DrayTek Vigor 2860L 4G LTE Multi-WAN VDSL2/ADSL2+ router

DrayTek Vigor 2860L 4G LTE Multi-WAN VDSL2/ADSL2+ router

 

 

The Vigor2860L router has most of the functions of the Vigor2860 series routers, plus a slot for a 4G LTE mobile broadband SIM card. The supported SIM cards include those from the major broadband service providers in Australia, Telstra, Optus, Vodafone, etc., as well as those in New Zealand, Spark, 2Degrees and Vodafone with speeds up to 150Mbps downstream and 50Mbps upstream.

In addition to the 4G LTE mobile broadband, the Vigor2860L has other WAN interfaces including 1 x VDSL2/ADSL2+, 1 x Gigabit Ethernet WAN and 1 x USB port for a 3G/4G mobile dongle.

The Vigor2860L can connect to the Internet through any of these interfaces, or with a combination of interfaces for Load Balance and Failover functions. Like the Vigor2860 series, this router supports business features including an object-oriented SPI (Stateful Packet Inspection) firewall, IPv6, 32 VPN tunnels, 16 SSL-VPN tunnels, tag-based VLAN, multiple subnets, etc.

The LTE feature makes the Vigor2860L series router an ideal solution for applications such as:

• Remote locations with no fixed line or NBN coverage.
• Quick setup for new branches waiting for DSL/Ethernet WAN (e.g. NBN).
• Load Balancing or Failover backup for an existing primary Internet connection which can be any of ADSL/VDSL/Cable/Ethernet broadband.
• Temporary installations such as disaster recovery and emergency situations, exhibitions, sporting events, etc., where Internet access is required for a short period.
• Provision of Internet access on public transport such as coaches, buses, trains, freighters, etc.

The Vigor2860L series router can be rack mounted using a 1RU rack mount bracket on a standard 19” rack or cabinet.

 

1. LTE Function

The Vigor2860L router has a SIM card slot for a FDD LTE/4G category 4 mobile broadband modem. The 4G/LTE SIM card slot allows you to insert a SIM card from your service provider and have Internet access without the need to use additional hardware. It is protected by a cover.

The Vigor2860L series router has 2 LTE antennas. A 1 metre extension lead with a magnetic base allows the antennas to be placed in the best position for optimum 3G/4G reception.
4G LTE bands supported are:

§  B3 (1800MHz)

§  B7 (2600MHz)

§  B8 (900MHz)

§  B20 (800MHz)

Note 1: Band 28 (700MHz) is currently not supported in the Vigor2860L router.
Note 2: 3G WCDMA Band 5 (850MHz) is currently not supported in the Vigor2860L router.

The maximum data rate for downlink is 150Mbps and the data rate for uplink is 50Mbps.

The SMS feature allows status and alerts to be sent by the router, or an IT admin can reboot or configure the router with a pre-configured host.

2. WAN Connectivity

The Vigor2860L router supports 4 types of WAN Interfaces, including an ADSL2+/VDSL2 WAN interface, a Gigabit Ethernet WAN interface, a USB port for a supported USB 3G/4G USB modem, and a card slot for 4G LTE modem.

3G/4G mobile broadband access can be achieved through either a SIM card in the 4G LTE SIM card slot, or a USB dongle in the 3G/4G USB port.

With between 2 to 4 WAN interfaces connected, you can configure for Load Balancing or Failover. For example, you can have ADSL2+/VDSL2 as your primary Internet connection and have a failover connection over a 4G LTE connection.

3. LAN and VLAN

The Vigor2860L has 6 x Gigabit LAN ports and supports up to 50,000 NAT sessions.

The Vigor2860L supports both port-based and 802.1q tagged VLANs. Port-based VLANs allow the assignment of a VLAN and IP subnet to each router LAN port. On the other hand, 802.1q-tagged VLANs can extend up to 8 VLANs and the IP subnets to an attached switch.

4. Quality of Service (QoS)

QoS functions allow the network administrator to set priorities for certain types of traffic to guarantee the required level of performance for data flow. For example, real-time traffic such as VoIP or Video over IP can be prioritised as these have less tolerance over delays caused by network congestion.

The traffic type can be assigned to each of the three QoS classes and reserved bandwidth allocated.

5. Firewall

The Vigor2860L has powerful Firewall features including object-oriented SPI (Stateful Packet Inspection) Firewall, DoS (Denial of Services), CSM (Content Security Management) and WCF (Web Content Filter).

Stateful Packet Inspection (SPI) Firewall monitors incoming and outgoing packets at layer 3 (OSI model) and passes or blocks the data packets based on the configuration.

The DoS feature protects the network for unwanted access requests from DoS attackers.

