Smart Access Gateway (SAG) provides two types of devices. Supported features of each type are listed in the following table. "√", "×", and "√*" respectively represent "supported", "not supported", and "supported only by SAG version 2.0".

Feature Function Description SAG-100WM SAG-1000
Basic connectivity Static IP addresses on ports Configures static IP addresses on ports.
WAN port PPPoE Accesses the Internet through dial-up connections provided by SAG devices. √*
4G support Accesses the Internet through 4G networks.

Built-in Long Term Evolution (LTE)

√*

Built-in LTE

LAN ports support Dynamic Host Configuration Protocol (DHCP) Newly established private networks automatically obtain IP addresses. √*
Wi-Fi support Local devices connect to Alibaba Cloud through Wi-Fi connections. ×
Static routing Existing private networks connect to Alibaba Cloud through static routing.
OSPF Supports the Open Shortest Path First (OSPF) protocol. √*
BGP Supports the Border Gateway Protocol (BGP). √*
Internet SNAT Allows private networks to access the Internet when SAG devices are deployed in inline mode. √*
Cross-region access to Virtual Private Cloud (VPC) Private networks can access VPC networks from different regions.
Access control lists (ACLs) Allows or denies access to the Internet or private networks based on permission rules.
Parameter Zero touch provisioning (ZTP) Supports ZTP in the deployment of SAG. √*
Deployment modes of SAG devices Inline mode New private networks connect to Alibaba Cloud through SAG devices. All traffic is transmitted through SAG devices. √*
One-arm mode Private networks connect to Alibaba Cloud through SAG devices, without changing the existing network topology.
High availability (HA) Standby network connections provided by leased lines SAG devices can be connected to existing leased lines, which provide standby network connections.
Supports active and standby networks: WAN and 4G networks An SAG device uses broadband or 4G networks to access the Internet. Available soon
Active and standby devices When an error occurs to the active device, network connections are switched to the standby device to ensure the continuity of workloads.
Security VPN encryption Supports encrypted VPN connections.
ACLs Supports access control lists (ACLs).
Offline device locking Locks devices that are offline for a long time to prevent theft.
Operations and maintenance Remote restart Restarts a device remotely in the console.
Remote software updates Remotely updates the software version in the console.
Remote logons Logs on to the web console through a secure internal connection.
Traffic query Queries the usage of data.
Flow logs Records inbound and outbound traffic of SAG devices.
Monitoring Device monitoring Checks whether both the active and standby IPsec connections encounter an error.
Link monitoring Notifications are sent when an SAG device is online.