| UFB Ready: | ? | 30/10 | ? | 100/50 | ? | 200/200 |
- Dual-WAN Gigabit Ethernet
- Dual-WAN 3G/4G (via USB Modem)
- All-WAN Simultaneous operation
- Load-Balancing & WAN Failover
- IPv6 Ready – See below for feature support
- High performance – up to 300Mb/s firewall throughput
- DrayTek Firewall with huge flexibility
- 5-Port Gigabit Ethernet LAN Switch
- Temperature Monitoring (optional Thermometer)
- 802.11a/b/n Wireless LAN
- Dual-band (2.4/5Ghz) Wireless
- Twin VoIP Phone ports (with POTS failover)
- Wireless Guest Portal
- Multiple Private LAN Subnets
- SMS (Text Message) Alert
- VLANs (Port or 802.1q based)
- IGMP v2 & v3 MultiCast
- Includes SmartMonitor (50 users)
- Content Filtering (by keyword, data type or category)
- Ethernet and WiFi VLANs (common/distinct groups)
- LDAP Integration for VPN and user access
- QoS (Layer 2&3, 802.1p & TOS/DCSP)
- Up to 32 VPN tunnels for LAN-to-LAN or teleworkers
- VPN Trunking & Backup
- SSL VPN – Tunnel or Proxy (25 users)
- USB Port for Printer, Logs or 3G Modem
- Robust & Comprehensive Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems. The latest (‘Version 3’) DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations. The Vigor 2925 also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to VPN. In addition, QoS (Quality of Service Assurance) can now be selectively applied to specific users.
IPv6 – Next Generation Internet Routing
The Vigor 2925 supports IPv6 – the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv4 address space is full up and IPv6 allows for much more efficient routing and a larger address space. IPv6 is supported both from your own ISP, but if your ISP does not (yet) support IPv6, the Vigor 2925 also supports IPv6 broker/tunnel services to provide IPv6 accss using either TSPC or AICCU via 3rd party IPv6 providers. To learn all about IPv6, you can get our detailed guide to IPv6 here.
IPv6 support on the DrayTek Vigor 2925 series routers
Operation on any one of the WAN ports (ADSL/VDSL, Ethernet or 3G)
Connectivity to direct native IPv6 ISPs
Built-in tunneling to 3rd party IPv6 brokers
suppporting TSPC or AICCU methods
Default stateful firewall for all IPv6 LAN Clients/Devices
DHCPv6 Client or Static IPv6 Client
DHCPv6 & RADVD for client configuration
IP Filtering Rules
QoS for IPv6 with DiffServ
Router Management over IPv6 (Telnet/HTTP) with IPv6 Access List
Simultaneous (concurrent) operation with IPv4 (“Dual-Stack”)
Other router features are available on IPv4 only currently
Phone Ports for VoIP
The Vigor 2925Vn-Plus model includes two phone sockets into which you can connect regular analogue phones (desktop or cordless phones). This provides you effectively with two phone lines with which to make or receive phone calls, either to other VoIP users across the Internet, or to/from regular phone line/mobile phones via a VoIP Gateways service (such as 2Talk). This great feature provides you with two phone lines using your Internet connection, saving line rental and installation costs compared with an extra line.
Web Content Filtering
GlobalView Categories
The content control features of the Vigor 2925 allows you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal. Using DrayTek’s GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview service, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
WAN Load Balancing & Backup
The Vigor 2925 features WAN connectivity via its two WAN Ethernet ports and two USB ports for connection of a compatible 3G or 4G modem. The Ethernet ports can connect to DSL modems (e.g. Vigor 120), a cable modem or any other Ethernet-based Internet feed. The multiple WAN interfaces can be used either for WAN-Backup or load balancing. Load-balancing or failover supports IPv4 only currently (not IPv6).
WAN-Backup provides contingency (redundancy) in case of your primary ADSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switched back to that.
The Vigor 2925Vn-plus variant provides two analogue phone ports and an analogue line port provide full PSTN and VoIP integration via both the Internet (VoIP) and your regular analogue line. You can connect 1 or 2 regular telephones and the can be used independently and simultaneously for both incoming and outgoing calls.
As well as the two telephone ports, a third port, the Analogue Line port, connects into your regular analogue line (PSTN/POTS*). This then gives the telephones access to your analogue line to allow you to make calls as well as your VoIP facility (you can select the PSTN line instead of VoIP by dialling #0). Incoming calls are automatically switched through to your telephone(s) (either one or both) so that each phone can be used for both VoIP and POTS calls. Both telephones plugged into your router have access to VoIP and your analogue line. In addition, using the ‘Digit-Map’ facility you can set rules about particular call destinations using either the POTS line or your SIP/VoIP service. For example, local calls can be routed via your PSTN line (if you have a free calls package for example) whereas international calls can go via your preferred VoIP provider; there is flexibility to have several digit-map rules.
As well as connecting with a SIP/VoIP gateway directly (such as 2Talk), the Vigor2925Vn-plus can register its phones as extensions on a remote IP PBX, such as DrayTek’s Vigor IPPBX products, so this is an idea teleworker solution.
*POTS = Plain Old Telephone Service – The traditional analogue phone voice line in your home/office, e.g. B.T. That line may also be carrying your ADSL data signal.