CSM enables network administrators to control and manage IM (Instant Messenger) and P2P (Peer-to-Peer) applications, for instance, to keep network users from accessing inappropriate contents and to ensure that network traffic flow efficiently.

WCF classifies all websites into 64 categories, and allows network administrators to select categories to protect the users from undesirable website content. DrayTek uses the CYREN WCF database for its Vigor routers, and each router includes a FREE 30-DAY TRIAL license.

The object-based firewall provides flexibility by using Objects in the firewall settings. Objects can be created and placed in groups for IP, service type, keyword, file extension, etc. This allows a filter rule to be applied to many IP addresses, reducing the number of Firewall filters required. In addition, these objects and groups can be reused to form new Firewall settings, resulting in reduced amount of work required to create multiple Firewall rules.

Firewall rules can be applied according to a Time Scheduler to control access to the Internet or network services according to predetermined time slots. Up to 4 time schedules can be applied to each Firewall filter rule. For example, social media can be restricted during work hours and be allowed during non-working hours in a company.

6. VPN & SSL-VPN

Vigor2860L supports up to 32 simultaneous VPN tunnels, of major protocols such as IPSec/PPTP/L2TP, and 16 tunnels of SSL-VPN protocol. The dedicated VPN co-processor supports the hardware encryption of AES/DES/3DES, hardware key hash of SHA-1/MD5, and LDAP authentication, and ensures that VPN traffic is secure and performance is maximised.

The SSL technology allows secure web encryption such as those used for on-line banking. With Vigor2860L, you can create SSL-VPN in Full Tunnel mode or Proxy mode.

Furthermore, since the Vigor2860L supports multi-WAN of DSL, Ethernet and 3G/4G, you can create VPN Trunking for VPN Load Balance and VPN Backup. For instance, you can use a number of connections for a site to increase the bandwidth, or have a backup connection when the primary connection fails.

7. Central VPN Management

Instead of normal method for VPN connection through web browsers, Vigor2860L supports Central VPN Management (CVM) which utilises TR-069 protocol. You can create VPN tunnels with just a few mouse clicks on the icons representing your local network (eg. public places such as a café) and remote locations (eg. branch or home office), and the router will establish the connection automatically. This takes away the tedious process required for VPN tunnel creation.

As well as simplifying creation of VPN tunnels, CVM also provide a console to monitor multiple CPE devices and VPN tunnels. This includes displaying the CPE devices on a Google Map.

Other features include scheduling of CPE configuration backup/restore tasks as well as scheduled firmware upgrade of the CPE devices. Up to 8 DrayTek CPE devices are supported.

8. Central AP Management

Vigor2860L supports Central AP Management (APM) with a console to auto-configure and manage up to 20 directly connected (via LAN cables) DrayTek wireless Access Points including VigorAP 800, VigorAP 810, VigorAP 900 & VigorAP 910C.

The Dashboard feature displays the status such as traffic and number of attached stations of all the attached Access Points.

With Auto Provisioning enabled on the attached Access Points, WLAN profiles can be created and applied to the selected Access Points from the central console.

The AP Maintenance feature allows a number of actions to be programmed, including Configuration Backup and Restore, Firmware Upgrade, Remote Reboot and Factory Reset, for selected Access Points.

The connected Access Points can be displayed on a map or floor plan showing their locations and basic descriptions. Other features include Traffic Graph, Rogue AP detection, Event Log, Total Traffic, Station number and Access Point load balancing.

9. Remote Access Management

The Vigor2860L includes a number of management options to provide both local and remote access to monitor and manage the router.

The TR-069 feature integrates with the VigorACS SI centralised management system. This can be used to allow system integrators or network administrators to configure, monitor and manage the Vigor2860L remotely from the comfort of their offices or homes. It can also be used to Auto-Provision the Vigor2860L remotely by sending configuration data to the router. There are 3 wizards: Configuration Wizard, VPN Wizard and Firmware Upgrade Wizard. These allow network administrators to quickly and easily carry out complex tasks.

Alarm and Log Management features ensure real time notifications and alerts to specified phone numbers or email accounts in relation to any faults or issues of the connected CPEs.

A number of diagnostic functions are available for the network administrator to monitor and troubleshoot any network issues. These include Data Flow Monitor, Traffic Graph and Syslog Explorer, etc.

Like all Vigor routers, Vigor2860L supports management options include HTTP, HTTPS, FTP, SSH, Telnet and SNMP.

