Tiếng Việt
中文 (中国)
ENTERPRISE ROUTER EXPORT GUIDE
An enterprise router is more than “routing equipment”. VPN/IPSec, SD-WAN, firewall/IPS, Wi‑Fi/5G and encryption functions can change HS classification, Vietnam export-licence triggers and destination-market compliance.
This guide maps the E2E path from a United States – EU – Hong Kong market scan through HS 8517.62, civil cryptography/cybersecurity controls, EVFTA/AHKFTA, FCC–RED–OFCA, Cargo Ready, cut-offs and post-shipment records.
1. QUICK OVERVIEW
United States · EU · Hong Kong
2025 records show large router shipments to the U.S., UCG-Fiber to the Netherlands/Czech Republic, and Juniper ACX/Cisco Catalyst 8000 units to Hong Kong.
Pure routing does not automatically require a licence. If HS + goods description + cryptographic characteristics all match Appendix II of Decree 341/2026, a civil-cryptography export/import licence is required; in-scope cybersecurity products follow Decree 332/2026.
Review 8517.62.43 first
Strong direction for gateways/routers designed solely to connect to ADP machines of heading 84.71. Wireless or other principal functions can change the branch.
EU: EVFTA under Circular 14/2026. Hong Kong: AHKFTA. U.S.: no bilateral preferential FTA to assume.
U.S.: Part 15; EU: RED for radio, EMC/RoHS and CRA transition; Hong Kong: OFCA/HKTEC where exact telecom/radio equipment falls in scope.
Freeze model, WAN/LAN/SFP, routing, VPN/crypto, radio bands, power, firmware region, HS, licence status and origin before Cargo Ready.
Air for sample/NPI/urgent; Sea for volume. Protect ports/SFP/antennas; control ESD, shock/moisture and serial/MAC traceability.
2. PRODUCT SCOPE & DETAILED CLASSIFICATION
| VARIANT | TECHNICAL INDICATORS | EVIDENCE | HS / POLICY DIRECTION | SPLIT POINT |
|---|---|---|---|---|
| Wired enterprise router | L3/WAN-LAN routing, Ethernet/SFP, no RF | Datasheet, architecture, routing table, ports, CPU/ASIC | Review 8517.62.43 if the legal description is met | Split if security appliance/modem/CPE/other transmission is principal function |
| Wireless enterprise router | Integrated Wi‑Fi, possibly BLE | RF bands, EIRP, antenna, module, firmware region | HS by principal function; also review 8517.62.51/.59 when WLAN/transmission nature dominates | RF changes FCC/RED/OFCA and can change HS branch |
| 4G/5G enterprise/CPE router | Cellular modem + routing/NAT/VPN | Modem module, bands, SIM/eSIM, antenna, carrier profile | Review 8517.62 by actual receive/convert/transmit function | Additional radio/carrier/type-approval may apply |
| VPN / SD-WAN router | IPSec/TLS/MACsec, tunnels, crypto acceleration | Security datasheet, algorithms, key management, admin guide | HS may remain 8517; Decree 341/2026 requires triple-match review | “VPN” alone does not automatically mean a licence |
| Secure router / UTM / IPS | Routing plus intrusion prevention/monitoring/security assessment | Feature matrix, threat prevention, inspection, logs | Review Decree 332/2026; split if cybersecurity is the principal product function | Dual-use crypto + cybersecurity has a different control route |
| Router chassis + line cards | Modular chassis/fabric/line cards/PSUs | BOM, shipped configuration, architecture | Classify the shipped state; parts/cards do not automatically take finished-router HS | Split finished product vs component |
| Industrial/edge router | Rugged/DIN rail, serial/fieldbus, cellular | I/O, protocols, rugged specs, RF | Review 8517 but separate where use/connectivity materially differs | Market standards/packing may differ |
| Used / RMA / demo | Prior serial, warranty return/non-sale | Prior shipment, RMA, serial list, condition | HS by nature + separate customs purpose/procedure | Do not use the standard new-sale document set |
3. EXPORT MARKETS & MARKET ACCESS
3.1. MARKET SCAN FROM ACTUAL TRADE LANES
2025 shipment intelligence shows Vietnam-origin routers moving to the U.S., EU and Hong Kong. U.S. lanes include larger volumes; UCG-Fiber appears in Netherlands/Czech lanes; Hong Kong records include enterprise-class Juniper ACX7509 and Cisco Catalyst 8000 C8200. These are market signals, not HS rulings.
