Meet AINOPOL ZH-M2: The Domestic All-in-One Hyper-Converged Security Gateway

As the information technology innovation industry scales up, cybersecurity and classified protection compliance requirements keep tightening. Mid-to-large scenarios including hotel chains, industrial parks, government and enterprise institutions, and large residential communities are seeing a sharp rise in network endpoints. These deployments face multiple pain points at once: domestic replacement rollout, concurrent multi-service delivery, perimeter security defense, and smooth long-term capacity expansion.

Traditional gateways either lack sufficient throughput performance or have fragmented feature sets. Solutions often require stacking multiple separate appliances, which brings higher procurement costs, complicated maintenance, and arduous compliance rectification.

Against this industry backdrop, AINOPOL launches the fully domestic Dream Gateway ZH-M2, filling the gap of core gateway products for medium and large-scale networking. Built on a domestically produced hardware foundation, it integrates high-performance forwarding, unified audio-video service delivery, security auditing, and an expandable card-based architecture. It delivers a self-controllable, multi-service converged and iterable unified networking foundation for mid-to-large projects, helping customers efficiently complete IT innovation migration and cybersecurity compliance construction.

I. Catering to Domestic Replacement and Cybersecurity Requirements

“Fully domestic Dream Gateway” is more than just a slogan. It represents AINOPOL’s targeted layout aligned with the IT innovation trend and cybersecurity compliance mandates.

With national IT innovation policies advancing and local substitution accelerating, government, education, state-owned enterprise and highly security-sensitive commercial projects have made domestic network infrastructure a mandatory requirement for bidding, construction and acceptance.

The ZH-M2 adopts an entirely domestic architecture. Its hardware layer is built to satisfy classified protection standards and industry security specifications, ensuring autonomy and controllability of core network nodes. It enables projects to easily meet IT innovation selection criteria and stay compliant.

Meanwhile, cybersecurity incidents occur frequently. Ransomware, malicious scanning and brute-force attacks remain rampant. Venues such as hotels, industrial parks and corporate campuses host massive endpoints with complex access environments, making them prime attack targets.

The ZH-M2 natively supports the integrated Connectivity & Security capability. It embeds perimeter firewall modules with IPS, WAF and AV antivirus functions. Powered by the hyper-converged design, route forwarding, security defense, encrypted communication and management controls are deeply consolidated. No extra stack of standalone security appliances is required. It guarantees smooth business connectivity while building a robust perimeter security barrier, simplifying network architecture and cutting maintenance overhead.

II. Expanding the Product Portfolio: Filling a Critical Gap for Mid-to-Large Networks

AINOPOL focuses on networking scenarios including enterprise campuses, factories, hotels and residential broadband. Previous gateway models mostly cover small and medium endpoint scales. The ZH-M2 extends the lineup to support deployments ranging from hundreds up to thousands of terminals:

• Supports up to 3,000 online endpoints, addressing core gateway demands for high-end hotel chains, industrial parks, medium-sized enterprise headquarters and large residential communities.
• Fills the blank for core gateways in medium and large sites, forming a complete product ladder covering hundreds to thousands of terminals, delivering one-stop core networking nodes for customers of all sizes.

For system integrators and project contractors, this means no more cross-product-line patchwork. The same product philosophy applies from single outlets to national chains, and from standalone campuses to large residential districts.

III. Aligning with High-Bandwidth Multi-Service Convergence Trends

Widespread smart terminals, IoT devices and high-definition audio-video services raise higher requirements on forwarding performance, bandwidth and multi-service capacity for core commercial gateways. The hardware specifications of the ZH-M2 are engineered to match this trend:

• 20G forwarding capacity and 190.48 Mpps packet forwarding rate, readily supporting high-bandwidth egress, all-optical uplink and concurrent multi-service traffic.
• Six 10GE SFP+ 10G optical ports to supply sufficient interfaces for all-optical networking and high-bandwidth services.

Built on the multi-service convergence framework, the ZH-M2 simultaneously carries internet access, IPTV, voice and video surveillance. Following the product vision of “audio-video convergence as the engine”, it suits integrated networking for hotels and industrial parks, enabling stable coexistence of diverse services on one network.

