Description

DrayTek Vigor 2925n Dual WAN w/ WiFi

• Dual Gigabit Ethernet WAN port for failover and load-balancing
• Two USB ports for connection to Two 3.5G/4G LTE USB mobiles, FTP server and network printer
• 5 x Gigabit LAN ports with multiple subnets
• Object-based SPI Firewall and CSM (Content Security Management) for network security
• VLAN for secure and efficient workgroup management
• 50 VPN tunnels with comprehensive secure protocols
• VPN load-balancing and backup for site-to-site applications
• Integrated with high-performance IEEE 802.11n wireless access point
• Embedded Central VPN Management for 8 remote Vigor routers
• Embedded Central AP Management for multi-deployed Vigor wireless access points *
• Working with Smart Monitor Network Traffic Analyzer (50-nodes)
• Working with VigorACS SI Central Management for multi-site deployment

Vigor2925 Series is the IPv6 ready Dual Gigabit Ethernet WANs and Dual USB WANs broadband security firewall router. The
product range is from Vigor2925, Vigor2925n, Vigor2925n plus, and Vigor2925Vn plus.

It ensures the business continuity for today and the future IPv6 network. Its two gigabit Ethernet WAN ports can accept various high-speed Ethernet-based
WAN links via FTTx/xDSL/Cable. The 2 USB ports are for 3.5G/4G LTE mobile broadband access. With the multi-WAN accesses, Vigor2925 series routers provides
flexible and reliable broadband connectivity for the small business office. The VPN backup and VPN load balancing assures business continuity via multi-WAN
connection to the Internet. The bandwidth management, Quality of Service, VLAN for flexible workgroup management, User Management for authentication, Route
Policy, Central VPN Management, Central AP Management and Firewall serve your daily office network to bring in more business opportunities.

Dual Gigabit Ethernet WAN ports for failover and load-balancing

The Gigabit Ethernet WAN ports cater for any type of Internet access, including FTTx, xDSL and Cable fitting your local infrastructure. You can then use
both WAN 1 and WAN 2 for failover, ensuring that you will always have an access to the Internet even if one of the WAN fails, or for load-balancing so the
2 WANs share Internet traffic requirements of your organization.

2 USB 2.0 ports for 3G/4G LTE mobile, FTP drive and network printers

The two USB ports can be used for the connection of 3G/4G mobile broadband dongle, FTP drive and network printers. A 3G/4G mobile broadband connected to
one of the 2 USB ports can be used as a second WAN for bandwidth management. The USB WAN interface can also be the primary access if the local fixed line
service hasn’t been deployed yet. You can have 2 USB 3G/4G dongles connected to the USB ports, and assign one of these (WAN 3) to be the primary access and
the other (WAN 4) as the fail-over back-up. And, you have the flexibility to convert back to fixed line services when these become available.

Secured Networking

DrayTek Vigor2925 series inherited versatile firewall mechanism from previous Vigor series routers. The firewall allows setting of Call/Data Filters and
DoS/DDoS prevention, whereas the CSM covers IM/P2P/Protocol filter, URL Content Filter and Web Content Filter. The object-based design used in SPI
(Stateful Packet Inspection) firewall allows users to set firewall policy with ease. The object-based firewall is flexible and allows your network be safe.
With Objects settings, you can pre-define objects or groups for IP, service type, keyword, file extension, etc., and mix these with the Time Scheduler or
the VLAN groups as required. Altogether this gives you peace of mind whether you are guarding a complicated network or a small office. The DoS/DDoS
prevention and URL/Web content filter strengthen the security outside and control inside. The enterprise-level CSM (Content Security Management) enables
users to control and manage IM (Instant Messenger) and P2P (Peer-to-Peer) applications more efficiently. The CSM hence prevents inappropriate content from
distracting employees and impeding productivity. Furthermore, the CSM can keep office networks threat-free and available.

By adoption of the world-leading Cyren GlobalView Web Content Filtering, you can block whole categories of web sites (e.g. sports, online shopping),
subject to an annual subscription to the Cyren GlobalView WCF, which is timely updated with changed or new site categorizations. A free 30-day trial can be
activated via activation wizard of Vigor2925 series routers’ web user interface.

The “User Management” implemented on your router firmware can allow you to prevent any computer from accessing your Internet connection without a username
or password. You can set scheduler or maximum usage time to your employees within office network. The user accounts can also be restricted by any other
aspect of the firewall rule on a user-by-user basis.

The Vigor2925 series support DrayTek’s SmartMonitor network traffic analyzer (up to 50 nodes), which captures actual live data of activities in your
managed network, such as the content of MSN entering to or out of your network. You can track specified files download/upload or view statistics on data
type activities to realize what corporate related information have been released accidentally or on purpose.

