DrayTek Vigor3912 Datasheet
DrayTek Vigor3912 User-Guide
DrayTek Vigor3912 Quick Guide
Draytek VIGOR3912 Quad-Core Powerful Enterprise Gateway
Vigor3912 ถูกออกแบบมาเพื่อเครือข่ายที่ต้องการแบนด์วิธสูง มี CPU Quad-Core 2GHz เพื่อความเร็วในการเชื่อมต่อที่รวดเร็วแม้จะมีอุปกรณ์หลายตัวเชื่อมต่ออยู่ เราเตอร์นี้มีอินเทอร์เฟซ WAN จำนวน 8 พอร์ต ประกอบด้วย 2x 10G SFP+ สำหรับการเชื่อมต่อไฟเบอร์ 2x 2.5G Ethernet และ 4x 1G Ethernet ให้ความเร็ว NAT ที่สูงมาก พอร์ต 1 ถึงพอร์ต 8 สามารถกำหนดค่าได้อย่างอิสระสำหรับ WAN หรือ LAN เพื่อให้ความยืดหยุ่นและเพิ่มประสิทธิภาพของเราเตอร์ รองรับความเร็ว Internet รวมได้สูงสุด 15.6Gbps
Vigor3912 สามารถทำหน้าที่เป็นเซิร์ฟเวอร์ VPN เพื่อสร้างการเชื่อมต่อ VPN แบบ LAN-to-LAN หรือแบบ remote dial-in นอกจากนี้ยังมีฟีเจอร์ที่เหมาะสำหรับธุรกิจขนาดเล็กและขนาดกลาง (SMB) เช่น การตรวจสอบสิทธิ์ VPN แบบ 2FA และการใช้ VPN จาก LAN เพื่อความปลอดภัยและประสิทธิภาพของเครือข่าย VPN ที่ดียิ่งขึ้น
DrayTek Vigor3910 Product Specification
|
|
Overview
|
DrayTek Vigor3912
8-WAN Load Balance VPN Router
Port Lan 2.5Gbps x 2
Port SFP+ 10Gbps x 2
Internet Throughput 15.6Gbps
1,000,000 NAT Session รองรับได้มากกว่า 500 Client
VPN IPSec 500 Tunnels Throughput สูงสุด 5.7Gbps
รองรับ 4G LTE USB Modem
|
Performance
|
| NAT Session |
1000K |
| Max. NAT with Software Acceleration (single-directional) (Mbps) |
9450 |
WAN
|
| Switchable WAN/LAN (GbE) |
6 |
| SFP (WAN/LAN Switchable) |
2 |
Internet Connection
|
| IPv4 |
PPPoE
DHCP
Static IP
|
| IPv6 |
PPP
DHCPv6
Static IPv6
TSPC
AICCU
6rd
6in4 Static Tunnel
|
| 802.1p/q Multi-VLAN Tagging |
Support |
| Multi-VLAN/PVC |
Support |
| Failover |
Support |
| Load Balancing |
IP-based, Session-based |
| WAN Active on Demand |
Link Failure, Traffic Threshold |
| Connection Detection |
ARP, Ping, Strict ARP |
| WAN Data Budget |
Support |
| Dynamic DNS |
Support |
| DrayDDNS |
Support |
LAN
|
| Fixed LAN (RJ-45, GbE) |
4 |
| LAN Subnet |
100 |
| VLAN |
802.1q Tag-based VLAN
Port-based VLAN
|
| Max. Number of VLAN |
100 |
| DHCP Server |
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
|
| LAN IP Alias |
Support |
| IP Pool Count |
4000 |
| PPPoE Server |
Support |
| Port Mirroring |
Support |
| Local DNS Server |
Support |
| Conditional DNS Forwarding |
Support |
| Hotspot Web Portal (Profile No.) |
4 |
| Hotspot Authentication |
Click-Through
Social Login
SMS PIN
RADIUS
External Portal Server
|
Other Ports
|
| Console (RJ-45) |
1 |
| USB |
2 |
| USB Type |
3.0 |
Networking
|
| Routing |
IPv4 Static Route
IPv6 Static Route
Policy Route
Inter-VLAN Route
Fast Routing
RIP v1/v2
BGP
OSPFv2
|
| Policy-based Routing |
Protocol
IP Address
Port
Domain
Country
|
| Smart Action |
Support |
| High Availability |
Support |
| DNS Security (DNSSEC) |
Support |
| IGMP |
IGMP v2/v3
IGMP Proxy
IGMP Snooping & Fast Leave
|
| Local RADIUS server |
Support |
VPN
|
| LAN-to-LAN |
Support |
| Teleworker-to-LAN |
Support |
| Protocols |
PPTP
L2TP
IPsec
L2TP over IPsec
SSL
GRE
IKEv2
IPsec-XAuth
OpenVPN(Host to LAN)
Wireguard
|
| Max. VPN Tunnels |
500 |
| Max. OpenVPN + SSL VPN Tunnels |
200 |
| IPsec VPN Throughput (AES 256 bits) (single-directional) (Mbps) |
3300 |
| SSL VPN Throughput (single-directional) (Mbps) |
3300 |
| User Authentication |
Local
RADIUS
LDAP
TACACS+
mOTP
TOTP
|
| IKE Authentication |
EAP, Pre-Shared Key, X.509, XAuth |
| IPsec Authentication |
MD5, SHA-1, SHA-256, SHA-512 |
| Encryption |
MPPE
DES
3DES
AES
|
| VPN Trunk (Redundancy) |
Failover, Load Balancing |
| Single-Armed VPN |
Support |
| NAT-Traversal (NAT-T) |
Support |
| VPN from LAN |
Support |
| VPN Isolation |
Support |
| VPN Packet Capture |
Support |
| VPN 2FA Authentication for AD/LDAP |
Support |
| VPN Matcher |
Support |
Firewall & Content Filtering
|
| NAT |
Port Redirection
Open Ports
Port Triggering
Port Knocking
Fast NAT
DMZ Host
UPnP
Server Load Balance
|
| ALG (Application Layer Gateway) |
FTP, H.323, RTSP, SIP |
| VPN Pass-Through |
IPsec, L2TP, PPTP |
