Vigor 2952

  • 4-port Gigabit LAN interface for facilitating managed services applications
  • Dual Gigabit Ethernet WAN interface providing load-balancing and failover for high performance and business continuity
  • IPv4/IPv6 support to protect investment
  • 100 VPN & 50 SSL VPN tunnels for the secure remote access
  • Bandwidth Management with 8-level priority Inbound/Outbound QoS
  • Central VPN & AP Management offer easy & massive deployment
  • USB port supports USB temperature sensor
Overview

DrayTek Vigor2952 series Dual WAN serves as a VPN gateway and a central firewall for multi-site offices and tele-workers. With its high data throughput of two-Gigabit Ethernet, Dual WAN, VPN trunking and 4 Gigabit Ethernet LAN ports, the device facilitates productivity of versatile business operations. To secure communications between sites is the establishment of VPN tunnels up to 100 simultaneous tunnels (including 50 SSL VPN tunnels).

Features
  1. Dual-WAN
    • Load Balance and Route policy : 60 profile
    • Outbound policy-based load-balance
    • WAN connection Failover
    • Multiple-VLAN
  2. WAN Protocol
    • DHCP Client
    • Static IP
    • PPPoE
    • PPTP
    • L2TP
  3. VPN
    • Up to 100 VPN Tunnels (including 50 SSL VPN tunnels)*
    • Protocol: PPTP, IPSec, L2TP, L2TP over IPSec
    • Encryption: MPPE and Hardware-based AES/DES/3DES
    • Authentication: MD5, SHA-1
    • IKE Authentication: Pre-shared Key and Digital Signature (X.509)
    • LAN-to-LAN, Teleworker-to-LAN (remote user dial-in)
    • DHCP over IPSec
    • IPSec NAT-Traversal (NAT-T)
    • Dead Peer Detection (DPD)
    • VPN Pass-Through
    • mOTP
  4. Firewall
    • DMZ Host, Port-redirection(Up to 40 entries) and Open Port(Up to 40 entries)
    • Object-based Firewall
      • SPI (Stateful Packet Inspection) (Flow Track)
    • DoS defense
    • Time Schedule Control
    • DNS Filter Enhancement
    • User Management
  5. USB
    • 3.5G (HSDPA) and 4G (LTE) as WAN4 by using USB dongle
      (each USB port can support 3.5G/LTE USB dongle)
    • Printer Sharing
    • File System :
      • Support FAT32 file system
      • Support FTP function for File Sharing
  6. Bandwidth Management
    • QoS :
      • Guarantee bandwidth for VoIP
      • Class-based bandwidth guarantee by user-  defined traffic categories
      • DiffServ Code Point Classifying
      • 4-level priority for each direction  (Inbound/Outbound)
      • Bandwidth Borrowed
    • Bandwidth / Session limitation
    • Layer-2 (802.1p) and Layer-3 (TOS / DSCP) QoS
  7. Network Management
    • Web-Based User Interface (HTTP/HTTPS)
    • Quick Start Wizard
    • CLI (Command Line Interface, Telnet/SSH)
    • Administration Access Control
    • Configuration Backup/Restore
    • Built-in Diagnostic Function
    • Firmware Upgrade via TFTP/FTP/HTTP/TR-069
    • Logging via Syslog
    • SNMP Management with MIB-II
    • Management Session Time Out
    • 2-level management (Admin/User Mode)
    • TR-069 Management
    • TR-104 Management
  8. Central Device Management
    • AP Management : 30 nodes (independent with External Device feature)*
    • Central VPN Management : 8 nodes 
    • Switch Management : 10 nodes 
  9. Content Security Management (CSM)
    • APP Enforcement
      • Support APPE Signature Upgrade by    license.
    • URL Content Filter
      • Access Control : URL Keyword Blocking (White/Black List)
      • Web Feature : Java Applet, Cookies, Active X, Compressed,Executable,Multimedia File Blocking
        .
    • Web Content Filter (support Cyren and BPjM )
  10. Network Features
    • Packet Forwarding Acceleration
    • DHCP client/relay/server
    • DHCP Option: 1,3,6,51,53,54,58,59,60,61,66,125
    • IGMP v2/v3
    • LAN DNS /DNS Forwarding
    • Dynamic DNS
    • NTP client
    • Call scheduling
    • RADIUS /TACACS+ Client
    • RADIUS Server
    • Active Directory /LDAP compatible (client)
    • DNS cache/proxy
    • UPnP 50 sessions
    • Wake on LAN
    • Bonjour service
    • Routing protocol :
      • Static routing (IPv4 static route 40 entries, and IPv6 static route 40 entries)
      • RIP v1/v2
  11. Wireless Features
    • Support Single band 2.4G
    • IEEE802.11b/g/n Compliant
    • Wireless Wizard
    • Wireless Client List
    • Wireless LAN Isolation
    • Security:
      • 64/128-bit WEP
      • WEP /802.1x only
      • WPA /802.1x only
      • WPA2 /802.1x only
      • Mixed(WPA+WPA2)/802.1x only
      • WPA/PSK
      • WPA2/PSK
      • Mixed(WPA+WPA2)/PSK
    • Hidden SSID
    • WPS
    • WDS (Wireless Distribution System)
    • MAC Address Access Control (Total is 64 entries)
    • AP Discovery
    • Station List
    • Station Control
    • 802.1x Authentication
    • Multiple SSID (Up to 4 SSIDs)
    • Bandwidth Management :
      • Per SSID Bandwidth Limitation (Auto    Adjustment)
      • Per Station Bandwidth Limitation
    • WMM
    • SSID VLAN grouping with LAN port (Port based VLAN)
    • DrayTek WLAN Security default settings:
      • SSID: DrayTek
      • Security Settings → Mode: Mixed(WPA+WPA2)/PSK
Application

Vigor2952 Series for Enterprise Small Branch-Office Deployment

draytek Vigor2952 branch office

draytek Vigor2952 multi subnets

draytek Vigor2952 multi WAN

 


Business Continuity_High Availability

draytek Vigor2952 HA

 


The CVM (Central VPN Management) of Vigor2952

 draytek Vigor2952 CVM 

 


Security & Firewall

draytek Vigor2952 security

 draytek Vigor2952 VPN