Vigor2925
Series
Dual-WAN Security Router
Pv6
I
Ready
The Gigabit Ethernet WAN ports cater for any type of
Internet access, including FTTx, xDSL and Cable fitting
your local infrastructure. You can then use both WAN 1
and WAN 2 for failover, ensuring that you will always
have an access to the Internet even if one of the WAN
fails, or for load-balancing so the 2 WANs share Internet
traffic requirements of your organization.
Dual Gigabit Ethernet WAN ports for failover
and load-balancing
Firmware Upgradeable
Vigor2925
Series
Vigor2925 Series is the IPv6 ready dual WAN broadband
security firewall router. It ensures the business continuity
for today and the future IPv6 network. Its two gigabit
Ethernet WAN port can accept various high-speed
Ethernet-based WAN links via FTTx/xDSL/Cable. The 2
USB ports are for 3G/4G LTE mobile broadband access.
With the multi-WAN accesses, Vigor2925 routers support
bandwidth management functions such as failover and
load-balancing, making them ideal solutions for reliable
and flexible broadband connectivity for the small
business office.
The specifications cover many functions that are required
by modern day businesses, including secure but easy to
apply firewall, comprehensive VPN capability, Gigabit
LAN ports, USB ports for 3G/4G mobile dongles, FTP
servers and network printers, VLAN for flexible
workgroup management, and much more.
The two USB ports can be used for the connection of
3G/4G mobile broadband dongle, FTP drive and network
printers. A 3G/4G mobile broadband connected to one of
the 2 USB ports can be used as a second WAN for
bandwidth management. The USB WAN interface can
also be the primary access if the local fixed line service
hasn’t been deployed yet. You can have 2 USB 3G/4G
dongles connected to the USB ports, and assign one of
these (WAN 3) to be the primary access and the other
(WAN 4) as the fail-over back-up. And, you have the
flexibility to convert back to fixed line services when
these become available.
2 USB 2.0 ports for 3G/4G mobile, FTP drive
and network printers
Object-based SPI Firewall for network security
Like all DrayTek routers, Vigor2925 Series supports
Object-based SPI firewall and CSM (Content Security
Management). The firewall allows setting of Call/Data
Filters and DoS/DDoS prevention, whereas the CSM
covers IM/P2P/Protocol filter, URL Content Filter and
Web Content Filter.
With Objects settings, you can pre-define objects or
groups for IP, service type, keyword, file extension, etc.,
and mix these with the Time Scheduler or the VLAN
groups as required. Altogether this gives you peace of
mind whether you are guarding a complicated network or
a small office.
VoIP (V model)
Protocol: SIP, RTP/RTCP
12 SIP Registrars
G.168 Line Echo-cancellation
Automatic Gain Control
Jitter Buffer (180ms)
Voice codec:
G.711 G.723.1 G.726
G.729 A/B VAD/CNG iLBC
DTMF Tone :
Inband Outband (RFC-2833) SIP Info
FAX/Modem Support :
Tone Detection G.711 Pass-through
Supplemental Services :
Internal Call (only for Debug Usage)
Call Hold/Retrieve/Waiting
Call Waiting with Caller ID*
Call Transfer
Call Forwarding (Always, Busy and No Answer)
Call Barring (Incoming/Outgoing)
DND (Do Not Disturb)
MWI (Message Waiting Indicator) (RFC-3842)
Hotline
ZRTP
PSTN Loop-through When Power Failure
Dial Plan :
Phone Book Digit Map Call Barring
Regional
(V model)
Support IPv6 & IPv4 network
Dual Gigabit Ethernet WAN ports for failover
and load-balancing
5 x Gigabit LAN ports with multiple subnets
VLAN for secure and efficient workgroup management
50 VPN tunnels with comprehensive secure protocols
Object-based SPI Firewall and CSM
(Content Security Management)for network security
