Vigor2910VG

Dual-WAN with Load Balance and Fail-Over 4-Port 10/100BaseT Ethernet switch for LAN connection VoIP and PBX functions Built-in 802.11g Wireless AP with Wireless Isolation Object-based SPI Firewall with DoS defense Content Security Management (CSM) for latest IM/P2P software and more 32 x VPN LAN-to-LAN tunnels with 3DES hardware accelerator and VPN Fail-Over QoS for prioritizing video, voice, online game and data traffic USB port for FTP File Sharing, Printer Sharing, and 3G HSDPA USB Modem Support TR-069 for VigorACS SI 2 year warranty Vigor2910 Vigor2910G Vigor2910VG Ethernet (1st WAN) Ethernet WAN (2nd WAN) / LAN 1 1 1 3G USB (2nd WAN) 802.11g WLAN VoIP (2xFXS, 1xPSTN)

Overview

Vigor2910 is equipped with 1 WAN port and 4 LAN ports, and the first LAN port, P1, can be configured to become a second WAN port. With dual WAN mode, it supports either Policy-Base Load-Balancing between the two WANs, or Failover which means in the event a WAN fails, the second WAN takes over. Advanced features supporting secure network management (Firewall & CSM), bandwidth management (QoS, Session Limitation & Bandwidth Control), remote data access (VPN), wireless data communication (IEEE 802.11g standard WLAN), low cost telephone traffic (VoIP), etc., making this router ideal broadband access devices for SOHO and business users.

The USB port allows connection with 3.5G USB modem as 2nd WAN, USB printer for printer sharing and USB flash drive for FTP file server.

The Vigor2910VG is designed with object-based SPI (Stateful Packet Inspection) firewall to detect malicious packets, such as Denial of Service (DoS) attacks, and prevent these from jeopardizing the internal home or office network thus ensuring upmost network security and reliability.

The Content Security Management (CSM) feature allows control of access to websites based on their content; for instance, websites with obscene or objectionable content can be blocked by the parents to ensure safe browsing by young children in the family. Furthermore, peer-to-peer applications that tend to consume big bandwidth and sessions can be managed easily by ticking the CSM options.

The Vigor2910VG supports 32 x LAN-to-LAN VPN tunnels secure remote data access, such as inter office, or home-office communication with strong VPN functionality with all major VPN protocols: PPTP, IPSEC, L2TP and L2TP over IPSEC, including advanced DES, 3DES encryption engine and IKE automated key management, etc.

The dual WAN feature allows to create an additional VPN backup connection, if the main one fail, the second VPN takes over.

The Wireless LAN feature supports the extended benefits of the 802.11g including reliable data transmission, secure access methods including WEP/WPA/WPA2/MAC Access Control/SSID, and easy setup for home/office. Furthermore, features such as WLAN Isolation, Wireless Rate Control, WDS, etc. allow easy but powerful control over the WLAN management.

The VoIP functions enabling the users to save telephone costs. Additional PBX functions allow the users to handle calls in the same ways as with traditional PABX, including call transfer, call forward, call holding/retrieving, etc. Digit Map function further allows flexible add/subtract/replace of numbers to simplify numbering in homes or offices.

