Product Specification |
Overview | DrayTek Vigor2926 Gigabit Dual WAN Load-Balance VPN Router รวม Internet 2 คู่สาย, VPN 50 Tunnels, 50,000 NAT Sessions รองรับ 3G/4G Modem |
Physical Interfaces: | - LAN Ports (Switch)
- 5 X Gigabit Ethernet (1000Mb/s) Ports (Configurable Physical DMZ on Port4)
LAN Port 5 Switchable with WAN2 (req. f/w 3.8.8 or later)
- WAN Ports:
- WAN1 : Gigabit Ethernet (1000Mb/s) Ethernet
- WAN2 : Gigabit Ethernet (1000Mb/s) Ethernet for load balance and WAN failover
Switchable with LAN Port 5 - WAN3 : USB 2.0 Port for 3G/4G Modem, thermometer or Printer
- WAN4 : USB 2.0 Port for 3G/4G Modem or Printer
- Wireless WAN - Wireless interface can provide WAN connectivity
|
Performance: | Firewall: Up to 400Mb/s max
IPSec VPN: Up to 60Mb/s max |
Load Balance/Failover Features: | - Outbound Policy-Based Load-Balance to direct traffic via:
- NAT or Routing
- WAN Interface
- LAN Interface
- Specific LAN Gateway
- VPN Tunnel
- IP-Based or Session-Based Load Balance modes NEW!
- WAN Connection Fail-over
- BoD (Bandwidth on Demand)
- Configurable Load-Balance pool, specify WAN interfaces to load balance
- WAN Budget
|
Wireless LAN Features ('n' and 'ac' Models Only): | - 2.4GHz 802.11n and 5GHz 802.11ac (Vigor 2926ac only)
- 2.4GHz 802.11n (Vigor 2926 'n' models)
- Backward Compatibility for 802.11b/g (Vigor 2926 'n' models)
- Backward Compatibility for 802.11a/b/g/n (Vigor 2926ac only)
- Wireless Features on Vigor 2926ac:
- 802.11ac (5Ghz)
- 4x4 MU-Mimo (5Ghz)
- Up to 4 Spatial Streams
- TX Beam Forming
- 1733Mb/s (5Ghz) + 300Mb/s (2.4Ghz) Total Link Rate
- Dual-band (2.4/5Ghz) simultaneous wireless
- 256QAM
- Extended DFS frequency range
- TX Beam Forming
- Multiple SSID : Create up to 4 virtual wireless LANs (independent or joined)
- Packet Aggregation and Channel Bonding
- Optional Higher Gain or directional aerials available - Click Here.
- Active Client list in Web Interface
- Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
- 64/128-bit WEP Encryption
- WPA/WPA2 Encryption
- Switchable Hidden SSID
- Restricted access list for clients (by MAC address)
- Time Scheduling (WLAN radio can be disabled at certain times of day)
- Time Scheduling for individual SSIDs
- Access Point Discovery
- WDS (Wireless Distribution system) for WLAN Bridging and Repeating
- 802.1x Radius Authentication
- Wireless VLAN
- Wireless Rate-Control
- Automatic Power Management
- 802.11e WMM (Wi-Fi Multimedia)
- Station Control, limit wireless client access time per day
- Airtime Fairness NEW!
- Band Steering NEW!
- Wireless WAN mode for WAN2, switchable with Ethernet (Wireless models only) NEW!
|
WAN Protocols (Ethernet): | DHCP Client
Static IP
PPPoE
PPTP
BPA |
Firewall & Security Features: | - CSM (Content Security Management):
- URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
- Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)
- Prevent accessing of web sites by using their direct IP address (thus URLs only)
- Blocking automatic download of Java applets and ActiveX controls
- Blocking of web site cookies
- Block http downloads of file types :
- Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
- Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
- Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
- Time Schedules for enabling/disabling the restrictions
- Block popular P2P (Peer-to-Peer) file sharing programs
- Block Instant Messaging programs (e.g. IRC, Skype/Yahoo Messenger etc.)
