TL-NS8803 is a modular multi-service intelligent routing switch developed by TP-LINK for the next-generation enterprise network architecture, which integrates the functions of enterprise routers, core switches, and SDN network controllers, and truly realizes core layer networking with one device. This product has strong scalability, high reliability and high security; Dual main control, dual power supply, redundant backup of key components; It supports the insertion of 3 service boards, which can flexibly expand the port density. It can be widely used in network cores and aggregation nodes such as data centers, campuses, large and medium-sized enterprise networks, and hotels.

• Two power modules are provided to support hot-swappable and redundant backup
• It supports two service routing units and supports two modes: hot standby and load balancing
• Supports 3 service boards, 2 service boards can be selected (TL-ST8026F-LPU, TL-SH8452F-LPU)
• The built-in TP-LINK network-wide device management function automatically manages TP-LINK commercial network devices
• THE SERVICE ROUTING UNIT HAS A BUILT-IN AC FUNCTION AND CAN MANAGE 1,000 TP-LINK APS
• It supports TP-LINK commercial cloud platform management
• *The picture of the service board on the left side is for illustration only, and the service board and service routing unit need to be purchased separately for actual shipment

The 10 Gigabit service board is connected, and the system is highly scalable

The TL-NS8803 supports two types of service boards: TL-ST8026F-LPU and TL-SH8452F-LPU. The port specifications of TL-ST8026F-LPU are: 26SFP+; The port specifications of the TL-SH8452F-LPU are: 48SFP + 4SFP+.

The TL-NS8803 can flexibly access 1~3 service boards based on actual needs, and uses intelligent stacking technology to implement the collaborative operation of multiple service boards, providing up to 78 10 Gigabit ports or 144 Gigabit ports in the whole frame to meet the requirements of high-density network access.

All ports on the service board support wire-speed forwarding, which can meet the requirements of high-speed networking in various scenarios.

*The TL-ST8026F-LPU and TL-SH8452F-LPU of the service board must be purchased separately

Redundant design of key components, greatly improving reliability

It supports two service routing units, supports dual-machine hot standby and load balancing, and when one of the routing units fails, the backup routing unit can quickly take over the service.

Three service boards are supported, and multiple service boards work together through intelligent stacking technology to implement load balancing and mutual backup.

Two power modules are provided to support load balancing and redundant backup, reducing the risk of equipment downtime and service interruption.

The fan module has two built-in fans to dissipate heat from the whole machine, and supports automatic speed adjustment to ensure that the chassis works within the normal temperature range.

It supports TP-LINK commercial cloud platform management, and the operation and maintenance is simple and convenient

Support login to TP-LINK commercial cloud platform through PC web and mobile APP, only need a TP-LINK ID, and easily realize remote management.

Real-time monitoring and display of the working status of each board, and the equipment running status is clear at a glance.

When network security, devices go offline, or configuration is abnormal, alarm information is automatically pushed, and faulty devices are highlighted in the topology, so that O&M personnel can quickly locate them.

Built-in AC function to meet wireless networking requirements

The TL-NS8803 has built-in AC function and can manage 1000 APs without purchasing additional AC hardware.

When the active AC fails, the standby AC can take over services in a timely manner without affecting AP access requirements.

It supports intelligent roaming, and the system intelligently detects the wireless link quality of terminals, and automatically roams terminals with poor wireless Internet experience to other preferred APs, effectively improving the wireless Internet experience.

Supports radio calibration, which automatically optimizes the channel allocation and transmit power of APs with one click, maximizing coverage and reducing co-channel interference between APs, improving the wireless network Internet experience.

It supports automatic channel adjustment, which can automatically select the wireless channel with the least interference according to the surrounding wireless environment when the AP is turned on.

Weak signal rejection is supported, which can reject clients whose signals are lower than the set threshold.

Spectrum navigation is supported, and dual-band clients are preferentially associated with 5 GHz radios.

AP load balancing is supported, and the AP load is reasonably distributed to prevent individual APs from being overloaded, thereby improving the performance of the entire wireless network.

APs can be restarted at regular intervals to regularly clean up network junk and zombie clients to ensure that APs are running properly.

Built-in TP-LINK network-wide device management function, network devices are plug-and-play

TL-NS8803 HAS A BUILT-IN INTENT-DRIVEN ENGINE, INTELLIGENTLY TRANSLATES USER INTENT INTO NETWORK CONFIGURATION, AND AUTOMATICALLY DEPLOYS NETWORK CONFIGURATION BASED ON SDNN ARCHITECTURE

Strong business processing capabilities

Supports BGP/OSPF/RIP dynamic routing protocols and static routing protocols to solve the routing and routing problems after complex networks are divided into subnets.

Host route entries up to 16K.

DHCP servers are supported, which assign IP addresses to hosts in the network.

DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.

Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.

IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.

GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.

The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.

It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.

ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.

It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

IPv6 is supported, meeting the requirements of smooth IPv4 to IPv6 upgrade and IPv4/IPv6 hybrid networking.

Complete security protection mechanism

Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.

Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.

IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.

DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.

It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.

Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.

Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Multiple access authentication methods

The TL-NS8803 supports a variety of access authentication methods, such as SMS authentication, web authentication, remote post authentication, and MAC address authentication, to meet the requirements of various application scenarios.

