Draytek 2920n Dual-WAN Security Router

The Vigor 2920 series is a dual-WAN port Firewall Router with very high throughput of up to 150Mb/s.

Robust & Comprehensive Firewall

Security is a major feature Vigor 2920 Series. The firewall features measures for protection against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems (see later). The DrayTek object-based firewall allowsvast flexibility, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations.

Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Filtering using web site categorisations enable you to block whole categories of web sites (e.g. gambling, adult sites etc.), subject to subscription.



Vigor 2920 Series - Technical Specification

Physical Interfaces:

LAN Ports (Switch):

• 4 X Gigabit Ethernet (1000Mb/s) Ports
• Port-Based VLAN (Inclusive/Exclusive Groups)

WAN Ports:

• Primary WAN Port : 10/100 Base-TX Ethernet
• Secondary WAN Port : 10/100/1000 Base-TX Gigabit Ethernet
• USB Port for 3G Cellular Modem, NAS* or Printer

Load Balance/Failover Features:

• Outbound Policy-Based Load-Balance
• WAN Connection Fail-over
• BoD (Bandwidth on Demand)

Wireless LAN Features ('n' Models Only):

• 802.11n Compliant
• Latest 'MIMO' Technology with three aerials (2T3R)
• Multiple SSID : Create up to 4 virtual wireless LANs (independent or joined)
• Packet Aggregation and Channel Bonding
• Optional Higher Gain or directional aerials available - Click Here.
• Compatible with 802.11b and 802.11g Standards
• Active Client list in Web Interface
• Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
• 64/128-bit WEP Encryption
• WPA/WPA2 Encryption
• Switchable Hidden SSID
• Restricted access list for clients (by MAC address)
• Time Scheduling (WLAN can be disabled at certain times of day)
• Access Point Discovery
• WDS (Wireless Distribution system) for WLAN Bridging and Repeating (Firmware Upgradable)
• 802.1x Radius Authentication
• Wireless Rate-Control
• Automatic Power Management
• 802.11e WMM (Wi-Fi Multimedia)

WAN Protocols (Ethernet):

• DHCP Client
• Static IP
• PPPoE
• PPTP
• 2TP *

Firewall & Security Features:

CSM (Content Security Management):

• URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
• Block Web sites by category (e.g. Adult, Gambling etc. Subject to Globalview subscription)
• Prevent accessing of web sites by using their direct IP address (thus URLs only)
• Blocking automatic download of Java applets and ActiveX controls
• Blocking of web site cookies

Block http downloads of file types:

• Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
• Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
• Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
• Time Schedules for enabling/disabling the restrictions
• Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
• Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)

• Multi-NAT, DMZ Host
• Port Redirection and Open Port Configuration
• Policy-Based Firewall
• MAC Address Filter
• SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
• DoS / DDoS Protection
• IP Address Anti-spoofing
• E-Mail Alert and Logging via Syslog
• Bind IP to MAC Address

Bandwidth Management:

• QoS
• Guaranteed Bandwidth for VoIP
• Class-based Bandwidth Guarantee by User-Defined Traffic Categories
• DiffServ Code Point Classifying
• 4-level Priority for each Direction (Inbound / Outbound)
• Bandwidth Borrowed
• Temporary (5 minute) Quick Blocking of any LAN Client
• Bandwidth / Session Limitation

Network/Router Management:

• Web-Based User Interface (HTTP / HTTPS)
• CLI ( Command Line Interface ) / Telnet / SSH*
• Administration Access Control
• Configuration Backup / Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP / FTP
• Logging via Syslog
• SNMP Management with MIB-II
• TR-069
• TR-104

VPN Facilities:

• Up to 32 Concurrent VPN Tunnels (incoming or outgoing)
• Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
• IPSec Main and Agressive modes
• Encryption : MPPE and Hardware-Based AES / DES / 3DES
• Authentication : Hardware-Based MD5 and SHA-1
• IKE Authentication : Pre-shared Key and X.509 Digital Signature
• LAN-to-LAN & Teleworker-to-LAN connectivity
• DHCP over IPSec
• NAT-Traversal ( NAT-T )
• Dead Peer Detection (DPD)
• VPN Pass-Through

Network Features:

• DHCP Client / Relay / Server
• Dynamic DNS
• NTP Client (Syncrhonise Router Time)
• Call Scheduling (Enable/Trigger Internet Access by Time)
• RADIUS Client
• DNS Cache / Proxy
• Microsoft™ UPnP Support

Routing Protocols:

• Static Routing
• RIP V2

Operating Requirements:

• Rack Mountable (Optional mounting bracket 'RM1' required)
• Wall Mountable
• Temperature Operating : 0°C ~ 45°C
• Storage : -25°C ~ 70°C
• Humidity 10% ~ 90% (non-condensing)
• Power Consumption: 18 Watt Max.
• Dimensions: L240.96 * W165.07 * H43.96 ( mm )
• Operating Power: DC 15V (via external PSU, supplied)
• Warranty : Two (2) Years RTB
• Power Requirements : 220-240VAC

* Intended to be added in future firmware version

Specifications Tab

Questions Tab