IV. Hyper-Converged Integration: Five Core Services on a Single Network

Built on an all-optical foundation, driven by audio-video engines and protected by native security controls, the ZH-M2 delivers the integrated Connectivity & Security solution. It is far more than a basic traffic-forwarding gateway. Its software and hardware hyper-converged design embeds all high-demand functions required for mid-to-large deployments:
Unified audio-video streaming delivery
Equipped with built-in audio transcoding, it supports multicast, unicast and multicast output, together with playback, time-shift and live preview.
For hotel guest-room TV and campus digital signage, separate streaming servers are no longer required. Audio-video services run alongside internet access on the same network, reducing hardware investment and cross-device integration workload.

Full-service convergence over standard SIP
It natively connects SIP access control, SIP public address, SIP intercom, SIP emergency SOS and SIP phones, and supports group calling and corporate IVR voice navigation.
It breaks down silos between intercom, emergency broadcast and internal telephone systems. Building communication, emergency alerts and internal calls share the same network. No dedicated voice dispatch server is needed, simplifying centralized management and emergency linkage.

Cross-segment screen-casting reflector
Developed for hotel casting requirements, it features native screen reflection and cross-VLAN multicast forwarding. It supports mainstream casting protocols including mDNS, SSDP, DLNA, LeBo and AirPlay. Most terminals work without dedicated apps or network reconfiguration. Administrators manage permissions centrally and toggle casting access room by room. Forwarding is isolated from business segments to avoid exposing internal network topology.
This resolves the common industry pain point where casting devices fail to discover targets when guest TV networks and management networks are logically separated. It balances guest experience while isolating visitor networks from the management LAN and lowering the risk of compromise on dumb TV terminals.

Intelligent O&M orchestration for all-optical APs
A built-in vAC virtual controller unifies management for optical APs and Ethernet APs. APs come online with zero configuration, with automatic RF optimization and seamless terminal roaming. Admins configure real-name authentication via mobile number and port-based VLANs. The gateway monitors optical link quality of optical APs in real time, with centralized scheduling for Wi-Fi, wired, TV, voice and VLAN policies.
It eliminates the cost of standalone AC wireless controllers, fits all-optical networking, simplifies commissioning for mass AP rollouts, detects optical link faults, and unifies O&M for wired and wireless services to drastically reduce on-site maintenance pressure.

Compliance auditing as the bottom-line safeguard
It embeds internet behavior auditing, log retention and security defense, complying with log storage and remote inspection rules specified under Ministry of Public Security Order No.176.
For public internet venues such as hotels and parks, auditing capability is implemented directly on the egress gateway without extra audit servers. Projects meet regulatory requirements, avoiding acceptance failures, later rework and compliance claim risks.

V. Card-Based Architecture: Deploy Once, Upgrade Gracefully

A major headache for large projects is full appliance replacement whenever business needs change. The ZH-M2 adopts a 2U rackmount card design with two reserved expansion slots.

Ports and function cards can be added or removed flexibly according to on-site networking needs. Bandwidth expansion and new service enablement do not require swapping the whole chassis, cutting future upgrade and maintenance expenses.
Rich expansion options support all-optical uplink, multi-carrier aggregation and leased-line backup, leaving ample flexibility for project design.

This model suits customers focused on long-term return on investment. They deploy only what they need today and scale gradually alongside business growth, matching hardware investment to actual demand instead of paying upfront for unused performance.

The Dream Gateway ZH-M2 completes AINOPOL’s product lineup for converged mid-to-large networking.
Rooted in domestic IT innovation, AINOPOL adopts the vision of “all-optical as the foundation, audio-video as the engine, security as the shield” to deliver converged Connectivity & Security networking. With a streamlined all-in-one architecture, it empowers hotels, industrial parks, government and enterprise customers to tackle complex networking and compliance requirements.

Looking ahead, AINOPOL will keep focusing on the all-optical convergence track, continuously refining integrated communication and security technology, and delivering hyper-converged, self-controllable, stable and reliable network products and solutions for industry partners.