CONTACT US
1-844-4ZPE-SYS
ZPE CLOUD
Home » Network Infrastructure Management Products | ZPE Systems » Network Edge Routers » Branch Gateway for Edge Networking | ZPE Systems

Nodegrid Hive SR

Deploy turnkey edge networking with the 5-in-1 branch gateway

Traditional branch gateways leave you cobbling together many solutions. But the Nodegrid Hive SR is your 5-in-1 branch gateway that makes edge networking simple and flexible. Gain turnkey convenience on first boot, with open architecture and next-gen out-of-band that let you fully customize and control everything at the edge.

  • Get a low-cost solution that offers speed & power out of the box
  • Gain 5-in-1 capabilities to reduce CAPEX & OPEX
  • Control everything with ZPE’s signature next-gen out-of-band
A front view of the Nodegrid Hive SR communication network solution for first responders.
Technical Data Sheet
Schedule a Demo
Request a Quote

Eliminate hassle at the edge

Nodegrid Hive SR’s built-in gateway profile means you don’t have to manually deploy separate boxes. Just boot up, and the HSR automatically configures routing, switching, and firewall. No more long deployments or juggling hardware stacks.

Never become obsolete

The Hive SR is the first 5-in-1 gateway with open architecture, so you can consolidate and fully customize your environments. Get SD-WAN, security, compute, NetDevOps, and out-of-band in one box, and deploy virtualized solutions of your choice.

Control everything, from anywhere

IT management access shouldn’t be an afterthought. The Hive SR enables ZPE Systems’ signature next-gen out-of-band (NG-OOB), which permeates deep into your environments. Control servers, firewalls, IoT, and even IPMI devices from anywhere.

HSRDiagram

How it works: Nodegrid Hive SR 5-in-1 branch gateway

  1. On boot, Hive SR connects via internet to ZPE Cloud
  2. Hive SR and ZPE Cloud authenticate with each other for a secure, Zero Trust connection
  3. ZPE Cloud pushes routing, switching, and firewall configurations to Hive SR
  4. Additional VMs and container scripts can be remotely configured and licensed, and then placed in service from ZPE Cloud orchestration
  5. Multiple serial console ports from servers, PDUs, and switches can be connected and controlled using next-gen out-of-band™
  6. 5G/4G LTE modem provides simultaneous backup WAN and out-of-band access
  7. SD-WAN directs traffic to the best path using available WAN links like fiber, broadband, cable, and 5G/4G LTE
  8. Built-in Wi-Fi 6 and external Wi-Fi 5 access points provide full LAN coverage and can be centrally managed via ZPE Cloud
  9. Connect Nodegrid sensors for visibility into device tampering and environmental conditions, and get notified via alarms and beacons
  10. Use ZPE Cloud to orchestrate your entire next-gen SD-Branch stack, including across devices, environments, and 3rd party solutions

Never compromise on security

The Hive SR secures every connection and hardware/software integration by using enterprise-grade security features. BIOS protection, proper TPM 2.0 integration, and the signed OS are just a few of Hive SR’s built-in safeguards. Easily fortify your sites and achieve Zero Trust Network Access without compromise.

Access sites just like you’re there

Hive SR is the all-seeing eye at your edge locations. Connect Nodegrid’s Environmental Sensors and Nodegrid Data Lake for visibility into physical conditions and user experience. Gather device temperature, airflow, humidity, and other environmental data to protect your assets, while Nodegrid Data Lake visualizes hidden machine data for more insights. See critical KPIs, prevent downtime, and optimize via the cloud — whether it means adjusting HVAC systems or adjusting bandwidth during traffic spikes.

Interfaces

External

  • WAN: copper, fiber, and wireless
    • 2x GbE ETH on shared RJ45 or SFP/vDSL transceivers
    • 2x 10 Gbps cages for PON or SFP+ transceivers
  • LAN: copper and wireless
    • 4x 10/100/1000/2.5 Gbps RJ-45 with VLAN support
    • 1x Wi-Fi 6 (802.11ax optional add-on SKU)
  • Serial and mini-USB console port
    • 2x USB 3.0 host type A for accessories

Internal

  • 2x cellular with quad-SIM (5G/4G LTE optional add-on SKU)
  • 1x Wi-Fi (802.11a,b,g,n,ac, ac2,ax), (Wi-Fi 6) (add-on SKU)

