Description

DrayTek Vigor 2925 DualWAN Gigabit Router – with 2xGigaBit WAN, 5xGigaBit LAN, 2xUSB, 50xVPN, 25xSSL-VPN, VLAN

• Support IPv6 & IPv4 network
• Dual Gigabit Ethernet WAN port for failover and load-balancing
• 5 x Gigabit LAN ports with multiple subnets
• 2 USB 2.0 ports for 3G/4G mobile, FTP server and network printers
• Object-based SPI Firewall and CSM (Content Security Management) for network security
• VLAN for secure and efficient workgroup management
• 50 VPN tunnels with comprehensive secure protocols (25 SSL VPN options)
• VPN load-balancing and backup for site-to-site applications
• CVM (Central VPN Management)
• Supports Smart Monitor Traffic Analyzer (50-nodes)
• Flexible Network Management

The Vigor130 is an IPv6 ready compact VDSL2 router with ADSL2/2+ fallback for SOHO and residential broadband access requirement. This compact router is
capable to manage the latest VDSL2 feed and backward compatible with the existed ADSL line if the infrastructure is not ready yet.

Multi-PVC function makes the triple-play deployment with ease. The Vigor130 can satisfy the different services such as Data/Video/VoIP/Management provided
by ISPs by the single VDSL2/ADSL WAN port. And its Gigabit Ethernet LAN port allows devices in the LAN network to get faster data transmission for
essential applications.

Besides powerful firewall protection against malicious Denial of Service (DoS) attacks, the Vigor130 is designed with more advanced security feature such
as Stateful Packet Inspection (SPI) to offer network reliability by detecting attacks and prohibits malicious penetrating packets from entering internal
network. For preventing access to inappropriate websites, the Vigor130 offers URL filtering to set the customized rules.

Vigor2925 Series is the IPv6 ready dual WAN broadband security firewall router. It ensures the business continuity for today and the future IPv6 network.
Its two gigabit Ethernet WAN port can accept various high-speed Ethernet-based WAN links via FTTx/xDSL/Cable. The 2 USB ports are for 3G/4G LTE mobile
broadband access. With the multi-WAN accesses, Vigor2925 routers support bandwidth management functions such as failover and load-balancing, making them
ideal solutions for reliable and flexible broadband connectivity for the small business office.

The specifications cover many functions that are required by modern day businesses, including secure but easy to apply firewall, comprehensive VPN
capability, Gigabit LAN ports, USB ports for 3G/4G mobile dongles, FTP servers and network printers, VLAN for flexible workgroup management, and much more.

Dual Gigabit Ethernet WAN ports for failover and load-balancing

The Gigabit Ethernet WAN ports cater for any type of Internet access, including FTTx, xDSL and Cable fitting your local infrastructure. You can then use
both WAN 1 and WAN 2 for failover, ensuring that you will always have an access to the Internet even if one of the WAN fails, or for load-balancing so the
2 WANs share Internet traffic requirements of your organization.

2 USB 2.0 ports for 3G/4G LTE mobile, FTP drive and network printers

The two USB ports can be used for the connection of 3G/4G mobile broadband dongle, FTP drive and network printers. A 3G/4G mobile broadband connected to
one of the 2 USB ports can be used as a second WAN for bandwidth management. The USB WAN interface can also be the primary access if the local fixed line
service hasn’t been deployed yet. You can have 2 USB 3G/4G dongles connected to the USB ports, and assign one of these (WAN 3) to be the primary access and
the other (WAN 4) as the fail-over back-up. And, you have the flexibility to convert back to fixed line services when these become available.

Object-based SPI Firewall for network security

Like all DrayTek routers, Vigor2925 Series supports Object-based SPI firewall and CSM (Content Security Management). The firewall allows setting of
Call/Data Filters and DoS/DDoS prevention, whereas the CSM covers IM/P2P/Protocol filter, URL Content Filter and Web Content Filter.

With Objects settings, you can pre-define objects or groups for IP, service type, keyword, file extension, etc., and mix these with the Time Scheduler or
the VLAN groups as required. Altogether this gives you peace of mind whether you are guarding a complicated network or a small office.

Secured Networking

DrayTek Vigor2925 series inherited versatile firewall mechanism from previous Vigor series routers. The firewall allows setting of Call/Data Filters and
DoS/DDoS prevention, whereas the CSM covers IM/P2P/Protocol filter, URL Content Filter and Web Content Filter. The object-based design used in SPI
(Stateful Packet Inspection) firewall allows users to set firewall policy with ease. The object-based firewall is flexible and allows your network be safe.
With Objects settings, you can pre-define objects or groups for IP, service type, keyword, file extension, etc., and mix these with the Time Scheduler or
the VLAN groups as required. Altogether this gives you peace of mind whether you are guarding a complicated network or a small office. The DoS/DDoS
prevention and URL/Web content filter strengthen the security outside and control inside. The enterprise-level CSM (Content Security Management) enables
users to control and manage IM (Instant Messenger) and P2P (Peer-to-Peer) applications more efficiently. The CSM hence prevents inappropriate content from
distracting employees and impeding productivity. Furthermore, the CSM can keep office networks threat-free and available.

