2.5Gb Ethernet Dual-WAN Firewall Router & VPN Concentrator
The DrayTek Vigor 2962 Dual-WAN Load Balancing Firewall VPN router surpasses Gigabit speeds, to get the best performance out of FTTP Fibre Broadband and more. Connects to 2.5Gb Ethernet and SFP Fibre, for LAN or WAN use.
The Vigor 2962 provides a reliable, flexible, and secure network solution with extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls.
An ideal VPN concentrator with 500Mbps SSL VPN performance. Connect up to 50 SSL VPN & OpenVPN users, or 200 IPsec tunnels, simultaneously. With up to 20 LAN subnets, BGP and OSPF, it’s well equipped to manage larger, more complex networks and Multi Occupancy Offices.
2.5 Gigabit, Ethernet & SFP Dual WAN Load Balancer
The Vigor 2962 is a Dual-Ethernet WAN router featuring VPN, advanced routing, firewall, content filtering, bandwidth management and more. It offers high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP), Gigabit and above Internet connections.
Offering up to 2.2Gbps single or dual-WAN of throughput, all with Content Filtering, Quality of Service and Bandwidth Management features enabled.
Route Policy - Powerful Routing Management
Take control of routing to the Internet and more. Define where and how outbound traffic is routed, with Route Policy:
Flexible LAN/WAN Ports
The Vigor 2962 router provides a multitude of Ethernet port connection types for either Internet or LAN usage, with options for 2.5 Gigabit Ethernet, Gigabit SFP and Gigabit Ethernet connections.
Because 2.5Gb Ethernet & SFP may be used for either LAN or WAN, you can select either to operate as LAN ports, using the neighbouring Gigabit Ethernet ports for Internet connectivity instead.
This allows you to connect the Vigor 2962 across Fibre, or connect up devices with higher than gigabit throughput, such as Network Attached Storage, a Server, or a wireless access point
Ideal VPN router for SMB
Virtual Private Networking (or VPN) is a feature central to most DrayTek routers. VPNs can be used to link branch and remote offices to the head office. As well as linking mobile teleworkers or people working from home in to the office network.
The Vigor 2962 features 900 Mbps IPsec VPN throughput and 200 concurrently active IPsec VPN connections, making it an ideal VPN router for any application.
With support for all major VPN protocols it can connect to VPN services, link up remote offices, home workers and teleworkers. Connects to DrayTek and other manufacturers routers, with IPsec IKEv1 & IKE2, IPsec EAP and IPsec XAuth authentication. Along with DrayTek's SSL VPN which is ideal for Dial-In remote teleworker VPNs, L2TP (over IPsec) and OpenVPN.
Manage Dial-In teleworker user authentication through the router's web UI with usernames and passwords, or use mOTP 2-factor authentication for IPsec, SSL VPN and L2TP Teleworker VPN connections. Alternatively, you can manage user authentication from your network servers, with support for RADIUS, TACACS+ and Active Directory (LDAP) authentication.
Connecting Remote Sites with LAN to LAN VPN
Create up to 200 fast and secure IPsec VPN tunnels concurrently with the Vigor 2962, an ideal router to connect up multiple sites and home offices.
Connect VPNs from behind NAT with DrayTek's VPN Matcher
Connecting a VPN between two locations normally requires that one or both sides is accessible directly from the Internet. This can sometimes work from behind another router if the VPN is passed through NAT (Network Address Translation). But when one or both sides are using connections like Mobile Broadband (4G/LTE), or are behind Carrier-Grade NAT, it may become impossible to connect to connect a VPN.
With DrayTek's VPN Matcher service, DrayTek routers connected through NAT, be it CG-NAT or 4G/LTE, can connect LAN-to-LAN VPN tunnels where otherwise they could not. Dial-In Teleworkers can also connect to a router behind NAT with the DrayTek SmartVPN client.
Connect an OpenVPN Teleworker to a DrayTek router behind NAT
Connect two DrayTek router's behind NAT with a LAN-to-LAN VPN
DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN
DrayTek's SSL VPN uses SSL / TLS to securely transport VPN traffic, the same encryption used for HTTPS and protecting important Internet traffic such as online banking.
Up to 50 remote workers can connect at once to the DrayTek Vigor 2962 via SSL VPN. Use the free DrayTek SmartVPN app to connect, with versions available desktop computers (Windows & macOS) and mobile devices (Apple iOS and Android).
Download the free SmartVPN client and learn more about DrayTek SSL VPNs here.
Manage Multiple Networks
With 2 dedicated LAN ports and 3 flexible LAN/WAN ports, the Vigor 2962 can connect up to 5 devices directly with a single Ethernet WAN, or 4 devices with dual WAN configurations.