Hardware specifications

Software Specifications

TL-NS8803 is a modular multi-service intelligent routing switch developed by TP-LINK for the next-generation enterprise network architecture, which integrates the functions of enterprise routers, core switches, and SDN network controllers, and truly realizes core layer networking with one device. This product has strong scalability, high reliability and high security; Dual main control, dual power supply, redundant backup of key components; It supports the insertion of 3 service boards, which can flexibly expand the port density. It can be widely used in network cores and aggregation nodes such as data centers, campuses, large and medium-sized enterprise networks, and hotels.

• Two power modules are provided to support hot-swappable and redundant backup
• It supports two service routing units and supports two modes: hot standby and load balancing
• Supports 3 service boards, 2 service boards can be selected (TL-ST8026F-LPU, TL-SH8452F-LPU)
• The built-in TP-LINK network-wide device management function automatically manages TP-LINK commercial network devices
• THE SERVICE ROUTING UNIT HAS A BUILT-IN AC FUNCTION AND CAN MANAGE 1,000 TP-LINK APS
• It supports TP-LINK commercial cloud platform management
• *The picture of the service board on the left side is for illustration only, and the service board and service routing unit need to be purchased separately for actual shipment

The 10 Gigabit service board is connected, and the system is highly scalable

The TL-NS8803 supports two types of service boards: TL-ST8026F-LPU and TL-SH8452F-LPU. The port specifications of TL-ST8026F-LPU are: 26SFP+; The port specifications of the TL-SH8452F-LPU are: 48SFP + 4SFP+.

The TL-NS8803 can flexibly access 1~3 service boards based on actual needs, and uses intelligent stacking technology to implement the collaborative operation of multiple service boards, providing up to 78 10 Gigabit ports or 144 Gigabit ports in the whole frame to meet the requirements of high-density network access.

All ports on the service board support wire-speed forwarding, which can meet the requirements of high-speed networking in various scenarios.

*The TL-ST8026F-LPU and TL-SH8452F-LPU of the service board must be purchased separately

Redundant design of key components, greatly improving reliability

It supports two service routing units, supports dual-machine hot standby and load balancing, and when one of the routing units fails, the backup routing unit can quickly take over the service.

Three service boards are supported, and multiple service boards work together through intelligent stacking technology to implement load balancing and mutual backup.

Two power modules are provided to support load balancing and redundant backup, reducing the risk of equipment downtime and service interruption.

The fan module has two built-in fans to dissipate heat from the whole machine, and supports automatic speed adjustment to ensure that the chassis works within the normal temperature range.

It supports TP-LINK commercial cloud platform management, and the operation and maintenance is simple and convenient

Support login to TP-LINK commercial cloud platform through PC web and mobile APP, only need a TP-LINK ID, and easily realize remote management.

Real-time monitoring and display of the working status of each board, and the equipment running status is clear at a glance.

When network security, devices go offline, or configuration is abnormal, alarm information is automatically pushed, and faulty devices are highlighted in the topology, so that O&M personnel can quickly locate them.

Built-in AC function to meet wireless networking requirements

The TL-NS8803 has built-in AC function and can manage 1000 APs without purchasing additional AC hardware.

When the active AC fails, the standby AC can take over services in a timely manner without affecting AP access requirements.

It supports intelligent roaming, and the system intelligently detects the wireless link quality of terminals, and automatically roams terminals with poor wireless Internet experience to other preferred APs, effectively improving the wireless Internet experience.

Supports radio calibration, which automatically optimizes the channel allocation and transmit power of APs with one click, maximizing coverage and reducing co-channel interference between APs, improving the wireless network Internet experience.

It supports automatic channel adjustment, which can automatically select the wireless channel with the least interference according to the surrounding wireless environment when the AP is turned on.

Weak signal rejection is supported, which can reject clients whose signals are lower than the set threshold.

Spectrum navigation is supported, and dual-band clients are preferentially associated with 5 GHz radios.

AP load balancing is supported, and the AP load is reasonably distributed to prevent individual APs from being overloaded, thereby improving the performance of the entire wireless network.

APs can be restarted at regular intervals to regularly clean up network junk and zombie clients to ensure that APs are running properly.

Built-in TP-LINK network-wide device management function, network devices are plug-and-play

TL-NS8803 HAS A BUILT-IN INTENT-DRIVEN ENGINE, INTELLIGENTLY TRANSLATES USER INTENT INTO NETWORK CONFIGURATION, AND AUTOMATICALLY DEPLOYS NETWORK CONFIGURATION BASED ON SDNN ARCHITECTURE

Strong business processing capabilities

Supports BGP/OSPF/RIP dynamic routing protocols and static routing protocols to solve the routing and routing problems after complex networks are divided into subnets.

Host route entries up to 16K.

DHCP servers are supported, which assign IP addresses to hosts in the network.

DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.

Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.

IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.

GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.

The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.

It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.

ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.

It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

IPv6 is supported, meeting the requirements of smooth IPv4 to IPv6 upgrade and IPv4/IPv6 hybrid networking.

Complete security protection mechanism

Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.

Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.

IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.

DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.

It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.

Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.

Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Multiple access authentication methods

The TL-NS8803 supports a variety of access authentication methods, such as SMS authentication, web authentication, remote post authentication, and MAC address authentication, to meet the requirements of various application scenarios.

Hardware specifications

Software Specifications