Smart Access Gateway (SAG) provides two models of devices. Supported features of each model are listed in the following table. "√" and "×" represent "supported" and "not supported".
Feature | Function | Description | SAG-100WM | SAG-1000 | ||
---|---|---|---|---|---|---|
Version 1.0 and later | Version 2.0 and later | Version 1.0 and later | Version 2.0 and later | |||
Basic connectivity | Static IP addresses on ports | Configures static IP addresses on ports. | √ | √ | √ | √ |
WAN port PPPoE | Accesses the Internet through dial-up connections provided by SAG devices. | √ | √ | × | √ | |
4G support | Accesses the Internet through 4G networks. | √
Built-in Long Term Evolution (LTE) |
√
Built-in LTE |
√
External LTE |
√
Built-in LTE Note Supported by specific devices.
|
|
LAN ports support Dynamic Host Configuration Protocol (DHCP) | Newly established private networks automatically obtain IP addresses. | √ | √ | × | √ | |
Wi-Fi support | On-premises devices connect to Alibaba Cloud through Wi-Fi connections. | √ | √ | × | × | |
Static routes | Existing private networks connect to Alibaba Cloud through static routing. | √ | √ | √ | √ | |
OSPF | Supports the Open Shortest Path First (OSPF) protocol. | × | √ | √ | √ | |
BGP | Supports the Border Gateway Protocol (BGP). | × | √ | √ | √ | |
Internet SNAT | Allows private networks to access the Internet when SAG devices are deployed in inline mode. | √ | √ | × | √ | |
Cross-region access to virtual private clouds (VPCs) | Private networks can access VPCs from different regions. | √ | √ | √ | √ | |
Parameter | Zero touch provisioning (ZTP) | Supports ZTP in SAG deployment. | √ | √ | × | √ |
Deployment modes of SAG devices | Inline mode | New private networks connect to Alibaba Cloud through SAG devices. All traffic is transmitted through SAG devices. | √ | √ | × | √ |
One-arm mode | Private networks connect to Alibaba Cloud through SAG devices, without changing the existing network topology. | √ | √ | √ | √ | |
High availability (HA) | Standby network connections provided by SAG devices | SAG devices can provide standby network connections for existing leased lines. | √ | √ | √ | √ |
Supports active and standby networks: WAN and 4G networks | An SAG device uses broadband or 4G networks to access the Internet. | √ | √ | √
External LTE |
√
Built-in LTE |
|
Active and standby devices | The active device is connected to Alibaba Cloud. When the active device is malfunctioning, the standby device takes over. This ensures the high availability of your workloads. | √ | √ | √ | √ | |
Security | VPN encryption | Supports encrypted VPN connections. | √ | √ | √ | √ |
Access control lists (ACLs) | Allows or denies access to the Internet or private networks based on ACL rules. | √ | √ | ×
Note Internet ACLs are not supported.
|
√ | |
Offline device locking | Locks devices that are offline for a long time to prevent theft. | √ | √ | √ | √ | |
Operations and maintenance | Remote restart | Restarts a device remotely in the console. | √ | √ | √ | √ |
Remote software updates | Remotely updates the software version in the console. | √ | √ | √ | √ | |
Remote logons | Logs on to the web console through a secure internal connection. | √ | √ | √ | √ | |
Traffic query | Queries data usage. | √ | √ | √ | √ | |
Flow log | Records inbound and outbound traffic of SAG devices. | × | × | √ | √ | |
QoS policies | Distinguishes traffic of different workloads and ensures sufficient bandwidth for high-priority traffic. | √ | √ | √ | √ | |
Traffic monitoring | Device monitoring | Checks whether both the active and standby IPsec connections encounter an error. | √ | √ | √ | √ |
Connection monitoring | Notifications are sent when an SAG device is online. | √ | √ | √ | √ | |
Health checks
Note The health check feature is disabled by default. To enable this feature, submit a ticket.
|
Checks the connectivity of connections. | × | √ | × | √ |