The Draytek Vigor 2820VN is the Wireless-N Voice over IP (VoIP) version of the from the Draytek Vigor 2820 series routers, DrayTek's latest premium ADSL and broadband router/firewall family, featuring an entirely new stylish case design and new DrayOS 3 operating system. Packed with features, it offers truly comprehensive ADSL connetivity and security. Compatible with all variants of ADSL (include ADSLMax and ADSL2+) can also be used for cable-modem and leased line applications thanks to its additional WAN port (Ethernet). A Gigabit Ethernet port on the WAN side provides high speed connectivity for your server (or uplink to a larger Ethernet Switch). The 2820N model supports the IEEE 802.11n (Draft 2.0) specification.
Wi-Fi CERTIFIED™ for 802.11n draft 2.0
802.11n is a breakthrough technology that enables Wi-Fi networks to do more, faster, over a larger area. 802.11n Wi-Fi provides the very best connection available for computer networking and home entertainment applications alike - delivering the range, bandwidth, and performance today's multimedia applications and products demand.
Robust & Comprehensive Firewall
As with previous DrayTek models, security is taken seriously on the Vigor 2820. The firewall features measure for protection against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems (see later). A new DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations.
Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Using the SurfControl site categorisations enable you to block whole categories of web sites (e.g. gambling, pornography etc.), subject to subscription
Dual-WAN Load Balancing & Backup
As well as the primary ADSL interface, the Vigor 2820 features a secondary WAN port for Internet access. This is an Ethernet interface and can connect to a second ADSL modem, cable modem or any other Ethernet-based Internet feed. The secondary interface can be used either for WAN-Backup or load balancing.
WAN-Backup provides contingenry (redunancy) in case of your primary ADSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switch back to that.
If you don't have ADSL, the Ethernet WAN port can instead be used as your primary/only Internet connection so the same router can be used for either ADSL or Ethernet Internet connections.
The USB port provides an alternative connection method for Internet backup by connecting to a compatible USB modem (or cellphone) for access to the high speed 3G cellular networks from UK providers such as Vodafone, Orange, 3 and T-Mobile. If you don't have ADSL at all, the USB/3G access method can be used as your primary/only Internet connection, ideal for temporary locations, mobile applications or where broadband access is not available. For 3G application information, Click Here.
To see a load balancing connectivity photograph, Click Here.
Voice Over IP
Voice-over IP (VoIP), is one of the hottest communications technologies being adapted for transmission over broadband technologies.
If you regularly make long-distance phone calls, chances are you've already used IP telephony without even knowing it. VoIP is the transmission of telephone calls over a data network like one of the many networks that make up the Internet. While you may of heard of VoIP, what you may not know is that many traditional telephone companies are already using it in the connections between their regional offices.
The DrayTek 2820VN allows a simple, cost-effective solution to take advantage of this exicting technology.
802.11n Wireless LAN ('n' Models Only)
The Vigor 2820 ('n'models only) support the latest 802.11n standard (Draft 2.0). This provides increased coverage range, resilience and speed compared to existing standards (802.11g and 802.11b). Using new methods, including packet aggregation and channel bonding, the Vigor provides a total wireless capacity) of up to 300Mb/s. Real world throughput depends on your own environment (factors such as obstructions, number of hosts and distances all make a significant difference), but actual transfer speeds up to 100Mb/s are achievable (this is based on real world tests). Using an aerial arrangement known as 'MIMO' (Multiple In Multiple Out) three separate aerials (2T3R) are used to provide offset paths between hosts; this increases resilience considerably.
Wireless Security is comprehensive too; the Vigor provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorised users only. The VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN and you can also see details of wireless PCs connected at any time from the router's web interface.
WDS provides two modes of operation to expand the Wireless range of your LAN. In WDS 'Repeater' Mode, a slave unit within range of the main base unit repeats the main wireless signal into its own coverage area - this can effectively double the total range of the network (depending on the environment). In WDS 'Bridge' mode, two physically separated LAN can be joined wirelessly, in order than they can communicate with each other. This is ideal where two offices need to be linked but a cable cannot be run (e.g. across a road). For more information about WDS see here.
To compliment the Vigor 2820 wireless facilities, the Vigor N61 USB wireless adaptor is compatible with any Windows XP or Vista PC (desktop or laptop). It too support 802.11n Draft 2.0 technology, ensuring complete compatibility with the Vigor 2820. Alternatively you can use the existing Wireless LAN connectivity built into your laptop PC, although this is likely to support only 802.11b or 802.11g speeds.
For specialist coverage applications, optional aerials can be used with the Vigor 2820 to potentially increase the range of wireless coverage (depending on enviroment) or provide directional coverage in order that your wireless transmission is focussed and concentrated into one direction only, for example into a room or across open space.
