Vigor2860 Series - DrayTek by pengxiang


									                                                                                                                                                                                 Vigor2860 Series                                                                                                             I Pv6              I
                                                                                                                                                                                                                                                                                                               Ready        ACS S
  VDSL2/ADSL2/2+                                                             CSM (Content Security Management)                                                    Firewall
     ITU-T G.993.2 (VDSL2)                                                      IM/P2P Application                                                                    Multi-NAT, DMZ Host, Port-redirection and
     ITU-T G.992.1/3/5 (ADSL1/2/2+)
     Annex A & Annex B
     DSL Forum Performance Specification:
                                                                                GlobalView Web Content Filter
                                                                                (Powered by
                                                                                 URL Content Filter :

                                                                                  URL Keyword Blocking (Whitelist and Blacklist)
                                                                                                                                                                      Open Port
                                                                                                                                                                      Object-based Firewall, Object IP v6, Group IPv6
                                                                                                                                                                      MAC Address Filter
                                                                                                                                                                                                                                  Vigor2860                             Series
     ADSL TR-048/67, TR-100; VDSL: WT-114                                                                                                                             SPI (Stateful Packet Inspection) (Flow Track)
     Erasure Decoding, Increased Interleaver
     Depth and Re-transmission
                                                                                  Java Applet, Cookies, Active X, Compressed,
                                                                                  Executable, Multimedia File Blocking
                                                                                                                                                                      DoS/DDoS Prevention
                                                                                                                                                                      IP Address Anti-spoofing
                                                                                                                                                                                                                                  VDSL2 Security Firewall
     EFM (IEEE 802.3 ah)                                                          Excepting Subnets                                                                   E-mail Alert and Logging via Syslog
     VDSL2 Profile: up to 30a                                                                                                                                         Bind IP to MAC Address
                                                                                                                                                                      Time Schedule Control
                                                                            Bandwidth Management                                                                      User Management                                              Fail-over and Load Balancing with a second WAN through a Gigabit Ethernet WAN port
  WAN Protocol
     DSL (WAN-1)/Giga Ethernet (WAN-2)
                                                                                QoS :                                                                                                                                              Object-based SPI Firewall and CSM (Content Security Management) for network security
                                                                                  Guarantee Bandwidth for VoIP
       DHCP Client                                                                Class-based Bandwidth Guarantee by                                              USB                                                              2 USB ports for 3G/4G mobile, FTP server and network printers
       Static IP                                                                  User-defined Traffic Categories
                                                                                                                                                                      3.5G (HSDPA) and 4G (LTE) as WAN                             32 VPN tunnels with comprehensive secure protocols
                                                                                  DiffServ Code Point Classifying                                                     Printer Sharing
       PPTP/L2TP (WAN-2 only)                                                     4-level Priority for Each Direction (Inbound                                        File System :                                                VLAN for secure and efficient workgroup management
       PPPoA (ADSL2 only)                                                         /Outbound)
       802.1q Multi-VLAN Tagging                                                  Bandwidth Borrowed
                                                                                                                                                                         Support FAT32 File System                                 6 x Gigabit LAN ports
                                                                                                                                                                         Support FTP Function for File Sharing
     USB (WAN-3)                                                                Bandwidth/Session Limitation                                                             Support Samba for File Sharing                            Enterprise class IEEE 802.11n WLAN AP
       PPP/DHCP                                                                 Layer-2 (802.1p) and Layer-3 (TOS/DSCP)
     IPv6                                                                       QoS Mapping                                                                           LTE USB mobile Support List Please Contact                   VoIP for cost-effective communication (Vn-plus)
       Tunnel Mode: TSPC, AICCU, 6rd, Static 6in4                                                                                                                                                                                  Support Smart Monitor Traffic Analyzer (30-nodes)
       Dual Stack: PPP, DHCPv6 Client, Static IPv6
                                                                                                                                                                                                                                   Flexible Network Management
                                                                            Wireless AP (n model)
                                                                                802.11n WLAN with Concurrent 2.4/5 GHz                                            VoIP (Vn-plus model)
                                                                                Frequency (n-plus model)                                                              Protocol: SIP, RTP/RTCP
     Load-Balance/Route Policy                                                  802.11n WLAN with Single Band 2.4 GHz                                                 12 SIP Registrars
     (The VDSL2/ADSL2+ interface, Gigabit Ethernet                              Frequency (n model)                                                                   G.168 Line Echo-cancellation
     interface and USB mobile can be used either                                                                                                                                                                                  Vigor2860 series security firewall routers have built-in     Comprehensive VPN
