Alibaba Cloud SAG-100WM User manual

Alibaba Cloud
智能接入网关
Smart Access Gateway
Issue: 20200611

智能接入网关 Smart Access Gateway/ Legal disclaimer
Legal disclaimer
Alibaba Cloud reminds you to carefully read and fully understand the terms and conditions
of this legal disclaimer before you read or use this document. If you have read or used this
document, it shall be deemed as your total acceptance of this legal disclaimer.
1. You shall download and obtain this document from the Alibaba Cloud website or other
Alibaba Cloud-authorized channels, and use this document for your own legal business
activities only. The content of this document is considered confidential information of
Alibaba Cloud. You shall strictly abide by the confidentiality obligations. No part of this
document shall be disclosed or provided to any third party for use without the prior
written consent of Alibaba Cloud.
2. No part of this document shall be excerpted, translated, reproduced, transmitted, or
disseminated by any organization, company, or individual in any form or by any means
without the prior written consent of Alibaba Cloud.
3. The content of this document may be changed due to product version upgrades,
adjustments, or other reasons. Alibaba Cloud reserves the right to modify the content
of this document without notice and the updated versions of this document will be
occasionally released through Alibaba Cloud-authorized channels. You shall pay
attention to the version changes of this document as they occur and download and
obtain the most up-to-date version of this document from Alibaba Cloud-authorized
channels.
4. This document serves only as a reference guide for your use of Alibaba Cloud products
and services. Alibaba Cloud provides the document in the context that Alibaba Cloud
products and services are provided on an "as is", "with all faults" and "as available"
basis. Alibaba Cloud makes every effort to provide relevant operational guidance based
on existing technologies. However, Alibaba Cloud hereby makes a clear statement that it
in no way guarantees the accuracy, integrity, applicability, and reliability of the content
of this document, either explicitly or implicitly. Alibaba Cloud shall not bear any liability
for any errors or financial losses incurred by any organizations, companies, or individual
s arising from their download, use, or trust in this document. Alibaba Cloud shall not,
under any circumstances, bear responsibility for any indirect, consequential, exemplary
, incidental, special, or punitive damages, including lost profits arising from the use or
trust in this document, even if Alibaba Cloud has been notified of the possibility of such
a loss.
Issue: 20200611 I

智能接入网关 Smart Access Gateway/ Legal disclaimer
5. By law, all the contents in Alibaba Cloud documents, including but not limited to
pictures, architecture design, page layout, and text description, are intellectual property
of Alibaba Cloud and/or its affiliates. This intellectual property includes, but is not
limited to, trademark rights, patent rights, copyrights, and trade secrets. No part of
this document shall be used, modified, reproduced, publicly transmitted, changed,
disseminated, distributed, or published without the prior written consent of Alibaba
Cloud and/or its affiliates. The names owned by Alibaba Cloud shall not be used,
published, or reproduced for marketing, advertising, promotion, or other purposes
without the prior written consent of Alibaba Cloud. The names owned by Alibaba Cloud
include, but are not limited to, "Alibaba Cloud", "Aliyun", "HiChina", and other brands
of Alibaba Cloud and/or its affiliates, which appear separately or in combination, as
well as the auxiliary signs and patterns of the preceding brands, or anything similar
to the company names, trade names, trademarks, product or service names, domain
names, patterns, logos, marks, signs, or special descriptions that third parties identify as
Alibaba Cloud and/or its affiliates.
6. Please contact Alibaba Cloud directly if you discover any errors in this document.
II Issue: 20200611

