Net Router 1000M 4PORT/XVR-800 Planet

Dual 10G-Capable VPN Gateway with Comprehensive Multi-VPN and Post-Quantum Security Support



This VPN Gateway is designed for high-performance enterprise connectivity, featuring flexible 10G fiber and copper WAN/LAN interfaces and 4 Gigabit LAN ports for efficient network deployment. It supports multiple VPN protocols—including IPSec, SSL (OpenVPN), WireGuard, GRE, PPTP, and L2TP—to enable secure communication across distributed networks. With PQC TLS (Post-Quantum Cryptography TLS) readiness, the XVR-800 enhances long-term security against emerging quantum computing threats. The gateway also delivers dual-WAN failover, load balancing, and advanced routing in a compact industrial-grade design.



The XVR-800 serves as a central gateway connecting diverse IPv6-enabled IoT devices and network environments, as illustrated below.





Automatic Failover between Dual WAN



With its fiber and copper dual WAN interfaces—10GBASE-X SFP+ and 10GBASE-T—the XVR-800 ensures continuous Internet connectivity through automatic failover. Administrators can freely set the WAN priority, and when the primary link becomes unavailable, the secondary WAN interface takes over instantly. This design guarantees reliable, always-on network uptime for mission-critical applications.





Flexible 10Gbps WAN interface Enables Extension of Network Deployment



The XVR-800 is equipped with both copper and fiber WAN interfaces, featuring an SFP+ slot that supports a wide range of SFP+ transceivers for FTTx and long-distance extensions. Administrators can select SFP+ modules according to distance requirements:



- Multi-mode fiber: 550 m to 2 km

- Single-mode / WDM fiber: 10 km, 20 km, 30 km, 40 km, 50 km, 60 km, 70 km, up to 120 km This capability allows the device to efficiently uplink to backbone switches or monitoring centers over long distances.





Secure Boot for Trusted System Integrity



The XVR-800 incorporates a Secure Boot mechanism to ensure that only authenticated and trusted firmware can be executed during system startup. This hardware-based protection prevents unauthorized or tampered firmware from being loaded, safeguarding the device against malicious attacks at the system level and ensuring a trusted foundation for network security.





Excellent Ability in Threat Defense



The XVR-800 with built-in SPI (stateful packet inspection) firewall and DoS/DDoS attack mitigation functions provides high efficiency and extensive protection for your network. Thus, virtual server and DMZ functions can let you set up servers in the Intranet and still provide services to the Internet users.





Cybersecurity Network Solution to Minimize Security Risks



The cybersecurity feature included to protect the switch management in a mission-critical network virtually needs no effort and cost to install. For efficient management, the XVR-800 is equipped with HTTPS web and SNMP management interfaces. With the built-in web-based management interface, the XVR-800 offers an easy-to-use, platform independent management and configuration facility. The XVR-800 supports SNMP and it can be managed via any management software based on the standard SNMP protocol.



With support for advanced security mechanisms such as Secure Boot and PQC TLS readiness, the XVR-800 ensures long-term protection against evolving cyber threats, including quantum-era attacks.





High-Availability VPN Security Router Designed for SMB Applications



The XVR-800 ensures strong data privacy and secure remote access through its comprehensive VPN suite. It supports IPSec VPN with DES/3DES/AES encryption and MD5, SHA-1, SHA-256, SHA-384, and SHA-512 authentication, as well as GRE tunneling, SSL VPN, PPTP, L2TP, and WireGuard for modern, lightweight, high-speed encrypted connections. With this extensive VPN capability, the XVR-800 provides secure, flexible, and resilient connectivity for branch sites, remote workers, and sensitive business operations.





Flexible Routing with NAT Disable Capability



The XVR-800 supports NAT disable functionality, allowing it to operate in pure routing mode for advanced network deployment scenarios. This feature is particularly beneficial for environments requiring end-to-end IP transparency, such as enterprise backbone networks, data centers, or integration with upstream security systems. By disabling NAT, administrators can achieve greater control over traffic flow and routing policies.





Maximizing Work Efficiency with PLANET SD-WAN Gateway



PLANET XVR-800 incorporated in SD-WAN (software-defined wide area network) function can greatly increase WAN optimization for multiple WAN links to be managed. With SD-WAN, users can connect any application across all available network connections at every site. It improves application performance and provides a high-quality user experience for increasing business productivity and reducing IT costs.