                                                                                Wireless Client List                                                                  Jitter Buffer
     for WAN-backup or load balancing.)                                         Wireless LAN Isolation                                                                Voice codec:                                                VDSL2 and ADSL2+ modems, plus a second Ethernet              For remote teleworkers and inter-office links, Vigor2860
     WAN Connection Failover                                                    64/128-bit WEP                                                                           G.711 G.723.1 G.726                                      WAN port for Cable or Satellite broadband, and 2 USB         series provide up to 32 simultaneous VPN tunnels (such as
                                                                                WPA/WPA2                                                                                 G.729 A/B VAD/CNG                                        ports for 3G/4G mobile broadband access. With the multi-
                                                                                                                                                                      DTMF Tone :                                                                                                              IPSec/PPTP/L2TP protocols) for secure data exchange and
                                                                                Wireless Wizard                                                                                                                                   WAN accesses, Vigor2860 routers support bandwidth
  VPN                                                                           Hidden SSID                                                                              Inband Outband (RFC-2833) SIP Info                                                                                    communication. With a dedicated VPN co-processor, the
                                                                                WPS                                                                                   FAX/Modem Support :                                         management functions such as Fail-over and Load              hardware encryption of AES/DES/3DES and hardware key
    Up to 32 VPN Tunnels                                                                                                                                                 Tone Detection     G.711 Pass-through T.38
    Protocol : PPTP, IPsec, L2TP, L2TP over IPsec                               MAC Address Access Control                                                                                                                        Balancing, making them ideal solutions for reliable and      hash of SHA-1/MD5 are seamlessly handled, thus
                                                                                Access Point Discovery                                                                Supplemental Services :
    Encryption : MPPE and Hardware-based                                                                                                                                 Call Hold/Retrieve/Waiting
                                                                                                                                                                                                                                  flexible broadband connectivity for small to large           maintaining maximum router performance. Teleworkers can
    AES/DES/3DES                                                                WDS (Wireless Distribution System)                                                                                                                enterprises.
                                                                                                                                                                         Call Waiting with Caller ID*                                                                                          be authenticated directly with your LDAP server if
    Authentication : MD5, SHA-1                                                 802.1x Authentication
                                                                                                                                                                         Call Transfer
    IKE Authentication : Pre-shared Key and                                     Multiple SSID                                                                            Call Forwarding (Always, Busy and No Answer)                                                                          preferred. The Vigor2860 series are equipped physical DSL
                                                                                Wireless Rate-control                                                                                                                             The specifications cover many functions that are required
    Digital Signature (X.509)                                                                                                                                            Call Barring (Incoming/Outgoing)                                                                                      port and Gigabit Ethernet port for WAN load-balancing and
    LAN-to-LAN, Teleworker-to-LAN                                               IEEE802.11e: WMM (Wi-Fi Multimedia)                                                      DND (Do Not Disturb)                                     by modern day businesses, including secure but easy to
                                                                                SSID VLAN Grouping with LAN Port                                                                                                                                                                               backup. The VPN trunking (VPN load-balancing and VPN
    DHCP over IPsec                                                                                                                                                      MWI (Message Waiting Indicator) (RFC-3842)               apply firewall, comprehensive VPN capability, Gigabit LAN
    IPsec NAT-traversal (NAT-T)                                                 (Port-based VLAN)                                                                        Hotline
                                                                                                                                                                                                                                                                                               backup) are hence implemented on Vigor2860 series. With
                                                                                                                                                                                                                                  ports, USB ports for 3G/4G mobile dongles, FTP servers
    Dead Peer Detection (DPD)                                                                                                                                         Secure Phone (ZRTP + SRTP)                                                                                               VPN trunking, you can create multiple WAN connections to
                                                                                                                                                                                                                                  and network printers, VLAN for flexible workgroup
    VPN Pass-through                                                                                                                                                  PSTN Loop-through When Power Failure                                                                                     a remote site in order to increase bandwidth. The VPN
    VPN Wizard                                                              Network Management                                                                        Dial Plan :                                                 management, and much more. Vigor2860Vn-plus has twin
                                                                                                                                                                                                                                                                                               trunking also can allow you to have failover (backup) of