- DNS Filter: Use DNS to enforce categorisation
- Web Portal
- Multi-NAT (32 WAN IPs per WAN1 & WAN2)
- DMZ Host
- DMZ Port (via LAN port P1, switchable)
- 40 Port Redirection rules
- 40 Open Port rules (10 port ranges per rule)
- Policy-Based Firewall
- MAC Address Filter
- SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
- DoS / DDoS Protection
- IP Address Anti-spoofing
- E-Mail Alert and Logging via Syslog
- Bind IP to MAC Address
- User Management:
- Up to 200 Profiles
- Supports external authentication via LDAP or RADIUS
- Per User Bandwidth and Time Quota
- Schedule Control to delete or disable account automatically
|
Bandwidth Management: | - Quality of Service (QoS - For devices in the NAT subnets according to source or destination IP)
- Guaranteed Bandwidth for VoIP
- Class-based Bandwidth Guarantee by User-Defined Traffic Categories
- Layer 2&3 (802.1p & TOS/DCSP)
- DiffServ Code Point Classifying
- 4-level Priority for each Direction (Inbound / Outbound)
- Bandwidth Borrowed
- App QoS: Classify traffic by Application NEW!
- Temporary (5 minute) Quick Blocking of any LAN Client
- Bandwidth Limit (Shared or individual limit)
- Smart Bandwidth Limitation (Triggered by Traffic / Session)
- Session Limit
|
Network/Router Management: | Web-Based User Interface (HTTP / HTTPS)
CLI ( Command Line Interface ) / Telnet / SSH
Web Console: Access CLI through Web Interface
Administration Access Control
Brute Force Protection
Configuration Backup / Restore
Configuration Import from Vigor 2920 and Vigor 2925
Built-in Diagnostic Function
Firmware Upgrade via Web Interface, TFTP, FTP
Logging via Syslog
Supports SmartMonitor (up to 50 IPs monitored)
SNMP v3 Management with MIB-II
TR-069
TR-104
Access Point Management: Centrally Manage up to 20 DrayTek VigorAPs
Switch Management: Centrallly Manage up to 10 DrayTek VigorSwitches NEW! |
VPN Facilities: | - Up to 50 Concurrent VPN Tunnels (incoming or outgoing)
- Tunnelling Protocols:
- PPTP
- IPSec
- L2TP
- L2TP over IPSec
- DrayTek SSL
- GRE NEW!
- IPSec Main and Agressive modes
- IKE Phase 1 DiffieHelman Groups 1,2,5 & 14
- IKE Phase 2 DiffieHelman Groups 1,2,5 & 14 (will match phase 1 selection)
- IKEv2 & IKEv2 NEW!
- Encryption : MPPE, DES / 3DES (168bits) and Hardware-Based AES (128/192/256bits)
- Authentication : Hardware-Based MD5, SHA-1 and SHA-256
- IKE Authentication : Pre-shared Key or X.509 Digital Signature
- SSL VPN for teleworkers - Up to 25 simultaneous users. Proxy or tunnel
- LAN-to-LAN & Teleworker-to-LAN connectivity
- DHCP over IPSec
- NAT-Traversal ( NAT-T )
- Dead Peer Detection (DPD)
- VPN Pass-Through
- MOTP (Mobile One Time Password) for two factor authentication (2FA)
- Virtual IP Mapping, map a remote IP subnet/range to another range to resolve IP subnet/range conflicts
- Port forwarding (Port Redirection, Open Ports) to remote clients connected via an IPsec LAN to LAN VPN NEW!
|
Network Features: | - Port-Based VLAN (Inclusive/Exclusive Groups)
- 802.1q VLAN Tagging
- Port Mirroring
- 802.1X Port Authentication
- Multi Subnet DHCP Servers with DHCP Relay
- LAN Clients : Up to 1022 per subnet (for subnets 1-3)
- Custom DHCP Option support
- Dynamic DNS
- DNSSEC support NEW!
- DNS Transparent Proxy
- DNS Caching
- LAN DNS (supports CNAME)
- NTP Client (Synchronise Router Time)
- Call Scheduling (Enable/Trigger Internet Access by Time)
- RADIUS Client
- LDAP Client
- TACACS+ Client
- High Availability NEW!
- Internal RADIUS Server NEW!
- Microsoft? UPnP Support
- Maximum MTU 1534
- Routing Protocols:
- Static Routing (30 routes)
- RIP V2
- RIPng for IPv6 NEW!
- BGP NEW!
|
Operating Requirements: | Rack Mountable (Optional Vigor RM1 mounting bracket required)
Wall Mountable
Temperature Operating : 0?C ~ 45?C
Storage : -25?C ~ 70?C
Humidity 10% ~ 90% (non-condensing)
Power Consumption: 18 Watt Max.
Dimensions: L240.96 * W165.07 * H43.96 ( mm )
Operating Power: DC 12V (via external PSU, supplied)
Warranty : Two (2) Years RTB
Power Requirements : 220-240VAC |
รับประกัน | สินค้ารับประกัน 2 ปี |
