DrayTek Vigor 2960 Dual Wan - Enterprise

Vigor2960 is an enterprise grade security Firewall Router. Features high data throughput of two-Gigabit Ethernet, Dual WAN, VPN trunking and 4 Gigabit Ethernet LAN ports, the device facilitates productivity of versatile business operations. To secure communications between sites is the establishment of VPN tunnels up to 200 simultaneous tunnels.

Some of the Key features are listed below
+ Manage ultra fast high-speed Internet
+ Support IPv6 network for the next generation Internet
+ Business Continuity by Dual WAN Load-balancing/failover
+ Web Content Filtering
+ Bandwidth Management and QoS
+ PPPoE quota setting and MAC address filter
+ Support inbound load balance
+ 200 VPN tunnels for the secure remote access
+ Central VPN Management (CVM)
+ Support VPN Trunk failover mode
+ Up-to 400Mbps site-to-site VPN throughput (IPsec)
+ Advanced firewall for the network security
+ SMS, Email Alert and Notification object profiles for WAN/VPN connection
+ USB port supports USB temperature sensor
+ Working with TR-069 based VigorACS SI for the central management
+ Smart Monitor Traffic Analyzer (Up to 100 nodes)

Hardware Interface

4 x 10/100/1000Based-Tx LAN Switch, RJ-45
2 x 10/100/1000Based-Tx WAN1 WAN2 Port, RJ-45
1 x Factory Reset Button
2 x USB Host 2.0 (for Printer / 3.5G USB Modem)

Detailed Features

1. WAN
+ PPPoE, PPTP, DHCP client, static IP, L2TP*, Ipv6
+ Outbound Policy based Load Balancing
+ Two dedicated Ethernet WAN ports (10/100/1000Mbps) and 1 active fiber (SFP) slot.
+ WAN fail-over or load-balanced connectivity.

2. VPN
+ PPTP, IPsec, L2TP, L2TP over IPsec.
+ Up to 200 connections simultaneously
+ LAN to LAN, remote access (teleworker-to-LAN), dial-in or dial-out.
+ VPN trunking. VPN load-balancing and VPN backup.
+ LDAP/Active Directory. Lightweight directory access protocol.
+ NAT-traversal (NAT-T)
+ VPN over routes without VPN pass-through.
+ PKI certificate. Digital signature (X.509).
+ IKE authentication. Pre-shared key; IKE.
+ Authentication - Hardware-based MD5, SHA-1.
+ Encryption - MPPE and hardware-based AES/DES/3DES.
+ RADIUS client - Authentication for PPTP remote dial-in.
+ DHCP over IPsec
+ GRE over IPsec
+ Dead Peer Detection (DPD)
+ Smart VPN software utility
+ Provided free of charge for teleworker convenience (Windows environment).
+ No additional client or remote site licensing required.
+ Compatible with other leading 3rd party vendor VPN devices.
+ CVM, central VPN management, manages VPN tunnels easily.

3. Content Filter
+ IM/P2P blocking
+ Java applet, cookies, active X, compressed, executable, multimedia file blocking.
+ Dynamic URL filtering database.
+ Time schedule control

4.Firewall
+ Stateful Packet Inspection (SPI)
+ Content Security Management(CSM)
+ Appliance-based gateway security and content filtering
+ Multi-NAT
+ Port redirection
+ Open Ports
+ DMZ Port*
+ Policy-based IP packet filter
+ DoS/DDoS prevention
+ IP address anti-spoofing
+ Object-based Firewall, Utilizes object-oriented approach to firewall policy
+ E-mail alert and logging via syslog.
+ Bind IP to MAC address
+ User base integrates LDAP/Active Directory authentication to enforce policies.*

5. System Management
+ Web-based user interface (HTTP or HTTPS)
+ Quick start wizard
+ User management
+ Dial-in access management (PPTP/L2TP and mOTP) .
+ CLI(Command Line Interface, Telnet/SSH)
+ DHCP client/relay/server
+ Dynamic DNS
+ Administration access control
+ Configuration backup/restore
+ Port-based VLAN
+ Built-in diagnostic function
+ NTP client/call scheduling
+ Tag-based VLAN (802.1Q)
+ Firmware upgrade via TFTP/HTTP/TR-069
+ Dial-in access management (PPTP/L2TP and mOTP) and LDAP/Active Directory integration.
+ Wake On LAN
+ Logging via syslog
+ SNMP management via SNMP v1/v2, MIB II.
+ VigorACS SI Centralized Management
+ TR-069 based
+ Auto-detection mechanism to manage Vigor devices such routers/ switches/APs
+ Smart Monitor Traffice Analyzer, Support 100 PC Users

6. Bandwidth Management
+ Dynamic bandwidth management with IP traffic shaping
+ Bandwidth reservation
+ DiffServ codepoint classifying, Priority queuing of packets based on DiffServ.
+ 4 Priority Levels(Inbound/Outbound)
+ Prioritization in terms of Internet usage
+ Individual IP bandwidth/session limitation
+ User-defined class-based rules
+ More flexibility.

7. Routing functions
+ IP and NetBIOS/IP-multi-protocol router.
+ Advanced routing and forwarding
+ DNS cache/proxy.
+ DHCP client/relay/server.
+ NTP client, automatic adjustment for daylight-saving time.
+ Policy-based Routing
+ Dynamic routing. RIP v2/OSPFv2/V3*. Learning and propagating routes.
+ Static routing

8. Content Filter
+ Whitelist and Blacklist
+ Java applet, cookies, active X, compressed, executable, multimedia file blocking
+ Web Content Filter. Dynamic URL filtering database
+ Time Schedule Control
+ Internet CSM (Content Security Management) Featuring
+ URL keyword filtering - whitelist or blacklist specific sites or keywords in URLs
+ Block web sites by category (subject to subscription)
+ Prevent accessing of web sites by using their direct IP address (thus URLs only)
+ Blocking automatic download of Java applets and ActiveX controls
+ Blocking of web site cookies
+ Block http downloads of file types (binary, compressed, multimedia)
+ Time schedules & exclusions for enabling/disabling these restrictions
+ Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazaa, WinMX etc. )
+ Block Instant messaging programs (e.g. IRC, MSN/Yahoo Messenger)

Manufacturers Warranty - 24 Months from purchase date with proof of sale.