Draytek Vigor 2962 Dual WAN Security Router VPN Gateway

Draytek Vigor 2962 Dual WAN Firewall Router VPN Concentrator Teknik Spektleri

Physical Interfaces

• WAN/LAN Switchable Ports:

  • 1x 2.5Gb Ethernet (2.5G/1G/100M/10M), RJ-45

  • 1x SFP (1G/100M) module slot or Gigabit Ethernet (1G/100M/10M), RJ-45

  • 2x Gigabit Ethernet (1G/100M/10M), RJ-45

• LAN Ports: 2x Gigabit Ethernet (1G/100M/10M), RJ-45

• Recessed Factory Reset button

• USB Ports for USB thermometer, USB storage or Printer:

  • 1x USB 3.0 Port

  • 1x USB 2.0 Port

Performance

• NAT Performance:

  • 2.2Gb/s Total NAT Throughput for single or dual WAN

  • 300,000 NAT Sessions

• VPN Performance:

  • 900 Mb/s IPsec (AES256) VPN Performance

  • 500 Mb/s SSL VPN Performance

  • Max. 200 Concurrent VPN Tunnels

  • Max. 50 Concurrent SSL VPN / OpenVPN Tunnels

WAN Interfaces

• Two WAN interfaces - Selectable from ports 1 to 4:

  • P1: RJ-45 2.5Gb Ethernet

  • P2 (left): SFP 1Gb module slot

  • P2 (right): RJ-45 1Gb Ethernet

  • P3: RJ-45 1Gb Ethernet

  • P4: RJ-45 1Gb Ethernet

Internet Connection

• Load Balancing: IP-based, Session-based

• Hardware Acceleration

• 802.1p/q Multi-VLAN Tagging

• Multi-VLAN/PVC

• WAN Active on Demand:  Link Failure, Traffic Threshold

• Connection Detection: PPP, ARP Detect, Ping Detect

• WAN Data Budget*

• Dynamic DNS

• DrayDDNS – with automated LetsEncrypt Certificates

• Full Feature-set Hardware Acceleration:

  • Hardware Accelerated Quality of Service

  • Multi-WAN Data Budget

  • Traffic Graph & Data Flow Monitor

  • Bandwidth Limit

• IPv4 Connection Types:  PPPoE, DHCP, Static IP, PPTP/L2TP

• IPv6 Connection Types: 

  • Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel

  • USB 4G/LTE Modem: TSPC, AICCU

Firewall & Content Filtering

• IP-based or User-based Firewall Policy

• User-based Time Quota

• DoS Attack Defence

• Spoofing Defence

• Content Filtering:

  • Application Content Filter

  • URL Content Filter

  • DNS Keyword Filter

  • Web Features

  • Web Category Filter (requires GlobalView subscription)

NAT Features

• NAT Port Redirection (100 entries)

• Open Ports (100 entries)

• Port Triggering

• DMZ Host

• ALG (Application Layer Gateway):  SIP, RTSP, FTP, H.323

• VPN Pass-Through:  PPTP, L2TP, IPsec

LAN Management

• 802.1q Tag-based, Port-based VLAN

• Up to 20 LAN Subnets (NAT or Routing mode selectable per LAN interface)

• Up to 20 VLANs

• IP Routed Subnet

• Link Aggregation (LAG) for LAN ports 3 & 4* - New!

• Wired 802.1x Port Authentication*

• DHCP Server:

  • Multiple IP Subnet

  • Custom DHCP Options

  • Bind-IP-to-MAC

  • DHCP Pool Count up to 1021 addresses for all LAN subnets

• LAN IP Alias

• Port Mirroring (physical port or .pcap download)

• Local DNS Server             

• Conditional DNS Forwarding       

• Hotspot Web Portal

• Hotspot Authentication: Click-Through, Social Login, SMS PIN, Email PIN, Voucher PIN, RADIUS, External Portal Server

Networking Features

• Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country

• High Availability: Active-Standby, Hot-Standby

• DNS Security (DNSSEC)

• Local RADIUS server

• SMB File Sharing (Requires external storage)

• Multicast: IGMP Proxy, IGMP Snooping* & Fast Leave, Bonjour

Routing Features

• IPv4 & IPv6 Static Routing

• Inter-VLAN Routing

• RIP v1/v2/ng

• BGP

• OSPF - New!

VPN - Virtual Private Networking Features

• Up to 200 active VPN tunnels - including up to 50 SSL VPN or OpenVPN Tunnels

• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client

• Teleworker-to-LAN – Dial-In VPN Server

• User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP

• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)

• Encryption: MPPE, DES, 3DES, AES (128/192/256)

• Authentication: SHA-256, SHA-1

• VPN Trunk (Redundancy): Load Balancing, Failover

• Dead Peer Detection (DPD)

• IPsec NAT-Traversal (NAT-T)

• Virtual IP Mapping – Resolve VPN IP subnet/range conflicts

• DHCP over IPsec

• DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!

• VPN Protocols:

  • IPsec IKEv1, IKEv2, IKEv2 EAP

  • IPsec-XAuth

  • DrayTek SSL VPN

  • OpenVPN (Remote Dial-In User only, LAN to LAN supported in a future firmware release)

  • GRE over IPsec

  • PPTP

  • L2TP, L2TP over IPsec

Bandwidth Management

• IP-based Bandwidth Limit

• IP-based Session Limit

• User-based Data Quota

Quality of Service (QoS)

• Classify via TOS, DSCP, 802.1p, IP Address, Service Type

• 4 Priority Queues

• App QoS

• VoIP Prioritization

• Class-based Outbound Traffic Tagging: DSCP & IP Precedence

Management

• Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069

• Config File Export

• Firmware Upgrade via TFTP, HTTP, TR-069

• 2-Level Administration Privilege

• Access Control Features: Access List, Brute Force Protection

• Syslog

• SMS, E-mail Notification Alert

• User-defined MSG LED on router, displays ACS connection status by default* – New!

• SNMP: v1, v2c, v3

• Managed by VigorACS

Router Central Management Features

• AP Management: Up to 50 VigorAP access points

• Switch Management: Up to 30 VigorSwitch network switches

Operating Requirements

• Rack Mountable with fittings included – 1U height

• Temperature Operating: 0 °C ~ 45 °C

• Storage: -25 °C ~ 70 °C

• Humidity 10% ~ 90% (non-condensing)

• Power Consumption: 15 Watts Max.

• Dimensions:

  • 273mm Width

  • 170mm Depth

  • 45mm Height

• Weight: 1.7kg

• Warranty

  • Two (2) Year Manufacturer's RTB

  • Optional VigorCare Enhanced Warranty Available

    • VigorCare C3 3 Year Subscription: VCARE-C3

    • VigorCare C5 5 Year Subscription: VCARE-C5

• Power Requirements: 220-240VAC