DrayTek Vigor 2930 Vigor Dual WAN VPN Router

The Vigor2930 is a Dual-WAN router with policy-based load-balance, fail-over and BoD ( Bandwidth on Demand ) ; it also features advanced bandwidth control mechanisms such as IP-layer QoS, NAT session limitation, bandwidth borrowed, etc., to allow easy, flexible and reliable access control and bandwidth management.

The SPI ( Stateful packet Inspection ) firewall uses object-based design to make settings of firewall policies easy. The CSM ( Content Security Management ) feature enables more precise and efficient access control for IM ( Instant Messenger ) and P2P ( Peer to Peer ) applications. Furthermore, functions such as DoS / DDoS ( Denial of Service / Distributed DoS ) and URL / Web content filtering minimize security threats both inside and outside the network.

With hardware-based implementation of the VPN protocols, the Vigor2930 supports up to 100 VPN tunnels in compliance with advanced protocols such as IPSec / PPTP / L2TP / L2TP over IPSec with AES / DES / 3DES for encryption and MD5 / SHA-1 for authentication.

1. Dual-WAN

• Outbound Policy-Based Load-Balance
• BoD ( Bandwidth on Demand )
• WAN Connection Fail-over

2. WAN Protocol

• DHCP Client
• Static IP
• PPPoE
• PPTP
• L2TP
• BPA

3. Firewall

• CSM ( Content Security Management ) for IM / P2P Applications
• Multi-NAT, DMZ Host, Port-Redirection and Open Port
• Policy-Based Firewall
• MAC Address Filter
• SPI ( Stateful Packet Inspection )
• DoS / DDoS Protection
• IP Address Anti-spoofing
• E-Mail Alert and Logging via Syslog
• Bind IP to MAC Address

4. VPN

• Up to 100 VPN Tunnels
• Protocol : PPTP , IPSec , L2TP , L2TP over IPSec
• Encryption : MPPE and Hardware-Based AES / DES / 3DES
• Authentication : Hardware-Based MD5 , SHA-1
• IKE Authentication : Pre-shared Key and Digital Signature ( X.509 )
• LAN-to-LAN , Teleworker-to-LAN
• DHCP over IPSec
• NAT-Traversal ( NAT-T )
• Dead Peer Detection ( DPD )
• VPN Pass-Through

5. Bandwidth Management

• QoS :
  • Guarantee Bandwidth for VoIP
  • Class-based Bandwidth Guarantee by User-Defined Traffic Categories
  • DiffServ Code Point Classifying
  • 4-level Priority for each Direction ( Inbound / Outbound )
  • Bandwidth Borrowed
• Bandwidth / Session Limitation

6. Network Management

• Web-Based User Interface ( HTTP / HTTPS )
• Quick Start Wizard
• CLI ( Command Line Interface, Telnet / SSH )
• Administration Access Control
• Configuration Backup / Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP / FTP
• Logging via Syslog
• SNMP Management MIB-II

7. Content Filter

• URL Keyword Blocking ( White List and Black List )
• Java Applet , Cookies , Active X , Compressed , Executable , Multimedia File Blocking
• Web Content Filter ( SurfControl )
• Time Schedule Control

8. Network Features

• DHCP Client / Relay / Server
• Port-based VLAN
• Dynamic DNS
• NTP Client
• Call Scheduling
• RADIUS Client
• DNS Cache / Proxy
• UPnP
• Routing Protocol :
  • Static Routing
  • RIP V2