3.2. FIVE-CRITERIA MARKET MATRIX
| MARKET | ACTUAL TRADE | MARKET ACCESS | FTA / ORIGIN | TECHNICAL / CERTIFICATE | LOGISTICS / PACKING |
|---|---|---|---|---|---|
| United States | Multiple 2025 shipments, including large-volume and enterprise models | FCC Part 15; radio certification when wireless | No bilateral VN–US preferential FTA | FCC/antenna/firmware; buyer security file | Air/Sea; serial/MAC; shock/ESD |
| EU | UCG-Fiber shipments to NL/CZ in 2025 | RED if radio; EMC/RoHS; CRA transition | EVFTA – 8517 PSR | DoC/technical file; cyber evidence | Air/Sea; label/DoC; revision freeze |
| Hong Kong | Juniper/Cisco enterprise models in 2025 | OFCA/HKTEC by wired/radio scope | AHKFTA – verify current rule | HKCA/OFCA evidence if triggered | Air for small/high-value; Sea for volume |
3.3. MARKET ACCESS CONDITIONS
| MARKET | FIT | ACCESS CONDITION | PRODUCT / BUSINESS REQUIREMENT | DATA TO PREPARE |
|---|---|---|---|---|
| United States | High | Wired: digital-device route by exact configuration; wireless: intentional-radiator certification/module integration | FCC evidence, buyer cybersecurity/interoperability; importer origin/marking | Schematic, FCC grant/module map, antenna/FW, serial/MAC |
| EU – Netherlands/Czech Republic | High | Wired-only: EMC/product safety by power configuration; wireless: RED; RoHS. CRA has 2026–2027 transition milestones | EU DoC/technical file; RED cybersecurity for internet-connected radio equipment; CRA transition planning | EU role, revision, RF bands, DoC/test, vulnerability/support data, origin file |
| Hong Kong | Medium but segment-fit | Review HKTEC/OFCA for wired CPE/public-network connection and radio equipment; radio bands/licensing must fit local rules | HKCA/OFCA specs, certification/type acceptance where applicable; buyer/carrier acceptance | Datasheet, interfaces, RF data, CPE role, certification evidence |
4. VIETNAM EXPORT CONDITIONS / POLICY
KEY LEGAL DATES
On 3 Sep 2026, Decree 69/2018 remains the foreign-trade baseline through 4 Sep.
Decree 292/2026/ND-CP takes effect and replaces Decree 69; declarations from that date need the new framework/transition rules.
Decree 341/2026/ND-CP has been effective since 1 Sep 2026; this is a critical new trigger for VPN/encryption-capable routers.