Benefits

  • Low cost and convenient turnkey branch gateway
  • Power on for routing, switching, and firewall without hassle
  • Stay protected with built-in security like UEFI secure boot, TPM 2.0, and geofencing
  • Run virtualized solutions, not additional hardware, to reduce expenses
  • Enable your custom SASE architecture using your choice of security vendors
  • Eliminate on-site support using next-gen out-of-band for firewall, IPMI, & more
  • Slash MTTR and prevent downtime with instant, secure access from anywhere
  • Boost site reliability on open, industry-standard hardware and easy-to-use software

Features

  • Deploy fast with built-in gateway configuration for routing, switching, & firewall
  • Access console, IPMI, sensors, & more with next-gen out-of-band (NG-OOB)
  • Build custom environments with extensible apps, virtualization, and containers
  • Deploy configs and changes effortlessly with zero touch over WAN
  • Integrate seamlessly with ZPE Cloud to manage global IT from anywhere
  • Get widespread software availability with a modern, x86-64bit Linux kernel
  • Stay up to date with the latest security patches
  • Use the 20MB port buffer to collect actionable data and automate fixes
  • Stay connected through outages with failover via 4G/LTE and Wi-Fi
  • Gateway and multi-routing table capability
  • Orchestrate across devices and environments using Ansible, Chef, REST APIs, & more
  • Secure connections with SSL VPN and secure tunnel
  • Use as a DHCP server for more IP addresses, or replace your current router altogether
  • Enable the built-in firewall using only a checkbox
  • Get a secure foundation with encrypted cryptographic protocols, cypher suite levels, and configuration checksum
  • Monitor and control power, and get device alerts to keep your infrastructure healthy

Specifications

Hardware Specifications
Interfaces
  • WAN: copper, fiber, and wireless
    • 2x GbE ETH on shared RJ45 or SFP/vDSL transceivers
    • 2x 10 Gbps cages for PON or SFP+ transceivers
    • 2x cellular with quad-SIM (5G/4G LTE optional add-on SKU)
  • LAN: copper and wireless
    • 4x 10/100/1000/2.5 Gbps RJ-45 with VLAN support
    • 1x Wi-Fi 6 (802.11ax optional add-on SKU)
  • Serial and mini-USB console port
    • 2x USB 3.0 host type A for accessories
Accessories
  • External dual-radio 802.11ac Wi-Fi AP (Access Point)
  • 4-port RJ45 Serial Expansion (via USB)
  • vDSL FSP adapter
  • USB sensors (temperature, humidity, air flow, GPIO, relay, smoke)
  • Redundant power input Y-Cable
    • Managed Devices – Next-Gen Out-of-Band (NG-OOB)
  • Serial console ports, USB console, IP Management port, PDU, and IPMI devices
    • Networking
  • IPv4 and IPv6 (stateful + auto-configuration)
  • DHCP server / client / relay (IPv4, IPv6)
  • Multi-Tenancy (VRF)
  • IPv4 and IPv6 tunneling
  • Network address translation (NAT)
  • Multi-cast
    • Routing
  • VLAN, BGP, OSFP, RIPv1, RIPv2, VXLAN
    • IP Services
  • QoS
  • DHCP (Client and Server)
  • DDNS
  • NTP, global time zone, cellular tower time synchronization
    • Connectivity
  • Ethernet, VDSL, Bluetooth tethering, Wi-Fi hotspot, cellular 5G/4G LTE, multiple cards, failover, healthcheck
  • HTTPS, SSHv2; optional HTTP, Telnet, and SSHv1
    • System Management
  • Extensible, automated control based on actionable real-time data
  • Web GUI management portal, web console, command line interface (CLI), Linux root shell
  • Zero Touch Provisioning (ZTP) via LAN/DHCP, WAN/ZPE Cloud, USB for configuration and firmware updates
  • Multiple and customizable user levels of access
  • Auto-discovery via network scan and custom probes
  • SNMPv3-v1 IPv4/IPv6 with MD5, SHA-224, SHA-256, SHA-384, SHA-512, DES, AES-192, AES-256
  • Orchestration integration and automation: Puppet, Chef, Ansible, RESTful, ZPE Cloud and Nodegrid Manager
  • File sharing via FTP, NFS, SSHFS, Windows Sharing, web file browser, ZPE Cloud
  • Remote Procedure Call (RPC, gRPC)
  • NetFlow, LLDP
    • Security
  • Edgified, hardened device with BIOS protection, TPM 2.0, UEFI secure boot, signed OS, geofencing
  • X.509 SSH certificate support, 4096-bit encryption keys
  • Selectable cryptographic protocols for SSH OpenSSL3 and HTTPS (TLSv1.3-v1)
  • Selectable cypher suite levels: high, medium, low, custom
  • SSL VPN – client and server
  • IPsec, WireGuard, strongSwan with support for multi sites
  • Local, AD/LDAP, RADIUS, TACACS+, Kerberos authentication
  • SAML2 SSO, DUO, Okta, Ping Identity, ADFS
  • Local, backup-user authentication support
  • User-access lists per port
  • Group/role-based authorization: AD/LDAP, RADIUS, TACACS+, Kerberos
  • Fine-grain and role-based access control
  • Firewall – IP packet and security filtering, IP forwarding support
  • MD5 / SHA system configuration checksum
  • System event syslog, IPFIX
  • Custom security settings
  • Strong password enforcement, Fail2ban
  • Two-factor authentication with RSA and DUO
    • Device View Options
  • Two-factor authentication with RSA and DUO
    • Data Logging and Notifications
  • Local port buffering – 20 MB per port
  • Local, NFS, syslog, off-line data logging
  • Timestamp and rotation for data logging
  • Event destination: email, syslog, local
  • Notification: syslog, email
    • Operating System
  • Built-in x86-64bit Linux kernel
    • Power Specifications
  • 12 VDC via external 100-240 VAC, 50/60 Hz adapter
  • Power consumption: 45W typical
  • Operating temperature: 0 – 40C
    • Warranty
  • 2-year limited warranty
    • CPU & Storage
  • 12 VDC via external 100-240 VAC, 50/60 Hz adapter
  • Power consumption: 45W typical
  • Operating temperature: 0 – 40C
    • Physical
  • Front/rear mounting brackets
  • Size (L x W x H): 200 x 256 x 44.00 mm (7.87 x 10.08 x 1.73 in)
  • Weight: 1.3 kg (2.8 lb)
  • Shipping weight: 2.1 kg (4.6 lb)
  • Shipping (L x W x H): 412 x 293 x 77mm (16.2 x 11.5 x 3.0 in)
    • Environmental
  • Operation: 0 to 40° C (+32 to 104° F), 5-95% RH, non-cond.
  • Storage: -40 to 70° C (-40 to 158° F), 5-95% RH, non-cond.