LAN Ports (Switch)
1 X Gigabit Ethernet (1000Mb/s) Ports
3 X Megabit (100Mb/s) Ports
Port-Based VLAN (Inclusive/Exclusive Groups)
WAN Ports:
ADSL Port Compliant with:
ANSI T1.413 Issue2
ITU-T G.992.1 G.dmt (ADSL)
ITU-T G.992.2 G.lite
ITU-T G.992.3 ADSL2
ITU-T G.992.5 ADSL2+
Annex L (READSL)
Annex M
Secondary WAN Port : 10/100 Base-TX Ethernet for load balance and WAN failover
USB Port for 3G Cellular Modem
Load Balance/Failover Features:
Outbound Policy-Based Load-Balance
WAN Connection Fail-over
BoD (Bandwidth on Demand)
Vigor 2820 ATM Protocols (DSL):
RFC-2684/RFC-1483 Multiple Protocol over AAL5
RFC-2516 PPP over Ethernet
RFC-2364 PPP over AAL5
PPPoE pass through LAN/WLAN
PPPoE/PPPoA Relay
Transparent bridge for MPoA
Multiple PVC support for Triple Play Applications (up to 8 simultaneous)
VoIP Features (Vigor2820 'V' Models only)
Protocols: SIP, RTP / RTCP
12 SIP Registrar Accounts (for up to 12 VoIP providers)
G.168 Line Echo-cancellation
Automatic Gain Control
Jitter Buffer ( 125ms )
Voice Codecs:
G.711 A / µ Law
G.723.1
G.726
G.729 A / B
VAD / CNG
Tone Generation: DTMF , Dial , Busy , Ring Back , Call Progress
DTMF Transmission: In Band / Out Band ( RFC-2833 ) / SIP info
FAX / Modem Support G.711 Pass-through
T.38 for FAX
Supplemental Services:
Caller ID
Call Hold / Retrieve
Call Waiting
Call Waiting with Caller ID
Call Transfer
Call Forwarding ( Always , On Busy and On No Answer )
DND (Do not Disturb)
Call Barring ( Incoming / Outgoing )
MWI ( Message Waiting Indicator ) ( RFC-3842 )
Hotline (Dial preset number when handset lifted)
Wireless LAN Features (Vigor2820 'n' Models Only):
802.11n Compliant (Draft 2.0)
Latest 'MIMO' Technology with three aerials (2T3R)
Packet Aggregation and Channel Bonding
Optional Higher Gain or directional aerials available - Click Here.
Compatible with 802.11b and 802.11g Standards
Active Client list in Web Interface
Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
64/128-bit WEP Encryption
WPA/WPA2 Encryption
Switchable Hidden SSID
Restricted access list for clients (by MAC address)
Time Scheduling (WLAN can be disabled at certain times of day)
Access Point Discovery
WDS (Wireless Distribution system) for WLAN Bridging and Repeating (see here)
802.1x Radius Authentication
Wireless Rate-Control
Automatic Power Management
802.11e WMM (Wi-Fi Multimedia)
WAN Protocols (Ethernet):
DHCP Client
Static IP
PPPoE
PPTP
L2TP *
BPA
Firewall & Security Features:
CSM (Content Security Management):
URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
Surfcontrol Support - Block Web sites by category (subject to subscription)
Prevent accessing of web sites by using their direct IP address (thus URLs only)
Blocking automatic download of Java applets and ActiveX controls
Blocking of web site cookies
Block http downloads of file types :
Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
Time Schedules for enabling/disabling the restrictions
Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
Multi-NAT, DMZ Host
Port Redirection and Open Port Configuration
Policy-Based Firewall
MAC Address Filter
SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
DoS / DDoS Protection
IP Address Anti-spoofing
E-Mail Alert and Logging via Syslog
Bind IP to MAC Address
Bandwidth Management:
QoS
Guaranteed Bandwidth for VoIP
Class-based Bandwidth Guarantee by User-Defined Traffic Categories
DiffServ Code Point Classifying
4-level Priority for each Direction (Inbound / Outbound)
Bandwidth Borrowed
Temporary (5 minute) Quick Blocking of any LAN Client
Bandwidth / Session Limitation
Network/Router Management:
Web-Based User Interface (HTTP / HTTPS)
CLI ( Command Line Interface ) / Telnet / SSH*
Administration Access Control
Configuration Backup / Restore
Built-in Diagnostic Function
Firmware Upgrade via TFTP / FTP
Logging via Syslog
SNMP Management with MIB-II
TR-069
TR-104
VPN Facilities:
Up to 32 Concurrent VPN Tunnels (incoming or outgoing)
Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
IPSec Main and Agressive modes
Encryption : MPPE and Hardware-Based AES / DES / 3DES
Authentication : Hardware-Based MD5 and SHA-1
IKE Authentication : Pre-shared Key and X.509 Digital Signature
LAN-to-LAN & Teleworker-to-LAN connectivity
DHCP over IPSec
NAT-Traversal ( NAT-T )
Dead Peer Detection (DPD)
VPN Pass-Through
Network Features:
DHCP Client / Relay / Server
Dynamic DNS
NTP Client (Syncrhonise Router Time)
Call Scheduling (Enable/Trigger Internet Access by Time)
RADIUS Client
DNS Cache / Proxy
Microsoft™ UPnP Support
Routing Protocols:
Static Routing
RIP V2
