Vyatta vRouter

The Brocade Vyatta 5400 vRouter enables organizations to build sophisticated, multitier networks within virtualized environments—adding, configuring, and moving network services on-demand. Our virtual router provides advanced routing and security functionality for physical, virtual, and cloud networking environments.

Products Overview

Brocade Vyatta 5400 vRouter

The Brocade Vyatta 5400 vRouter delivers advanced routing for physical, virtual, and cloud networking environments. It includes dynamic routing, Policy-Based Routing (PBR), stateful firewall, VPN support, and traffic management in a platform that is optimized for virtualized environments.

The Brocade Vyatta 5400 vRouter supports all major hypervisors and can be installed on any standard x86-based system. Advancements in x86 processing power have proved that readily available multicore systems can easily handle small packet processing up to 10 Gbps.

Scalability: By offering a software-only option, Brocade gives organizations the flexibility to right-size their networks and achieve the required performance using readily available, off-the-shelf components and systems.

Performance: The performance scale available from x86 hardware is continually expanding. Today’s multicore servers can deliver up to 10 Gbps routing throughput. *Performance is dependent on CPU type, speed and quantity. Performance will vary based on configuration and deployment type


The Brocade Vyatta vRouter can function as a virtual router, virtual firewall, or virtual VPN gateway, allowing organizations to build sophisticated, agile, secure multitier networks in a fraction of the time—and for a fraction of the cost—of traditional hardware-centric strategies. As a result, organizations can provision, configure, and change their networks with the agility of software.

Network Connectivity
At the core of the Brocade Vyatta 5400 vRouter is a sophisticated routing engine with full support of IPv4 and IPv6 dynamic routing protocols (BGP Multipath, OSPF, RIP, Multicast) and multiple tunneling protocols. The platform also includes support for 802.11 wireless, Serial WAN Interfaces, and a wide variety of Ethernet interface support for 10/100/1000 Mbps and 10 Gbps through 10 Gigabit Ethernet (GbE) NICs.

Firewall Protection
The Brocade Vyatta 5400 vRouter features IPv4/IPv6 stateful packet inspection to intercept and inspect network activity and protect critical data. Brocade offers one of the most advanced virtual firewalls available, with capabilities that include stateful failover, zone- and time-based firewalling, and peer-to-peer filtering.

IPv6 Compatibility
Brocade 5400 Vyatta vRouters are the only software-based routing and security solution with proven IPv6 functionality and interoperability, ensuring a simplified migration path from IPv4 to IPv6 and a future-proof investment.

Administration and Authentication
Brocade Vyatta 5400 vRouters can be managed through a familiar network-centric Command Line Interface (CLI), a Web-based GUI, or external management systems using the Brocade Vyatta Remote Access API. All network management sessions can be securely managed using SSHv2, RADIUS, or TACACS+.

Monitoring and Reporting
Brocade Vyatta 5400 vRouters provide complete logging and diagnostics information that can be monitored using industry-standard tools such as SNMP, Netflow, sFlow, Syslog, Wireshark, and more.

Secure Connectivity
Organizations can establish secure site-to-site VPN tunnels with a standards-based IPsec VPN between two or more Brocade Vyatta vRouters or any IPsec VPN gateway. The Brocade Vyatta 5400 vRouters also provide network access to remote users via SSL-based OpenVPN functionality with a dynamic client installation for multiple operating systems (OS’s). In addition, they support Dynamic Multipoint VPN (DMVPN) and the ability to represent policy-based IPsec tunnels as virtual interfaces (Virtual Tunnel Interface, or VTI).

Traffic Management
Brocade Vyatta 5400 vRouters provide a wide variety of QoS-queuing mechanisms that can be applied to inbound and outbound traffic for identifying and prioritizing applications and traffic flows.

High Availability
Mission-critical networks can deploy Brocade Vyatta 5400 vRouters with confidence, knowing that industry-standard failover and configuration synchronization mechanisms will provide high availability and system redundancy.

The Brocade Vyatta 5400 vRouter operates seamlessly under the Brocade Vyatta Controller. This controller is a quality-assured edition of the OpenDaylight controller code supported by an established networking provider and its leaders within the OpenDaylight community.


IPv4/IPv6 Routing

  • BGPv4, BGPv6
  • OSPFv2
  • BGP Multipath
  • RIPv2
  • Static Routes
  • Policy-Based Routing
  • IPv6 Policy
  • IPv6 SLAAC
  • Multicast

IP Address Management

  • Static
  • DHCP Server
  • DHCP Client
  • DHCP Relay
  • Dynamic DNS
  • DNS Forwarding
  • IPv6 DNS Resolver
  • IDHCPv6 Server, Client
  • DHCPv6 Relay


  • Ethernet
  • 802.1Q VLANs
  • PPP
  • PPPoE
  • IP in IP
  • Frame Relay
  • HDLC
  • GRE


  • Stateful Inspection Firewall
  • Zone-based Firewall
  • P2P Filtering
  • IPv6 Firewalling
  • Time-based Firewall Rules
  • Rate Limiting
  • ICMP Type Filtering
  • Stateful Failover


  • SSL-based OpenVPN
  • Site to Site VPN (IPSec)
  • Remote VPN (PPTP, IPsec)
  • Virtual Tunnel Interface
  • OpenVPN Client Auto-Configuration
  • Layer 2 Bridging over OpenVPN
  • OpenVPN Dynamic Client
  • Dynamic Multipoint VPN

Additional Security

  • Network Address Translation
  • 3DES, AES Encryption
  • MD5 and SHA-1 Authentication
  • RSA, Diffie Helman Key Management
  • NAT Traversal

WAN/LAN Device Drivers

  • WAN Device Drivers – T1/E1
  • Intel 10/100/1000 Mbps and 10 Gbps
  • Broadcom 10/100/1000 Mbps and 10 Gbps
  • IEEE 802.11 wireless
  • Drivers in 2.6.31 Linux Kernel
  • Synchronous Serial – V.35, X.21, RS-422, EIA530

Performance Optimization

  • WAN Link Load Balancing
  • Ethernet Link Bonding
  • ECMP
  • Bandwidth Management

QoS Policies

  • Priority Queuing
  • Network Emulator
  • Round Robin
  • Random/Weighted Random
  • Classful Queuing
  • Ethernet Header Matching
  • VLAN Tag
  • IPv6 Address
  • Port Mirroring

High Availability

  • Stateful Firewall/NAT Failover
  • VRRP (IPv4 and IPv6)
  • Configuration Replication
  • RAID 1
  • Protocol Fault Isolation

Administration and Authentication

  • Integrated CLI
  • Web GUI
  • Brocade Vyatta Remote Access API
  • Telnet
  • SSHv2/SSH Public Key
  • Binary Image Install
  • Image Cloning
  • X.509 Digital Certificate Authentication
  • Single Configuration File

Diagnostics and Logging

  • tcpdump
  • Wireshark Packet Capture
  • BGP MD5 Support
  • Serial Loopback Commands
  • Netflow/sFlow
  • LLDP
  • Syslog
  • SNMPv2c
  • SNMP for IPv6
Whitepaper Resources

Whitepaper Resources