    • Ordering Information

    Channel SKU
    Description
    CPU
    Memory
    Power
    Special
    ZPE-HSR416-Base-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. Gateway mode zero-touch out-of-box operation. Includes 90-day ZPE Cloud License. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    Base
    ZPE-HSR416-W5-GW
    ZPE Nodegrid Hive SR. Hive SR, WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    Wi-Fi
    ZPE-HSR416-4G-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: 4G/LTE (CAT12) radio with dual-SIM. Gateway mode zero-touch out-of-box operation.
    4 Cores
    16 GB
    AC Adaptor
    4G
    ZPE-HSR416-4G-W5-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas & 4G/LTE (CAT12) radio with dual-SIM. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    4G, Wi-Fi
    ZPE-HSR416-4G-W5-D128G-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas & 4G/LTE (CAT12) radio with dual-SIM & dedicated 128GB Disk2 for VM/Docker applications. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    4G, Wi-Fi, Second Storage
    ZPE-HSR416-5G-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas & 5G LTE Sub 6E (CAT20) radio with dual-SIM & dedicated 128GB Disk2 for VM/Docker applications. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate 90-day free subscription. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    5G

    Accessories

    Accessory
    Description
    HSR-PSU
    12VDC external 100-240 VAC, 50/60 Hz power adapter
    M2-WIFI-B
    M.2 802.11ax Wi-Fi 6 dual-band with dual antennas and cables (order with Base SKU)
    M2-CELL-B
    M.2 Cellular – 4G LTE with dual-SIM slots, 2 antennas and cables (order with base SKU)
    M2-CELL5G-E
    M.2 Cellular – 5G module with 4 antennas and cables (order with base SKU)
    M2-NVMe128
    M.2 NVMe 128 GB (order with base SKU)
    HSR-WMNT
    HSR – Wall Mounting Kit

    Hive SR Bundles

    CST-GEN-HSR-S
    CST-GEN-HSR-5G
    CST-GEN-HSR-SW4G
    Bundle with HSR-BASE, M2-NVMe128, M2-WIFI-B, M2-CELL-B
    CST-GEN-HSR-4G
    Bundle with HSR-BASE, M2-CELL-B
    CST-GEN-HSR-5G
    Bundle with HSR-BASE, M2-CELL5G-E

    Are you ready to see what real branch transformation looks like?

    Nodegrid Hive SR is the 5-in-1 branch gateway that brings real transformation to the edge.
    Set up a free demo to experience a truly simple and flexible branch.

    Schedule a demo