Overview

Draytek Vigor 2910 Series Router Firewall

The Draytek Vigor 2910 Series is a router firewall provides a great balance of security, VPN and routing facilities. Content filtering helps protect against inappropriate web usage or time wasting using either keyword matching or Surfcontrol web site categorisation (Subject to subscription).

Optional 3G Cellular data increases the product's flexibility too, allowing you to make use of cellular networks for broadband-like HSDPA networks without needing a fixed line. This can be used for backup or your primary Internet feed. Alternatively, a switchable Ethernet port can be used as a secondary WAN port, to a second broadband connection, for example.

The Draytek Vigor 2910's VPN facilities provide up to 16 simultaneous tunnels. These tunnels can be encrypted and authenticated with indistry standard methods, making your data secure as it passes over the public Internet. VPNs are ideal for both remote office linking or teleworker connections to access brand or head office resources.

3G

3G Cellular Data Features

The Draytek Vigor 2910's USB port can host a compatible 3G modem or cellphone for access to the cellular network for full Internet Access. Most UK networks now provide high speed HSDPA data connections at up to 3.6Mb/s download speed. The 3G connection can be used as your primary/only Internet access, or as backup to your main ADSL line connection. This is not only ideal for homes or offices which don't want to pay fixed line + broadband rental, but also for temporary locations, or those to where fixed lines aren't available.

Supported Modems / Phones Huawei E156G Huawei E160G Huawei E169G (K3520) Huawei E172 Huawei E220 Huawei E226 Huawei E230 Huawei E270 Huawei E272 Vodafone K3565 Nokia N70 Nokia N95 Nokia 6233 Nokia N73 Nokia E65 Vodafone K3565 Novatel MC950D Option Globesurfer iCon 7.2 Sierra Aircard 876u Sierra 875U Sierra Compass 885 Telstra HSDPA USB Modem 4G System XSPlug P3 MomoDesign MD-@ Benq EF91 LG U8380 Telstra Next G 3G USB Bandrich Bandluxe C100 Bandrich Bandluxe C100S Bandrich Bandluxe C120 Amoi H01 Aiko 76E BigPond Next G C-Motech D-50 ASUS T500 Modem Zapp Telemodem Z020 ZTE AC8700 3G ZTE MF622 A USB connection cable is required for your phone (not supplied).

The Draytek Vigor 2910 and 3G cellular modem setup is ideal for:

• Backup to your primary Internet feed (ADSL, cable etc.)
• Providing lower cost broadband than a fixed line solution
• Areas without fixed line broadband access
• Compatible with a wide range of 3G modems/phones
• Temporary Locations
• Mobile Homes
• Locations on the move - coaches, trains
• Fairgrounds & temporary exhibitions
• Outdoor locations (the router and modem itself must be indoors!)
• Disaster Planning & High Availability

 

Example Use : Installation in a mobile café or moving bus

Note: DrayTek have no control over local network/provider operations, changes in network facilities/tarrifs nor make any claim over specific network compatibility. Please assure yourself that the router will be compatible with your chosen cellular network and provider and that you have adequate signal coverage before committing to any contract term. Please also ensure that your chosen provider and the tariff allows access to all of your required applications (e.g. VPN, VoIP, Messaging etc.) as many packages exist, some blocking certain data types.

2nd WAN Secondary WAN Port The primary 'WAN' interface (the connection to the outside world) is 10/100BaseT Ethernet. This can connect to any Ethernet based router IP or Internet feed which might typically be fed via Leased Line, cable modem, ADSL, Satellite system - anything which is then terminated in Ethernet. In addition, one of the LAN Ethernet ports can be selected as a secondary WAN (Internet) Interface. The second interface can be used as the primary interface, backup failover for the primary WAN port, load balancing or just for increased total bandwidth. This allows you to use two Internet feeds simulataneously to provide higher total capacity, or rule-based routing over two feeds (load balancing). If you do not have a second WAN feed, you can use the 2nd WAN port as a regular LAN port instead.

Specification

Draytek Vigor 2910 Router Specification

• Combination Ethernet router, VPN Device, Firewall and Load-Balancer
• Primary Ethernet WAN Interface
• Selectable secondary WAN Interface
• Load Balancing across both WAN ports with automatic or user-defined policies
• WAN Backup using secondary WAN in case of fisr WAN failure
• Four-Port 10/100BaseT autosensing Ethernet interface with manual speed over-ride (one port switchable to WAN2 port)
• Printer Port - built-in USB port compatible with most standard printers and any Windows 98SE, 2000 or XP client PC.
• Internet Firewall facilities featuring :
  • Automatic Keep-state facility for tracking packets and denying unsolicitied incoming data
  • Selectable DoS/DDoS protection
  • IP Address anti-spoofing
  • User-configurable packet-filtering
  • NAT/PAT for Automatic LAN/WAN Mapping and Security
  • NAT Port Redirection with automatic internal ranging
  • NAT Port Forwarding (Up to 200 IP ports)
• QoS (Quality of Service) assurance with 8 selectable levels & Diffserv support
• Internet Content Filtering:
  • URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
  • Surfcontrol Support - Block Web sites by category (subject to subscription)
  • Prevent accessing of web sites by using their direct IP address (thus URLs only)
  • Blocking automatic download of Java applets and ActiveX controls
  • Blocking of web site cookies
  • Block http downloads of file types :
    • Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
    • Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
    • Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
    • Time Schedules for enabling/disabling these restrictions
  • Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
  • Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger)
• VPN facilities :
  • High performance VPN supports up to 32 simultaneous VPN tunnels.
  • Dial-in or dial-out, LAN-to-LAN or Teleworker-to-LAN
  • Protocol support for PPTP, L2TP, IPSec
  • MD-5 & SHA-1 Authentication
  • Encryption : MPPE, DES/3DES & AES
  • Hardware Co-processor for VPN Encryption
  • PFS (Perfect Forward Secrecy) - Adds additional key protection
  • Pre-shared/IKE keying & PKI (X.509) certificate support
  • IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
  • Radius Support for dial-in teleworker profiles
  • Compatible with other leading 3rd party vendor VPN devices
• T.38 Fax Facilities
• Outbound NAT Proxy / STUN Server Support

Dynamic DNS Posting, compatible with popular services

DHCP Server facility with pre-settable allocations and alien lock-out

Support for non-NAT public subnets (multiple public IP addresses)

LAN Side IP address range and built-in DHCP server/relay is fully configurable

RIP & Static Routing configurable

Diagnostic Facilities:

• SNMP Reporting/Monitoring - compatible with industry standard tools
• Comprehansive Syslog logging/monitoring (DrayTek Syslog tool supplied)
• Ping & TraceRoute from WUI - New!
• Real Time Data Flow Monitor, with instant block (cut of any user immediately!) - New!

VPN Passthrough for VPN client/server running behind the router