With Multiple LAN subnets and VLANs, the Vigor 2962 can manage up to 20 separate networks. For instance, an internal network with a separate network for Guests to use, completely separate from the private network. Or providing Netork and Internet access for multiple offices in the same building. Each network with its own Content Filtering, Firewall, Quality of Service and Route Policy applied.
The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the DrayTek VigorSwitch G1080 8-port switch, for additional network ports. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 903, to provide separate wireless networks with VLANs.
Designed for Central Management
Manage the Vigor 2962 and other DrayTek routers, wireless access points and switches through DrayTek's central management platform; VigorACS.
With VigorACS, you have full network visibility, control and reporting available, scaling from one site to hundreds or thousands of sites. It's ideal for Dealers and Systems Integrators to manage customer devices, or for any user that wants oversight of their DrayTek devices across multiple sites.
VigorACS provides remote management to the same level as managing locally, and adds some additional capabilities such as scheduled bulk firmware upgrades, VPN and AP profile management across sites, as well as automated alarms for issues on remote sites, such as an Internet connection droppings.
For full details of VigorACS, click here.
Robust & Comprehensive IPv4 / IPv6 Firewall
DrayTek's Vigor routers take security seriously with a comprehensive Firewall and Content Filter system. Protect against IP-based attacks, unauthorised remote access and denial of service (DoS) attacks with the Firewall.
Object-based management makes it easier to manage the Firewall to suit homes and small office environments with IP and MAC filtering objects and the capability of adding objects into groups to apply filtering. Content Filtering can be applied the same way, with options to apply Firewall & Content Filtering to specified groups or networks, such as a guest network. Filtering can be scheduled to allow or disallow access to websites during selected times of day.
Both IPv4 and IPv6 are supported by the router's firewall with a Dual-Stack IPv4/IPv6 implementation, which allows the router to apply the object-based Firewall, Content Filtering and VLANs to both network types simultaneously.
Web Content Filtering with DNS Filter
Control access to web content with the Vigor 2962, which allows you to restrict web access and block downloads, with options to set up blacklists (allow all but these) or whitelists (allow only these), to restrict access to wasteful or harmful content on the Internet. Set up restrictions per user, universally or per PC, with extensive scheduling options.
Filtering of encrypted websites using HTTPS and SSL is also possible, where URLs are more difficult to block because they are encrypted.
Category-based web filtering of the Internet, allows you to select tick-boxes such as 'gambling', 'adult sites' etc., This is enabled with the GlobalView service is updated continuously as web sites are added and changed, for instance if a web-site is compromised and infected with Malware, it would be re-categorised as malicious rapidly and automatically. GlobalView is enabled with an annual subscription and a free 30-day trial is included with each new router.
DrayDDNS - DrayTek Dynamic DNS Address
Each new DrayTek router can access a free Dynamic DNS address from DrayDDNS. With this, you can link the router's IP address "drayddns.com" hostname that's easily remembered, such as "vigor2962.drayddns.com".
When the Internet connection's IP is changed, or if the router switches Internet connection, this dynamic DNS address is updated automatically. Because the DrayDDNS hostname will always link to your router, it's easy to locate the router when an IP change occurs or connections switch over to a backup. This allows you to connect to the router's remote management, or enables remote users to connect to the router's VPN, without requiring a static IP address.
In addition, the DrayDDNS hostname can be securely authenticated over HTTPS, with automated certificate generation and renewal through LetsEncrypt. This provides the router with a trusted SSL/TLS certificate for remote management web access, or VPN connections.
High Availability - Hardware Failover
To ensure constant uptime regardless of conditions, the Vigor 2962 can implement High Availability (HA), using a primary and secondary router to provide a router backup solution to your network.
Should the primary router go offline for any reason, the backup router will take over the Internet and VPN connections, to continue providing connectivity without manual intervention. Removing the risk of a single point of failure within the network design.
Config Sync allows two routers to be managed as a single entity. Any changes made to the primary router are automatically propagated onto the secondary router. This makes the pair easier to manage and ensures that the backup is ready to take over whenever it's needed.
Read more about DrayTek High Availability here.
Manage Guest WiFi with Hotspot Web Portal
Provide Guest Wireless access to customers easily with DrayTek's Hotspot Web Portal features. A captive portal system that's fully customisable and can be applied to the router's LAN interfaces and VLANs, ideal for use with wireless access points as well as the router's own wireless.
Users can be authenticated by PIN with SMS, Email or Printer options. There are extensive options for external authentication, through Google/Facebook or with external captive portal services such as Purple WiFi using standard RADIUS authentication.
When users connect to a DrayTek network with Hotspot Web Portal enabled, they are presented with your company's usage information and branding. Access to selected websites and services can be allowed with a Walled Garden / Whitelist. To gain access to the Internet, depending on how you've configured the Web Portal profile, users can simply click-through, authenticate with Google/Facebook. Or with a PIN generated by an operator / printer on site, or by sending an SMS or E-Mail to the user..