| SITUATION | POSSIBLE POLICY | BASIS | AUTHORITY | TRIGGER |
|---|---|---|---|---|
| Standard wired router | Ordinary export if outside prohibited/restricted/licensed/special-control scope | Decree 69 through 4 Sep 2026; Decree 292 from 5 Sep 2026 | Customs | Final HS, model, end use, condition, destination |
| Router with IPSec/VPN/MACsec/crypto | Review Decree 341/2026; licence required when HS + goods description + cryptographic characteristics all match Appendix II | Decree 341/2026, effective 1 Sep 2026 | Government Cipher Committee | HS, algorithms, IP-flow/channel protection, key management, end user/end use |
| Router/UTM with in-scope cybersecurity function | If exact product is listed in Appendix II of Decree 332/2026, cybersecurity-product export/import licence is required | Decree 332/2026, Article 13, effective 19 Aug 2026 | Ministry of Public Security | Cybersecurity features, HS, business licence, end user/end use |
| Dual-use crypto + cybersecurity | Determine route under Decrees 341/332; Decree 341 provides MPS licensing for dual-use cybersecurity+crypto products with Cipher Committee consultation | Decrees 341/332 | MPS / Government Cipher Committee | Feature matrix separating routing, crypto and monitoring/anti-intrusion |
| Used/RMA/demo | Separate procedure, valuation, ownership, purpose and used/return evidence | Customs + prior shipment/RMA | Customs | Serial, condition, warranty, prior records |
5. HS CODE – EXPORT DUTY – EXPORT VAT
| VARIANT | INDICATIVE HS | CLASSIFICATION BASIS | EXPORT DUTY | VAT | EVIDENCE |
|---|---|---|---|---|---|
| Wired enterprise router/gateway solely for ADP connection | 8517.62.43 | AHTN description includes controllers/adaptors, gateways, bridges, routers designed solely to connect to heading 84.71 machines | Check current Export Tariff by final HS | 0% when conditions met | Datasheet, routing architecture, ports, network role |
| Other carrier-current/digital-line apparatus | 8517.62.49 | Only where facts do not fit .43 but remain in the relevant wired branch | By final HS | Conditional 0% | Protocols, transmission system, interfaces, function |
| Wireless LAN / enterprise Wi‑Fi router | Review 8517.62.51 | When WLAN is the principal nature; not automatically for a router with ancillary Wi‑Fi | By final HS | Conditional 0% | RF bands/EIRP, routing vs WLAN function, antenna, ports |
| Other wireless/cellular router/CPE | Review 8517.62.59/.69/.99 | Where exact transmission architecture and AHTN wording support it | By final HS | Conditional 0% | Cellular/WAN modem, RF, data path, carrier profile |
| Security appliance with routing | Review 8517 vs 8471/other | Do not retain 8517 solely because Ethernet/WAN ports exist | By final HS | Conditional 0% | CPU/ASIC, traffic inspection, firewall/IPS, software role |
EXPORT DUTY
Do not mechanically state “enterprise router export duty = 0%”. Freeze the 8-digit HS and check the Export Tariff in force.
Decree 26/2023/ND-CP, including Article 4; Decree 201/2026/ND-CP effective 23 Jul 2026 amended certain rates.
Final HS → check current Annex I on declaration date → where the code is not named in the Export Tariff, apply the Decree 26 mechanism rather than inventing a rate.
EXPORT VAT
The 0% rate is conditional; export status alone does not make it automatic.
Review Articles 17–18 of Decree 181/2025/ND-CP and current amendments relevant to the transaction.
Reconcile Contract, payment evidence, customs declaration and shipment records before applying 0%.
6. C/O – FTA – RULES OF ORIGIN
A router BOM can include PCB/PCBA, CPU/network processor, switch ASIC, memory, PHY/transceivers, SFP cages/modules, Wi‑Fi/cellular modules, PSU and chassis. Run origin as final HS → PSR → input HS/origin → SMT/assembly/programming/test → costing → audit trail.
