Draytek Vigor 2950 Dual WAN Broadband Security VPN Router
The Vigor2950 Security Firewall is a broadband router with high throughput, high capacity VPN capabilities and dual-WAN interface. It provides policy-based load-balance, fail-over and BoD (Bandwidth on Demand) , and also integrates IP layer QoS, NAT session/bandwidth management to help users control and allocate the bandwidth on networks. With a dedicated VPN co-processor, the hardware encryption of AES/DES/3DES and hardware key hash of SHA-1/MD5 are seamlessly handled, thus maintaining maximum router performance. For remote teleworkers and inter-office links, the Vigor2950 supports up to 200 simultaneous VPN tunnels (such as IPSec/PPTP/L2TP protocols)and 50 sessions of SSL VPN.
The Vigor 2950 allows users to access Internet and combine the bandwidth of the dual WAN to speed up the transmission through the network. Each WAN port can connect to different ISPs, Even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation.
Without the need to install VPN clients on individual PCs, the Secure Socket Layer (SSL) virtual private network (VPN) facility lets remote workers connect to the office network at any time. SSL is supported by standard web browsers such as FireFox and IE. For users of small offices and teleworkers who need to access enterprises's internal applications, file server and file sharing, Vigor2950 security router series allow up to 50 concurrent SSL sessions.
The Vigor 2950 also provides high-security firewall options with both IP-layer and content based protection. The DoS/DDoS prevention and URL/Web content filter strengthen the security outside and inside the network. The enterprise-level CSM (Content Security Management) enables users to control and manage IM (Instant Messenger) and P2P (Peer to Peer) applications more efficiently.
The DrayTek Vigor2950 series are Broadband Security VPN Routers with a Dual-WAN interface. The Draytek Vigor 2950GG provides policy-based load-balancing, fail-over and BoD ( Bandwidth on Demand ) , it also integrates IP layer QoS, and NAT session/bandwidth management to help users control and allocate bandwidth on network.
Dual WAN Application
The Dual WAN functionality allows users to access Internet and combine the bandwidth of the WAN ports to speed up the transmission through the network. Each WAN port can connect to different ISPs, Even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable, etc.). If any connection problems occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation.
SSL VPN Application
Without the necessity of installing VPN client on individual PC, the Secure Socket Layer (SSL)
virtual private network (VPN) facility lets remote workers connect to the office network at any one time. SSL is supported by standard web browsers such as FireFox and IE. For users of small offices and teleworkers who need to access enterprise internal applications, file server and file sharing, Vigor2950G security router series allow up to 50 concurrent SSL sessions.
Firewall & VPN Application
By adopting hardware-based VPN platforms, hardware encryption of AES/DES/3DES and hardware key hash of SHA-1/MD5, the router increases the VPN performance greatly and offers several protocols ( such as IPSec/PPTP/L2TP ) with support for up to 200 VPN tunnels.
The object-oriented design used in SPI ( Stateful Packet Inspection ) firewall allows users to set firewall policies with ease. CSM ( Content Security Management ) enables users to control and manage IM (Instant Messenger) and P2P (Peer to Peer) application more efficiently than before. Also note that the Dos/DDoS prevention and URL/Web content filter strengthen the security outside and inside the network.
VPN Trunk Management
It is a backup mechanism which can set multiple VPN tunnels as backup tunnel. It can assure the network connection not to be cut off due to network environment blocked by any reason.
VPN trunk includes four features - VPN Backup, VPN load balance, GRE over IPSec, and Binding tunnel policy.
Opens in a New Window
Quick Specs
Dual-WAN
- Outbound Policy-Based Load-Balance
- BoD (Bandwidth on Demand)
- WAN Connection Fail-over
SSL VPN
- Up to 50 SSL VPN Tunnels
- SSL Web Proxy
WAN Protocol
- DHCP Client
- Static IP
- PPPoE
- PPTP
- BPA
- L2TP *
Firewall
- SPI ( Stateful Packet Inspection )
- CSM (Content Security Management) for IM/P2P Application
- Multi-NAT, DMZ Host, Port-Redirection/Open Port
- Policy-Based IP Packet Filter
- DoS/DDoS Protection
- IP Address Anti-Spoofing
- E-Mail Alert and logging via Syslog
- Bind IP to MAC Address
VPN
- Up to 200 VPN Tunnels
- Protocol: PPTP, IPSec, L2TP, L2TP over IPSec
- Encryption: AES, MPPE and Hardware-Based DES/3DES
- Authentication: Hardware-Based MD5, SHA-1
- IKE Authentication: Pre-shared Key and Digital Signature (X.509)
- LAN-to-LAN, Teleworker-to-LAN
- DHCP over IPSec
- NAT-Traversal (NAT-T)
- Dead Peer Detection (DPD)
- VPN Pass-Through
Bandwidth Management
- Class-based Bandwidth Guarantee by User-Defined Traffic Categories
- DiffServ Code Point Classifying
- 4-level Priority for Each Direction (Inbound/Outbound)
- Bandwidth Borrowed
- Bandwidth/Session Limitation
Network Management
- Web-Based User Interface (HTTP/HTTPS)
- Quick Start Wizard
- CLI (Command Line Interface) / Telnet/SSH*
- Administration Access Control
- Configuration Backup/Restore
- Built-in Diagnostic Function
- Firmware Upgrade via TFTP/FTP
- Logging via Syslog
- SNMP Management with MIB-II
Content Filter
- URL Keyword Blocking (White list and Black list)
- Java Applet, Cookies, Active X, Compressed / Executable / Multimedia File Blocking
- Web Content Filter (SurfControl)
- Time Schedule Control
Network Features
- DHCP Client/Relay/Server
- Dynamic DNS
- NTP Client
- Call Scheduling
- RADIUS Client
- DNS Cache/Proxy
- UPnP
- Prot-Based VLAN
- Routing Protocol:
- Static Routing
- RIP V2
|
