WD2800 Series

WD2800 Series Branch Routers

The WatchDog WD2800 Series is a next-generation branch router designed to deliver secure, stable, and high-performance WAN connectivity for small to medium enterprise networks. It works as an ideal egress gateway for Internet access, VPN connectivity, NAT services, and IPSec-based secure communication.

With advanced routing, strong security, and intelligent traffic control, the WD2800 series helps organizations build reliable and scalable network infrastructure across government, power, finance, taxation, public security, railways, and education sectors.

WD9800-48CD8D front panel

WD2800-6-X1-GL

  • IP Forwarding (IMIX): 900 Mbps
  • WAN Ports: 1 × GE Copper, 1 × SFP Port
  • CPU: 1.6 GHz | RAM: 8 GB
  • Flash: 8 GB
WD9800-48CD8D rear panel

WD2800-15-X1

  • IP Forwarding (IMIX): 1 Gbps
  • WAN Ports: 5 × GE Copper, 2 × SFP Port
  • CPU: 1.6 GHz | RAM: 8 GB
  • Flash: 8 GB (NAND)
WD9800-40B front panel

WD2830E-X1

  • IP Forwarding (IMIX): 10 Gbps
  • WAN Ports: 3 × 10GE (SFP+), 2 × GE (Combo)
  • CPU: 2.2 GHz | RAM: 8 GB
  • Flash: 8 GB (eMMC)

Key Features

Next-generation Technologies

The WD2800 series is powered by WDOS leading network operating system, offering an intelligent service scheduling and management mechanism. It supports loose coupling between different service modules and allows dynamic loading of processes and patches for greater flexibility and easier upgrades. The router adopts a high-performance multi-core CPU, significantly improving concurrent multi-service processing capacity. In addition, WDOS innovative intelligent link engine technology enhances SIC card bus bandwidth while enabling automatic interface resource allocation for optimized performance.

Robust Security Features

Service Security: The WD2800 series provides strong service-level protection with advanced packet filtering capabilities, including stateful inspection, MAC address filtering, IP/port filtering, and time-based filtering. It also supports real-time traffic analysis to improve threat visibility and network stability. Network Security: It offers a rich set of VPN technologies such as IPSec, L2TP, GRE, MPLS VPN, and flexible hybrid VPN deployments. The platform also ensures routing security with protection for dynamic routing protocols including OSPF, RIP, IS-IS, and BGP, along with IPSec encryption support and advanced routing policy controls. End Device Access Security: The device supports unified endpoint access control with multiple authentication methods such as EAD secure checks, 802.1X, MAC authentication, web portal authentication, static binding, and MAC auto-learning/binding. It also includes comprehensive ARP attack prevention features such as ARP detection, suppression, rate limiting, MAC consistency checks, and active acknowledgement mechanisms. Equipment Management Security: For secure administration, WD2800 provides role-based access control (RBAC), control-plane traffic restriction, and protocol-based filtering. It also supports secure remote management through SNMPv3, SSH, and HTTPS, along with management auditing features like AAA authentication, command authority control, and real-time operation log reporting.

Granular Control

The WD2800 series enables granular identification and policy-based control to rate-limit and filter application- layer services, ensuring optimal bandwidth utilization. It also provides detailed network statistics to support monitoring and performance optimization. The platform supports intelligent load balancing based on bandwidth, user, user groups, services, or applications through asymmetric link utilization, traffic load balancing, and multi-topology dynamic routing. In addition, it offers flexible bandwidth sharing policies based on services, users, user groups, links, and individual user bandwidth requirements.

