The DrayTek Vigor 2930VN is a high-performance dual-WAN firewall. The two dedicated ethernet WAN ports can provide load balancing, WAN failover or bandwidth aggregation (increasing total bandwidth onto the Internet). Draytek Vigor 2930VN is SIP-Compliant VoIP (Voice-over-IP). High Speed total WAN througput of up to 70Mb/s is available, and IPSec VPN throughput of up to 40Mb/s. Extensive QoS support and comprehensive Web Content filtering features help you make the most efficient use of your bandwidth.
The Draytek Vigor 2930VN is in an all-new DrayTek housing design with all LEDs and sockets provided conveniently on the front. This makes desk usage, wall mouting or rack-mousing (optional bracket required) all equally covenient.
Explore the Web User Interface Here.
Voice-over-IP Features ('V' model only)
The Voice-over-IP (VoIP) facilities on the DrayTek Vigor 2930VS are extensive. Standard SIP compliance, with up to 12 simultaneous registrars (e.g. DrayTEL etc.) is supported, plus multiple codec support and many supplemental services enabling you to make thorough use of your Internet connection for Voice calls. Short codes (speed dials) and VoIP LCR ('Least Cost Routing') are also supported.
The Vigor2930 Series features the latest 802.11n Draft 2.0 wireless LAN specification and has been certified by the WiFi alliance for cross compatibility and WiFi compliance (including WPA/WPA2 and WMM).
Wireless LAN ('n' models only)
802.11n Draft 2.0 provides a total wireless bandwidth of up to 300Mb/s using new methods such as packet aggregation and channel bonding. Throughput depends on your own environment (factors such as obstructions, number of hosts and distance all make a significant difference), but actual transfer speeds of 100Mb/s are achievable (based on our real world tests). In addition, 802.11n Draft 2.0 provides greater coverage and resilience to interference compared to previous wireless standards thanks to the MIMO technology and the Vigor's triple-antennae diversity arrangement. This offset arrangement of aerials provides offset paths between hosts so that interference can be overcome.
Wireless Security is comprehensive too; the Vigor 2930 Series provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorised users only. The Web interface lets you see how many and which clients are currently connected as well as their current bandwidth usage. An 'instant' block lets you disconnect a wireless user temporarily in case of query. The Wireless VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN.
Physical Interfaces:
LAN: 4-port 10/100 Base-TX Switch
WAN: 2-port 10/100 Base-TX Ethernet
VoIP: 2-port FXS Phone Ports ('V' model only)
ISDN: 2-Ports. One fixed S0, one configurable NT / TE mode ('S' model only)
Dual-WAN Ports:
10/100Base-T Ethernet
Outbound Policy-Based Load-Balance
WAN Connection Fail-over
BoD (Bandwidth on Demand)
VoIP Features ('V' Models only):
Protocols: SIP, RTP / RTCP
12 SIP Registrar Accounts (for up to 12 VoIP providers)
G.168 Line Echo-cancellation
Automatic Gain Control
Jitter Buffer ( 125ms )
Voice Codecs:
G.711 A / µ Law
G.723.1
G.726
G.729 A / B
VAD / CNG
Tone Generation: DTMF , Dial , Busy , Ring Back , Call Progress
DTMF Transmission: In Band / Out Band ( RFC-2833 ) / SIP info
FAX / Modem Support G.711 Pass-through
T.38 for FAX
Supplemental Services:
Caller ID
Call Hold / Retrieve
Call Waiting
Call Waiting with Caller ID
Call Transfer
Call Forwarding ( Always , On Busy and On No Answer )
DND (Do not Disturb)
Call Barring ( Incoming / Outgoing )
MWI ( Message Waiting Indicator ) ( RFC-3842 )
Hotline (Dial preset number when handset lifted)
Wireless LAN Features
802.11n Compliant (Draft 2.0)
Latest 'MIMO' Technology with three aerials (2T3R)
Packet Aggregation and Channel Bonding
Optional Higher Gain or directional aerials available - Click Here.
Compatible with 802.11b and 802.11g Standards
Active Client list in Web Interface
Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
64/128-bit WEP Encryption
WPA/WPA2 Encryption
Switchable Hidden SSID
Restricted access list for clients (by MAC address)
Time Scheduling (WLAN can be disabled at certain times of day)
Access Point Discovery
WDS (Wireless Distribution system) for WLAN Bridging (Firmware Upgradable)
802.1x Radius Authentication
Wireless Rate-Control
Automatic Power Management
802.11e WMM (Wi-Fi Multimedia)
WAN Protocols:
DHCP Client
Static IP
PPPoE
PPTP
L2TP *
BPA
Firewall & Security Features:
CSM (Content Security Management):
URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
Surfcontrol Support - Block Web sites by category (subject to subscription)
Prevent accessing of web sites by using their direct IP address (thus URLs only)
Blocking automatic download of Java applets and ActiveX controls
Blocking of web site cookies
Block http downloads of file types :
Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
Time Schedules for enabling/disabling the restrictions
Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
Multi-NAT, DMZ Host
Port Redirection and Open Port Configuration
Policy-Based Firewall
MAC Address Filter
SPI ( Stateful Packet Inspection )
DoS / DDoS Protection
IP Address Anti-spoofing
E-Mail Alert and Logging via Syslog
Bind IP to MAC Address
VPN Support:
Up to 100 Simultaneous VPN Tunnels
Protocols : PPTP, IPSec, L2TP, L2TP over IPSec
Encryption : MPPE and Hardware-Based AES / DES / 3DES
Authentication : Hardware-Based MD5 , SHA-1
IKE Authentication : Pre-shared Key and Digital Signature ( X.509 )
PFS (Perfect Forward Secrecy)
IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
LAN-to-LAN (Dial-in & Dial-Out), Teleworker-to-LAN
DHCP over IPSec
NAT-Traversal (NAT-T)
Dead Peer Detection (DPD)
VPN Pass-Through
Bandwidth Management:
QoS
Guaranteed Bandwidth for VoIP
Class-based Bandwidth Guarantee by User-Defined Traffic Categories
DiffServ Code Point Classifying
4-level Priority for each Direction (Inbound / Outbound)
Bandwidth Borrowed
Temporary (5 minute) Quick Blocking of any LAN Client
Bandwidth / Session Limitation
Network/Router Management:
Web-Based User Interface (HTTP / HTTPS)
CLI ( Command Line Interface ) / Telnet / SSH*
Administration Access Control
Configuration Backup / Restore
Built-in Diagnostic Function
Firmware Upgrade via TFTP / FTP
Logging via Syslog
SNMP Management with MIB-II
VPN Facilities:
Up to 100 Concurrent VPN Tunnels
IPSec Throughput up to 40Mb/s
Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
Encryption : MPPE and Hardware-Based AES / DES / 3DES
Authentication : Hardware-Based MD5 and SHA-1
IKE Authentication : Pre-shared Key and Digital Signature ( X.509 )
LAN-to-LAN & Teleworker-to-LAN connectivity
DHCP over IPSec
NAT-Traversal ( NAT-T )
Dead Peer Detection ( DPD )
VPN Pass-Through
Network Features:
DHCP Client / Relay / Server
Dynamic DNS
NTP Client (Syncrhonise Router Time)
Call Scheduling (Enable/Trigger Internet Access by Time)
RADIUS Client
DNS Cache / Proxy
Microsoft™ UPnP
Port-Based VLAN (Ethernet LAN ports exclusive/inclusive groups)
Routing Protocols:
Static Routing
RIP V2
