DrayTek Vigor 2952 Dual-WAN Router Firewall & Load Balancer

DrayTek Vigor 2952 Dual-WAN Router Firewall & Load Balancer

• Physical Interfaces:
  WAN Ports:
  WAN1 : Selectable:
  RJ-45 Gigabit Ethernet (1000Mb/s) or
  SFP Gigabit Slot for Fibre or other module (1000Mb/s)
  WAN2 : RJ-45 Gigabit Ethernet (1000Mb/s)
  WAN3 : USB 2.0 Port for 3G/4G Cellular Modem or NAS feature
  WAN4 : USB 3.0 Port for 3G/4G Cellular Modem or NAS feature
  LAN Ports:
  4 X RJ-45 Gigabit Ethernet (1000Mb/s) - LAN
  Performance:
  Firewall: Up to 500Mb/s
  IPSec VPN: Up to 200Mb/s
  NAT Sessions : 100,000
  Load Balance/Failover Features:
  Outbound Policy-Based Load-Balance to direct traffic via:
  NAT or Routing
  WAN Interface
  LAN Interface
  Specific LAN Gateway
  VPN Tunnel
  IP-Based or Session-Based Load Balance modes
  WAN Connection Fail-over
  BoD (Bandwidth on Demand)
  Configurable Load-Balance pool, specify WAN interfaces to load balance
  WAN Budget
  WAN Protocols (Ethernet):
  DHCP Client
  Static IP
  IPv4 / IPv6
  PPPoE
  PPTP
  L2TP
  IPv6 Features:
  Operation on all of the WAN ports
  Default-Deny Firewalling
  Static IP, DHCPv6 or PPP
  Connectivity to ISPs provided direct/native IPv6
  Built-in tunnelling to IPv6 brokers:
  TSPC
  AICCU
  6in4
  6rd
  Default stateful firewall for all IPv6 LAN Clients/Devices
  DHCPv6 & RADVD for client configuration
  IP Filtering Rules
  QoS for IPv6 with DiffServ
  Router Management over IPv6 (Telnet/HTTP) with IPv6 Access List
  Dual-Stack (Concurrent) operation with IPv4)
  Firewall & Security Features:
  CSM (Content Security Management):
  URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
  Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)
  Prevent accessing of web sites by using their direct IP address (thus URLs only)
  Blocking automatic download of Java applets and ActiveX controls
  Blocking of web site cookies
  Block http downloads of file types :
  Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
  Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
  Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
  Time Schedules for enabling/disabling the restrictions
  Block popular P2P (Peer-to-Peer) file sharing programs
  Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
  DNS Filter: Use DNS to enforce categorisation
  Web Portal
  Multi-NAT (32 WAN IPs per WAN1 & WAN2)
  DMZ Host
  DMZ Port (via LAN port P1, switchable)
  40 Port Redirection rules
  40 Open Port rules (10 port ranges per rule)
  Policy-Based Firewall
  MAC Address Filter
  SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
  DoS / DDoS Protection
  IP Address Anti-spoofing
  E-Mail Alert and Logging via Syslog
  Bind IP to MAC Address
  User Management:
  Up to 200 Profiles
  Supports external authentication via LDAP or RADIUS
  Per User Bandwidth and Time Quota
  Schedule Control to delete or disable account automatically
  Bandwidth Management:
  Quality of Service (QoS)
  Guaranteed Bandwidth for VoIP
  Class-based Bandwidth Guarantee by User-Defined Traffic Categories
  Layer 2&3 (802.1p & TOS/DCSP)
  DiffServ Code Point Classifying
  4-level Priority for each Direction (Inbound / Outbound)
  Bandwidth Borrowed
  App QoS: Classify traffic by Application
  Temporary (5 minute) Quick Blocking of any LAN Client
  Bandwidth Limit (Shared or individual limit)
  Smart Bandwidth Limitation (Triggered by Traffic / Session)
  Session Limit
  Network/Router Management:
  Web-Based User Interface (HTTP / HTTPS)
  CLI ( Command Line Interface ) / Telnet / SSH
  Web Console: Access CLI through Web Interface
  Administration Access Control
  Configuration Backup / Restore
  Configuration Import from Vigor 2920, Vigor 2925, Vigor 2930, Vigor 2950 & Vigor 2955
  Built-in Diagnostic Function
  Firmware Upgrade via Web Interface, TFTP, FTP
  Logging via Syslog
  Supports SmartMonitor (up to 50 IPs monitored)
  SNMP v3 Management with MIB-II
  TR-069
  TR-104
  Access Point Management: Centrally Manage up to 30 DrayTek VigorAPs
  VPN Facilities:
  Up to 100 Concurrent VPN Tunnels (incoming or outgoing)
  Tunnelling Protocols:
  PPTP
  IPSec
  L2TP
  L2TP over IPSec
  DrayTek SSL
  IPSec Main and Aggressive modes
  IKE Phase 1 DiffieHelman Groups 1,2,5 & 14
  IKE Phase 2 DiffieHelman Groups 1,2,5 & 14 (will match phase 1 selection)
  Encryption : MPPE, DES and Hardware-Based AES (128/192/256bits) / DES / 3DES (168bits)
  Authentication : Hardware-Based MD5, SHA-1 and SHA-256
  IKE Authentication : Pre-shared Key or X.509 Digital Signature
  SSL VPN for teleworkers - Up to 50 user. Proxy or tunnel.
  LAN-to-LAN & Teleworker-to-LAN connectivity
  DHCP over IPSec
  NAT-Traversal ( NAT-T )
  Dead Peer Detection (DPD)
  VPN Pass-Through (PPTP, L2TP, IPSec)
  MOTP (Mobile One Time Password)
  Virtual IP Mapping, map a remote IP subnet/range to another range to resolve IP subnet/range conflicts
  SSL VPN:
  Up to 50 Concurrent VPN Tunnels (incoming or outgoing)
  SSL Application support for RDP, VNC & Samba
  Encryption/Authentication : RC4 (128bits), AES (128bits), DES/3DES
  X.509 Digital Signature
  Network Features:
  Port-Based VLAN (Inclusive/Exclusive Groups)
  802.1q VLAN Tagging
  Port Mirroring
  802.1X LAN Port Authentication
  Multi Subnet DHCP Servers with DHCP Relay
  Custom DHCP Option support
  Dynamic DNS
  DNS Transparent Proxy
  DNS Caching
  LAN DNS (supports CNAME)
  NTP Client (Synchronise Router Time)
  Call Scheduling (Enable/Trigger Internet Access by Time)
  RADIUS Client
  LDAP Client
  TACACS+ Client
  Internal RADIUS Server
  PPPoE Server
  Microsoft™ UPnP Support
  High Availability
  Routing Protocols:
  Static Routing
  RIP V2
  Certificate Management:
  Trusted CA
  Local Certificate
  Operating Requirements:
  Rack Mountable (brackets included)
  Temperature Operating : 0°C ~ 45°C
  Storage : -25°C ~ 70°C
  Humidity 10% ~ 90% (non-condensing)
  Silent operation (fanless)
  Power Consumption: 19 Watt Max.
  Dimensions: L273 * W176 * H46 ( mm )
  Operating Power: 220-240VAC directly to unit
  Warranty : Two (2) Years RTB