QNAP QHora-321 6-Port 2.5GbE SD-WAN Router

The QHora-321 provides six 2.5GbE ports (compatible with 2.5G/1G/100M) for high-speed wired networking performance. In default mode, the first port from the left is WAN and each network port is independent. To set the ports to the same network segment, configure them using the QuRouter OS.

As a next-generation router, every port of the QHora-321 gives you flexible high-speed LAN/WAN deployment.

IoT Direct-to-Device Connectivity
Directly connect individual IoT devices to the QHora-321 through independent network segments, so that different devices can operate smoothly together. 

Note: Each network port and network segment are independent by default.

High-Speed LAN
Set multiple LAN ports in one LAN using the QuRouter OS. A high-speed Intranet is ideal for large file transfer or communication between workstations.

VLAN Network Slicing
Use the VLAN function to segment domains for different applications, so that multiple applications can connect to the network through a single network port.

Auto Mesh Multi-Site VPN
Enable QuWAN SD-WAN at multi-site QHora-321 and multi-points will automatically form a Mesh VPN network, providing a simpler and faster multi-point secure connection solution.

To secure your remote access and prevent potential attacks, it is highly recommended to connect the QHora-321 in front of your NAS device. The NAT (Network Address Translation) enables private network security by hiding the actual IP address used in the private network from users outside the firewall.

Through the QuWAN cloud platform, the QHora-321 can automatically establish a mesh VPN network with other QNAP devices to quickly deploy a mesh VPN environment. To effectively complete remote backup tasks for your organization, use the Hybrid Backup Sync (HBS) app in QNAP NAS to easily back up or sync NAS data to another NAS, remote server, or the cloud. Build your 3-2-1 backup up strategy and prevent data loss with HBS now.

The QHora-321 has near-silent operation. Even when connected to multiple devices, it maintains dependable performance for office and home use. With a modern appearance and highly effective cooling, the QHora-321 fits perfectly alongside other devices in modern digital homes and offices.

Secure local NAS devices
QHora supports L3 firewall, NAT, and Port Forwarding to improve LAN Security.

Secure Remote Devices
QHora at different sites enables interconnected Mesh VPN topology via SD-WAN for secure access to your NAS.

Secure End Devices
Mobile devices can securely access NAS data via the QVPN service (supports OpenVPN, L2TP, and QNAP’s proprietary QBelt VPN protocols) offered by QHora.

Secure NAS Applications
Cross-site NAS data transfers, such as file backup, synchronization, and sharing, are protected within the SD-WAN network.

The QHora-321 uses the QuRouter OS, providing a user-friendly web-based GUI, at-a-glance dashboard, and port indicators to assist in everyday network management tasks. With the QuRouter OS, not only can users efficiently manage all connected wired and wireless devices in real-time, but they can also configure the firewall, VPN, security, and QuWAN advanced functions.

The traditional multi-site VPN setup is extremely time-consuming and requires subsequent maintenance work. The QHora-321 is equipped with QNAP’s next-generation QuWAN SD-WAN technology to greatly simplify installation. Setting up a VPN no longer requires additional fixed IP application as local and remote configuration information can be automatically exchanged through the Cloud Orchestrator. In this case, IT professionals can complete VPN setup with minimal user intervention.

• Use the PPPoE connection provided by your ISP to set up WAN. After setting the PPPoE connection, you can obtain a public IP instead of applying for a dedicated line or fixed IP.
• Open QuWAN settings and sign in to your QNAP Account.
• Select the organization/region/site where the device will be added (you can add all devices to the preset organization/region/site by default).
• Access the remote site machine to set the remote site IP (it cannot be identical to the local site IP; the default IP segment on the LAN side is 192.168.100.1, you can change the remote default IP to 192.168.200.1 segment).
• Repeat steps 1-3 at the remote site. Complete the VPN setup, then log in and check the VPN status.