| MARKET | FTA | ORIGIN PROOF | PSR / CRITERION | OTHER CONDITION | AUDIT TRAIL |
|---|---|---|---|---|---|
| EU | EVFTA | Proof of origin under Circular 14/2026 | Heading 8517 falls under the applicable ex-Chapter-85 rule in Annex II: manufacture from materials of any heading except the product heading; or value of all materials used ≤70% of ex-works price | Rerun PSR if final HS changes | BOM, input HS/origin, supplier docs, work orders, ex-works costing, production |
| Hong Kong | AHKFTA | Route-specific C/O/proof | Do not conclude from “router”; verify current general rule/PSR for final HS under the Vietnamese AHKFTA implementation | Compare actual benefit vs MFN and auditability | BOM, input origin/HS, production/costing, invoice, consignment evidence |
| United States | No bilateral preferential FTA | Country-of-origin evidence | EVFTA/AHKFTA PSRs do not create U.S. preference | Review U.S. marking/origin/trade remedies by exact product | Manufacturing route, BOM, suppliers, transformation evidence |
7. PRODUCT × MARKET SPECIALIZED CONTROLS
| PRODUCT / MARKET | POSSIBLE PROCEDURE / DOCUMENT | TRIGGER |
|---|---|---|
| Vietnam – standard wired router | No universal “router export certificate” from the trade name alone | Decrees 341/332 only where exact HS/description/features are in scope |
| Vietnam – VPN/IPSec/MACsec router | Civil-cryptography export/import licence where Appendix-II triple match is satisfied | HS branches + IP-flow/channel protection characteristics |
| Vietnam – secure router/UTM/IPS | Cybersecurity-product licence where exact product is in Decree 332 Appendix II | Intrusion prevention, monitoring, assessment features + HS |
| U.S. – wired router | Part 15 unintentional-radiator/SDoC route by configuration | Digital end product; §15.101 |
| U.S. – wireless router | Intentional-radiator certification before marketing unless a specific exception applies | §15.201; FCC ID/module, antenna, power, simultaneous Tx |
| EU – wired router | EMC/RoHS/product-safety route by power configuration; RED does not apply without radio | No intentional radio; PSU configuration; DoC scope |
| EU – wireless router | RED 2014/53/EU; RED cybersecurity essential requirements for internet-connected radio equipment | Wi‑Fi/BT/cellular; technical file/DoC/CE |
| EU – Cyber Resilience Act | Regulation 2024/2847: main obligations 11 Dec 2027; Article 14 reporting from 11 Sep 2026; Chapter IV from 11 Jun 2026 | Product-with-digital-elements roadmap, vulnerability handling/reporting |
| Hong Kong – wired CPE/router | Review HKTEC/OFCA where connected to public telecom network or within certification scope | Network interface, CPE role, HKCA spec |
| Hong Kong – wireless router | Review radio type approval/type acceptance, spectrum exemption/licensing and HKCA specs | Bands/EIRP, RF module, local spectrum rules |
8. EXPORT DOCUMENT SET & SUBMISSION
| DOCUMENT GROUP | DOCUMENTS | USED AT | OWNER | DATA THAT MUST MATCH | COMMON ERROR |
|---|---|---|---|---|---|
| Commercial | Contract/PO, Invoice, Packing List | Contract/booking/customs/buyer | Sales/Docs | Model, part, qty, value, Incoterm, origin, licence responsibility | Generic “network device/router”; no VPN/wireless/security configuration |
| Technical & HS | Datasheet, user/admin manual, architecture, port/RF/crypto feature matrix, classification memo | HS/policy screening | Engineering/Compliance/Customs | Principal function, 8517 branch, RF, crypto, security | 8517.62.43 copied to Wi‑Fi/5G/UTM/module shipments |
| Vietnam licence if triggered | Civil-crypto business/export licence or cybersecurity business/export licence as applicable | Before Cargo Ready/customs | Legal/Compliance | HS + description + feature + end user/end use + licence validity | VPN present but no triple-match review; security appliance misses Decree 332 |
| Market compliance | FCC/RED/CRA/OFCA evidence by market | Market Access | Compliance/R&D/Importer | Exact model, HW/FW, radio module/antenna, power, revision | Test/certificate covers another revision/antenna/FW |
| Origin | C/O/proof, BOM, inputs, supplier declarations, production/costing | FTA claim | Docs/Procurement/Factory | Final HS, criterion, invoice, lot, production version | C/O prepared before HS freeze |
| Transport / buyer / bank | Booking, SI, VGM if any, B/L/AWB, serial/MAC, COC/test, L/C docs | Cut-off/on-board/payment | Forwarder/Docs/QA/Finance | Packages, GW/NW, marks, PO/model/serial, consignee | B/L/bank docs mismatch or missed cut-off |
BEFORE CARGO READY CHECKLIST
- ☐ Model/part/revision and serial/MAC format frozen.