    mOTP                                                                        Web-based User Interface (HTTP/HTTPS)                                                    Phone Book Digit Map Call Barring                        analogue phone ports and one line port (life line). It
    SSL VPN: 16 Tunnels                                                                                                                                                  Regional                                                                                                              VPN route through a secondary WAN connection.
                                                                                Quick Start Wizard                                                                                                                                supports multiple SIP Registrars with high flexible
    Open VPN: 16 Tunnels                                                        CLI (Command Line Interface, Telnet/SSH)
    VPN Trunk (Load Balancing/Backup)                                                                                                                                                                                             configuration and call handing options.                      With SSL VPN, Vigor2860 series let teleworkers have
                                                                                Administration Access Control
                                                                                Configuration Backup/Restore                                                      Hardware Interface                                                                                                           convenient and simple remote access to central site VPN.
                                                                                Built-in Diagnostic Function
                                                                                                                                                                                                                                  Built-in VDSL2 and ADSL2+ modems
                                                                                                                                                                     1 x VDSL2/ADSL2/2+ WAN Port (WAN1),                                                                                       The teleworkers do not need to install any VPN software
  Network Feature                                                               Firmware Upgrade via TFTP/FTP/HTTP/TR-069                                                                                                         With two built-in modems, you have the flexibility of
                                                                                                                                                                     RJ-11 for Annex A/RJ-45 for Annex B                                                                                       manually. From regular web browser, you can establish
     Packet Forwarding Acceleration*                                            Logging via Syslog                                                                                                                                migrating to VDSL2 when your ISP/Telco upgrades from
                                                                                SNMP Management MIB-II                                                               1 x 10/100/1000Base-Tx, RJ-45 (WAN2)                                                                                      VPN connection back to your main office even in a guest
     DHCP Client/Relay/Server                                                                                                                                        6 x 10/100/1000Base-Tx LAN Switch, RJ-45                     current ADSL2+ technology. Besides, in case you move to
                                                                                Management Session Time Out                                                                                                                                                                                    network or web cafe. The SSL technology is same as the
     IGMP Snooping/Proxy V2 and V3
                                                                                2-level Management (Admin/User Mode)                                                 2 x Detachable Antennas (n Model)                            a new location where VDSL2 is not available, your router
     Triple-Play Application                                                                                                                                         3 x Detachable Antennas (n-plus Model)                                                                                    encryption that you use for secure web sites such as your
                                                                                TR-069                                                                                                                                            can fall back to ADSL2+.
     Dynamic DNS
                                                                                TR-104                                                                               2 x FXS and 1 x Life Line Port, RJ11 (Vn-plus Model)                                                                      online bank. The SSL VPNs can be operated in either full
     NTP Client                                                                                                                                                      2 x USB Host 2.0                                                                                                          tunnel mode or Proxy mode. After F/W 3.7.3, the Vigor2860
     Call Scheduling                                                            LAN Port Monitoring
                                                                                                                                                                     1 x Factory Reset Button                                     Fail-over and Load Balancing with a second
     RADIUS Client                                                              Support Smart Monitor (30)                                                                                                                        Gigabit Ethernet WAN                                         series allows up to 16 simultaneous incoming users.
                                                                                Central AP Management                                                                1 x Wireless On/ Off/ WPS Button
     DNS Cache/Proxy and LAN DNS
     UPnP 30 sessions                                                           Central VPN Management                                                                                                                            The Gigabit Ethernet WAN port caters for any type of         There are up to 16 simultaneous Open VPN tunnels on
     Multiple Subnets                                                           (Up to 8 Remote Routers)                                                                                                                          Internet access, including ADSL, Cable or Satellite          Vigor2860 series for host-to-LAN (remote dial-in)
     Port-based/Tag-based VLAN (802.1q)                                                                                                                                                                                           broadband. You can then use both WAN 1 and WAN 2 for         application.
     Routing Protocol:                                                                                                                                                                                                            Fail-over, ensuring that you will always have an access to
       Static Routing    RIP V2
                                                                                                                                                                                                                                  the Internet even if one of the WAN fails, or for Load
                                                                                                                                                                                                           Firmware Upgradeable   Balancing so the 2 WANs share Internet traffic
                                                                                                                                                                                                                                  requirements of your organization.

