DrayTek Dual WAN Security Firewall

Vigor2820 Series

  • ADSL2/2+ Security Router
  • Support Smart Monitor
  • 2nd WAN port (Ethernet) for policy-based load-balancing or fail-over
  • Support for mobile 3.5G / HSDPA via USB modem
  • CSM (Content Security Management) for Web content access control
  • USB 2.0 port for network printer, 3.5G / HSDPA  mobile
  • Built-in VoIP facilities enable to deploy cost-effective IP telephone infrastructure
  • Flexible bandwidth management to optimize bandwidth usage
  • Object-based firewall preventing external attacks / easing policy settings
  • Hardware-based VPN platform for high performance remote data access
  • IEEE802.11n Wireless LAN

The Vigor2820Vn is an ADSL2+ router with 2nd Ethernet WAN. This 2nd WAN can connect to DSL/Cable modem or fiber media converter for policy-based load-balance, fail-over and BoD; it also features advanced bandwidth control mechanisms such as IP-layer QoS, NAT Session Limitation, Bandwidth Borrowed, etc., to allow easy, flexible and reliable access control and bandwidth management.
 
With hardware-based implementation of the VPN protocol, the Vigor2820Vn supports up to 32 VPN tunnels using advanced protocols such as IPSec / PPTP / L2TP / L2TP over IPSec with AES / DES / 3DES for encryption and MD5 / SHA-1 for authentication. The SPI firewall uses Object-Based design to make setting of firewall policies easy. The CSM feature allows more precise and efficient access control for URL / Web Content Filtering, IM and P2P applications.
 
You can connect your regular analogue line (PSTN/POTS*) to the Line port of Vigor2820Vn. While you enable VoIP facility, you still can access fixed line (analogue line) to make calls just by dialing #0. The phone connected to Line port and FXS port can be used for both POTS calls and VoIP because the incoming calls are automatically switched through to your telephone (s) (either one or both). As a result, both analogue telephones plugged into your router allow you to access VoIP and analogue line. Furthermore, you can set rules through "Digit-Map" function about particular call destinations using either your SIP/VoIP service or the POTS line. e.g. you can route local calls via your PSTN line (if you have a free calls package) whereas international calls can go via your preferred VoIP provider; there is flexibility to have several digitmap rules
Vigor2820Vn models provide twin analogue phone and one line port. It supports multiple SIP Registrars with high flexible configuration and call handing options.
 
Vigor2820Vn model complie with IEEE802.11n standards. They support WEP / WPA / WPA2, encryption and MAC Address Control, Wireless LAN Isolation, Multi SSID and 802.1x authentication. The Wireless Rate Control function can adjust the data rate of each wireless station (client). WDS can help users to extend wireless coverage easily.
 
Features:

1. ADSL Compatibility
  • ANSI T1.413 Issue2
  • ITU-T G.992.1 G.dmt
  • ITU-T G.992.2 G.lite
  • ITU-T G.992.3 ADSL2 G.dmt.bis
  • ITU-T G.992.5 ADSL2+
  • Multi-PVC
  • Annex L (READSL)
  • Annex M
  • ITU G.997.1 /DPBO Downstream Power Back Off -For German environment
2. ATM Protocols (DSL)
  • RFC-2684 / RFC-1483 Multiple Protocol over AAL5
  • RFC-2516 PPP over Ethernet
  • RFC-2364 PPP over AAL5
  • PPPoE Pass Through LAN / WLAN
  • PPPoE / PPPoA Relay
  • Transparent Bridge for MPoA
3 Dual-WAN
  • Outbound Policy-based Load-balance
  • BoD (Bandwidth On Demand)
  • WAN Connection Fail-over
4. VoIP (Voice over IP)
  • Protocol : SIPv2 (RFC-3261) / RTP / RTCP
  • 12 SIP Registrars
  • G.168 Line Echo-cancellation
  • Automatic Gain Control
  • Jitter Buffer (180ms)
  • Voice Codec :
    • G.711 A/µ Law
    • G.723.1
    • G.726
    • G.729 A / B
    • VAD / CNG
    • iLBC *
  • DTMF Tone :
    • In Band
    • Out Band (RFC-2833)
    • SIP Info
  • Supplemental Services :
    • Internal Call
    • Call Hold / Retrieve / Waiting
    • Call Waiting with Caller ID
    • Call Transfer
    • Call Forwarding (Always / Busy / No Answer)
    • Call Barring (Incoming / Outgoing)
    • DND (Do Not Disturb)
    • MWI (Message Waiting Indicator) (RFC-3842)
    • Hotline
  • Dial Plan :
    • Phone Book
    • Digit Map
5. Wireless Access Point
  • IEEE802.11n Compliant
  • Wireless Client List
  • Wireless LAN Isolation
  • 64 / 128 bit WEP
  • WPA / WPA2
  • Hidden SSID
  • Mac Address Access Control
  • Access Point Discovery
  • Multiple SSID
  • Wireless Rate-control
  • WMM (Wi-Fi Multimedia)
  • WDS (Wireless Distribution System)
  • 802.1x Authentication
6. VPN
  • Up to 32 VPN Tunnels
  • Protocol :
    • PPTP
    • IPSec
    • L2TP
    • L2TP over IPSec
  • Encryption :
    • MPPE
    • Hardware-based AES
    • DES
    • 3DES
  • Authentication
    • Hardware-based MD5
    • SHA-1
  • IKE Authentication :
    • Pre-shared Key
    • Digital Signature (X.509)
  • LAN-to-LAN , Teleworker-to-LAN
  • NAT-Traversal (NAT-T)
  • Dead Peer Detection (DPD)
  • VPN Pass-through
7. Firewall
  • Policy-based Firewall
  • Multi-NAT / DMZ Host / Port-Redirection / Open Port
  • SPI (Stateful Packet Inspection) (Flow Track)
  • DoS / DDoS Prevention
  • IP address Anti-spoofing
  • E-Mail Alert and Logging via Syslog
  • IP and MAC Binding
  • IM / P2P Applications Blocking
  • URL Keyword Filter (Whitelist and Blacklist)
  • GlobalView Web Content Filter ( Powered by  ) 
8. Bandwidth Management
  • QoS :
    • Guarantee Bandwidth for VoIP
    • Class-based Bandwidth Guarantee by User-Defined Traffic Categories
    • DiffServ Code Point Classifying
    • 4-level Priority for Each Direction (Inbound / Outbound)
    • Bandwidth Borrowed
  • Bandwidth / Session limitation
9. WAN Protocol (WAN2)
  • DHCP Client
  • Static IP
  • PPPoE
  • PPTP
  • BPA
  • L2TP *
10. Network Feature
  • Port-based VLAN
  • DNS Cache / Proxy
  • DHCP Client / Relay / Server
  • IGMP Proxy
  • Dynamic DNS
  • NTP Client
  • Call Scheduling
  • RADIUS Client
  • UPnP
  • Routing Protocol :
    • Static Routing
    • RIP V2
11. USB
  • 3.5G USB Modem (3.5G only can act as WAN2)
  • USB Printer
12. Network Management
  • Web-based User Interface (HTTP / HTTPS)
  • Quick Start Wizard
  • CLI (Command Line Interface , Telnet / SSH)
  • Administration Access Control
  • Configuration Backup / Restore
  • Built-in Diagnostic Function
  • Firmware Upgrade via TFTP / FTP / HTTP / TR-069
  • Logging via Syslog
  • SNMP Management MIB-II
  • TR-069
  • TR-104
13. Support Smart Monitor
  • Up to 30 PCs


* Firmware Upgradeable