The QHora-321 6-Port 2.5GbE SD-WAN Router from QNAP enables high-speed connectivity using six 2.5GbE RJ45 ports, while also providing enterprise-grade mesh networking with QNAP devices at multiple sites. You can achieve multi-site LAN development via the cloud through the QuWAN Orchestrator, with full software-controlled routing to build a next-generation network. Up to 700 concurrent VPN connections are supported.

QNAP recommends that you pair the QHora-321 with a QNAP NAS for businesses to perform secure remote backups. By using the Hybrid Backup Sync app through QuWAN, you can transfer files and snapshots between multiple NAS devices through a secure encrypted network. For enhanced security, you can also connect your NAS (QNAP or otherwise) directly behind the QHora-321 to prevent attacks.

6 x 2.5GbE WAN/LAN Ports    Supports IEEE 802.3/3u/3ab/3bz/1Q/3x    Up to 700 Concurrent VPN Connections    Mesh VPN    Automatic Device Search in WAN/LAN    2.2 GHz Marvell CN9130 Quad-Core    4GB DDR4 RAM    4GB eMMC Flash Memory    QuRoute OS

The QHora-321 provides six 2.5GbE ports (compatible with 2.5G/1G/100M) for high-speed wired networking performance. In default mode, the first port from the left is WAN and each network port is independent. To set the ports to the same network segment, configure them using the QuRouter OS.

As a next-generation router, every port of the QHora-321 gives you flexible high-speed LAN/WAN deployment.

IoT Direct-to-Device Connectivity

Directly connect individual IoT devices to the QHora-321 through independent network segments, so that different devices can operate smoothly together.

Note: Each network port and network segment are independent by default.

High-Speed LAN

Set multiple LAN ports in one LAN using the QuRouter OS. A high-speed Intranet is ideal for large file transfer or communication between workstations.

VLAN Network Slicing

Use the VLAN function to segment domains for different applications, so that multiple applications can connect to the network through a single network port.

Auto Mesh Multi-Site VPN

Enable QuWAN SD-WAN at multi-site QHora-321 and multi-points will automatically form a Mesh VPN network, providing a simpler and faster multi-point secure connection solution.

To secure your remote access and prevent potential attacks, it is highly recommended to connect the QHora-321 in front of your NAS device. The NAT (Network Address Translation) enables private network security by hiding the actual IP address used in the private network from users outside the firewall.

Through the QuWAN cloud platform, the QHora-321 can automatically establish a mesh VPN network with other QNAP devices to quickly deploy a mesh VPN environment. To effectively complete remote backup tasks for your organization, use the Hybrid Backup Sync (HBS) app in QNAP NAS to easily back up or sync NAS data to another NAS, remote server, or the cloud. Build your 3-2-1 backup up strategy and prevent data loss with HBS now.

The QHora-321 has near-silent operation. Even when connected to multiple devices, it maintains dependable performance for office and home use. With a modern appearance and highly effective cooling, the QHora-321 fits perfectly alongside other devices in modern digital homes and offices.

Secure local NAS devices

QHora supports L3 firewall, NAT, and Port Forwarding to improve LAN Security.

Secure Remote Devices

QHora at different sites enables interconnected Mesh VPN topology via SD-WAN for secure access to your NAS.

Secure End Devices

Mobile devices can securely access NAS data via the QVPN service (supports OpenVPN, L2TP, and QNAP's proprietary QBelt VPN protocols) offered by QHora.

Secure NAS Applications

Cross-site NAS data transfers, such as file backup, synchronization, and sharing, are protected within the SD-WAN network.

The QHora-321 uses the QuRouter OS, providing a user-friendly web-based GUI, at-a-glance dashboard, and port indicators to assist in everyday network management tasks. With the QuRouter OS, not only can users efficiently manage all connected wired and wireless devices in real-time, but they can also configure the firewall, VPN, security, and QuWAN advanced functions.

The traditional multi-site VPN setup is extremely time-consuming and requires subsequent maintenance work. The QHora-321 is equipped with QNAP's next-generation QuWAN SD-WAN technology to greatly simplify installation. Setting up a VPN no longer requires additional fixed IP application as local and remote configuration information can be automatically exchanged through the Cloud Orchestrator. In this case, IT professionals can complete VPN setup with minimal user intervention.

• Use the PPPoE connection provided by your ISP to set up WAN. After setting the PPPoE connection, you can obtain a public IP instead of applying for a dedicated line or fixed IP.
• Open QuWAN settings and sign in to your QNAP Account.
• Select the organization/region/site where the device will be added (you can add all devices to the preset organization/region/site by default).
• Access the remote site machine to set the remote site IP (it cannot be identical to the local site IP; the default IP segment on the LAN side is 192.168.100.1, you can change the remote default IP to 192.168.200.1 segment).
• Repeat steps 1-3 at the remote site. Complete the VPN setup, then log in and check the VPN status.

QuWAN Orchestrator is a powerful and convenient centralized network management cloud platform, enabling IT staff to remotely deploy and manage edge network devices. Its Zero Touch Provisioning (ZTP) allows IT staff to easily build a large-scale WAN remotely and without the assistance of personnel at each location. IT staff can also monitor bandwidth, set parameters, and analyze network traffic on a single platform, making it perfect for multi-site, multinational network management and maintenance. Connected to the QHora-321 via wired or wireless connections, client devices can easily access the SD-WAN network.