By adoption of the world-leading Cyren GlobalView Web Content Filtering, you can block whole categories of web sites (e.g. sports, online shopping),
subject to an annual subscription to the Cyren GlobalView WCF, which is timely updated with changed or new site categorizations. A free 30-day trial can be
activated via activation wizard of Vigor2925 series routers’ web user interface.

The “User Management” implemented on your router firmware can allow you to prevent any computer from accessing your Internet connection without a username
or password. You can set scheduler or maximum usage time to your employees within office network. The user accounts can also be restricted by any other
aspect of the firewall rule on a user-by-user basis.

The Vigor2925 series support DrayTek’s SmartMonitor network traffic analyzer (up to 50 nodes), which captures actual live data of activities in your
managed network, such as the content of MSN entering to or out of your network. You can track specified files download/upload or view statistics on data
type activities to realize what corporate related information have been released accidentally or on purpose.

Vigor2925 Series is the IPv6 ready dual WAN broadband security firewall router. It ensures the business continuity for today and the future IPv6 network.
Its two gigabit Ethernet WAN port can accept various high-speed Ethernet-based WAN links via FTTx/xDSL/Cable. The 2 USB ports are for 3G/4G LTE mobile
broadband access. With the multi-WAN accesses, Vigor2925 routers support bandwidth management functions such as failover and load-balancing, making them
ideal solutions for reliable and flexible broadband connectivity for the small business office.

The specifications cover many functions that are required by modern day businesses, including secure but easy to apply firewall, comprehensive VPN
capability, Gigabit LAN ports, USB ports for 3G/4G mobile dongles, FTP servers and network printers, VLAN for flexible workgroup management, and much more.

Load-balance and backup

VLAN for Secure and Efficent Workgroup Management

VPN backup

CVM (Central VPN Management)

Support Smart Monitor up to 50 PC Users

DrayTek Vigor 2925 Features

WAN Feature

• Ethernet WAN
• IPv4 – DHCP Client, Static IP, PPPoE, PPTP, L2TP, 802.1p/q Multi-VLAN Tagging
• IPv6 – Tunnel Mode: PPP, TSPC, AICCU, 6rd* (6rd will be supported by firmware v3.7.3)
• USB WAN
• Outbound Policy-based Load-balance
• WAN Connection Failover
• WAN Budgets*
• 50,000 NAT Sessions

Network Feature

• DHCP Client/Relay/Server
• IGMP Version 2 and Version 3
• IGMP Snooping
• Dynamic DNS
• NTP Client
• Call Scheduling
• RADIUS Client
• DNS Cache/Proxy
• UPnP 30 sessions
• Multiple Subnets
• Port-based/Tag-based VLAN (802.1q)
• Layer-2 QoS (802.1p)
• Routing Protocol:
• Static Routing
• RIP V2
• Policy Routing
• DNS Cache/Proxy and LAN DNS

VPN

• Up to 50 VPN Tunnels
• Protocol : PPTP, IPsec, L2TP, L2TP over IPsec
• Encryption : MPPE and Hardware-based AES/DES/3DES
• Authentication : MD5, SHA-1
• IKE Authentication : Pre-shared Key and Digital Signature (X.509)
• LAN-to-LAN, Teleworker-to-LAN
• DHCP over IPsec
• IPsec NAT-traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-through
• VPN Wizard
• mOTP
• SSL VPN (Up to 25 Tunnels)
• VPN Trunk (Load-Balancing/Backup)

Content Security Management

• URL Content Filter:
• URL Keyword Filter (White List and Black List)
• Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
• Firewall
• Multi-NAT, DMZ Host, Port-redirection and Open Port
• Object-based Firewall, Object IPv6, Group IPv6
• MAC Address Filter
• SPI (Stateful Packet Inspection) (Flow Track)
• DoS / DDoS Prevention
• IP Address Anti-spoofing
• E-mail Alert and Logging via Syslog
• Bind IP to MAC Address
• Time Schedule Control

USB

• 3.5G (HSDPA)/4G (LTE) as WAN
• Printer Sharing
• File System :
• Support FAT32 File System
• Support FTP Function for File Sharing
• Support Samba for File Sharing

Network Management

• Web-Based User Interface (HTTP/HTTPS)
• Quick Start Wizard
• Dashboard
• CLI (Command Line Interface, Telnet/SSH)
• Administration Access Control
• Configuration Backup/Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP/FTP/HTTP/TR-069
• Logging via Syslog
• SNMP Management MIB-II (v2/v3)
• Object-based SMS/ Mail Alert
• Management Session Time Out
• 2-level management (Admin/User Mode)
• TR-069
• User Management
• AP Management *
• External Device
• LAN Port Monitoring
• Support Smart Monitor (50)

Content Security Management

• IM/P2P Applications
• GlobalView Web Content Filter (Powered by

  )

• URL Content Filter
• URL Keyword Blocking (Whitelist and Blacklist)
• Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
• Excepting Subnets