QHora-321

Next-Generation six-port 2.5GbE SD-WAN Router, providing a secure networking experience for NAS and IoT environments

Ultimate wired networking performance

The QHora-321 provides six 2.5GbE ports (compatible with 2.5G/ 1G/ 100M) for high-speed wired networking performance.

Note: In default mode, the first port from the left is WAN and each network port is independent. To set the ports to the same network segment, configure them using the QuRouter OS.

WAN/LAN flexible deployment

As a next-generation router, every port of the QHora-321 gives you flexible high-speed LAN/WAN deployment.

Wired network deployment for every scenario

• IoT Direct-to-device connectivity

  Directly connect individual IoT devices to the QHora-321 through independent network segments, so that different devices can operate smoothly together.
  
  Note: 1. Each network port and network segment are independent by default.
  2. You can route traffic to a specific WAN port of the QuWAN device.

• High-speed LAN

  Set multiple LAN ports in one LAN using the QuRouter OS. A high-speed Intranet is ideal for large file transfer or communication between workstations.

• VLAN Network Slicing

  Use the VLAN function to segment domains for different applications, so that multiple applications can connect to the network through a single network port.

• Flexible Routing

  Supports Policy-based Routing and Static Routes, enabling automatic traffic steering based on source IP, application, or device. You can also manually define specific routes to further fine-tune traffic flows. This flexibility allows for precise traffic distribution, congestion avoidance, and optimized network performance and stability—whether through automation or manual control.

• Reliable Connectivity to Minimize Business Risk

  Supports dual WAN aggregation, failover, and load balancing, enabling multiple network connections to back each other up and distribute traffic intelligently. In the event of a primary link failure, the system can instantly switch to a backup, ensuring uninterrupted operation of critical services.

Secure access to your NAS

To secure your remote access and prevent potential attacks, it is highly recommended to connect the QHora-321 in front of your NAS device. The NAT (Network Address Translation) enables private network security by hiding the actual IP address used in the private network from users outside the firewall.

Easily implement air-gap backups with a QHora router

Secure business data with QNAP’s Airgap+ backup solution. Use QNAP NAS with the QHora-321 to smoothly run backup tasks with air-gapped network isolation –effectively protecting your backup data from cyberattacks and data breaches.

Learn more about Airgap+

OS requirement: QuRouter v2.4.2 (or later).

A modern design for every usage environment

The QHora-321 has near-silent operation. Even when connected to multiple devices, it maintains dependable performance for office and home use. With a modern appearance and highly effective cooling, the QHora-321 fits perfectly alongside other devices in modern digital homes and offices.

QuRouter OS: User-Friendly Router Management

The QHora-321 uses the QuRouter OS, providing a user-friendly web-based GUI, at-a-glance dashboard and port indicators to assist in everyday network management tasks. With the QuRouter OS, not only can users efficiently manage all connected wired and wireless devices in real-time, but they can also configure the firewall, VPN, security, and QuWAN advanced functions.

Learn More: QuRouter OS

The Ultimate Mesh VPN Solution for Businesses — Seamless Upgrade!

Integrate your QHora router into the QuWAN SD-WAN cloud platform and automatically interconnect branch networks — faster, simpler, and easier to manage.

Easy Deployment

No IT expertise or infrastructure changes are required to build a Mesh VPN architecture! Simply add a QHora-321 to QuWAN Orchestrator and let Auto-mesh VPN automatically configure routing and VPN connections.

Log in to QuWAN Orchestrator

Intelligent Acceleration

Leverages SD-WAN optimization technologies such as bandwidth aggregation, QoS-based traffic prioritization, smart path selection, and WAN failover. Paired with the QHora-321’s built-in 2.5GbE high-speed ports, this ensures smooth and stable multi-site data transmission.

Optimize your network with minimal investment

Efficient Operations & Maintenance

Centralized management across multiple devices, combined with IPSec AES-256 encryption, SAML SSO, and Zero Trust authentication, enhances both management efficiency and connection security. In the event of a device failure, simply import previous configurations into a replacement QHora-321 — no need to reconfigure routing or VPN settings.

Learn how to replace a QNAP router with minimal downtime

Worry-Free Multi-Site Deployment – Ideal for All Business Scenarios

With QHora and QuWAN, connecting your HQ and branches into one seamless, secure network has never been easier — empowering real-time data flow and smoother collaboration.

Retail Chain POS Data Sync

Sync sales data in real time from POS systems to HQ ERP/CRM systems to improve operational efficiency.

Office-to-HQ Data Transfer & Backup

Ensure reliable data and video surveillance backups from branches to HQ, enhanced by HBS and QuWAN SD-WAN.