991-2860000-02         Specifications subject to change at any time without notice, for more information please visit or contact your local representative.
                                                                                                                                                                                                                      Vigor2860 Series

Centralized Management                                            Secured networking                                                Cloud-based Business Applications Utilization
With F/W 3.7.3, the embedded Central VPN Management               DrayTek Vigor2860 series inherited versatile firewall
(CVM) will let network administrator register up to 16            mechanism from previous Vigor series routers. The object-
remote routers but run concurrent remote management               based design used in SPI (Stateful Packet Inspection)
over 8 remote routers.                                            firewall allows users to set firewall policy with ease. Object-
                                                                  based firewall is flexible and allows your network be safe.                Cloud-based
AP Management                                                     DoS/DDoS prevention and URL/Web content filter                             Applications
APM provides the 3-step installation, plug-plug-press, and        strengthen the security outside and control inside. The
then wireless clients are able to enjoy surfing internet.         enterprise-level CSM (Content Security Management)
Moreover, through the unified user interface of Draytek           enables users to control and manage IM(Instant                                                                       VigorSwitch
routers, the status of APs is clear at the first sight.           Messenger) and P2P (Peer-to-Peer) applications more                                                                  G2260                            Video Conference
                                                                                                                                                            3G/4G                                                       (e.g. WebEx)
                                                                  efficiently. The CSM hence prevents inappropriate content
Multi-subnets                                                     from distracting employees and impeding productivity.                                                                                                 ERP
                                                                                                                                                                                                                        (e.g. SAP)
With the 6-port Gigabit switch on the LAN side provides           Furthermore, the CSM can keep office networks threat-free                                    VDSL2 WAN                             Utilization of
                                                                                                                                              IPv6 & IPv4                                                               CRM
extremely high speed connectivity for the highest speed           and available.                                                                                             Modem
                                                                                                                                                                                                                        (e.g. Salesforce)
local data transfer of any server or local PCs. The tagged
VLANs (802.1q) can mark data with a VLAN identifier. This         By adoption of the world-leading Commtouch GlobalView                                      WAN 2 for Internet Feed
                                                                                                                                                                                                                        Other Cloud-based
identifier can be carried through an onward Ethernet switch       Web Content Filtering, you can block whole categories of                                   over 300Mpbs
                                                                  web sites (e.g. sports, online shopping), subject to an
to specific ports. The specific VLAN clients can also pick
                                                                  annual subscription to the Commtouch GlobalView WCF,
up this identifier as it is just passed to the LAN. You can
                                                                  which is timely updated with changed or new site
set the priorities for LAN-side QoS. You can assign each of
                                                                  categorizations. A free 30-day trial can be activated via         Central AP Management
VLANs to each of the different IP subnets that the router
                                                                  activation wizard of WUI.
may also be operating, to provide even more isolation. The
said functionality is tag-based Multi-subnet.                     The "User Management" implemented on your router
                                                                  firmware can allow you to prevent any computer from
On the Wireless-equipped models (Vigor2860n/Vigor2860n            accessing your Internet connection without a username or
plus/Vigor2860Vn plus) each of the wireless SSIDs can             password. You can set scheduler or maximum usage time
also be grouped within one of the VLANs.                          to your employees within office network. The user
                                                                  accounts can also be restricted by any other aspect of the
Multi-task USB functionalities                                    firewall rule on a user-by-user basis.
Through mobility, brought by cellular networks, you can
connect 3.5G/4G USB mobile to 2.0 version USB port on             Vigor2860 series support DrayTek’s SmartMonitor network
Vigor2860 series. This can be a backup broadband                  traffic analyzer (up to 30 users), which captures actual live
connection if the primary fixed line drops. You can connect       data of activities in your managed network, such as the
USB disk or hard-drive to USB port for memory storage             content of MSN entering to or out of your network. You can                  WLAN Setting
and file sharing. The Vigor2860 series provide you with           track specified files download/upload or view statistics on
FTP access file uploading/downloading, which can be               data type activities to realize what corporate related
used from the local LAN or from anywhere on the Internet.         information have been released accidentally or on
The access can be using "username and password" or                purpose.
'public'. Each of them can have their own directories and/or
file access rights. The VDSL2/ADSL2+ interface, Gigabit                                                                                                                                                                   VigorAP
Ethernet interface and USB mobile can be used either for                                                         WLAN                         AP Status
WAN-backup or load balancing.                                                                   VoIP      2.4 GHz 5 GHz
                                                                    Vigor2860 Vn-plus
DrayTek IPv6 solutions
We support Dual Stack (PPP, DHCPv6 Client, Static IPv6)
                                                                    Vigor2860 n-plus
and Tunnel Mode (TSPC, AICCU) to let your business                  Vigor2860 n                                                     Central VPN Management
operation successfully be migrated to the era of IPv6.              Vigor2860

VPN Trunk
                        Main office                                                               Remote office

                                                               VPN Tunnel
                                                                                VPN-2                                                                                                                                            Up to 8
                                                                                                                                                                                                                                 remote site
                      Vigor2860 Series                                                           Vigor2925 Series

To top