Yamaha Firewall FWX-120

Faster WAN, License-free Security, Stress-free Management

All Combined in a Single Unit!


WAN 1 port (10BASE-T/100BASE-TX/1000BASE-T, Straight/Cross auto-distinction) *Labeled as “LAN2” on the rear panel of the unit.
LAN 4 port switching hub (10BASE-T/100BASE-TX/1000BASE-T, Straight/Cross auto-distinction) *Labeled as “LAN1” on the rear panel of the unit.
LAN switching function Port separation, LAN segmentation (Port base VLAN), Port mirroring
microSD slot 1 (Up to 32GB)
USB port 1 (USB2.0 Type-A, Feed current: Max. 500 mA, Available with USB flash drive/USB 3G modem)
Console port 1 (D-sub 9 pin, DTE fixed, 9,600bit/s)
Flash ROM 16MB
Status LED Front: 6 (POWER, STATUS, LAN1, LAN2, microSD, USB), Back: 10 (LINK×5, SPEED×5)
Operating temperature 0 to 50 degree Celsius
Operating humidity 15 to 80% RH (no condensation)
Regulatory compliance Safety: IEC 60950-1, EN 60950-1, EMC: EN 55022 Class A, EN 55024
Power supply input range AC100 to 240 V (50/60 Hz)
Maximum power consumption 11W
Dimensions (excluding cables and connectors) 220 (W) × 42.6 (H) × 160.5 (D) mm
Weight (excluding accessories) 920 g
Body material Plastic case, no fan
Accessories LAN cable (3 m, RJ-45, straight) (x1), User’s Manual, CD-ROM (x1)
(“User’s Manual”, “Operation Manual”, and “Command Reference” are included in it.)
Throughput Up to 1.0Gbit/s
IPsec throughput Up to 200Mbit/s
IPv4 routing protocol RIP, RIP2, OSPF, BGP4
IPv6 routing protocol RIPng
WAN protocol PPPoE (Up to 5 sessions)
IPsec VPN IKEv1, IKEv2, concurrent sessions: up to 50, encryption: AES-256/128, Triple-DES, DES, hash: SHA-256, SHA-1,MD5
L2TP over IPsec Available for smartphones
Firewall sessions NAT/NAPT: Up to 32,000 sessions, SPI: Up to 32,000 sessions
Security Static filtering, Dynamic filtering, IDS, URL filtering (internal database reference), DHCP device certification, filter setting verification, password strength check, Winny filtering (Winny Version2 compliant), Share filtering (Share ver.1.0 EX2 compliant), MAC address filtering
Firewall function (Static IPv4/IPv6 filtering) Supported via input blocking filter (IP addresses, ports, protocols (Established, with TCP flag), sources/destinations; Up to 128 filters can be specified on the LAN side/WAN side)
Firewall function (Dynamic IPv4/IPv6 filtering) Supported via policy filters (Can be defined freely with IP addresses, protocols, services (ports), or sources/destinations; Up to 265 filters can be specified)
Firewall function (IDS: IPv4 unauthorized access Applied to IN/OUT on the LAN side/WAN side, IP header, IP option header, 31 types of unauthorized access can be detected in categories such as ICMP/UDP/TCP/FTP, unauthorized access email notification function
Firewall performance (large packets) Max. 1.0Gbit/s
Firewall performance (IMIX) 300Mbit/s
Firewall performance PPS (64 bytes) 100Kpps
Number of new sessions/second 600 * When using the firewall (Filter + NAT)
Availability VRRP
Line backup Wired-wired, wired-mobile, L2 keepalive, ICMP keepalive, IPsec keepalive
Load balancing Available
QoS (Control system) Priority queuing, bandwidth control (Dynamic Traffic Control), Dynamic Class Control, VPN QoS, bandwidth detection function, load notification function
QoS function (Classification system) IP address, protocol, port number, ToS field
QoS function (Coordination with the QoS function on the network side) Coloring (ToS), ToS -> CoS conversion
SNMP v1, v2c, v3
Statistics/management function Graphical representation of the statistics information (CPU usage, memory usage, traffic, fast path flow, NAT entries, routes, policy filter sessions, and QoS queue throughput); Export of statistics information to microSD/USB memory; Dashboard function (system information, resource information, interface information, traffic information, provider connection status, VPN connection status, NAT sessions, fast path flows, policy filter sessions, unauthorized access detection history, and SYSLOG)
LAN management L2MS controller (SWX2200 Series) (*1), VLAN batch setting, snapshot function, LAN cable duplexing
Web GUI Available
Command line SSH, TELNET, Serial console
Configuration file transfer SFTP, TFTP
Firmware version up HTTP, SFTP, TFTP, external memory
Logging Syslog, internal: up to 3,000 lines (non-volatile), output to external memory (microSD/USB memory, with/without encryption), logging at power-off (power-off logging function) , reboot logging function
Lua script Available
Custom GUI Available

Download PDF