IPv6

Because the IPv4 addresses are limited and IPv6 allows for a larger address space and much more efficient routing. The Vigor2925 series support IPv6 and
IPv4. The Vigor2925 series can support IPv6 broker/tunnel services to provide IPv6 access using either AICCU or TSPC via 3rd party IPv6 providers if your
ISP does not support IPv6 yet.

• can be run on any one of the WAN ports (ADSL/VDSL2, Ethernet or 3G; but the USB WAN port can run AICCU/TSPC tunnel mode only)

• can connect to direct native IPv6 ISPs

• can build tunnel to 3rd party IPv6 brokers using either AICCU or TSPC methods

• Default stateful firewall for all IPv6 LAN clients/ devices
• DHCPv6 Client
• Static IPv6 Client

• DHCPv6 & RADVD (Router Advertisement Server) for client configuration

• QoS for IPv6 with DiffServ
• IP Filtering Rules
• Router Management over IPv6 (Telnet/HTTP) with IPv6 access list
• Concurrent operation with IPv4 (“Dual-Stack”)
• Other router features are only available on IPv4

Vigor2925 Series is the IPv6 ready dual WAN broadband security firewall router. It ensures the business continuity for today and the future IPv6 network.
Its two gigabit Ethernet WAN port can accept various high-speed Ethernet-based WAN links via FTTx/xDSL/Cable. The 2 USB ports are for 3G/4G LTE mobile
broadband access. With the multi-WAN accesses, Vigor2925 routers support bandwidth management functions such as failover and load-balancing, making them
ideal solutions for reliable and flexible broadband connectivity for the small business office.

The specifications cover many functions that are required by modern day businesses, including secure but easy to apply firewall, comprehensive VPN
capability, Gigabit LAN ports, USB ports for 3G/4G mobile dongles, FTP servers and network printers, VLAN for flexible workgroup management, and much more.

Load-balance and backup

VLAN for Secure and Efficent Workgroup Management

VPN backup

CVM (Central VPN Management)

Support Smart Monitor up to 50 PC Users

AP Management

Security & Productivity –SSID

DrayTek Vigor 2925n Features

WAN Feature

• Ethernet WAN
• IPv4 – DHCP Client, Static IP, PPPoE, PPTP, L2TP, 802.1p/q Multi-VLAN Tagging
• IPv6 – Tunnel Mode: PPP, TSPC, AICCU, 6rd* (6rd will be supported by firmware v3.7.3)
• USB WAN
• Outbound Policy-based Load-balance
• WAN Connection Failover
• WAN Budgets*
• 50,000 NAT Sessions

Network Feature

• DHCP Client/Relay/Server
• IGMP Version 2 and Version 3
• IGMP Snooping
• Dynamic DNS
• NTP Client
• Call Scheduling
• RADIUS Client
• DNS Cache/Proxy
• UPnP 30 sessions
• Multiple Subnets
• Port-based/Tag-based VLAN (802.1q)
• Layer-2 QoS (802.1p)
• Routing Protocol:
• Static Routing
• RIP V2
• Policy Routing
• DNS Cache/Proxy and LAN DNS

VPN

• Up to 50 VPN Tunnels
• Protocol : PPTP, IPsec, L2TP, L2TP over IPsec
• Encryption : MPPE and Hardware-based AES/DES/3DES
• Authentication : MD5, SHA-1
• IKE Authentication : Pre-shared Key and Digital Signature (X.509)
• LAN-to-LAN, Teleworker-to-LAN
• DHCP over IPsec
• IPsec NAT-traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-through
• VPN Wizard
• mOTP
• SSL VPN (Up to 25 Tunnels)
• VPN Trunk (Load-Balancing/Backup)

Content Security Management

• URL Content Filter:
• URL Keyword Filter (White List and Black List)
• Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
• Firewall
• Multi-NAT, DMZ Host, Port-redirection and Open Port
• Object-based Firewall, Object IPv6, Group IPv6
• MAC Address Filter
• SPI (Stateful Packet Inspection) (Flow Track)
• DoS / DDoS Prevention
• IP Address Anti-spoofing
• E-mail Alert and Logging via Syslog
• Bind IP to MAC Address
• Time Schedule Control

USB

• 3.5G (HSDPA)/4G (LTE) as WAN
• Printer Sharing
• File System :
• Support FAT32 File System
• Support FTP Function for File Sharing
• Support Samba for File Sharing

Network Management

• Web-Based User Interface (HTTP/HTTPS)
• Quick Start Wizard
• Dashboard
• CLI (Command Line Interface, Telnet/SSH)
• Administration Access Control
• Configuration Backup/Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP/FTP/HTTP/TR-069
• Logging via Syslog
• SNMP Management MIB-II (v2/v3)
• Object-based SMS/ Mail Alert
• Management Session Time Out
• 2-level management (Admin/User Mode)
• TR-069
• User Management
• AP Management *
• External Device
• LAN Port Monitoring
• Support Smart Monitor (50)