DrayTek Vigor 2925n Plus

• Dual-WAN Gigabit Ethernet
• Dual-WAN 3G/4G (via USB Modem)
• All-WAN Simultaneous operation
• Load-Balancing & WAN Failover
• IPv6 Ready – See below for feature support
• High performance – up to 300Mb/s firewall throughput
• DrayTek Firewall with huge flexibility
• 5-Port Gigabit Ethernet LAN Switch
• Temperature Monitoring (optional Thermometer)
• 802.11a/b/n Wireless LAN 
• Dual-band (2.4/5Ghz) Wireless 
• Twin VoIP Phone ports (with POTS failover)
• Wireless Guest Portal
• Multiple Private LAN Subnets
• SMS (Text Message) Alert
• VLANs (Port or 802.1q based)
• IGMP v2 & v3 MultiCast
• Includes SmartMonitor (50 users)
• Content Filtering (by keyword, data type or category)
• Ethernet and WiFi VLANs (common/distinct groups)
• LDAP Integration for VPN and user access
• QoS (Layer 2&3, 802.1p & TOS/DCSP)
• Up to 32 VPN tunnels for LAN-to-LAN or teleworkers
• VPN Trunking & Backup
• SSL VPN – Tunnel or Proxy (25 users)
• USB Port for Printer, Logs or 3G Modem
• Robust & Comprehensive Firewall

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems. The latest (‘Version 3’) DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations. The Vigor 2925 also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to VPN. In addition, QoS (Quality of Service Assurance) can now be selectively applied to specific users.

IPv6 – Next Generation Internet Routing

The Vigor 2925 supports IPv6 – the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv4 address space is full up and IPv6 allows for much more efficient routing and a larger address space. IPv6 is supported both from your own ISP, but if your ISP does not (yet) support IPv6, the Vigor 2925 also supports IPv6 broker/tunnel services to provide IPv6 accss using either TSPC or AICCU via 3rd party IPv6 providers. To learn all about IPv6, you can get our detailed guide to IPv6 here.

IPv6 support on the DrayTek Vigor 2925 series routers

Operation on any one of the WAN ports (ADSL/VDSL, Ethernet or 3G)

Connectivity to direct native IPv6 ISPs

Built-in tunneling to 3rd party IPv6 brokers

suppporting TSPC or AICCU methods

Default stateful firewall for all IPv6 LAN Clients/Devices

DHCPv6 Client or Static IPv6 Client

DHCPv6 & RADVD for client configuration

IP Filtering Rules

QoS for IPv6 with DiffServ

Router Management over IPv6 (Telnet/HTTP) with IPv6 Access List

Simultaneous (concurrent) operation with IPv4 (“Dual-Stack”)

Other router features are available on IPv4 only currently

Phone Ports for VoIP

 The Vigor 2925Vn-Plus model includes two phone sockets into which you can connect regular analogue phones (desktop or  cordless phones).   This provides you effectively with two phone lines with which to make or receive phone calls, either to other VoIP users across the Internet, or to/from regular phone line/mobile phones via a VoIP Gateways service (such as 2Talk).   This great feature provides you with two phone lines using your Internet connection, saving line rental and installation costs compared with an extra line.

Web Content Filtering

GlobalView Categories

The content control features of the Vigor 2925 allows you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal. Using DrayTek’s GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview service, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.

 WAN Load Balancing & Backup

The Vigor 2925 features WAN connectivity via its two WAN Ethernet ports and two USB ports for connection of a compatible 3G or 4G modem. The Ethernet ports can connect to DSL modems (e.g. Vigor 120), a cable modem or any other Ethernet-based Internet feed. The multiple WAN interfaces can be used either for WAN-Backup or load balancing. Load-balancing or failover supports IPv4 only currently (not IPv6).

WAN-Backup provides contingency (redundancy) in case of your primary ADSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switched back to that.

The Vigor 2925Vn-plus variant provides two analogue phone ports and an analogue line port provide full PSTN and VoIP integration via both the Internet (VoIP) and your regular analogue line. You can connect 1 or 2 regular telephones and the can be used independently and simultaneously for both incoming and outgoing calls.

As well as the two telephone ports, a third port, the Analogue Line port, connects into your regular analogue line (PSTN/POTS*). This then gives the telephones access to your analogue line to allow you to make calls as well as your VoIP facility (you can select the PSTN line instead of VoIP by dialling #0). Incoming calls are automatically switched through to your telephone(s) (either one or both) so that each phone can be used for both VoIP and POTS calls. Both telephones plugged into your router have access to VoIP and your analogue line. In addition, using the ‘Digit-Map’ facility you can set rules about particular call destinations using either the POTS line or your SIP/VoIP service. For example, local calls can be routed via your PSTN line (if you have a free calls package for example) whereas international calls can go via your preferred VoIP provider; there is flexibility to have several digit-map rules.

As well as connecting with a SIP/VoIP gateway directly (such as 2Talk), the Vigor2925Vn-plus can register its phones as extensions on a remote IP PBX, such as DrayTek’s Vigor IPPBX products, so this is an idea teleworker solution.

*POTS = Plain Old Telephone Service – The traditional analogue phone voice line in your home/office, e.g. B.T. That line may also be carrying your ADSL data signal.