SD-WAN Optimization + VPN Remote Access = High-Efficiency Networking

• Centralized SD-WAN Management

  Build a cost-effective enterprise Mesh VPN architecture.

• Unified Cloud Management

  Orchestrator links QNAP QHora routers or NAS across branches—reducing IT effort.

• NAS Direct Integration

  Even without a router, NAS with QuWAN Express can join the SD-WAN.

• IPSec VPN Compatibility

  Easily integrate third-party routers via IPSec VPN without changing infrastructure.

• Flexible VPN Access

  Supports a large number of remote workers and mobile devices.

• High Connection Capacity

  Supports up to 700 VPN clients.

• QuWAN QBelt VPN Protocol

  QuWAN QBelt VPN protocol provides secure endpoint connections.

• Using Existing Credentials

  Ease IT management by using existing credentials via SAML SSO and Authentication Server.

Enhanced Security

QHora-321 supports QuWAN SD-WAN, enabling businesses to build a smart and secure network infrastructure aligned with SASE (Secure Access Service Edge) principles. Through Zero Trust architecture, identity authentication, and multi-layered security protection, it safeguards the connectivity between headquarters, branch offices, and remote workers.

• QuWAN Authentication

  Before logging into QuWAN Orchestrator, users must first be added to the SD-WAN Organization via QNAP Account Center using their QNAP ID. The Account Center helps centrally manage organization members and control login access to the Orchestrator.

• QuWAN Connection Management

  Quickly establish secure VPN tunnels between sites using IPSec VPN, combined with IPSec AES-256 end-to-end encryption technology, ensuring that data transmission is protected from eavesdropping or hijacking.

• QHora Connection Management

  Equipped with L3 firewall and NAT forwarding, QHora allows centralized configuration of internal network security policies via the QuWAN cloud platform. It features an Intrusion Prevention System (IPS) to detect and block ransomware and exploitation attempts by analyzing packets and matching signatures. Additionally, a GeoIP firewall is integrated to block connections from high-risk regions.

• QVPN Access Authorization

  Supports multiple protocols such as L2TP, QBelt, and OpenVPN, enabling mobile devices and remote users to securely and flexibly connect to the corporate network.

• Edge Device Application Management

  With L7 firewall and DPI (Deep Packet Inspection) technology, it can apply different blacklists and application control rules to multiple segments, and offers website filtering and time-based internet access control.

QVPN: Secure communication with remote devices

The QHora-321 incorporates both the VPN server and client capabilities of the QVPN Service – allowing you to create a VPN client that connects to a remote server or third-party provider to access content or services. It also allows the QHora-321 to be used as a VPN server for connecting to end devices with OpenVPN, L2TP/IPSec, and QNAP's proprietary QBelt VPN protocols.*

Learn More: QVPN Service, QVPN Device Client

Note:
1. The QVPN Client, QVPN Server and QuWAN service cannot be enabled at the same time. The QVPN Server and QuWAN service can only be enabled at the same time when using Qbelt or OpenVPN, but are disabled when using L2TP.
2. QVPN Service in QHora-321 currently supports OpenVPN connections with the QNAP devices configured OpenVPN server/client.

WireGuard® - easier VPN tunnels for remote workers

QHora-321 now supports WireGuard®*, providing faster and stable VPN connections. With a user-friendly interface, non-IT professional remote workers can easily set up VPN tunnels to access office-based QNAP devices with simplified connection methods.

Note: "WireGuard®" and the "WireGuard" logo are registered trademarks of Jason A. Donenfeld.

Watch global videos without limits

Unlock the Internet with QHora-321’s QVPN Client service! By setting the OpenVPN protocol in QVPN Client to direct network to a cross-region VPN Server, QHora-321 can be connected to Cloud VPN services (such as NordVPN, ExpressVPN, Surfshark), allowing you to bypass geoblocking and watch regional video streams or news.

How to setup: ExpressVPN™, NordVPN®, Surfshark®

Note:
1. QVPN Client, QVPN Server and QuWAN service cannot be enabled at the same time; QVPN Server and QuWAN service can be enabled at the same time without using L2TP protocol.
2. For the services that can be provided by third-party VPNs, please refer to the instructions on the official websites of individual VPN service providers.

Build the next-generation network with QHora

• 

  QHora-322

  Three 10GbE ports + six 2.5GbE ports

  Learn More

• 

  QHora-321

  Six 2.5GbE ports

  Learn More

• 

  QHora-301W

  Wifi 6 wireless connectivity + two 10GbE ports + four 1GbE RJ45 ports wired connectivity

  Learn More