VoIP Features
Two ‘FXS’ Phone Ports
Line Port for connection to analogue (POTS) line
Automatic phone switch-over for incoming calls on either PSTN or VoIP
Hotline Facility (Dial pre-set number when handset lifted)
Digit-Map facility for LCR selection
Protocols: SIP, RTP / RTCP
12 SIP Registrar Accounts (for up to 12 VoIP providers/Trunks)
Compatible as remote extensions on DrayTek IP PBXs
G.168 Line Echo-cancellation
Automatic Gain Control
Jitter Buffer ( 180ms )
Voice Codecs:
G.711 A / µ Law
G.723.1
G.726
G.729 A / B
VAD / CNG
iLBC
Tone Generation: DTMF , Dial , Busy , Ring Back , Call Progress
DTMF Transmission: In Band / Out Band ( RFC-2833 ) / SIP info
FAX / Modem Support G.711 Pass-through
T.38 for FAX
Supplemental Services (Dependent on ITSP):
Caller ID
Call Hold / Retrieve
Call Waiting
Call Waiting with Caller ID
Call Transfer
Call Forwarding ( Always , On Busy and On No Answer )
DND (Do not Disturb)
Call Barring ( Incoming / Outgoing )
MWI ( Message Waiting Indicator ) ( RFC-3842 )
Physical Interfaces:
o LAN Ports (Switch)
* 5 X Gigabit Ethernet (1000Mb/s) Ports
* Port-Based VLAN (Inclusive/Exclusive Groups)
* 802.1q VLAN Tagging
o WAN Ports:
* WAN1 : Gigabit Ethernet (1000Mb/s Interface)
* WAN2 : Gigabit Ethernet (1000Mb/s Interface)
* WAN3 : USB Port for 3G Cellular Modem or Printer
Performance:
* Firewall: Up to 300Mb/s
* IPSec VPN: Up to 50Mb/s
Load Balance/Failover Features:
* Outbound Policy-Based Load-Balance
* WAN Connection Fail-over
* BoD (Bandwidth on Demand)
Wireless LAN Features
* 802.11b/g/n
* 802.11b/g/n/a
* Simultaneous Dual-Band Operation – 2.4Ghz/5Ghz
* Multiple SSID : Create up to 4 virtual wireless LANs (independent or joined)
* Packet Aggregation and Channel Bonding
* Optional Higher Gain or directional aerials available – Click Here.
* Active Client List in Web Interface
* Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
* 64/128-bit WEP Encryption
* WPA/WPA2 Encryption
* Switchable Hidden SSID
* Restricted access list for clients (by MAC address)
* Time Scheduling (WLAN can be disabled at certain times of day)
* Access Point Discovery
* WDS (Wireless Distribution system) for WLAN Bridging and Repeating
* 802.1x Radius Authentication
* Wireless VLAN
* Wireless Rate-Control
* Automatic Power Management
* 802.11e WMM (Wi-Fi Multimedia)
WAN Protocols (Ethernet):
* DHCP Client
* Static IP
* PPPoE
* PPTP
* L2TP *
* BPA
Firewall & Security Features:
* CSM (Content Security Management):
* URL Keyword Filtering – Whitelist or Blacklist specific sites or keywords in URLs
* Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)
* Prevent accessing of web sites by using their direct IP address (thus URLs only)
* Blocking automatic download of Java applets and ActiveX controls
* Blocking of web site cookies
* Block http downloads of file types :
* Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
* Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
* Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
* Time Schedules for enabling/disabling the restrictions
* Block P2P (Peer-to-Peer) popular file sharing programs
* Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
* Multi-NAT, DMZ Host
* Port Redirection and Open Port Configuration
* Policy-Based Firewall
* MAC Address Filter
* SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
* DoS / DDoS Protection
* IP Address Anti-spoofing
* E-Mail Alert and Logging via Syslog
* Bind IP to MAC Address
Bandwidth Management:
* QoS
* Guaranteed Bandwidth for VoIP
* Class-based Bandwidth Guarantee by User-Defined Traffic Categories
* Layer 2&3 (802.1p & TOS/DCSP)
* DiffServ Code Point Classifying
* 4-level Priority for each Direction (Inbound / Outbound)
* Bandwidth Borrowed
* Temporary (5 minute) Quick Blocking of any LAN Client
* Bandwidth / Session Limitation (with automatic adjustment)
* TOS/DSCP QoS Mapping
* Smart Bandwidth Limitation (Triggered by Traffic/ Session)
Network/Router Management:
* Web-Based User Interface (HTTP / HTTPS)
* CLI ( Command Line Interface ) / Telnet / SSH
* Administration Access Control
* Configuration Backup / Restore
* Built-in Diagnostic Function
* Firmware Upgrade via TFTP / FTP
* Logging via Syslog
* SNMP v3 Management with MIB-II
* TR-069
* TR-104
VPN Facilities:
* Up to 32 Concurrent VPN Tunnels (incoming or outgoing)
* Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
* IPSec Main and Agressive modes
* Encryption : MPPE and Hardware-Based AES / DES / 3DES
* Authentication : Hardware-Based MD5 and SHA-1
* IKE Authentication : Pre-shared Key or X.509 Digital Signature
* SSL / OpenVPN VPN for teleworkers – Up to 5 simultaneous users. Proxy or tunnel
* LAN-to-LAN & Teleworker-to-LAN connectivity
* DHCP over IPSec
* NAT-Traversal ( NAT-T )
* Dead Peer Detection (DPD)
* VPN Pass-Through
* M