- ☐ Wired/wireless/cellular and radio bands/antenna frozen.
- ☐ VPN/IPSec/MACsec/crypto matrix completed for Decree 341.
- ☐ Firewall/IPS/monitoring features reviewed for Decree 332.
- ☐ Final HS/export duty/VAT file frozen.
- ☐ EVFTA/AHKFTA origin route and BOM audit trail confirmed.
- ☐ FCC/RED/OFCA/CRA market file maps to exact revision.
- ☐ Packing/booking/SI/VGM/cut-off master data reconciled.
SUBMISSION: customs through Vietnam electronic customs; civil-cryptography licence through the Government Cipher Committee under Decree 341; cybersecurity-product licence through the Ministry of Public Security under Decree 332; C/O through the selected FTA route; destination compliance through the relevant economic operator/importer/certification route.
9. LEGAL BASIS – THREE-LAYER MATRIX
| LAYER | INSTRUMENT / SOURCE | AUTHORITY | EFFECTIVE | PROVISION | APPLICATION | OLD → NEW / NOTE |
|---|---|---|---|---|---|---|
| Vietnam – foreign trade | Decree 69/2018 → 292/2026/ND-CP | Government | 292 from 5 Sep 2026 | Effect/transition | Foreign-trade framework | 69 still current on 3 Sep; transition 5 Sep |
| Vietnam – civil cryptography | 341/2026/ND-CP | Government | 1 Sep 2026 | Appendix II + licence procedure | Licensed civil-crypto exports/imports | List only applies on HS+description+crypto triple match |
| Vietnam – cybersecurity | 332/2026/ND-CP | Government | 19 Aug 2026 | Article 13, Appendix II | Cybersecurity-product export/import licence | MPS licence; do not auto-apply to pure routing |
| Vietnam – HS | Vietnam nomenclature / Trade Portal | MOF / Customs | Current | 8517.62.43/.49/.51… | Router classification | 8517.62.43 is the main review direction for wired enterprise router |
| Vietnam – export tariff | Decree 26/2023 + 201/2026 | Government | 201 from 23 Jul 2026 | Art.4 + current Annex I | Export duty | No 0% conclusion before final HS |
| Vietnam – VAT | Decree 181/2025 + current amendments | Government | Current 2026 | Arts. 17–18 | Conditional 0% export VAT | Transaction evidence required |
| FTA – EU | EVFTA + Circular 14/2026 | MOIT | Circular effective 10 May 2026 | Protocol 1 Annex II / ex Ch.85 | Origin PSR/proof | Rerun if final HS changes |
| United States | 47 CFR Part 15 | FCC | Current 2026 | §15.101; §15.201 | Digital/radio equipment | Wireless normally opens certification route |
| EU – radio/cyber | RED 2014/53/EU; Reg. (EU) 2024/2847 | EU | RED current; CRA Art.14 11 Sep 2026; main 11 Dec 2027 | RED Art.3; CRA Art.71 | Radio/cyber market access | Transition important for internet-connected routers |
| Hong Kong | Telecommunications Ordinance + HKTEC/OFCA | CA / OFCA | Current | HKCA + OFCA I401/412/421 | Telecom/radio certification | Exact wired CPE/radio scope controls route |
10. PRACTICAL E2E EXPORT WORKFLOW
Required format: 8-step vertical timeline, each with product-specific lock and gate.
Product + market review
Determine wired/wireless/cellular, pure routing vs VPN/SD-WAN/security appliance, buyer market and importer role.