QuWAN Orchestrator

Go to quwan.qnap.com to view the status of connected devices via the Dashboard. You can apply batch settings to all devices, set push notifications, and perform remote troubleshooting.

QuWAN Agent

Install QuWAN Agent on your QNAP devices and configure the setting parameters to be connected to each other in a Mesh VPN (Topology view in QuWAN Orchestrator).

QVPN Client

Install QVPN on mobile devices and computers for easy connection to the QHora-321 for accessing multi-site VPN resources.

QuWAN can be installed on QNAP NAS, QGD switches, and QuCPE servers. When co-working with the QVPN App, remote workers can be easily connected to SSL VPN via their computer or mobile device. Whether scaling up to accommodate worldwide offices or just to different departments in the same building, devices in different locations are flexibly segmented to be connected with each other in a micro-segmented network.

QuWAN Orchestrator

Manage the network using a centralized management cloud platform.

QuCPE Server

The high-performance core VPN Server at the HQ.

NAS

Add branch offices to the VPN Infrastructure with your existing NAS.

QGD Switch

Fulfill surveillance and VoIP applications at small business sites (such as stores).

QHora Router

Provides easy-to-use VPN functions for remote workers.

QVPN

Mobile users can connect to SSL VPN using their PCs, laptops, or mobile phones.

The QHora-321 offers many comprehensive security features.

QuWAN Identity Verification

Log in to the QuWAN Orchestrator by adding your QNAP ID to the SD-WAN Organization in the Account Center.

Local Device Identity Verification

Use the Local Account to log in to a local device.

QuWAN Network Management

Form a secure remote VPN connection with multi-site devices through IPSec VPN.

QHora Network Management

Supports L3 firewall, NAT, and Port Forwarding to improve LAN Security.

QVPN Access Authorization

Remote workers can be easily connected to SSL VPN via their computer or mobile devices.

Edge Device Application Management

With the L7 Firewall and DPI (Deep Packet Inspection) technology, users can set multiple segments for different blacklist applications; Web Filter function limits network usage time and browsing guidelines for kids.

The QHora-321 incorporates both the VPN server and client capabilities of the QVPN Service, allowing you to create a VPN client that connects to a remote server or third-party provider to access content or services. It also allows the QHora-321 to be used as a VPN server for connecting to end devices with OpenVPN, L2TP/IPSec, and QNAP's proprietary QBelt VPN protocols.

• The QVPN Client, QVPN Server and QuWAN service cannot be enabled at the same time. The QVPN Server and QuWAN service can only be enabled at the same time when using Qbelt or OpenVPN, but are disabled when using L2TP.
• QVPN Service in QHora-321 currently supports OpenVPN connections with the QNAP devices configured OpenVPN server/client.

QHora-321 now supports WireGuard, providing faster and stable VPN connections. With a user-friendly interface, non-IT professional remote workers can easily set up VPN tunnels to access office-based QNAP devices with simplified connection methods.

Unlock the internet with QHora-321's QVPN Client service. By setting the OpenVPN protocol in QVPN Client to direct network to a cross-region VPN Server, QHora-321 can be connected to Cloud VPN services such as NordVPN, ExpressVPN, and Surfshark, allowing you to bypass geoblocking and watch regional video streams or news.

• QVPN Client, QVPN Server, and QuWAN service cannot be enabled at the same time; QVPN Server and QuWAN service can be enabled at the same time without using L2TP protocol.
• For the services that can be provided by third-party VPNs, please refer to the instructions on the official websites of individual VPN service providers.

Related Questions and Answers

Q: 1. It supports LACP on the 1 gGbe ports?

A: This model does support Link Aggregation.

Q: 2. Is this AT&T 5G compatible or 5G ready?

A: No, the Ubiquiti Networks UniFi U-LTE Redundant WAN over LTE BH #UBULTEUS is only 4G LTE compatible with AT&T.

Q: 3. How long is the cord?

A: The cord is 12 inches.

Q: 4. Can you install two of these at the same time in the QNAP TVS-h1688?

A: Yes, two of the QNAP Dual-Port Thunderbolt 3 cards can be installed in a Qnap TVS-h1688.

Q: 5. I see "works outside" in the description, but no outdoor rating. Is this device actually rated for outdoor use? If so, does anyone know the rating?

A: Ubiquiti does not provide any outdoor ratings for this product. I would not recommend leaving it exposed to the elements.

Q: 6. can this remplace one of the TVS-1282T3?

A: The Qnap Dual-Port Thunderbolt 3 Expansion Card can be used with the TVS-1282T3.

Q: 7. How noisy is this card?

A: QNAP has not provided a spec on noise level for the QNAP QXG-25G2SF-CX6 Dual-Port 25GbE PCIe 4.0 x8 Network Expansion Card.

Q: 8. It support 2.5Gbe?

A: This item supports up to 2 x 10Gb Ethernet (RJ45) connections.

Q: 9. Hypothetically, "official compatibility" or not - would this work on any QNAP with PCIe? If so, is there speed limitations? Asking for a friend.

A: The card is meant to be installed within a QNAP unit. As per the manufacturer: The QXP-T32P can only be installed in a PCIe Gen 3 x4 slot in the TVS-h1288X or TVS-h1688. The speed will be up to 40 Gbps.

Q: 10. I have poor AT&T signal and sometimes use weBoost Home (BH #WE470144). Can I plug this UniFi appliance directly into the weBoost amp so that it can take advantage of the amplified signal with the external roof mounted antenna?

A: This Unifi appliance is standalone in that respect. It cannot work together with the WeBoost.