Smart Access Gateway (SAG) provides two models of devices. The following table lists the supported features for each model and firmware version. "√" indicates supported; "×" indicates not supported.
|
Feature |
Function |
Description |
SAG-100WM |
SAG-1000 |
||
|
Version 1.0 and later |
Version 2.0 and later |
Version 1.0 and later |
Version 2.0 and later |
|||
|
Basic connectivity |
Static IP addresses on ports |
Configures static IP addresses on ports. |
√ |
√ |
√ |
√ |
|
WAN port PPPoE |
Connect SAG devices to the Internet over PPPoE. |
√ |
√ |
× |
√ |
|
|
4G support |
Connect SAG devices to the Internet over 4G networks. |
√ Built-in LTE |
√ Built-in LTE |
√ External LTE |
√ Built-in LTE Note
Supported by specific devices. |
|
|
5G support |
Connect SAG devices to the Internet over 5G networks. |
× |
× |
× |
× |
|
|
Dynamic Host Configuration Protocol (DHCP) on LAN ports |
Newly established on-premises networks automatically obtain IP addresses. |
√ |
√ |
× |
√ |
|
|
Wi-Fi support |
Connect on-premises clients to Alibaba Cloud through Wi-Fi connections. |
√ |
√ |
× |
× |
|
|
Wi-Fi 6 support |
Connect on-premises clients to Alibaba Cloud through Wi-Fi connections. |
× |
× |
× |
× |
|
|
Static routing |
Connect existing on-premises networks to Alibaba Cloud through static routing. |
√ |
√ |
√ |
√ |
|
|
Open Shortest Path First (OSPF) |
The OSPF protocol is supported. |
× |
√ |
√ |
√ |
|
|
Border Gateway Protocol (BGP) |
BGP is supported. |
× |
√ |
√ |
√ |
|
|
Internet SNAT |
Allow on-premises networks to access the Internet in inline mode. |
√ |
√ |
× |
√ |
|
|
Cross-region access to virtual private clouds (VPCs) |
Networks can access VPCs from different regions. |
√ |
√ |
√ |
√ |
|
|
Configurations |
Zero touch provisioning (ZTP) |
ZTP is supported in SAG deployment. |
√ |
√ |
× |
√ |
|
Deployment modes of SAG devices |
Inline mode |
Connect newly established on-premises networks to Alibaba Cloud through SAG devices. All traffic is transmitted through the SAG devices. |
√ |
√ |
× |
√ |
|
One-arm mode |
Connect existing on-premises networks to Alibaba Cloud through SAG devices without changing the existing network topology. |
√ |
√ |
√ |
√ |
|
|
High availability |
Standby network connections provided by SAG devices |
SAG devices can provide standby network connections for existing Express Connect circuits. |
√ |
√ |
√ |
√ |
|
WAN and 4G networks as active and standby networks |
An SAG device uses broadband or 4G networks to access the Internet. |
√ |
√ |
√ External LTE |
√ Built-in LTE |
|
|
Active and standby devices |
The active device is connected to Alibaba Cloud. When the active device is malfunctioning, the standby device takes over. This ensures the high availability of your workloads. |
√ |
√ |
√ |
√ |
|
|
Security |
VPN encryption |
Encrypted VPN connections are supported. |
√ |
√ |
√ |
√ |
|
Access control lists (ACLs) |
Allow or deny access to the Internet or private networks based on ACL rules. |
√ |
√ |
× Note
Internet ACLs are not supported. |
√ |
|
|
Offline device locking |
Lock devices that remain offline for a long time to prevent theft. |
√ |
√ |
√ |
√ |
|
|
O&M |
Remote restart |
Remotely restart a device in the console. |
√ |
√ |
√ |
√ |
|
Remote software updates |
Remotely update the software version in the console. |
√ |
√ |
√ |
√ |
|
|
Remote logon |
Log on to the web console through a secure internal connection. |
√ |
√ |
√ |
√ |
|
|
Traffic query |
Query data usage. |
√ |
√ |
√ |
√ |
|
|
Flow logs |
Record inbound and outbound traffic of SAG devices. |
× |
× |
√ |
√ |
|
|
Quality of service (QoS) policies |
Distinguish traffic of different services and ensure sufficient bandwidth for high-priority services. |
√ |
√ |
√ |
√ |
|
|
Monitoring |
Device monitoring |
Detect errors on the active and standby IPsec connections. |
√ |
√ |
√ |
√ |
|
Connection monitoring |
Notifications are sent when an SAG device goes online. |
√ |
√ |
√ |
√ |
|
|
Health checks Note
The health check feature is not available by default. You can contact your account manager to enable the health check feature. |
Check network connectivity. |
× |
√ |
× |
√ |
|
Notes:
¹ SAG-1000 v2.0+ built-in LTE is supported on specific device variants only.
² Internet ACLs are not supported on SAG-1000 v1.0+.
³ Health checks are not enabled by default. Contact your account manager to enable this feature.