DrayTek Vigor 2925Fn

DrayTek Vigor 2925Fn

The Vigor2925Fn is equipped with SFP WAN port for Fiber connection. 

Vigor2925Fn is the IPv6 ready dual WAN broadband security firewall router. It ensures the business continuity for today and the future IPv6 network. Its one gigabit Ethernet WAN port can accept various high-speed Ethernet-based WAN links via FTTx/xDSL/Cable. The 2 USB ports are for 3G/4G LTE mobile broadband access. With the multi-WAN accesses, Vigor2925Fn supports bandwidth management functions such as failover and load-balancing, making them ideal solutions for reliable and flexible broadband connectivity for the small business office.

The specifications cover many functions that are required by modern day businesses, including secure but easy to apply firewall, comprehensive VPN capability, Gigabit LAN ports, USB ports for 3G/4G mobile dongles, FTP servers and network printers, VLAN for flexible workgroup management, and much more.

FEATURES

WAN Feature

• IPv4 Ethernet WAN
  • DHCP Client
  • Static IP
  • PPPoE
  • PPTP
  • L2TP
  • 802.1p/q Multi-VLAN Tagging
• IPv6 Ethernet WAN
  • Tunnel Mode:
    • PPP
    • TSPC
    • AICCU
    • 6rd
  • Dual Stack:
    • DHCPv6 Client
    • Static IPv6
• USB WAN
  • PPP
• Outbound Policy-based Load-balance
• WAN Connection Failover
• WAN Budgets*
• 50,000 NAT Sessions

Network Feature

• DHCP Client/Relay/Server
• IGMP Snooping/Proxy Version 2 and Version 3
• Dynamic DNS
• NTP Client
• Call Scheduling
• RADIUS Client
• DNS Cache/Proxy
• UPnP 30 sessions
• Multiple Subnets
• Port-based/Tag-based VLAN (802.1q)
• Layer-2 QoS (802.1p)
• Routing Protocol:
  • Static Routing
  • RIP V2
• Route Policy

VPN

• Up to 50 VPN Tunnels
• Protocol : PPTP, IPsec, L2TP, L2TP over IPsec
• Encryption : MPPE and Hardware-based AES/DES/3DES
• Authentication : MD5, SHA-1
• IKE Authentication : Pre-shared Key and Digital Signature (X.509)
• LAN-to-LAN, Teleworker-to-LAN
• DHCP over IPsec
• IPsec NAT-traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-through
• VPN Wizard
• mOTP
• SSL VPN (Up to 25 Tunnels)
• VPN Trunk (Load Balance/Backup)

Firewall

• Multi-NAT, DMZ Host, Port-redirection and Open Port
• Object-based Firewall, Object IPv6, Group IPv6
• MAC Address Filter
• SPI (Stateful Packet Inspection) (Flow Track)
• DoS Prevention
• IP Address Anti-spoofing
• E-mail Alert and Logging via Syslog
• Bind IP to MAC Address
• Time Schedule Control
• User Management

USB

• 3.5G (HSDPA)/4G (LTE) as WAN
• Printer Sharing
• File System :*
• Support FAT32 File System *
• Support FTP Function for File Sharing *
• Support Samba for File Sharing*

Bandwidth Management

• QoS :
  • Class-based Bandwidth Guarantee by User-defined Traffic Categories
  • Guarantee Bandwidth for VoIP
  • DiffServ Code Point Classifying
  • 4-level Priority for Each Direction (Inbound/Outbound)
  • Bandwidth Borrowed
• Session Limitation
  • Default & Specific Limitation
• Bandwidth Limitation
  • Default & Specific Limitation
  • Auto Adjustment by Exceeding Session/Available Bandwidth
• TOS/DSCP QoS Mapping

Network Management

• Web-Based User Interface (HTTP/HTTPS)
• Quick Start Wizard
• CLI (Command Line Interface, Telnet/SSH)
• Administration Access Control
• Configuration Backup/Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP/FTP/HTTP/TR-069
• Logging via Syslog
• SNMP Management MIB-II (v2/v3)
• Management Session Time Out
• 2-level management (Admin/User Mode)
• TR-069
• TR-104
• LAN Port Monitoring
• Support Smart Monitor (Up to 50 nodes)
• Central AP Management (Up to 20 APs)

Content Security Management

• IM/P2P Applications
• GlobalView Web Content Filter (Powered by CYREN-90) *
• URL Content Filter
• URL Keyword Blocking (Whitelist and Blacklist)
• Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
• Excepting Subnets

Wireless AP

• IEEE802.11n Compliant (2.4GHz)
• Wireless Client List
• Wireless LAN Isolation
• 64/128-bit WEP
• WPA/WPA2
• Hidden SSID
• WPS
• MAC Address Access Control
• Access Point Discovery
• WDS (Wireless Distribution System)
• 802.1x Authentication
• Multiple SSID
• Wireless Rate-control
• IEEE802.11e: WMM (Wi-Fi Multimedia)
• SSID VLAN Grouping with LAN Port*

SPECIFICATIONS