Draytek Vigor 2926 - Technical Specifications

Physical Interfaces

• LAN Ports (Switch)
  -5 X Gigabit Ethernet (1000Mb/s) Ports (Configurable Physical DMZ on Port4)
  LAN Port 5 Switchable with WAN2 (req. f/w 3.8.8 or later)
• WAN Ports:
  -WAN1 : Gigabit Ethernet (1000Mb/s) Ethernet
  -WAN2 : Gigabit Ethernet (1000Mb/s) Ethernet for load balance and WAN failover Switchable with LAN Port 5
  -WAN3 : USB 2.0 Port for 3G/4G Modem, thermometer or Printer
  -WAN4 : USB 2.0 Port for 3G/4G Modem or Printer
  -Wireless WAN - Wireless interface can provide WAN connectivity

Performance

• Firewall: Up to 400Mb/s max
• IPSec VPN: Up to 60Mb/s max

Load Balance/Failover Features

• Outbound Policy-Based Load-Balance to direct traffic via:
  -NAT or Routing
  -WAN Interface
  -LAN Interface
  -Specific LAN Gateway
  -VPN Tunnel
• IP-Based or Session-Based Load Balance modes
• WAN Connection Fail-over
• BoD (Bandwidth on Demand)
• Configurable Load-Balance pool, specify WAN interfaces to load balance
• WAN Budget

WAN Protocols (Ethernet)

• DHCP Client
• Static IP
• PPPoE
• PPTP
• BPA

Firewall & Security Features

• CSM (Content Security Management):
  
  • URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
  • Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)
  • Prevent accessing of web sites by using their direct IP address (thus URLs only)
  • Blocking automatic download of Java applets and ActiveX controls
  • Blocking of web site cookies
  • Block http downloads of file types :
    -Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
    -Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
    -Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
  • Time Schedules for enabling/disabling the restrictions
  • Block popular P2P (Peer-to-Peer) file sharing programs
  • Block Instant Messaging programs (e.g. IRC, Skype/Yahoo Messenger etc.)
• DNS Filter: Use DNS to enforce categorisation
• Web Portal
• Multi-NAT (32 WAN IPs per WAN1 & WAN2)
• DMZ Host
• DMZ Port (via LAN port P1, switchable)
• 40 Port Redirection rules
• 40 Open Port rules (10 port ranges per rule)
• Policy-Based Firewall
• MAC Address Filter
• SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
• DoS / DDoS Protection
• IP Address Anti-spoofing
• E-Mail Alert and Logging via Syslog
• Bind IP to MAC Address
• User Management:
  
  • Up to 200 Profiles
  • Supports external authentication via LDAP or RADIUS
  • Per User Bandwidth and Time Quota
  • Schedule Control to delete or disable account automatically

Bandwidth Management

• Quality of Service (QoS - For devices in the NAT subnets according to source or destination IP)
  -Guaranteed Bandwidth for VoIP
  -Class-based Bandwidth Guarantee by User-Defined Traffic Categories
  -Layer 2&3 (802.1p & TOS/DCSP)
  -DiffServ Code Point Classifying
  -4-level Priority for each Direction (Inbound / Outbound)
  -Bandwidth Borrowed
  -App QoS: Classify traffic by Application
• Temporary (5 minute) Quick Blocking of any LAN Client
• Bandwidth Limit (Shared or individual limit)
• Smart Bandwidth Limitation (Triggered by Traffic / Session)
• Session Limit

Network/Router Management

• Web-Based User Interface (HTTP / HTTPS)
• CLI ( Command Line Interface ) / Telnet / SSH
• Web Console: Access CLI through Web Interface
• Administration Access Control
• Brute Force Protection
• Configuration Backup / Restore
• Configuration Import from Vigor 2920 and Vigor 2925
• Built-in Diagnostic Function
• Firmware Upgrade via Web Interface, TFTP, FTP
• Logging via Syslog
• Supports SmartMonitor (up to 50 IPs monitored)
• SNMP v3 Management with MIB-II
• TR-069
• TR-104
• Access Point Management: Centrally Manage up to 20 DrayTek VigorAPs
• Switch Management: Centrallly Manage up to 10 DrayTek VigorSwitches

VPN Facilities

• Up to 50 Concurrent VPN Tunnels (incoming or outgoing)
• Tunnelling Protocols:
  -PPTP
  -IPSec
  -L2TP
  -L2TP over IPSec
  -DrayTek SSL
  -GRE
• IPSec Main and Agressive modes
• IKE Phase 1 DiffieHelman Groups 1,2,5 & 14
• IKE Phase 2 DiffieHelman Groups 1,2,5 & 14 (will match phase 1 selection)
• IKEv2 & IKEv2
• Encryption : MPPE, DES / 3DES (168bits) and Hardware-Based AES (128/192/256bits)
• Authentication : Hardware-Based MD5, SHA-1 and SHA-256
• IKE Authentication : Pre-shared Key or X.509 Digital Signature
• SSL VPN for teleworkers - Up to 25 simultaneous users. Proxy or tunnel
• LAN-to-LAN & Teleworker-to-LAN connectivity
• DHCP over IPSec
• NAT-Traversal ( NAT-T )
• Dead Peer Detection (DPD)
• VPN Pass-Through
• MOTP (Mobile One Time Password) for two factor authentication (2FA)
• Virtual IP Mapping, map a remote IP subnet/range to another range to resolve IP subnet/range conflicts
• Port forwarding (Port Redirection, Open Ports) to remote clients connected via an IPsec LAN to LAN VPN

Network Features

• Port-Based VLAN (Inclusive/Exclusive Groups)
• 802.1q VLAN Tagging
• Port Mirroring
• 802.1X Port Authentication
• Multi Subnet DHCP Servers with DHCP Relay
• LAN Clients : Up to 1022 per subnet (for subnets 1-3)
• Custom DHCP Option support
• Dynamic DNS
• DNSSEC support
• DNS Transparent Proxy
• DNS Caching
• LAN DNS (supports CNAME)
• NTP Client (Synchronise Router Time)
• Call Scheduling (Enable/Trigger Internet Access by Time)
• RADIUS Client
• LDAP Client
• TACACS+ Client
• High Availability
• Internal RADIUS Server
• Microsoft™ UPnP Support
• Maximum MTU 1534
• Routing Protocols:
  -Static Routing (30 routes)
  -RIP V2
  -RIPng for IPv6
  -BGP

Operating Requirements

• Rack Mountable (Optional Vigor RM1 mounting bracket required)
• Wall Mountable
• Temperature Operating : 0°C ~ 45°C
• Storage : -25°C ~ 70°C
• Humidity 10% ~ 90% (non-condensing)
• Power Consumption: 18 Watt Max.
• Dimensions: L240.96 * W165.07 * H43.96 ( mm )
• Operating Power: DC 12V (via external PSU, supplied)
• Power Requirements : 220-240VAC