Once authenticated, the router provides internet access until it times out, or until the user reaches their data quota / usage limit
Read more about Hotspot Web Portal here.
Quality of Service & Bandwidth Control
Latency-sensitive applications can be prioritised by the router with Quality of Service.
App QoS makes it significantly easier to set up Quality of Service, just select the services or applications that you want to prioritise, such as Skype or Zoom.
With 4 queues, you can give priority to servers & PCs (IP address), VoIP & DNS protocols, or with packet tags used by IP phones (802.1p and DSCP).
Auto Voice VLAN gives priority to VoIP calls going through the router with manual configuration being required.
Use Bandwidth Limit to control speeds for selected clients, groups of IPs or VLANs. This bandwidth limit can be individual or shared between a group, for instannce limiting a Guest network to 30mbps bandwidth total.
Central AP & Switch Management
The Vigor 2962 manages large networks of DrayTek VigorAP access points and VigorSwitch switches connected to it. This enables you to centrally control, manage and administer multiple AP & Switch devices installed around your building/campus from just the one router.
Central AP Management - Manage 50 VigorAPs
The DrayTek router operating as the wireless controller can provision up to 50 DrayTek VigorAP access points with Central AP Management profiles.
With Auto Provisioning, the router configures any newly installed VigorAP access point with the selected auto provisioning profile, including VLAN, wireless networks settings and access control lists. No manual set up required for each newly installed VigorAP.
Central Switch Management - Manage 30 VigorSwitches
DrayTek VigorSwitch switches can be provisioned and managed through the router with DrayTek’s Central Switch Management system, allowing you to:
- Easily provision VLAN configuration and other port settings directly from the router.
- Set bandwidth rate limits and schedules for individual ports.
- Log switch events for alert notifications if network problems occur
- At a glance see the devices connected on your network with a virtual topology.
Provision & Manage VigorAPs with a DrayTek Vigor router
For further details of the central management feature, click here.
Dashboard
View the status of the Vigor 2962 in one place from the router's Dashboard.
Quality of Service
Ensure efficient use of your Internet connections with QoS. Prioritise important traffic over bulk traffic and allocate bandwidth to services:
Extensive User Management with PPPoE Server
Manage user access with data and time quota options along with per-user Firewall and Content Filtering. The Vigor 2962 also features a PPPoE server to provide direct network access to users or offices:
Flexible LAN/WAN Port Settings
Configure four of the Vigor 2962's six ports for either LAN or WAN usage, allowing you to use the 2.5 Gigabit Ethernet or SFP ports for either purpose:
CSM - Web Content Filtering, URL Filtering & App Enforcement
Control access to the Internet, either for all users or specific networks / clients only. Category based filtering greatly simplifies the task of filtering Internet access:
Hotspot Web Portal
Provide customised Hotspot web portal networks for customers, provided by wireless access points connected to the router. Extensive configuration with PIN code access and Facebook / Google login options:
Manage up to 20 Networks
Support for up to 20 separate LAN subnets with VLANs, Routing / NAT modes and over 1000 DHCP addresses per subnet:
Policy-based Routing
Configure Route Policy rules to control how outbound traffic is routed. Send traffic from specified LAN IPs, to Internet domains (i.e. www.bbc.co.uk) through a specific WAN interface, VPN or LAN Gateway:
Remote Packet Capture
Troubleshoot network issues remotely with ease. Packet captures are available to download through the router's web interface:
Specifications
Vigor 2962 Router
Key Specifications
- Dual-WAN, 2.5 Gigabit, Ethernet & SFP WAN Router
- Load Balancing & Failover with Route Policy for advanced routing management
- Up to 2.2Gbps Total Throughput for single or multi-WAN configurations
- Manage larger networks with 300k sessions, BGP & OSPF
- Up to 900Mbps IPsec VPN Throughput
- 200 LAN-to-LAN & Remote Teleworker VPN Tunnels
- 50 DrayTek SSL VPN or OpenVPN Tunnels
- Flexible port configuration, up to 5 LAN ports with 2.5GbE, SFP & RJ-45 Gigabit Ports
- 20 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
- Optional VigorCare Available
- Can be centrally Managed by VigorACS
This model:
| UK Product Code | EAN | Product Name | Product Description |
|---|---|---|---|
| V2962-K | 4710484742001 | Vigor 2962 (UK/IE) | Vigor2962 Dual WAN 2.5G Router |
The EAN is a barcode number which identifies the unique specific product type. It is separate to the product serial number which is unique to each product. The EAN will also appear on your product box when you receive it so you can double check that you have been sent the right product.
These product codes are for UK/Irish products only. Please check with your local DrayTek office for the correct part nos. for your region if you are not in the UK/IE to ensure that you get the correct hardware and local support/warranty.