Integrated Wi-Fi Management for Secure and Easy Deploymen



The XVR-800 integrates an AP Controller, Captive Portal, RADIUS authentication, and DHCP server to streamline Wi-Fi deployment for small and medium-sized businesses. These built-in services eliminate the need for external servers, enabling administrators to centrally manage APs, enforce access policies, and deliver secure employee and guest Wi-Fi networks with reduced setup complexity.





Centralized Remote Control of Managed APs



Through its intuitive web-based interface, the XVR-800 allows easy centralized control of PLANET Smart APs, with simple configuration of SSIDs, radio settings, and security policies. A quick four-step setup pushes wireless profiles to multiple APs or groups at once, enabling fast rollout and reduced deployment cost.



Administrators can cluster APs of the same model for unified management, flexibly expand or remove APs, and perform bulk provisioning or firmware upgrades—all from a single control point. This ensures scalable, efficient, and low-maintenance Wi-Fi management.





Intelligent SFP Diagnosis Mechanism



The XVR-800 supports SFP-DDM (digital diagnostic monitor) function that greatly helps network administrator to easily monitor real-time parameters of the SFP, such as optical output power, optical input power, temperature, laser bias current, and transceiver supply voltage.







Learn more: https://www.planet.com.tw/en/product/xvr-800

• Highlights


• ．One 1G/2.5G/5G/10GBASE-T RJ45 Port for WAN/LAN interface


• ．One 1G/2.5G/10GBASE-X SFP+ slot for WAN/LAN interface


• ．Dual-WAN failover and dual-WAN load balancing


• ．SSL VPN and robust hybrid VPN (IPSec/PPTP/L2TP over IPSec/OpenVPN/WireGuard)


• ．Stateful Packet Inspection (SPI) firewall and content filtering


• ．Blocks DoS/DDOS attack, port range forwarding


• ．High Availability, AP Controller, Captive Portal and RADIUS


• ．IPv6, SNMP, PLANET DDNS and Universal Network Management System


• ．Planet NMS controller system and CloudNMS platform supported


• ．Supports up to 100 concurrent SSL VPN connections


• Hardware


• ．4 10/100/1000BASE-T RJ45 ports


• ．1 1G/2.5G/5G/10GBASE-T RJ45 Port for WAN/LAN interface


• ．1 1G/2.5G/10GBASE-X SFP+ slot for WAN/LAN interface


• ．1 USB port for system configuration backup and restoration


• ．Reset button


• ．Desktop installation or rack mounting


• IP Routing Feature


• ．Static Route


• ．Dynamic Route


• ．OSPF


• Firewall Security


• ．Secure Boot to ensure trusted firmware integrity


• ．Cybersecurity


• ．Stateful Packet Inspection (SPI) firewall


• ．Blocks DoS/DDoS attack


• ．Content Filtering


• ．MAC Filtering and IP Filtering


• ．NAT ALGs (Application Layer Gateway)


• ．Blocks SYN/ICMP Flooding


• VPN Features


• ．IPSec/Remote Server (Net-to-Net, Host-to-Net), GRE, PPTP Server, L2TP Server, SSL Server/Client (OpenVPN, compatible with VPN services such as Surfshark and NordVPN), WireGuard


• ．Encryption methods: DES, 3DES, AES, AES-128/192/256


• ．Authentication methods: MD5, SHA-1, SHA-256, SHA-384, SHA-512


• ．PQC TLS (Post-Quantum Cryptography TLS) readiness for future-proof encryption


• Networking


• ．Outbound load balancing


• ．Failover for dual-WAN


• ．High Availability


• ．Captive Portal


• ．RADIUS Server/Client


• ．Static IP/PPPoE/DHCP client for WAN


• ．DHCP server/NTP client for LAN


• ．Protocols: TCP/IP, UDP, ARP, IPv4, IPv6


• ．Port forwarding, QoS, DMZ, IGMP, UPnP, SNMPv1,v2c, v3


• ．MAC address clone


• ．DDNS: PLANET DDNS, Easy DDNS, DynDNS and No-IP


• ．NAT disable support for pure routing mode deployment


• Others


• ．Setup wizard


• ．Dashboard for real-time system overview


• ．SFP-DDM (Digital Diagnostic Monitor)


• ．Supported access by HTTP or HTTPS


• ．Auto reboot


• ．PLANET NMS System and Smart Discovery Utility for deployment management


• ．PLANET CloudNMS app for real-time monitoring