DrayTek Vigor 2925 Router Firewall

Vigor 2925 Dual-WAN Router Firewall Series - Technical Specification

• Physical Interfaces:
  • LAN Ports (Switch)
    • 5 X Gigabit Ethernet (1000Mb/s) Ports
    • Port-Based VLAN (Inclusive/Exclusive Groups)
    • 802.1q VLAN Tagging
  • WAN Ports:
    • WAN1 : Gigabit Ethernet (1000Mb/s Interface)
    • WAN2 : Gigabit Ethernet (1000Mb/s Interface)
    • WAN3 : USB Port for 3G Cellular Modem or Printer
  • Performance:
    • Firewall: Up to 300Mb/s
    • IPSec VPN: Up to 50Mb/s
  • Load Balance/Failover Features:
    • Outbound Policy-Based Load-Balance
    • WAN Connection Fail-over
    • BoD (Bandwidth on Demand)
  • Wireless LAN Features ('n' Models Only):
    • 802.11b/g/n (Vigor 2925n / 2925ac) 
    • 802.11b/g/n/a/ac (Vigor 2925ac)
    • Simultaneous Dual-Band Operation - 2.4Ghz/5Ghz (Vigor 2925ac)
    • Multiple SSID : Create up to 4 virtual wireless LANs (independent or joined)
    • Packet Aggregation and Channel Bonding
    • Optional Higher Gain or directional aerials available - 
    • Active Client List in Web Interface
    • Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
    • 64/128-bit WEP Encryption
    • WPA/WPA2 Encryption
    • Switchable Hidden SSID
    • Restricted access list for clients (by MAC address)
    • Time Scheduling (WLAN can be disabled at certain times of day)
    • Access Point Discovery
    • WDS (Wireless Distribution system) for WLAN Bridging and Repeating
    • 802.1x Radius Authentication
    • Wireless VLAN
    • Wireless Rate-Control
    • Automatic Power Management
    • 802.11e WMM (Wi-Fi Multimedia)
  • WAN Protocols (Ethernet):
    • DHCP Client
    • Static IP
    • PPPoE
    • PPTP
    • L2TP *
    • BPA
  • Firewall & Security Features:
    • CSM (Content Security Management):
      • URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
      • Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)
      • Prevent accessing of web sites by using their direct IP address (thus URLs only)
      • Blocking automatic download of Java applets and ActiveX controls
      • Blocking of web site cookies
      • Block http downloads of file types :
        • Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
        • Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
        • Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
      • Time Schedules for enabling/disabling the restrictions
      • Block P2P (Peer-to-Peer) popular file sharing programs 
      • Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
    • Multi-NAT, DMZ Host
    • Port Redirection and Open Port Configuration
    • Policy-Based Firewall
    • MAC Address Filter
    • SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
    • DoS / DDoS Protection
    • IP Address Anti-spoofing
    • E-Mail Alert and Logging via Syslog
    • Bind IP to MAC Address
  • Bandwidth Management:
    • QoS
    • Guaranteed Bandwidth for VoIP
    • Class-based Bandwidth Guarantee by User-Defined Traffic Categories
    • Layer 2&3 (802.1p & TOS/DCSP)
    • DiffServ Code Point Classifying
    • 4-level Priority for each Direction (Inbound / Outbound)
    • Bandwidth Borrowed
    • Temporary (5 minute) Quick Blocking of any LAN Client
    • Bandwidth / Session Limitation (with automatic adjustment)
    • TOS/DSCP QoS Mapping
    • Smart Bandwidth Limitation (Triggered by Traffic/ Session)
  • Network/Router Management:
    • Web-Based User Interface (HTTP / HTTPS)
    • CLI ( Command Line Interface ) / Telnet / SSH
    • Administration Access Control
    • Configuration Backup / Restore
    • Built-in Diagnostic Function
    • Firmware Upgrade via TFTP / FTP
    • Logging via Syslog
    • SNMP v3 Management with MIB-II
    • TR-069
    • TR-104
  • VPN Facilities:
  • • Up to 32 Concurrent VPN Tunnels (incoming or outgoing)
    • Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
    • IPSec Main and Agressive modes
    • IKE Phase 1 DiffieHelman Groups 1,2,5 & 14
    • IKE Phase 2 DiffieHelman Groups 1,2,5 & 14 (will match phase 1 selection)
    • Encryption : MPPE, DES and Hardware-Based AES (128/192/256bits) / DES / 3DES (168bits)
    • Authentication : Hardware-Based MD5, SHA-1 and SHA-256
    • IKE Authentication : Pre-shared Key or X.509 Digital SignatureVPN Facilities:
    • SSL VPN for teleworkers - Up to 5 simultaneous users. Proxy or tunnel
    • LAN-to-LAN & Teleworker-to-LAN connectivity
    • DHCP over IPSec
    • NAT-Traversal ( NAT-T )
    • Dead Peer Detection (DPD)
    • VPN Pass-Through
    • MOTP (Mobile One Time Password)
  • Network Features & Routing protocols
    • DHCP Client / Relay / Server
    • DHCP Option 66 support
    • Dynamic DNS (3rd party providers)
    • NTP Client (Syncrhonise Router Time)
    • Call Scheduling (Enable/Trigger Internet Access by Time)
    • RADIUS Client
    • Microsoft™ UPnP Support (30 connections)
    • Static Routing
    • RIP v2
    • IGMP v2 & V3 and IGMP snooping
    • DNS Cache & Proxy
  • Operating Requirements:
    • Rack Mountable (Optional Vigor 'RM1' mounting bracket required)
    • Wall Mountable
    • Temperature Operating : 0°C ~ 45°C
    • Storage : -25°C ~ 70°C
    • Humidity 10% ~ 90% (non-condensing)
    • Power Consumption: 18 Watt Max.
    • Dimensions: L240.96 * W165.07 * H43.96 ( mm )
    • Operating Power: DC 15V (via external PSU, supplied)
    • Warranty : Two (2) Years RTB
    • Power Requirements : 220-240VAC