The DrayTek Vigor2950 series are Broadband Security VPN Routers with a Dual-WAN interface. The Draytek Vigor 2950GG provides policy-based load-balancing, fail-over and BoD ( Bandwidth on Demand ) , it also integrates IP layer QoS, and NAT session/bandwidth management to help users control and allocate bandwidth on network.
Dual WAN Application<-b>
The Dual WAN functionality allows users to access Internet and combine the bandwidth of the WAN ports to speed up the transmission through the network.
Each WAN port can connect to different ISPs, even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable, etc.). If any connection problems occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation.
SSL VPN Application<-b>
Without the necessity of installing VPN client on individual PC, the Secure Socket Layer (SSL) virtual private network (VPN) facility lets remote workers connect to the office network at any one time. SSL is supported by standard web browsers such as FireFox and IE. For users of small offices and teleworkers who need to access enterprise internal applications, file server and file sharing, DrayTek Vigor2950G security router series allow up to 50 concurrent SSL sessions.
Firewall & VPN Application<-b>
By adopting hardware-based VPN platforms, hardware encryption of AES/DES/3DES and hardware key hash of SHA-1/MD5, the router increases the VPN performance greatly and offers several protocols ( such as IPSec/PPTP/L2TP ) with support for up to 200 VPN tunnels.
The object-oriented design used in SPI ( Stateful Packet Inspection ) firewall allows users to set firewall policies with ease. CSM ( Content Security Management ) enables users to control and manage IM (Instant Messenger) and P2P (Peer to Peer) application more efficiently than before. Also note that the Dos/DDoS prevention and URL/Web content filter strengthen the security outside and inside the network.
Quick SpecsDrayTek 2950 Router<-b>
Outbound Policy-Based Load-Balance
BoD (Bandwidth on Demand)
WAN Connection Fail-over
Up to 50 SSL VPN Tunnels
SSL Web Proxy
SPI ( Stateful Packet Inspection )
CSM (Content Security Management) for IM/P2P Application
Multi-NAT, DMZ Host, Port-Redirection/Open Port
Policy-Based IP Packet Filter
IP Address Anti-Spoofing
E-Mail Alert and logging via Syslog
Bind IP to MAC Address
Up to 200 VPN Tunnels
Protocol: PPTP, IPSec, L2TP, L2TP over IPSec
Encryption: AES, MPPE and Hardware-Based DES/3DES
Authentication: Hardware-Based MD5, SHA-1
IKE Authentication: Pre-shared Key and Digital Signature (X.509)
DHCP over IPSec
Dead Peer Detection (DPD)
Class-based Bandwidth Guarantee by User-Defined Traffic Categories
DiffServ Code Point Classifying
4-level Priority for Each Direction (Inbound/Outbound)
Web-Based User Interface (HTTP/HTTPS)
Quick Start Wizard
CLI (Command Line Interface) / Telnet/SSH*
Administration Access Control
Built-in Diagnostic Function
Firmware Upgrade via TFTP/FTP
Logging via Syslog
SNMP Management with MIB-II
URL Keyword Blocking (White list and Black list)
Java Applet, Cookies, Active X, Compressed / Executable / Multimedia File Blocking
Web Content Filter (SurfControl)
Time Schedule Control
Routing Protocol: - Static Routing - RIP V2