HS – policy – FTA/origin
Compare 8517.62.43 with other branches/8471; run Decree 341 triple match, Decree 332 and origin route.
Contract + responsibility matrix
Freeze Incoterm, payment, compliance/licence responsibility, end user/end use, warranty/RMA and change notice.
Licences + market compliance
Complete civil-crypto/cybersecurity licences if triggered; freeze FCC/RED/CRA/OFCA, origin, label and firmware region.
Booking – packing – trucking
Select Air/Sea; protect ports/SFP/antennas; ESD/shock/moisture; freeze packages/weights.
Export declaration
Describe router/gateway, wired/wireless, model and principal function; reconcile licence/Invoice/PL/C/O.
SI – VGM – CY/CFS – Loading
Freeze parties, packages/weight, marks, model references, SI/VGM and draft B/L/AWB.
Final docs – origin – payment – archive
Issue final transport/C/O/certificates; send buyer/bank; archive model/revision/serial and handle claims/incidents.
11. TIMELINE BEFORE ETD / CARGO READY / CUT-OFF
| MILESTONE | WHAT TO FREEZE | DOCUMENTS / DATA | OWNER | RISK IF LATE |
|---|---|---|---|---|
| Before Contract | Market access, preliminary HS, Decree 341/332 trigger, FTA, Incoterm, payment | Datasheet, feature matrix, end user/end use, buyer requirements | Sales/Compliance/Engineering/Legal | Order accepted without licence/compliance fit |
| Before production/config freeze | HW/FW, crypto algorithms, radio region, BOM, PSU/accessories | BOM, release note, RF/crypto matrix, ECO/ECN | R&D/QA/Compliance/Procurement | Feature change alters licence/certificate scope |
| Before Cargo Ready | Licences if any, FCC/RED/OFCA, origin, label, packing | Licence, test/DoC, origin file, serial/MAC, packing | Compliance/QA/Docs/Factory | Goods ready but evidence incomplete |
| Before CY/CFS Cut-off | Customs, trucking, gate-in/stuffing | Declaration, booking, packages/GW, VGM | Ops/Customs/Forwarder | Roll/rebooking/storage |
| Before SI/VGM Cut-off | B/L/AWB data, weight, marks/model | SI, VGM, parties, PO/model ref. | Docs/Forwarder | Amendment/L/C discrepancy |
| ETD / On-board | Confirm loading/on-board and final transport data | On-board confirmation, B/L/AWB | Forwarder/Docs | Wrong on-board date affects C/O/bank docs |
| Post-shipment | Origin/certificates, buyer/bank, payment, archive, incident readiness | Final docs, licences, compliance, serial/MAC, FW/revision | Docs/Finance/Compliance/QA | Late docs/payment or weak traceability |
12. INCOTERMS – TRANSPORT – PACKING – COST
| ITEM | RECOMMENDED APPROACH | ITEMS TO FREEZE | RISK / NOTE |
|---|---|---|---|
| INCOTERMS | FCA often fits B2B routers; CPT/CIP where seller buys carriage; DAP where seller arranges destination delivery. | Delivery point, booking party, customs, insurance, importer-of-record, licence/compliance responsibility. | Do not confuse risk transfer with cost allocation. Use DDP only when import/tax/FCC–RED–OFCA/product-liability roles are clear. |
| TRANSPORT | Air: sample/NPI/high-value/urgent. Sea LCL/FCL: rollout/project volume. | Cargo Ready, packages/GW/NW, route, security seal, DG review if batteries/UPS/cells. | Router is not automatically DG. Serialised high-value cargo needs theft/loss control. |
| PACKING | ESD bag/foam, shock/moisture protection; protect RJ45/SFP/console/antenna; separate accessory kit; palletise volume. | Serial/MAC, revision label, PSU/plug region, antenna count, shock/moisture spec, ISPM15 wood if any. | Loss of serial/MAC traceability, damaged ports/SFP cage or wrong PSU/plug/antenna can cause rejection. |
| COST | Build a model×market cost stack rather than fixed pricing. | HS/origin; civil-crypto/cyber licences if any; FCC/RED/OFCA tests; packing; customs; trucking; freight; insurance; amendment/storage. | Secure/wireless variants can have materially different compliance costs from standard wired routers. |