VPN load-balancing and backup for site-to-site applications
2 USB 2.0 ports for 3G/4G mobile, FTP server and network printers
Supports Smart Monitor Traffic Analyzer (50-nodes)
VoIP with for cost-effective communication (Vn model)
Flexible Network Management
Network Feature
DHCP Client/Relay/Server
IGMP Version 2 and Version 3
IGMP Snooping
Dynamic DNS
NTP Client
Call Scheduling
RADIUS Client
DNS Cache/Proxy
UPnP 30 sessions
Multiple Subnets
Port-based/Tag-based VLAN (802.1q)
Layer-2 QoS (802.1p)
Routing Protocol:
Static Routing
RIP V2
Policy Routing
DNS Cache/Proxy and LAN DNS
WAN Feature
IPv4 -
IPv6 -
L2TP, 802.1p/q Multi-VLAN Tagging
DHCP Client, Static IP, PPPoE, PPTP,
USB WAN
PPP
Ethernet WAN
CSM (Content Security Management)
IM/P2P Application
GlobalView Web Content Filter
(Powered by )
URL Content Filter :
URL Keyword Blocking (Whitelist and Blacklist)
Java Applet, Cookies, Active X, Compressed,
Executable, Multimedia File Blocking
Excepting Subnets
Bandwidth Management
QoS :
Guarantee Bandwidth for VoIP
Class-based Bandwidth Guarantee by
User-defined Traffic Categories
DiffServ Code Point Classifying
4-level Priority for Each Direction (Inbound
/Outbound)
Bandwidth Borrowed
Session Limitation
Default & Specific Limitation
Bandwidth Limitation
Default & Specific Limitation
Auto Adjustment by Exceeding Session/
Available Bandwidth
TOS/DSCP QoS Mapping
VPN
Up to 50 VPN Tunnels
Protocol : PPTP, IPsec, L2TP, L2TP over IPsec
Encryption : MPPE and Hardware-based
AES/DES/3DES
Authentication : MD5, SHA-1
IKE Authentication : Pre-shared Key and
Digital Signature (X.509)
LAN-to-LAN, Teleworker-to-LAN
DHCP over IPsec
IPsec NAT-traversal (NAT-T)
Dead Peer Detection (DPD)
VPN Pass-through
VPN Wizard
mOTP
SSL VPN/Open VPN (Up to 25 Tunnels)
VPN Trunk (Load Balance/Backup)
Network Management
Web-based User Interface (HTTP/HTTPS)
Quick Start Wizard
CLI (Command Line Interface, Telnet/SSH)
Administration Access Control
Configuration Backup/Restore
Built-in Diagnostic Function
Firmware Upgrade via TFTP/FTP/HTTP/TR-069
Logging via Syslog
SNMP Management MIB-II (v2/v3)
Management Session Time Out
2-level Management (Admin/User Mode)
TR-069
TR-104
LAN Port Monitoring
Support Smart Monitor (50)
Outbound Policy-based Load-balance
WAN Connection Failover
WAN Budgets*
50,000 NAT Sessions
VoIP WLAN
Vigor2925
Vigor2925
Vigor2925
Vn
n
Hardware Interface
5 x 10/100/1000Base-TX LAN, RJ-45
Configurable Physical DMZ on Port1
2 Detachable Antennas (n model)
2 x FXS + Port,
2 x USB Host 2.0 (for Printer/3G USB Modem
/USB Disk)
1 x Factory Reset Button
1 x Wireless On/Off/ WPS Button
2 x 1000Base-TX, RJ-45 (WAN1/WAN2)
RJ11
1 x Life Line Port, RJ11
991-2925000-00
Tunnel Mode: PPP, TSPC, AICCU, 6rd*
Dual Stack: DHCPv6 Client, Static I
DSLite*
Pv6,
Firewall
Multi-NAT, DMZ Host, Port-redirection
and Open Port
Object-based Firewall, Object I v6,
Group IPv6
MAC Address Filter
SPI (Stateful Packet Inspection) (Flow Track)
DoS/DDoS Prevention
IP Address Anti-spoofing
E-mail Alert and Logging via Syslog
Bind IP to MAC Address
Time Schedule Control
User Management
P
USB
3.5G (HSDPA)/4G (LTE) as WAN
Printer Sharing
File System :
Support FAT32 File System
Support FTP Function for File Sharing
Support Samba for File Sharing
Wireless AP (n model)
IEEE802.11n Compliant
Wireless Client List
Wireless LAN Isolation
64/128-bit WEP
WPA/WPA2
Hidden SSID
WPS
MAC Address Access Control
Access Point Discovery
WDS (Wireless Distribution System)
802.1x Authentication
Multiple SSID
Wireless Rate-control
IEEE802.11e: WMM (Wi-Fi Multimedia)
SSID VLAN Grouping with LAN Port*
(2.4GHz)
(V model)
Comentários a estes Manuais