Features and functions of SAG devices - Smart Access Gateway

Smart Access Gateway (SAG) provides two models of devices. Supported features of each model are listed in the following table. "√" and "×" represent "supported" and "not supported".


Feature	Function	Description	SAG-100WM		SAG-1000
Feature	Function	Description	Version 1.0 and later	Version 2.0 and later	Version 1.0 and later	Version 2.0 and later
Basic connectivity	Static IP addresses on ports	Configures static IP addresses on ports.	√	√	√	√
	WAN port PPPoE	Connect SAG devices to the Internet over PPPoE.	√	√	×	√
	4G support	Connect SAG devices to the Internet over 4G networks.	√ Built-in LTE	√ Built-in LTE	√ External LTE	√ Built-in LTE Note Supported by specific devices.
	5G support	Connect SAG devices to the Internet over 5G networks.	×	×	×	×
	LAN ports support Dynamic Host Configuration Protocol (DHCP)	Newly established on-premises networks automatically obtain IP addresses.	√	√	×	√
	Wi-Fi support	Connect on-premises clients to Alibaba Cloud through Wi-Fi connections.	√	√	×	×
	Wi-Fi 6 support	Connect on-premises clients to Alibaba Cloud through Wi-Fi connections.	×	×	×	×
	Static routing	Connect existing on-premises networks to Alibaba Cloud through static routing.	√	√	√	√
	Open Shortest Path First (OSPF)	The OSPF protocol is supported.	×	√	√	√
	Border Gateway Protocol (BGP)	BGP is supported.	×	√	√	√
	Internet SNAT	Allow on-premises networks to access the Internet in inline mode.	√	√	×	√
	Cross-region access to virtual private clouds (VPCs)	Networks can access VPCs from different regions.	√	√	√	√
Configurations	Zero touch provisioning (ZTP)	ZTP is supported in SAG deployment.	√	√	×	√
Deployment modes of SAG devices	Inline mode	Connect newly established on-premises networks to Alibaba Cloud through SAG devices. All traffic is transmitted through the SAG devices.	√	√	×	√
Deployment modes of SAG devices	One-arm mode	Connect existing on-premises networks to Alibaba Cloud through SAG devices without changing the existing network topology.	√	√	√	√
High availability	Standby network connections provided by SAG devices	SAG devices can provide standby network connections for existing Express Connect circuits.	√	√	√	√
	Supports active and standby networks: WAN and 4G networks	An SAG device uses broadband or 4G networks to access the Internet.	√	√	√ External LTE	√ Built-in LTE
	Active and standby devices	The active device is connected to Alibaba Cloud. When the active device is malfunctioning, the standby device takes over. This ensures the high availability of your workloads.	√	√	√	√
Security	VPN encryption	Encrypted VPN connections are supported.	√	√	√	√
	Access control lists (ACLs)	Allow or deny access to the Internet or private networks based on ACL rules.	√	√	× Note Internet ACLs are not supported.	√
	Offline device locking	Lock devices that remain offline for a long time to prevent theft.	√	√	√	√
O&M	Remote restart	Remotely restart a device in the console.	√	√	√	√
	Remote software updates	Remotely update the software version in the console.	√	√	√	√
	Remote logon	Log on to the web console through a secure internal connection.	√	√	√	√
	Traffic query	Query data usage.	√	√	√	√
	Flow logs	Record inbound and outbound traffic of SAG devices.	×	×	√	√
	Quality of service (QoS) policies	Distinguish traffic of different services and ensure sufficient bandwidth for high-priority services.	√	√	√	√
Monitoring	Device monitoring	Detect errors on the active and standby IPsec connections.	√	√	√	√
	Connection monitoring	Notifications are sent when an SAG device goes online.	√	√	√	√
	Health checks Note The health check feature is not available by default. You can contact your account manager to enable the health check feature.	Check network connectivity.	×	√	×	√