC address authentication, to meet the requirements of various application scenarios.

Hardware specifications

Software Specifications

TL-NS7903 is a modular multi-service intelligent routing switch developed by TP-LINK for next-generation enterprise network architecture, which has strong scalability, high reliability, and high security. Dual main control, dual power supply, redundant backup of key components; It supports the insertion of three full 10 Gigabit service boards, which can flexibly expand port density. It can be widely used in the core and aggregation nodes of data centers, campuses, and large and medium-sized enterprise networks.

• It provides 2 main control processing units and 2 power modules, and supports hot-swappable and redundant backup
• Supports three 10 Gigabit service boards (TL-ST8022F-LPU)
• THE MOTHERBOARD PROCESSING UNIT HAS A BUILT-IN AC FUNCTION AND CAN MANAGE 1000 TP-LINK APS
• It supports TP-LINK commercial cloud platform management
• *The picture of the business board on the left side is for illustration only, and the business board needs to be purchased separately for actual shipment

The service board has full 10 Gigabit access and strong system scalability

The TL-NS7903 provides 3 service board slots, and users can flexibly select 1~3 service boards according to actual networking requirements.

The service board TL-ST8022F-LPU provides 22 10 Gigabit optical ports, and the chassis provides 66 10 Gigabit SFP+ optical ports.

Service boards are hot-swappable, and you can easily increase the density and bandwidth of access ports by adding service boards, helping you build elastically expanded networks.

All ports support wire-speed forwarding to meet the requirements of high-speed networking.

*The TL-ST8022F-LPU of the service board must be purchased separately

Redundant design of key components, greatly improving reliability

Two MCUs are provided, and when one of the MCUs fails, the backup MCU can quickly take over the business.

Three service boards are supported, and multiple service boards work together through intelligent stacking technology to implement load balancing and mutual backup.

Two power modules are provided to support load balancing and redundant backup, reducing the risk of equipment downtime and service interruption.

The fan module has two built-in fans to dissipate heat from the whole machine, and supports automatic speed adjustment to ensure that the chassis works within the normal temperature range.

It supports TP-LINK commercial cloud platform management, and the operation and maintenance is simple and convenient

Support login to TP-LINK commercial cloud platform through PC web and mobile APP, only need a TP-LINK ID, and easily realize remote management.

Real-time monitoring and display of the working status of each board, and the equipment running status is clear at a glance.

When network security, devices go offline, or configuration is abnormal, alarm information is automatically pushed, and faulty devices are highlighted in the topology, so that O&M personnel can quickly locate them.

Built-in AC function to meet wireless networking requirements

The TL-NS7903 has built-in AC function and can manage 1000 APs without purchasing additional AC hardware.

When the active AC fails, the standby AC can take over services in a timely manner without affecting AP access requirements.

It supports intelligent roaming, and the system intelligently detects the wireless link quality of terminals, and automatically roams terminals with poor wireless Internet experience to other preferred APs, effectively improving the wireless Internet experience.

Supports radio calibration, which automatically optimizes the channel allocation and transmit power of APs with one click, maximizing coverage and reducing co-channel interference between APs, improving the wireless network Internet experience.

It supports automatic channel adjustment, which can automatically select the wireless channel with the least interference according to the surrounding wireless environment when the AP is turned on.

Weak signal rejection is supported, which can reject clients whose signals are lower than the set threshold.

Spectrum navigation is supported, and dual-band clients are preferentially associated with 5 GHz radios.

AP load balancing is supported, and the AP load is reasonably distributed to prevent individual APs from being overloaded, thereby improving the performance of the entire wireless network.

APs can be restarted at regular intervals to regularly clean up network junk and zombie clients to ensure that APs are running properly.

Strong business processing capabilities

Supports BGP/OSPF/RIP dynamic routing protocols and static routing protocols to solve the routing and routing problems after complex networks are divided into subnets.

Host route entries up to 16K.

DHCP servers are supported, which assign IP addresses to hosts in the network.

DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.

Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.

IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.

GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.

The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.

It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.

ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.

It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

IPv6 is supported, meeting the requirements of smooth IPv4 to IPv6 upgrade and IPv4/IPv6 hybrid networking.

Complete security protection mechanism

Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.

Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.

IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.

DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.

It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.

Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.

Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Multiple access authentication methods

The TL-NS7903 supports a variety of access authentication methods, such as SMS authentication, web authentication, remote post authentication, and MAC address authentication, to meet the requirements of various application scenarios.

Hardware specifications

Software Specifications