|
| Vigor 2920 Series Router Firewall | SME | |||
 
|
|
Overview
Vigor 2920 Series Router FirewallThe Vigor 2920 series is a dual-WAN port Firewall Router with excellent performance to run both WAN interfacess simultaneously. It also now supports IPv6 - the next generation Internet system (click IPv6 tab below for moe information).Robust & Comprehensive FirewallSecurity is a major feature Vigor 2920 Series. The firewall features measures for protection against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems (see later). The DrayTek object-based firewall allows vast flexibility, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations. Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Filtering using web site categorisations enable you to block whole categories of web sites (e.g. gambling, adult sites etc.), subject to subscription. Dual-WAN Load Balancing & BackupEither (or both) Ethernet WAN ports on the Vigor 2920 can be connected to an ADSL modem, cable modem or any other Ethernet-based Internet feed. When you are using both ports, the secondary interface can be used either for WAN-Backup or load balancing. WAN-Backup provides contingenry (redundancy) in cases of your primary feed or ISP suffering temporary outage. Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switch back to that. In load-balancing mode, the Vigor 2920 will make use of both of your WAN feeds together, spreading your Internet traffic across both either as equally as possible or according to user-configurable rules. For example, you might want all of your VoIP traffic to be routed only through one ISP connection. The Vigor 2920's USB port provides an alternative connection method for Internet backup by connecting to a compatible USB modem (or cellphone) for access to the high speed 3G cellular networks from UK providers such as Vodafone, O2, Orange, 3 and T-Mobile. The 3G access method can be used as your primary/only Internet connection, ideal for temporary locations, mobile applications or where broadband access is not available. Note : For WAN failover you can use only one method at a time, e.g. Ethernet, 3G. WiFiWireless LAN ('n' models only)The Vigor 2920 Series features 802.11n wireless LAN specification and has been certified by the WiFi alliance for cross compatibility and WiFi compliance (including WPA/WPA2 and WMM). 802.11n provides a total wireless bandwidth of up to 300Mb/s using new methods such as packet aggregation and channel bonding. Throughput depends on your own environment (factors such as obstructions, number of hosts and distance all make a significant difference), but actual transfer speeds of 100Mb/s are achievable (based on our real world tests). In addition, 802.11n Draft 2.0 provides greater coverage and resilience to interference compared to previous wireless standards thanks to the MIMO technology and the Vigor's triple-antennae diversity arrangement. This offset arrangement of aerials provides offset paths between hosts so that interference can be overcome. Wireless Security is comprehensive too; the Vigor 2920 Series provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorised users only. The Web interface lets you see how many and which clients are currently connected as well as their current bandwidth usage. An 'instant' block lets you disconnect a wireless user temporarily in case of query. The Wireless VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN. The Multiple SSID features enables you to have up to four distinct or common virtual wireless access points. For example, you could have one for company usage, with access to your company LAN and another for public access which allows internet surfing only. Setting up wireless security is made easier thanks to the WPS feature (WiFi protected setup) whereby your client PC can get it's security keys by pressing a button on the front of the router. If your laptop PC's built-in wireless doesn't support 802.11n wireless, you can use the optional Vigor N65 USB adaptor. Click on 'accessories' for details. For specialist or more demanding coverage applications, optional aerials can be used with the Vigor 2920 to potentially increase the range of wireless coverage (depending on enviroment) or provide directional coverage in order that your wireless transmission is focussed and concentrated into one direction only, for example into a room or across open space. With the increasing popularity of wireless LANs, you will want to choose the least congested wireless channel (Nos. 1-13) for yours. The Vigor can scan and provide a list of all devices in the vicinity so that you can choose the best channel (see screenshot below).
Wireless LAN WDS FacilityVigor 2920 'n' models support a system called WDS (Wireless Distribution System) which enables you to use the wireless capability to bridge to another network, within wireless range. You need an additional compatible wireless router for this of course. Here is a simple example:
With WDS bridging, both networks should be within the same logical IP subnet (IP address range). Once set up, all of the PCs on both sides of the link can access each other, across the wireless bridge. Local wireless devices such as a laptop can continue to use their local access point.
An additional mode, as shown above, called 'repeating', allows you to set up a third station. In the diagram below, the router at 'B' is set up in repeating mode, relaying traffic between LANs at A and C. Therefore, all three physical networks can communicate with each other over the wireless links. Important Note : Wireless performance (speed and range) always depends on your specific environment and will vary considerably. Factors affecting performance include wireless traffic, other networks nearby, site construction, walls, ceilings and other electronic equipment nearby. The product may not be upgradable to future 802.11n standards or be compatible with products from other manufacturers. Speeds quoted are the maximum wireless capacity, including RX/TX capacity, protocol overheads and all clients/hosts connected. 3G3G Cellular Data FeaturesThe Vigor 2920 Series's USB port can host a compatible 3G modem or cellphone for access to the cellular network for full Internet Access. Most UK networks now provide high speed HSDPA data connections at up to 3.6Mb/s download speed. The 3G connection can be used as your primary/only Internet access, or as backup to your main ADSL line connection. This is not only ideal for homes or offices which don't want to pay fixed line + broadband rental, but also for temporary locations, or those to where fixed lines aren't available. With the Wireless LAN equipped models of the Vigor 2920 series, your local users can be connected wirelessly to the router, so instant free 'hotspots' can be deployed quickly and easily. Mains power is required for the router's PSU, but this could be from a mobile generator or equivalent so you need to plan for this.
The Vigor 2920 and 3G cellular modem setup is ideal for:
There is more information about DrayTek 3G solutions here. Note: DrayTek have no control over local network/provider operations, changes in network facilities/tarrifs nor make any claim over specific network compatibility. Please assure yourself that the router will be compatible with your chosen cellular network and provider and that you have adequate signal coverage before committing to any contract term. Please also ensure that your chosen provider and the tariff allows access to all of your required applications (e.g. VPN, VoIP, Messaging etc.) as many packages exist, some blocking certain data types. IPv6IPv6 - Next Generation Internet RoutingThe Vigor 2920 supports IPv6 - the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv4 address space is full up and IPv6 allows for much more efficient routing and a larger address space. IPv6 is supported both from your own ISP, but if your ISP does not (yet) support IPv6, the Vigor 2850 also supports IPv6 broker/tunnel services to provide IPv6 accss using either TSPC or AICCU via 3rd party IPv6 providers. To learn all about IPv6, you can get our detailed guide to IPv6 here.
NASNetwork Attached Storage (NAS)*
* Intended to be added in future firmware version SpecificationVigor 2920 Series - Technical Specification
ScreenshotsYou can also interactively explore the router's web interface. Real-Time Status Display
Web Content Filtering
Diagnostic Tools
Wireless LAN Access Point Scanning
AccessoriesRack Mounting Kit
The RM1 Rackmount Bracket enabled you to fit any Vigor 2920 series router into a standard 19" rack or cabinet. The bracket takes up one rack slot (1U). The front mounted sockets remain fully accessible. For wireless models, we then recommend extension aerials (or aerial extensions) as aerials will not perform well if sited inside your metal cabinet. Directional and Higher-Gain Aerials
Omnidirectional and Unidirectional aerials are available for increased coverage or other specialist requirements. For full specifications, click here. Wireless LAN Adaptors
©2009 SEG. Reproduction prohibited without written permission. Specification subject to change at any time without notice. E&OE. Trademarks are acknowledged of their respective owners. No specific endorsement is implied by the mention of any particular service provider. |