13. RISKS & CONTROL POINTS
| RISK | ROOT CAUSE | IMPACT | CONTROL | TIMING |
|---|---|---|---|---|
| 8517.62.43 used for every router | Trade name instead of architecture | Wrong HS → wrong licence/origin | Classification memo + principal-function test | Pre-contract / HS freeze |
| Decree 341 missed | VPN/IPSec/MACsec without triple-match review | Missing civil-crypto licence | HS + description + crypto-characteristics matrix | Before Cargo Ready |
| Decree 332 missed | Router is actually UTM/IPS/security product | Missing cybersecurity-product licence | Security feature + Appendix II review | Pre-contract |
| 341 vs 332 route confused | Dual-use crypto + cyber | Wrong authority/process | Dual-use decision memo | Before filing |
| FCC file does not cover actual wireless config | Module/antenna/power/FW changed | U.S. compliance gap | FCC grant/module-integration matrix | Design/config freeze |
| EU CRA transition missed | Only legacy RED/CE considered | Vulnerability/reporting readiness gap | CRA applicability + Article 14 roadmap | Pre-market/post-shipment |
| OFCA scope wrong | Wired CPE/radio role unclear | HK certification/type-acceptance issue | OFCA/HKCA applicability memo | Before shipment |
| Origin fails | Near-finished imported router only flashed/tested in VN | FTA preference denied | PSR + process/costing audit | Before C/O |
| Serial/MAC mismatch | ERP/packing/buyer list differ | Receiving/activation/claim failure | Serial/MAC master + scan check | Packing/docs |
| Missed cut-off/L/C discrepancy | Licence/customs/serial list late | Roll/storage/payment delay | Milestone owner + four-eye docs | Before cut-off/on-board |
14. FAQ
1. Can enterprise routers be exported from Vietnam?
Yes, generally through commercial export if outside prohibited/restricted scope and no sector licence is triggered. VPN/crypto and cybersecurity features require Decree 341/332 screening.
2. Is 8517.62.43 always the router HS?
No. It is a strong direction for wired routers/gateways designed solely to connect to heading 84.71 machines. Wireless/cellular/security/module configurations may differ.
3. Does VPN/IPSec automatically require a civil-cryptography licence?
No. Decree 341 uses a triple match: HS, goods description and cryptographic technical characteristics must all match Appendix II.
4. What if a router includes VPN and IPS/firewall?
Build a dual-use matrix. Decree 341 covers civil cryptography; Decree 332 covers listed cybersecurity products. Decree 341 provides coordination for dual-use products.
5. Who issues the civil-cryptography export/import licence and how long?
The Government Cipher Committee issues it. Decree 341 states 6 working days from receipt of a complete valid application; preparation/correction time is separate.
6. What does a Wi‑Fi router need for the U.S.?
Intentional radiators generally require certification under 47 CFR §15.201 before marketing; map FCC grant/module, antenna, RF power and firmware region. Wired-only devices follow a different Part 15 route.
7. Is RED/CE enough for an EU Wi‑Fi router?
Review RED, RoHS and the technical file, plus RED cybersecurity for internet-connected radio equipment. CRA is transitioning, with Article 14 applying from 11 Sep 2026.
8. Does a wired router in Hong Kong always need an OFCA label?
Not necessarily. Determine whether it is CPE connected to public telecom networks or otherwise within HKTEC/HKCA certification scope; wireless models add radio rules.
9. What is the EVFTA origin rule for heading 8517?
Under Protocol 1 Annex II, 8517 uses the applicable ex-Chapter-85 rule: manufacture from materials of another heading, or total value of materials used not exceeding 70% of ex-works price. Use Vietnam Circular 14/2026.