QuWAN Orchestrator is a powerful and convenient centralized network management cloud platform, enabling IT staff to remotely deploy and manage edge network devices. Its Zero Touch Provisioning (ZTP) allows IT staff to easily build a large-scale WAN remotely and without the assistance of personnel at each location. IT staff can also monitor bandwidth, set parameters, and analyze network traffic on a single platform, making it perfect for multi-site, multinational network management and maintenance. Connected to the QHora-321 via wired or wireless connections, client devices can easily access the SD-WAN network.

QuWAN Orchestrator
Go to quwan.qnap.com to view the status of connected devices via the Dashboard. You can apply batch settings to all devices, set push notifications, and perform remote troubleshooting.

QuWAN Agent
Install QuWAN Agent on your QNAP devices and configure the setting parameters to be connected to each other in a Mesh VPN (Topology view in QuWAN Orchestrator).

QVPN Client
Install QVPN on mobile devices and computers for easy connection to the QHora-321 for accessing multi-site VPN resources.

QuWAN can be installed on QNAP NAS, QGD switches, and QuCPE servers. When co-working with the QVPN App, remote workers can be easily connected to SSL VPN via their computer or mobile device. Whether scaling up to accommodate worldwide offices or just to different departments in the same building, devices in different locations are flexibly segmented to be connected with each other in a micro-segmented network.

QuWAN Orchestrator
Manage the network using a centralized management cloud platform.

QuCPE Server
The high-performance core VPN Server at the HQ.

NAS
Add branch offices to the VPN Infrastructure with your existing NAS.

QGD Switch
Fulfill surveillance and VoIP applications at small business sites (such as stores).

QHora Router
Provides easy-to-use VPN functions for remote workers.

QVPN
Mobile users can connect to SSL VPN using their PCs, laptops, or mobile phones.

The QHora-321 offers many comprehensive security features.

QuWAN Identity Verification
Log in to the QuWAN Orchestrator by adding your QNAP ID to the SD-WAN Organization in the Account Center.

Local Device Identity Verification
Use the Local Account to log in to a local device.

QuWAN Network Management
Form a secure remote VPN connection with multi-site devices through IPSec VPN.

QHora Network Management
Supports L3 firewall, NAT, and Port Forwarding to improve LAN Security.

QVPN Access Authorization
Remote workers can be easily connected to SSL VPN via their computer or mobile devices.

Edge Device Application Management
With the L7 Firewall and DPI (Deep Packet Inspection) technology, users can set multiple segments for different blacklist applications; Web Filter function limits network usage time and browsing guidelines for kids.

The QHora-321 incorporates both the VPN server and client capabilities of the QVPN Service, allowing you to create a VPN client that connects to a remote server or third-party provider to access content or services. It also allows the QHora-321 to be used as a VPN server for connecting to end devices with OpenVPN, L2TP/IPSec, and QNAP’s proprietary QBelt VPN protocols.

• The QVPN Client, QVPN Server and QuWAN service cannot be enabled at the same time. The QVPN Server and QuWAN service can only be enabled at the same time when using Qbelt or OpenVPN, but are disabled when using L2TP.
• QVPN Service in QHora-321 currently supports OpenVPN connections with the QNAP devices configured OpenVPN server/client.

QHora-321 now supports WireGuard, providing faster and stable VPN connections. With a user-friendly interface, non-IT professional remote workers can easily set up VPN tunnels to access office-based QNAP devices with simplified connection methods.

Unlock the internet with QHora-321’s QVPN Client service. By setting the OpenVPN protocol in QVPN Client to direct network to a cross-region VPN Server, QHora-321 can be connected to Cloud VPN services such as NordVPN, ExpressVPN, and Surfshark, allowing you to bypass geoblocking and watch regional video streams or news.

• QVPN Client, QVPN Server, and QuWAN service cannot be enabled at the same time; QVPN Server and QuWAN service can be enabled at the same time without using L2TP protocol.
• For the services that can be provided by third-party VPNs, please refer to the instructions on the official websites of individual VPN service providers.