智能接入网关 Smart Access Gateway/ Legal disclaimer
Issue: 20200611 III

智能接入网关 Smart Access Gateway/ Document conventions
Document conventions
Style Description Example
A danger notice indicates a
situation that will cause major
system changes, faults, physical
injuries, and other adverse results.
Danger:
Resetting will result in the loss of
user configuration data.
A warning notice indicates a
situation that may cause major
system changes, faults, physical
injuries, and other adverse results.
Warning:
Restarting will cause business
interruption. About 10 minutes
are required to restart an
instance.
A caution notice indicates warning
information, supplementary
instructions, and other content
that the user must understand.
Notice:
If the weight is set to 0, the server
no longer receives new requests.
A note indicates supplemental
instructions, best practices, tips,
and other content.
Note:
You can use Ctrl + A to select all
files.
> Closing angle brackets are used
to indicate a multi-level menu
cascade.
Click Settings > Network > Set
network type.
Bold Bold formatting is used for buttons
, menus, page names, and other UI
elements.
Click OK.
Courier font Courier font is used for commands. Run the cd /d C:/window
command to enter the Windows
system folder.
Italic Italic formatting is used for
parameters and variables.
bae log list --instanceid
Instance_ID
[] or [a|b] This format is used for an optional
value, where only one item can be
selected.
ipconfig [-all|-t]
Issue: 20200611 I

智能接入网关 Smart Access Gateway/ Document conventions
Style Description Example
{} or {a|b} This format is used for a required
value, where only one item can be
selected.
switch {active|stand}
II Issue: 20200611

智能接入网关 Smart Access Gateway/ Document conventions
Issue: 20200611 III

智能接入网关 Smart Access Gateway/ Contents
Contents
Legal disclaimer......................................................................... I
Document conventions................................................................I
1 Features of Smart Access Gateway devices............................... 1
2 SAG-100WM configurations..................................................... 5
2.1 SAG-100WM overview............................................................................................ 5
2.2 Web configurations for SAG-100WM devices....................................................... 10
3 SAG-1000 usage instructions................................................. 19
3.1 SAG-1000 overview.............................................................................................. 19
3.2 Install an SAG-1000 device..................................................................................22
3.3 Web configurations for SAG-1000 devices........................................................... 26
IV Issue: 20200611

智能接入网关 Smart Access Gateway/ 1 Features of Smart Access
Gateway devices
1 Features of Smart Access Gateway devices
Smart Access Gateway (SAG) provides two types of devices. Supported features of each
type are listed in the following table. "√", "×", and "√*" respectively represent "supported",
"not supported", and "supported only by SAG version 2.0".
Feature Function Description SAG-100WM SAG-1000
Static IP addresses
on ports
Configures static IP
addresses on ports.
√ √
WAN port PPPoE Accesses the Internet
through dial-
up connections
provided by SAG
devices.
√ √*
4G support Accesses the Internet
through 4G networks
.
√
Built-in
Long Term
Evolution (LTE
)
√*
Built-in LTE
LAN ports support
Dynamic Host
Configuration
Protocol (DHCP)
Newly established
private networks
automatically obtain
IP addresses.
√ √*
Wi-Fi support Local devices
connect to Alibaba
Cloud through Wi-Fi
connections.
√ ×
Static routing Existing private
networks connect
to Alibaba Cloud
through static
routing.
√ √
Basic
connectivity
OSPF Supports the Open
Shortest Path First (
OSPF) protocol.
√* √
Issue: 20200611 1

智能接入网关 Smart Access Gateway/ 1 Features of Smart Access
Gateway devices
Feature Function Description SAG-100WM SAG-1000
BGP Supports the Border
Gateway Protocol (
BGP).
√* √
Internet SNAT Allows private
networks to access
the Internet when
SAG devices are
deployed in inline
mode.
√ √*
Cross-region access
to Virtual Private
Cloud (VPC)
Private networks can
access VPC networks
from different
regions.
√ √
Access control lists (
ACLs)
Allows or denies
access to the Internet
or private networks
based on permission
rules.
√ √
Parameter Zero touch provisioni
ng (ZTP)
Supports ZTP in the
deployment of SAG.
√ √*
Inline mode New private
networks connect
to Alibaba Cloud
through SAG
devices. All traffic is
transmitted through
SAG devices.
√ √*Deployment
modes of
SAG devices
One-arm mode Private networks
connect to Alibaba
Cloud through SAG
devices, without
changing the
existing network
topology.
√ √
High
availability (
HA)
Standby network
connections
provided by leased
lines
SAG devices can be
connected to existing
leased lines, which
provide standby
network connections.
√ √
2 Issue: 20200611