DrayTek VIGOR 2910G Wireless 108Mbps Dual-WAN Security Firewall & VPN Device

Why Buy?

The Vigor2910G is a high-performance firewall and VPN device, providing up to 32 simultaneous VPN tunnels for branch-office linking or teleworkers.

In addition, sophisticated firewalling is provided making the Vigor2910G a comprehensive and feature-packed firewall device to increase both security, flexibility and performance of your network Internet connectivity. Security features are packed into every area of the Vigor2910's functions.

The primary 'WAN' interface (the connection to the outside world) is 10/100BaseT Ethernet. This can connect to any Ethernet based router IP or Internet feed which might typically be fed via Leased Line, cable modem, ADSL, Satellite system - anything which is then terminated in Ethernet. In addition, one of the LAN Ethernet ports can be selected as a secondary WAN (Internet) Interface.

The second interface can be used as backup failover for the primary WAN port, load balancing or for bandwidth aggregation. This allows you to use two Internet feeds simulataneously to provide higher total capacity (aggregation), or rule-based routing over two feeds (load balancing). If you do not have a second WAN feed, you can use the 2nd WAN port as a regular LAN port instead.

Specification

• Wireless Features (Vigor2910VG only) : 802.11g Super-G Wireless LAN (Total bandwidth up to 108Mb/s) - New!
• Twin gain aerials provide diversity and optimum coverage
• Optional Higher-Gain Aerial (see here)
• Backward compatible with 802.11b (11Mb/s) and regular 802.11g (54Mb/s) standards
• Wireless Security Features : WEP, WPA and WPA2
• Wireless Security & Encryption - New!
• VPN over WLAN (Encrypted Tunnelling)
• WLAN Isolation - Isolate WLAN from wired LAN - New!
• SSID Stealthing
• Restricted access list for clients (by MAC address)
• Time Scheduling (WLAN can be disabled at certain times of day)
• 802.1x User Authentication (via Radius Server, EAP-TLS Mode) - New!
• WDS (Wireless Distribution system) for WLAN Bridging and Repeating (see here) - New!
• Wireless Client Rate control - New!
• Wireless VLAN - Set inclusive/Exclusive wireless groups - New!
• Active Client list in Web Interface
• Combination Ethernet router, VPN Device, Firewall and Load-Balancer
• Primary Ethernet WAN Interface
• Selectable secondary WAN Interface - New!
• Load Balancing across both WAN ports with automatic or user-defined policies - New!
• WAN Backup using secondary WAN in case of fisr WAN failure - New!
• Four-Port 10/100BaseT autosensing Ethernet interface with manual speed over-ride (one port switchable to WAN2 port)
• Printer Port - built-in USB port compatible with most standard printers and any Windows 98SE, 2000 or XP client PC.
• Internet Firewall facilities featuring :
  Automatic Keep-state facility for tracking packets and denying unsolicitied incoming data
• Selectable DoS/DDoS protection
• IP Address anti-spoofing
• User-configurable packet-filtering with new Object Manager - New!
• NAT/PAT for Automatic LAN/WAN Mapping and Security
• NAT Port Redirection with automatic internal ranging - New!
• NAT Port Forwarding (Up to 200 IP ports) - New!
• True-DMZ for WAN IP Address Passthrough - New!
• QoS (Quality of Service) assurance with 8 selectable levels & Diffserv support
• Internet Content Filtering:
  URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
• Surfcontrol Support - Block Web sites by category (subject to subscription)
• Prevent accessing of web sites by using their direct IP address (thus URLs only)
• Blocking automatic download of Java applets and ActiveX controls
• Blocking of web site cookies
• Block http downloads of file types :
  Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
  Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
• Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV /
  .WAV / .RAM / .RA / .RM / .AVI / .AU
• Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger)
• High performance VPN supports up to 32 simultaneous VPN tunnels.
• Dial-in or dial-out, LAN-to-LAN or Teleworker-to-LAN
  Protocol support for PPTP, L2TP, IPSec
  MD-5 & SHA-1 Authentication
• Encryption : MPPE, DES/3DES & AES
• Hardware Co-processor for VPN Encryption
• PFS (Perfect Forward Secrecy) - Adds additional key protection
• Pre-shared/IKE keying & PKI (X.509) certificate support
• IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
• Radius Support for dial-in teleworker profiles
• Compatible with other leading 3rd party vendor VPN devices
• Outbound NAT Proxy / STUN Server Support
• 802.1x User Authentication (via Radius Server, EAP-TLS Mode) - New!
• Active Client list in Web Interface
• VPN Passthrough for VPN client/server running behind the router

What's Included?

• DrayTek Vigor 2910G 4-port Wireless VPN Cable Router
• External power adapter
• 1 x CAT5 straight Ethernet cable
• Printed installation guide
• Resource CD including user guide