Draytek Vigor 2925ac
R5999.00*
A full-featured router with 802.11ac Wi-Fi suitable for the advanced home setup or office.
DrayTek’s Vigor 2925ac is an NBN-ready wireless router that puts an emphasis on security and offers extensive network controls for traffic and users. You can tell that it’s more than a consumer-level router from the moment you glance at it. The ports are on the front, rather than at the back, and they are there to facilitate quicker connections and troubleshooting to wired gear. It’s not a big router; it has three external, removable antennas, and it can sit on a desk happily — you’ll just have to manage the connected cables a little differently.
Business users will most likely want this router, but mostly business users who also know more than a bit about networking, or who have someone who can set it up and manage it for them. It’s not as straightforward as a consumer router in the sense that it offers plenty of customisaton for security and quality of service, as well as content filtering (via DrayTek’s MyVigor service) and traffic analysis (via a utility that can be downloaded called SmartMonitor). If all that is required is a simple router with which to get users online and share some files across a local network, then this router will go to waste.
Instead, this router is a specialist product for businesses with higher-end connection needs, including redundant Internet connections, and VPN and user management, primarily for the purpose of bringing connectivity to two or more offices and managing site-to-site backups. There is support for up to 50 VPN tunnels, and up to eight remote Vigor routers can be managed centrally via embedded management software.
It’s a router that also facilitates finer bandwidth restrictions than a consumer-level router, with controls in place not only for quality of service, but also for limiting user sessions. Furthermore, administrators can monitor Internet usage to see what sites and resources their users have been accessing, getting a glimpse into which users are taking up the most bandwidth.
Hardware Interface
- LAN: 5 x 10/100/1000Base-Tx LAN Switch, RJ-45
- WAN: 2 x 10/100/1000Base-Tx, RJ-45
- 3 Detachable Antennas
- 2 x USB Host 2.0 (for Printer/3G USB Modem/USB Disk)
- 1 x Factory Reset Button
- 1 x Wireless On/Off/WPS Button
USB
- 3.5G (HSDPA)/4G (LTE) as WAN
- Printer Sharing
- File System:
- Support FAT32 File System
- Support FTP Function for File Sharing
- Support Samba for File Sharing
- LTE USB mobile Support List Please Contact support@draytek.com
Firewall
- Multi-NAT, DMZ Host, Port-redirection and Open Port
- Object-based Firewall, Object IPv6, Group IPv6
- MAC Address Filter
- SPI (Stateful Packet Inspection) (Flow Track)
- DoS / DDoS Prevention
- IP Address Anti-spoofing
- E-mail Alert and Logging via Syslog
- Bind IP to MAC Address
- Time Schedule Control
- User Management
Content Security Management
- IM/P2P Applications
- GlobalView Web Content Filter (Powered by CYREN-90)
- URL Content Filter
- URL Keyword Blocking (Whitelist and Blacklist)
- Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
- Excepting Subnets
Network Feature
- Packet Forwarding Acceleration*
- DHCP Client/Relay/Server
- IGMP Snooping/Proxy V2 and V3
- Triple-Play Application
- Dynamic DNS
- NTP Client
- Call Scheduling
- RADIUS Client
- DNS Cache/Proxy and LAN DNS
- UPnP 30 sessions
- Multiple Subnets
- Port-based/Tag-based VLAN (802.1q)
- Routing Protocol:
- Static Routing
- RIP V2
Wireless AP
- 802.11ac Wireless Access Point (300Mbps @ 2.4GHz and 1300 Mbps @5GHz 11ac)
- Wireless Client List
- Wireless LAN Isolation
- 64/128-bit WEP
- WPA/WPA2
- Wireless Wizard
- Hidden SSID
- WPS
- MAC Address Access Control
- Access Point Discovery
- WDS (Wireless Distribution System)
- 802.1x Authentication
- Multiple SSID
- Wireless Rate-control
- IEEE 802.11e: WMM (Wi-Fi Multimedia)
- SSID VLAN Grouping with LAN Port (Port-based VLAN)
WAN Protocol
- Gigabit Ethernet (WAN1 & WAN2)
- DHCP Client
- Static IP
- PPPoE
- PPTP/L2TP (WAN-2 only)
- PPPoA (ADSL2 only)
- 802.1q Multi-VLAN Tagging
- USB (WAN3 & WAN4)
- PPP/DHCP
- IPv6
- Tunnel Mode: TSPC, AICCU, 6rd, Static 6in4
- Dual Stack: PPP, DHCPv6 Client, Static IPv6
- 50,000 NAT Sessions
VPN
- Up to 50 VPN Tunnels
- Protocol : PPTP, IPsec, L2TP, L2TP over IPsec
- Encryption : MPPE and Hardware-based AES/DES/3DES
- Authentication : MD5, SHA-1
- IKE Authentication : Pre-shared Key and Digital Signature (X.509)
- LAN-to-LAN, Teleworker-to-LAN
- DHCP over IPsec
- IPsec NAT-traversal (NAT-T)
- Dead Peer Detection (DPD)
- VPN Pass-through
- VPN Wizard
- mOTP
- SSL VPN (Up to 25 Tunnels)
- VPN Trunk (Load-Balancing/Backup)
Multi-WAN
- Load-Balance/Route Policy(The Gigabit Ethernet interface and USB mobile can be used either for WAN-backup or load balancing.)
- WAN Connection Failover
Bandwidth Management
- QoS
- Class-based Bandwidth Guarantee by User-defined Traffic Categories
- Guarantee Bandwidth for VoIP
- DiffServ Code Point Classifying
- 4-level Priority for Each Direction (Inbound/Outbound)
- Bandwidth Borrowed
- Bandwidth/Session Limitation
- Layer-2 (802.1p) and Layer-3(TOS/DSCP) QoS Mapping
Network Management
- Web-Based User Interface (HTTP/HTTPS)
- Quick Start Wizard
- CLI (Command Line Interface, Telnet/SSH)
- Administration Access Control
- Configuration Backup/Restore
- Built-in Diagnostic Function
- Firmware Upgrade via TFTP/FTP/HTTP/TR-069
- Logging via Syslog
- SNMP Management MIB-II (v2/v3)
- Management Session Time Out
- 2-level management (Admin/User Mode)
- TR-069
- TR-104
- LAN Port Monitoring
- Support Smart Monitor (Up to 50 nodes)
- Central AP Management (Up to 20 nodes)
- Central VPN Management (Up to 8 remote routers)