Software

SOFTWARE SPECIFICATIONS

Layer 2 Switching
  • 802.1p - IEEE 802.1p (Priority / QoS tagging)
  • 802.1Q - IEEE 802.1Q (VLAN tagging / VLAN trunking)
  • 802.1X - IEEE 802.1X (Port-based network access control)
  • 802.3x - IEEE 802.3x flow control
  • STP (802.1D) - Spanning Tree Protocol
  • RSTP (802.1w) - Rapid Spanning Tree Protocol
  • MSTP (802.1s) - Multiple Spanning Tree Protocol
  • VLAN - Virtual Local Area Network
  • Port-based VLAN
  • Guest VLAN
  • PPP - Point-to-Point Protocol
  • PPPoE - Point-to-Point Protocol over Ethernet
  • HDLC - High-Level Data Link Control
  • DDR - Dial-on-Demand Routing
  • Ethernet
  • Ethernet II
IP Services
  • Unicast
  • multicast
  • TCP and UDP
  • IP unnumbered
  • Policy-based routing
  • NetStream
  • IP option
  • sFlow
IP Application
  • Ping, Tracert
  • ICMP
  • DDNS
  • DHCP relay
  • DHCP client
  • DHCP server
  • DNS client
  • DNS proxy
  • NTP and SNTP
IPv4 Routing
  • Static routing
  • Dynamic routing
  • RIPv1/v2, OSPFv2, BGP, and IS-IS Route iteration
  • Policy routing
  • Equal-cost multi-path routing (ECMP)
  • Multicast routing: IGMPv1/v2/v3, PIM-DM, PIM-SM, MBGP, and MSDP
IPv6
  • IPv6 tunneling: manual tunneling,
  • automatic tunneling, GRE tunnel, 6to4, and ISATAP Static routing
  • Dynamic routing: RIPng and OSPFv3
  • IS-ISv6 and BGP4+
  • IPv6 multicast: MLDv1/v2, PIM-DM, and PIM-SM
  • IPv6 ND and IPv6 PMTU
  • IPv6 FIB and IPv6 ACL
  • NAT-PT, 6PE, and DS-LITE
QoS
  • LR, port-based mirroring, Port Trust Mode, and port priority Committed access rate
  • FIFO, WFQ, and CBQ
  • CAR (Carrier Access Rate)
  • Generic Traffic Shaping (GTS)
  • Traffic classification
Security
  • Basic Firewall Function, ASPF, ACL, Filter, Connection Limit, IKE, IPsec
  • L2TP, NAT/NAPT
  • PKI, RSA, SSH v1.5/2.0
  • uRPF, mGRE, GRE
  • PPPoE Client & Server, Portal, 802.1X
  • Local Authentication
  • RBAC (Role-Based Access Control)
  • RADIUS
  • TACACS+
  • ARP Attack Prevention, SSL VPN, ADVPN, GDVPN
  • AES (Advanced Encryption Standard)
  • DES (Data Encryption Standard)
  • 3DES (Triple Data Encryption Standard)
  • MD5
  • SHA1
3G/4G/5G Access
  • TDD/FDD LTE
  • 5G NR NSA/SA
  • TD-SCDMA and CDMA2000/EVDO
  • WCDMA/HSPA+
MPLS
  • LDP and static LSP
  • L3VPN: inter-AS MPLS VPN (Option 1/2/3) and MPLS nested VPN
  • Hierarchy of PE (HoPE), dual-homed CE, MCE, and multirole host
  • L2VPN: Martini, Kompella, CCC PWs and static PWs MPLS TE, RSVP TE
High Availability
  • VRRP and VRRPv3
  • Bandwidth-based load balancing and backup
  • IP address-based load balancing and backup
  • NQA collaboration with routing, VRRP, or interface backup
Management and Maintenance
  • SNMP v1/v2c/v3, MIB, SYSLOG, and RMON
  • DHCP, FTP, HTTP, ICMP, UDP public, and UDP private
  • BiMS remote management
  • Booting from USB drive, CLI, file system, and dual image
  • TR-069
  • TCP public, TCP private, and SNMP
  • Console port login, Telnet login, SSH login, and FTP login
Hardware

Hardware Specifications

Features WD2800-6-X1-GL WD2800-15-X1 WD2830E-X1
IP Forwarding Performance (IMIX) 900 Mbps 1 Gbps 10 Gbps
Forwarding Performance with ACL+NAT+QoS (IMIX) 800 Mbps 1 Gbps 5.5 Gbps
IPSec Forwarding Performance (1400 byte) 250 Mbps 250 Mbps 5 Gbps
WD-WAN typical encryption performance (IMIX) 200 Mbps 200 Mbps 1 Gbps
CPU 1.6 GHz 1.6 GHz 2.2 GHz
RAM Memory 8 GB 8 GB 8 GB
Flash 8 GB 8 GB (NAND) 8 GB (eMMC)
USB Ports 1 1 1
CON Ports 1 1 1
WAN Ports 1 × GE copper
1 × SFP port
5 × GE copper
2 × SFP port
3 × 10GE (SFP+)
2 × GE (Combo)
LAN Ports 4 × GE (RJ45) 8 × GE (RJ45) 8 × GE (RJ45)
SIC Slots 2 2 2
Max Power Consumption 30 W 36 W 54 W
Power Input 100-240 VAC, 50/60 Hz 100-240 VAC, 50/60 Hz 100-240 VAC, 50/60 Hz
Rack Height 1 RU 1 RU 1 RU
Dimensions (H×W×D) 44.2 × 360 × 300 mm 44.2 × 360 × 300 mm 44.2 × 360 × 300 mm
Weight 3.15 kg 2.9 kg 3.15 kg
Operating Temperature -5°C to 55°C -5°C to 55°C -5°C to 55°C
Operating Humidity 5%–95% RH (non-condensing) 5%–95% RH (non-condensing) 5%–95% RH (non-condensing)