10. Does a U.S. shipment use EVFTA proof?
No. EVFTA does not apply to the U.S. Prepare country-of-origin evidence under importer/CBP/buyer requirements and check marking/trade remedies.
11. What must be frozen before Cargo Ready?
Model/revision, routing/security features, RF/antenna, HW/FW region, HS, Decree 341/332 licences if triggered, FTA/origin, FCC/RED/OFCA evidence, serial/MAC and packing.
12. What should be retained after on-board?
Customs, final transport, origin proof, licences, FCC/RED/OFCA files, BOM/origin, model/revision/FW, serial/MAC, buyer/bank/payment and claim/security-incident records.
15. POST-SHIPMENT OUTPUTS & RECORD RETENTION
- Completed export declaration + exact-configuration classification memo.
- Final B/L/AWB/Sea Waybill + SI/VGM/on-board records.
- Civil-crypto / cybersecurity-product licences if in scope, with triple-match/dual-use evidence.
- Origin proof + Origin Audit Trail where EVFTA/AHKFTA is claimed.
- Market compliance: FCC; RED/DoC/technical file/CRA readiness; OFCA/HKTEC evidence.
- Configuration traceability: model, HW/FW, RF module/antenna, region, serial/MAC, PSU/accessories.
- Security/support: vulnerability/support lifecycle and advisory/incident records where applicable.
- Payment/claim: buyer/bank, payment, RMA, survey/insurance evidence.
- Change control: firmware, crypto, radio module, security features, chassis/line cards or market region changes trigger reassessment.
OPERATIONAL CONTROL SCOPE
For enterprise routers, one shipment master should connect model/revision – routing/security features – HS – licences – origin – market compliance – serial/MAC – packing – customs – transport documents.
HS 8517, Decrees 341/332, EVFTA/AHKFTA, FCC–RED–OFCA and market configuration.
PO – Invoice – PL – licences – Customs – origin – compliance – SI/VGM – B/L/AWB – buyer/bank.
Serial/MAC, HW/FW, security/support records, origin trail, payment/claim and change control.
Updated 3 September 2026. Final HS, licence, PSR and destination compliance depend on the exact model/configuration and rules in force.
NEED TO REVIEW IMPORT PROCEDURES OR A SHIPPING PLAN?
Send us the product name, shipping route, current dossier, or implementation request in advance so we can suggest a suitable approach that is practical, focused, and aligned with your shipment.
Import procedure for cream-filled wafers: HS code, tax, food safety, C/O and E2E workflow
Gate Valve Export Guide: Markets, HS, Origin, Documents and Process
Industrial Router Export Guide: Markets, HS, Licensing, Origin and E2E Workflow
Exporting Butterfly Valves from Vietnam: Markets, HS 8481, Origin, Pressure Compliance and Transport
Laser Cutting Machine Export Procedure: HS, Dual-Use Screening, Origin and Shipping
Blade server export procedure: markets, HS, origin, dual-use screening and logistics
Exporting Gateways from Vietnam: Markets, HS 8517.62.21, Origin and Compliance
Mini PC export procedure: markets, HS, origin, dual-use, FCC/IMDA/OFCA and logistics
Exporting Industrial PCs from Vietnam: Markets, HS, Origin, Compliance and Transport
SERVER RACK EXPORT GUIDE: MARKETS, HS, ORIGIN, COMPLIANCE AND SHIPPING
Exporting Tower Servers from Vietnam: Markets, HS, Origin and E2E Workflow
Exporting PoE Switches from Vietnam: Markets, HS, Origin, Compliance and Transport
Desktop PC export guide: markets, HS code, origin and shipping
Exporting Edge Servers from Vietnam: Markets, HS, Origin and E2E Workflow
Exporting Load Balancers from Vietnam: Markets, HS, Origin, Compliance and E2E Workflow