Features

1. Dual-WAN
   • Outbound Policy-based Load-balance
   • BoD (Bandwidth On Demand)
   • WAN Connection Fail-over
2. Ethernet WAN Protocol
   • DHCP Client
   • Static IP
   • PPPoE
   • PPTP
   • L2TP
3. Internet Features
   • Internet Fail-Over via 3G USB Modem
   • WAN IP Alias for each WAN : 8
4. VoIP (Voice over IP)
   • Protocol :
     • SIPv2 (RFC-3261)
     • RTP
     • RTCP
   • SIP Registrars : 6
   • FXS Port : 2
   • G.168 Line Echo-cancellation
   • Automatic Gain Control
   • Jitter Buffer (180ms)
   • Voice Codec :
     • G.711MU (64kbps)
     • G.711A (64kbps)
     • G.729A / B (8kbps)
     • G.723 (6.4kkbps)
     • G.726_32 (32kbps)
   • Voice Activation Detection (VAD)
   • Comfort Noise Generation (CNG)
   • Tone Generation :
     • DTMF
     • Dial
     • Busy
     • Ring Back
     • Call Progress
   • DTMF Tone :
     • In Band
     • Out Band (RFC-2833)
     • SIP Info (Cisco Format)
     • SIP Info (Nortel Format)
   • FAX/Modem Support :
     • Tone Detection
     • G.711 Pass-through
     • T.38 for FAX
   • PBX Services :
     • Internal Call
     • Call Hold / Retrieve / Waiting
     • Caller ID
     • Call Transfer
     • Call Forwarding (Always / Busy / No Answer)
     • DND (Do Not Disturb)
     • Hotline
     • Phone Book
     • Digit Map
     • PSTN Relay
5. Wireless Access Point
   • IEEE802.11g Compliant
   • SSID (Service Set identifier) : 1
   • Hidden SSID
   • Wireless LAN Isolation
   • Wireless Rate Control
   • Security :
     • 64 / 128 bit WEP (Wired Equivalent Privacy)
     • WPA (Wi-Fi Protected Access)
     • WPA2
     • 802.1x Authentication
   • MAC Address Access Control
   • WDS (Wireless Distribution System)
   • Access Point Discovery
   • Wireless Station List
6. Firewall
   • Object-based & Policy-based Firewall
   • SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
   • Multi-NAT
   • Port Redirection
   • Open Port
   • Address Mapping
   • DMZ Host
   • True IP DMZ Host
   • DoS / DDoS Protection
   • IP Address Anti-Spoofing
   • E-mail Alert
   • VLAN (Virtual LAN)
   • VLAN with Wireless VLAN
   • Bind IP to MAC Address
   • LAN User Web Authentication
   • WLAN User Web Authentication
7. CSM (Content Security Management)
   • IM (Instant Messenger) Filter (e.g. MSN / Yahoo Messenger etc.)
   • Web IM Application Filter (e.g. eMessenger / WebMSN / WebYahooIM etc.)
   • VoIP Application Filter (e.g. Skype / Gizmo etc.)
   • P2P (Peer-to-Peer) Filter (e.g. BitTorrent / eMule / KazzaA etc.)
   • Streaming Filter (e.g. FlashVideo / SilverLight / PPStream / PPLive etc.)
   • URL Content Filter (Whitelist or Blacklist specific sites or keywords in URLs)
   • File Extension Filter (e.g. Image / Video / Audio / Compression files etc.)
   • GlobalView Web Content Filter ( Powered by  ) *
     (e.g. Child Protection / Gambling / Porn & Sexually / Travel / Game / Sports etc.)
8. VPN and Remote Access
   • Up to 32 Concurrent VPN Tunnels (incoming or outgoing)
   • VPN Client Wizard
   • VPN Server Wizard
   • Protocol :
     • PPTP
     • IPSec
     • L2TP
     • L2TP over IPSec
   • Encryption :
     • MPPE
     • Hardware-based AES
     • Hardware-based DES
     • Hardware-based 3DES
   • Authentication
     • Hardware-based MD5
     • Hardware-based SHA-1
   • IKE Authentication :
     • Pre-shared Key
     • Digital Signature (X.509)
   • LAN-to-LAN
   • Teleworker-to-LAN
   • DHCP over IPSec
   • Dead Peer Detection (DPD)
   • Mobile One-Time Password
   • NAT-Traversal (NAT-T)
   • VPN Fail Over
   • VPN Pass-through
9. Bandwidth Management
   • QoS (Quality of Service) :
     • Guarantee Bandwidth for VoIP
     • Class-based Bandwidth Guarantee by User-Defined Traffic Categories
     • DiffServ Code Point Classifying
     • 4-level Priority for Each Direction (Inbound / Outbound)
     • Bandwidth Borrowed
   • Session Limitation
   • Bandwidth Limitation
10. USB Applications
    • 3.5G USB Modem (can only act as WAN2)
    • Printer Sharing
    • File System :
      • Support FAT32 / FAT12 file system
      • Support FTP function for file sharing
      • Support SAMBA for Windows file sharing
11. Network Feature
    • Supported Software :
      • VigorACS SI
    • IP Version: IPv4
    • IGMP Proxy / Snooping
    • DHCP Client / Relay / Server
    • Dynamic DNS
    • NTP (Network Time Protocol) Client
    • Time Scheduling
    • RADIUS Client
    • DNS Cache / Proxy
    • UPnP
    • Wake on LAN
    • Routing Protocol :
      • Static Routing
      • RIP V2
12. Network Management
    • Web-based User Interface (HTTP / HTTPS)
    • Quick Start Wizard
    • CLI (Command Line Interface)
      • Telnet
      • SSH
    • Administration Access Control
    • Configuration Backup / Restore
    • Built-in Diagnostic Function :
      • System Status
      • Online Status
      • Dial-out Trigger
      • Routing Table
      • ARP Cache Table
      • DHCP Table
      • NAT Sessions Table
      • Data Flow Monitor
      • Traffic Graph
      • Ping Diagnosis
      • Trace Route
      • Wireless VLAN Online Station Table
      • Web Authentication Table
    • Firmware Upgrade :
      • TFTP
      • FTP
      • Web-based User Interface
      • TR-069
    • Logging via Syslog
    • SNMP Management MIB-II
    • TR-069