| IP-based Firewall Policy |
Support |
| Content Filtering |
APP
URL Keyword
DNS Keyword
Web Features
Web Category*(*subscription required)
|
| DoS Attack Defense |
Support |
| Spoofing Defense |
Support |
Bandwidth Management
|
| IP-based Bandwidth Limit |
Support |
| IP-based Session Limit |
Support |
| QoS (Quality of Service) |
TOS
DSCP
802.1p
IP Address
Service Type
|
| VoIP Prioritization |
Support |
| APP QoS |
Support |
Management
|
| Local Service |
HTTP
HTTPS
Telnet
SSH v2
FTP
TR-069
|
| Config Backup/Restore |
Support |
| Firmware Upgrade |
HTTP, TFTP, TR-069 |
| 2-Level Administration Privilege |
Support |
| Access Control |
Access List, Brute Force Protection |
| Notification Alert |
E-mail, SMS |
| SNMP |
v1, v2c, v3 |
| Syslog |
Support |
| AP Managment (APM) |
50 |
| Switch Management (SWM) |
30 |
| VigorACS Management (Since f/w) |
V4.3.5.1 |
Physical
|
| Power Input |
AC 100~240V @ 0.6A |
| Max. Power Consumption (watts) |
35 |
| Dimension (mm) |
443 x 285 x 45 |
| Weight (g) |
3350 |
| Operating Temperature |
0 to 45°C |
| Storage Temperature |
-10 to 55°C |
| Operating Humidity (non-condensing) |
10 to 90% |
| รับประกัน |
2 ปี |
Maximize Performance with Fast NAT and Fast Routing
Enhance overall network performance
This feature optimizes the processing and forwarding of data packets, resulting in quicker transmission and minimizing network latency. It is beneficial for real-time applications such as online gaming or voice calls, enhancing network efficiency and providing a better network experience for users.
Fiber to the Building/Home
An ideal choice to work with tier 2/3 ISPs and co-working spaces
High Performance with 10G SFP+
For both NAT and routing network, and for both 10G-WAN and 10G-LAN, Vigor3912 is ready to deliver high throughput to your business.
Layer 3 Routing with BGP and OSPF
With the most popular Exterior and Interior Gateway Protocols, Vigor3912 is ideal for ISP deployment.
Layer 2 Security with PPPoE Server and VLAN
With 200 PPPoE user accounts and 100 VLAN/LAN subnets, Vigor3912 provides up to 15.6 Gbps throughput(bi-directional), and makes subletting network infrastructure secure and easy.
Advanced VPN Features
VPN from LAN
A more secure way to connect to the servers, restricting LAN clients's access to LAN servers through VPN only. This means that data transmission between LAN clients and the server will be encrypted by VPN, thereby protecting critical data and enhancing security.
VPN User Isolation
Opening a PC/laptop and activating a VPN connection to access the company's internet for work has become a common working routine nowadays.
When a teleworker connects to the company's VPN, not only can they reach the company's server, but VPN users can also access each other. However, these connections between VPN users are unnecessary and may pose security risks. By simply enabling "Isolate VPN Users from each other" option, each VPN user can be isolated, creating a secure VPN network.
2FA with AD/LDAP Server
Using two-factor with AD/LDAP server enhances the security of remote dial-in VPN connections. DrayTek provides various authentication methods, including TOTP, Email, SMS, or URL links. This not only adds an extra layer of security but also helps save the expense of SMS messages or license fees for the official authentication systems.
All-in-One Management
Vigor Router provides a management platform for your Vigor Devices on the LAN
Auto-Discovery
Automatically discover LAN subnets and add detected VigorSwitch/AP into managed list.
Provisioning
Most-frequent used settings can be pre-defined on the Vigor Router, and provision to the managed VigorSwitch/AP.
Monitoring
Vigor Router provides a centralized view of managing devices, you may always check if the managed Vigor Switch/AP is online.
System Maintenance
Support basic maintenance remotely via Vigor Router. Such as remote reboot, factory reset, configuration backup/restore, etc.