VoIP Features 

Two ‘FXS’ Phone Ports

Line Port for connection to analogue (POTS) line

Automatic phone switch-over for incoming calls on either PSTN or VoIP

Hotline Facility (Dial pre-set number when handset lifted)

Digit-Map facility for LCR selection

Protocols: SIP, RTP / RTCP

12 SIP Registrar Accounts (for up to 12 VoIP providers/Trunks)

Compatible as remote extensions on DrayTek IP PBXs

G.168 Line Echo-cancellation

Automatic Gain Control

Jitter Buffer ( 180ms )

Voice Codecs:

G.711 A / µ Law

G.723.1

G.726

G.729 A / B

VAD / CNG

iLBC

Tone Generation: DTMF , Dial , Busy , Ring Back , Call Progress

DTMF Transmission: In Band / Out Band ( RFC-2833 ) / SIP info

FAX / Modem Support G.711 Pass-through

T.38 for FAX

Supplemental Services (Dependent on ITSP):

Caller ID

Call Hold / Retrieve

Call Waiting

Call Waiting with Caller ID

Call Transfer

Call Forwarding ( Always , On Busy and On No Answer )

DND (Do not Disturb)

Call Barring ( Incoming / Outgoing )

MWI ( Message Waiting Indicator ) ( RFC-3842 )

Physical Interfaces:

o LAN Ports (Switch)

* 5 X Gigabit Ethernet (1000Mb/s) Ports

* Port-Based VLAN (Inclusive/Exclusive Groups)

* 802.1q VLAN Tagging

o WAN Ports:

* WAN1 : Gigabit Ethernet (1000Mb/s Interface)

* WAN2 : Gigabit Ethernet (1000Mb/s Interface)

* WAN3 : USB Port for 3G Cellular Modem or Printer

Performance:

* Firewall: Up to 300Mb/s

* IPSec VPN: Up to 50Mb/s

Load Balance/Failover Features:

* Outbound Policy-Based Load-Balance

* WAN Connection Fail-over

* BoD (Bandwidth on Demand)

Wireless LAN Features 

* 802.11b/g/n 

* 802.11b/g/n/a 

* Simultaneous Dual-Band Operation – 2.4Ghz/5Ghz 

* Multiple SSID : Create up to 4 virtual wireless LANs (independent or joined)

* Packet Aggregation and Channel Bonding

* Optional Higher Gain or directional aerials available – Click Here.

* Active Client List in Web Interface

* Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)

* 64/128-bit WEP Encryption

* WPA/WPA2 Encryption

* Switchable Hidden SSID

* Restricted access list for clients (by MAC address)

* Time Scheduling (WLAN can be disabled at certain times of day)

* Access Point Discovery

* WDS (Wireless Distribution system) for WLAN Bridging and Repeating

* 802.1x Radius Authentication

* Wireless VLAN

* Wireless Rate-Control

* Automatic Power Management

* 802.11e WMM (Wi-Fi Multimedia)

WAN Protocols (Ethernet):

* DHCP Client

* Static IP

* PPPoE

* PPTP

* L2TP *

* BPA

Firewall & Security Features:

* CSM (Content Security Management):

* URL Keyword Filtering – Whitelist or Blacklist specific sites or keywords in URLs

* Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)

* Prevent accessing of web sites by using their direct IP address (thus URLs only)

* Blocking automatic download of Java applets and ActiveX controls

* Blocking of web site cookies

* Block http downloads of file types :

* Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF

* Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR

* Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU

* Time Schedules for enabling/disabling the restrictions

* Block P2P (Peer-to-Peer) popular file sharing programs 

* Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)

* Multi-NAT, DMZ Host

* Port Redirection and Open Port Configuration

* Policy-Based Firewall

* MAC Address Filter

* SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism

* DoS / DDoS Protection

* IP Address Anti-spoofing

* E-Mail Alert and Logging via Syslog

* Bind IP to MAC Address

Bandwidth Management:

* QoS

* Guaranteed Bandwidth for VoIP

* Class-based Bandwidth Guarantee by User-Defined Traffic Categories

* Layer 2&3 (802.1p & TOS/DCSP)

* DiffServ Code Point Classifying

* 4-level Priority for each Direction (Inbound / Outbound)

* Bandwidth Borrowed

* Temporary (5 minute) Quick Blocking of any LAN Client

* Bandwidth / Session Limitation (with automatic adjustment)

* TOS/DSCP QoS Mapping

* Smart Bandwidth Limitation (Triggered by Traffic/ Session)

Network/Router Management:

* Web-Based User Interface (HTTP / HTTPS)

* CLI ( Command Line Interface ) / Telnet / SSH

* Administration Access Control

* Configuration Backup / Restore

* Built-in Diagnostic Function

* Firmware Upgrade via TFTP / FTP

* Logging via Syslog

* SNMP v3 Management with MIB-II

* TR-069

* TR-104

VPN Facilities:

* Up to 32 Concurrent VPN Tunnels (incoming or outgoing)

* Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec

* IPSec Main and Agressive modes

* Encryption : MPPE and Hardware-Based AES / DES / 3DES

* Authentication : Hardware-Based MD5 and SHA-1

* IKE Authentication : Pre-shared Key or X.509 Digital Signature

* SSL / OpenVPN VPN for teleworkers – Up to 5 simultaneous users. Proxy or tunnel

* LAN-to-LAN & Teleworker-to-LAN connectivity

* DHCP over IPSec

* NAT-Traversal ( NAT-T )

* Dead Peer Detection (DPD)

* VPN Pass-Through

* M