 

SPECIFICATIONS

1.       VDSL2/ADSL2/2+

§  ITU-T G.993.2 (VDSL2)

§  ITU-T G.992.1/3/5 (ADSL1/2/2+) Annex A & Annex B

§  DSL Forum Performance Speci?cation: ADSL TR-048/67, TR-100; VDSL: WT-114

§  Erasure Decoding, Increased Interleaver Depth and Re-transmission

§  EFM (IEEE 802.3 ah)

§  VDSL2 Profile: up to 30a

2.       LTE Modem

§  FDD LTE Category 4

§  Max Data Rate : 150Mbps in download & 50Mbps in upload within 20MHz Bandwidth

§  LTE FDD Band 3/7/8/20

§  WCDMA Band 1/8

§  GPRS/EDGE : 900/1800/1900MHz

3.       WAN Protocol

§  DSL (WAN-1)/Giga Ethernet (WAN-2)

o    DHCP Client

o    Static IP

o    PPPoE

o    PPTP / L2TP (WAN-2 only)

o    PPPoA (ADSL2 only)

o    802.1q Multi-VLAN Tagging

§  LTE (WAN-3)

§  DHCP mode only

§   

§  IPv6

o    Tunnel Mode: TSPC, AICCU, 6rd, Static 6in4

o    Dual Stack: PPP, DHCPv6 Client, Static IPv6

4.       USB

§  3.5G (HSDPA) as WAN

§  Printer Sharing

§  File System :

o    Support FAT32 File System

o    Support FTP Function for File Sharing

o    Support Samba for File Sharing

§  LTE USB mobile Support List Please Contact support@draytek.com

5.       VPN

§  Up to 32 VPN Tunnels

§  Protocol : PPTP, IPsec, L2TP, L2TP over IPsec

§  Encryption : MPPE and Hardware-based AES/DES/3DES

§  Authentication : MD5, SHA-1

§  IKE Authentication : Pre-shared Key and Digital Signature (X.509)

§  LAN-to-LAN, Teleworker-to-LAN

§  DHCP over IPsec

§  IPsec NAT-traversal (NAT-T)

§  Dead Peer Detection (DPD)

§  VPN Pass-through

§  VPN Wizard

§  mOTP

§  SSL VPN: 16 Tunnels

§  VPN Trunk (Load Balance/Backup)

6.       Multi-WAN

§  Load-Balance/Route Policy(The VDSL2/ADSL2+ interface, Gigabit Ethernet interface and USB mobile can be used either for WAN-backup or load balancing.)

§  WAN Connection Failover

7.       CSM (Content Security Management)

§  IM/P2P Application

§  GlobalView Web Content Filter (Powered by  )

§  URL Content Filter :

o    URL Keyword Blocking (Whitelist and Blacklist)

o    Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking

o    Excepting Subnets

8.       Bandwidth Management

§  QoS

o    Guarantee Bandwidth for VoIP

o    Class-based Bandwidth Guarantee by User-defined Traffic Categories

o    DiffServ Code Point Classifying

o    4-level Priority for Each Direction (Inbound/Outbound)

o    Bandwidth Borrowed

§  Bandwidth/Session Limitation

§  Layer-2 (802.1p) and Layer-3 (TOS/DSCP) QoS Mapping

9.       Network Feature

§  Packet Forwarding Acceleration *

§  DHCP Client/Relay/Server

§  IGMP Snooping/Proxy V2 and V3

§  Triple-Play Application

§  Dynamic DNS

§  NTP Client

§  Call Scheduling

§  RADIUS Client

§  DNS Cache/Proxy and LAN DNS

§  UPnP 30 sessions

§  Multiple Subnets

§  Port-based/Tag-based VLAN (802.1q)

§  Routing Protocol:

o    Static Routing

o    RIP V2

10.   Network Management

§  Web-based User Interface (HTTP/HTTPS)

§  Quick Start Wizard

§  CLI (Command Line Interface, Telnet/SSH)

§  Administration Access Control

§  Configuration Backup/Restore

§  Built-in Diagnostic Function

§  Firmware Upgrade via TFTP/FTP/HTTP/TR-069

§  Logging via Syslog

§  SNMP Management MIB-II

§  Management Session Time Out

§  2-level Management (Admin/User Mode)

§  TR-069

§  TR-104

§  LAN Port Monitoring

§  Support Smart Monitor (30 nodes)

§  Central AP Management

§  Central VPN Management (Up to 8 Remote Routers)

11.   Firewall

§  Multi-NAT, DMZ Host, Port-redirection and Open Port

§  Object-based Firewall, Object IPv6, Group IPv6

§  MAC Address Filter

§  SPI (Stateful Packet Inspection) (Flow Track)

§  DoS/DDoS Prevention

§  IP Address Anti-spoofing

§  E-mail Alert and Logging via Syslog

§  Bind IP to MAC Address

§  Time Schedule Control

§  User Management