Technical Specification (UK Hardware Spec.)
Physical Interfaces
- WAN/LAN Switchable Ports:
- 1x 2.5Gb Ethernet (2.5G/1G/100M/10M), RJ-45
- 1x SFP (1G/100M) module slot or Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x Gigabit Ethernet (1G/100M/10M), RJ-45
- LAN Ports: 2x Gigabit Ethernet (1G/100M/10M), RJ-45
- Recessed Factory Reset button
- USB Ports for USB thermometer, USB storage or Printer:
- 1x USB 3.0 Port
- 1x USB 2.0 Port
Performance
- NAT Performance:
- 2.2Gb/s Total NAT Throughput for single or dual WAN
- 300,000 NAT Sessions
- VPN Performance:
- 900 Mb/s IPsec (AES256) VPN Performance
- 500 Mb/s SSL VPN Performance
- Max. 200 Concurrent VPN Tunnels
- Max. 50 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
- Two WAN interfaces - Selectable from ports 1 to 4:
- P1: RJ-45 2.5Gb Ethernet
- P2 (left): SFP 1Gb module slot
- P2 (right): RJ-45 1Gb Ethernet
- P3: RJ-45 1Gb Ethernet
- P4: RJ-45 1Gb Ethernet
Internet Connection
- Load Balancing: IP-based, Session-based
- Hardware Acceleration
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget*
- Dynamic DNS
- DrayDDNS – with automated LetsEncrypt Certificates
- Full Feature-set Hardware Acceleration:
- Hardware Accelerated Quality of Service
- Multi-WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
- IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
- IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
- USB 4G/LTE Modem: TSPC, AICCU
Firewall & Content Filtering
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter (requires GlobalView subscription)
NAT Features
- NAT Port Redirection (100 entries)
- Open Ports (100 entries)
- Port Triggering
- DMZ Host
- ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
- VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 20 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 20 VLANs
- IP Routed Subnet
- Link Aggregation (LAG) for LAN ports 3 & 4* - New!
- Wired 802.1x Port Authentication*
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 1021 addresses for all LAN subnets
- LAN IP Alias
- Port Mirroring (physical port or .pcap download)
- Local DNS Server
- Conditional DNS Forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, Social Login, SMS PIN, Email PIN, Voucher PIN, RADIUS, External Portal Server
Networking Features
- Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
- High Availability: Active-Standby, Hot-Standby
- DNS Security (DNSSEC)
- Local RADIUS server
- SMB File Sharing (Requires external storage)
- Multicast: IGMP Proxy, IGMP Snooping* & Fast Leave, Bonjour
Routing Features
- IPv4 & IPv6 Static Routing
- Inter-VLAN Routing
- RIP v1/v2/ng
- BGP
- OSPF - New!
VPN - Virtual Private Networking Features
- Up to 200 active VPN tunnels - including up to 50 SSL VPN or OpenVPN Tunnels
- LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: MPPE, DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- VPN Trunk (Redundancy): Load Balancing, Failover
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
- Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
- DHCP over IPsec
- DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
- VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- DrayTek SSL VPN
- OpenVPN (Remote Dial-In User only, LAN to LAN supported in a future firmware release)
- GRE over IPsec
- PPTP
- L2TP, L2TP over IPsec
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
Quality of Service (QoS)
- Classify via TOS, DSCP, 802.1p, IP Address, Service Type
- 4 Priority Queues
- App QoS
- VoIP Prioritization
- Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export
- Firmware Upgrade via TFTP, HTTP, TR-069
- 2-Level Administration Privilege
- Access Control Features: Access List, Brute Force Protection
- Syslog
- SMS, E-mail Notification Alert
- User-defined MSG LED on router, displays ACS connection status by default* – New!
- SNMP: v1, v2c, v3
- Managed by VigorACS
Router Central Management Features
- AP Management: Up to 50 VigorAP access points
- Switch Management: Up to 30 VigorSwitch network switches
Operating Requirements
- Rack Mountable with fittings included – 1U height
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Power Consumption: 15 Watts Max.
- Dimensions:
- 273mm Width
- 170mm Depth
- 45mm Height
- Weight: 1.7kg
- Warranty
- Two (2) Year Manufacturer's RTB
- Optional VigorCare Enhanced Warranty Available
- VigorCare C3 3 Year Subscription: VCARE-C3
- VigorCare C5 5 Year Subscription: VCARE-C5
- Power Requirements: 220-240VAC
Box Contents
- Vigor 2962 router
- Quick Start Guide
- 1u Rack Mount Fittings
- 2m Cat-5e RJ-45 Network Cable
- IEC C13 Power Cord with UK Plug
* - Feature will be supported in a firmware version released after the launch date of the router
Copyright © 2024 DrayTek