Prodoct Informations

DrayTek Vigor2952 series Dual WAN serves as a VPN gateway and a central firewall for multi-site offices and teleworkers. With its high data throughput of two-Gigabit Ethernet, Dual WAN, VPN trunking and 4 Gigabit Ethernet LAN ports, the device facilitates productivity of versatile business operations. To secure communications between sites is the establishment of VPN tunnels up to 100 simultaneous tunnels (including 50 SSL VPN tunnels).

• Dual Gigabit Ethernet WAN interface providing load-balancing and failover for high performance and business continuity
• IPv4/IPv6 support
• 100 VPN & 50 SSL VPN tunnels for the secure remote access
• Bandwidth Management with 8-level priority Inbound/Outbound QoS
• Central VPN & AP Management offer easy & massive deployment

Dual-WAN

Load Balance and Route policy : 60 profile
Outbound policy-based load-balance
WAN connection Failover
Multiple-VLAN

WAN Protocol

DHCP Client,
Static IP
PPPoE
PPTP
L2TP

VPN

Up to 100 VPN Tunnels (including 50 SSL VPN tunnels)
Protocol : PPTP, IPSec, L2TP, L2TP over IPSec
Encryption : MPPE and Hardware-based AES/DES/3DES
Authentication : MD5, SHA-1
IKE Authentication : Pre-shared key and Digital Signature (X.509)
LAN-to-LAN, Teleworker-to-LAN (remote user dial-in)
IPsec NAT-traversal (NAT-T)
Dead Peer Detection (DPD)
DHCP over IPSec
VPN Pass-through
mOTP

Firewall

DMZ Host, Port-redirection(Up to 40 entries) and Open Port(Up to 40 entries)
Object-based Firewall

SPI (Stateful Packet Inspection) (Flow Track)

DoS defense
Time Schedule Control
DNS Filter Enhancement
User Management

USB

3.5G (HSDPA) and 4G (LTE) as WAN4 by using USB dongle
(each USB port can support 3.5G/LTE USB dongle) Printer Sharing
File Sharing:

Support FAT32 File System
Support FTP Function for File Sharing

Bandwidth Management

QoS :

Guarantee Bandwidth for VoIP
Class-based Bandwidth Guarantee by User-defined Traffic Categories
DiffServ Code Point Classifying
4-level Priority for Each Direction (Inbound/Outbound)
Bandwidth Borrowed

Bandwidth/Session Limitation
Layer-2 (802.1p) and Layer-3 (TOS / DSCP) QoS

Network Management

Web-based User Interface (HTTP/HTTPS)
Quick Start Wizard
CLI (Command Line Interface, Telnet/SSH)
Administration Access Control
Configuration Backup/Restore
Built-in Diagnostic Function
Firmware Upgrade via TFTP/FTP/HTTP/TR-069
Logging via Syslog
SNMP Management with MIB-II
Management Session Time Out
Two-level Management (Admin/User Mode)
TR-069
TR-104

Central Device Management

AP Management : 30 nodes
Central VPN Management : 8 nodes
Switch Management : 10 nodes

Content Security Management

APP Enforcement

Support APPE Signature Upgrade by license

GlobalView Web Content Filter (support Cyren and BPjM
URL Content Filter :

Access Control : URL Keyword Blocking (White/Black List)
Web Feature : Java Applet, Cookies, Active X, Compressed,Executable,Multimedia File Blocking

Network Features

Packet Forwarding Acceleration
DHCP Client/Relay/Server
DHCP Option: 1,3,6,51,53,54,58,59,60,61,66,125
IGMP V2/V3
LAN DNS /DNS Forwarding
Dynamic DNS
NTP Client
RADIUS /TACACS+ Client
RADIUS Server
Active Directory /LDAP compatible (client)
DNS Cache/Proxy
UPnP 50 Sessions
Wake on LAN
Bonjour service
Routing Protocol:

Static routing (IPv4 static route 40 entries, and IPv6 static route 40 entries)
RIP v1/v2