Specifications

Application

The Vigor2910 series provides a configurable second WAN interface and supports policy-based load-balancing and connection fail-over on dual-WAN interface. Except the QoS function for the original IP layer, it also supports NAT session/bandwidth management which increases the usage efficiency of bandwidth greatly.

Voice-over-IP(VoIP) is extensively supported with providing two separate phone ports and multiple SIP registrars with highly flexible configuration and call handling options.

Dual WAN Application

It allows users to access Internet and combine the bandwidth of the dual WAN to speed up the transmission through the network. Each WAN port can connect to different ISPs, Even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation.

VPN Backup Application

What is VPN Backup?

If there is only one VPN tunnel between the main office and a remote branch office, when this VPN connection is dropped and can't be restored within minutes because of a network problem, you have to wait hours or days until the network administrator manually create another VPN connection. This will impact business operations and revenue.

With the DrayTek VPN Backup feature you can maintain a permanent connection between two sites. Once a VPN connection is dropped, an automatic backup VPN connection will be implemented.

Example :

A VPN TRUNK profile with member 1 (IPSec type) and Member 2(L2TP over IPSec) has been created for Router A for connecting with Router B. In general, Router A connects to Router B through Member 1 VPN tunnel (with IPSec type).

However, if the connection is off-line, Router A will use Member 2 VPN tunnel (with L2TP over IPSec) instead to connect Router B right away.

Subsidiary in Asia can use vigor router as VPN client. Every day it should transmit ERP, Mail or order information to headquarter in Europe. The Vigor router can build another backup VPN tunnel to subsidiary in America through LAN-to-LAN, and the VPN server in the subsidiary in American can build Routing /RIP. When the VPN tunnel is off-line, the subsidiary in Asia can send the data (that should be transmit to header quarter in Europe) to the subsidiary in America, then the subsidiary in America transmit the data to header quarter in Europe through VPN server by using VPN tunnel backup connection.

Smart VPN Client Application

3G Application

DrayTek supports 3G HSDPA USB Modem via USB port of Vigor2910 series from firmware version V3.0.6 and above. It is a good application for the mobile sharing environment.

For 3G mobile communication through Access Point is popular more and more, Vigor 2910 adds the function of 3G network connection for such purpose. By connecting 3G USB Modem to the USB port of Vigor2910, it can support HSDPA/UMTS/EDGE/GPRS/GSM and the future 3G standard (HSDPA, etc). Vigor2910 with 3G USB Modem allows you to receive 3G signals at any place such as your car or certain location holding outdoor activity and share the bandwidth for using by more people. Users can use four LAN ports on the router to access Internet.

Figure 6. 3G Application

After connecting into the router, 3G USB Modem will be regarded as the second WAN port. However, the original Ethernet WAN1 still can be used and Load-Balance can be done in the router. Besides, 3G USB Modem in WAN2 also can be used as backup device. Therefore, when WAN1 is not available, the router will use 3.5G for supporting automatically. The supported 3G USB Modem will be listed on Draytek web site.

Wireless Application

Wireless supports connection rate up to 108Mbps with Super G™ feature. In addition to WEP/WPA/WPA2 and MAC Address Control, the router also provides Wireless VLAN, 802.1X authentication and Wireless LAN isolation mechanism for the network security. The Flexible design of firewall function makes users configuring the policies of firewall more easily and conveniently.