DrayTek Vigor 2962 2.5Gb Ethernet Dual-WAN Firewall Router + VPN Concentrator - Vigor 2962

DrayTek Vigor 2962 2.5Gb Ethernet Dual-WAN Firewall Router + VPN Concentrator

At a Glance:

• Dual-WAN, 2.5 Gigabit, Ethernet & SFP WAN Router
• Load Balancing & Failover with Route Policy
• Up to 2.2Gbps Total Throughput
• Up to 900Mbps IPsec VPN Throughput
• 200 LAN-to-LAN & Remote Teleworker VPN Tunnels
• 50 DrayTek SSL VPN or OpenVPN Tunnels
• Up to 5 LAN ports with 2.5GbE, SFP & RJ-45 Gigabit Ports
• 20 LAN Subnets with VLANs (Port-based / 802.1q)
• SPI Firewall and Content Filtering

The DrayTek Vigor 2962, a Dual-WAN Load Balancing Firewall VPN router, is designed to maximize the performance of FTTP Fibre Broadband and beyond, exceeding Gigabit speeds. It features connectivity options like 2.5Gb Ethernet and SFP Fibre for both LAN and WAN applications.

This router offers a robust and versatile network solution, boasting comprehensive features including an advanced Firewall, Content Filtering, and extensive VPN client/server capabilities. It also provides Quality of Service controls to ensure network efficiency and reliability.

With impressive VPN performance of up to 500Mbps for SSL VPN, the Vigor 2962 is an ideal VPN concentrator. It supports up to 50 SSL VPN & OpenVPN users, or 200 IPsec tunnels, simultaneously. Additionally, it can manage up to 20 LAN subnets and supports BGP and OSPF, making it suitable for larger, complex networks and Multi-Occupancy Offices.

Technical Specification (UK Hardware Spec.)

Physical Interfaces

• WAN/LAN Switchable Ports:
  • 1x 2.5Gb Ethernet (2.5G/1G/100M/10M), RJ-45
  • 1x SFP (1G/100M) module slot or Gigabit Ethernet (1G/100M/10M), RJ-45
  • 2x Gigabit Ethernet (1G/100M/10M), RJ-45
• LAN Ports: 2x Gigabit Ethernet (1G/100M/10M), RJ-45
• Recessed Factory Reset button
• USB Ports for USB thermometer, USB storage or Printer:
  • 1x USB 3.0 Port
  • 1x USB 2.0 Port

Performance

• NAT Performance:
  • 2.2Gb/s Total NAT Throughput for single or dual WAN
  • 300,000 NAT Sessions
• VPN Performance:
  • 900 Mb/s IPsec (AES256) VPN Performance
  • 500 Mb/s SSL VPN Performance
  • Max. 200 Concurrent VPN Tunnels
  • Max. 50 Concurrent SSL VPN / OpenVPN Tunnels

WAN Interfaces

• Two WAN interfaces - Selectable from ports 1 to 4:
  • P1: RJ-45 2.5Gb Ethernet
  • P2 (left): SFP 1Gb module slot
  • P2 (right): RJ-45 1Gb Ethernet
  • P3: RJ-45 1Gb Ethernet
  • P4: RJ-45 1Gb Ethernet

Internet Connection

• Load Balancing: IP-based, Session-based
• Hardware Acceleration
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• WAN Active on Demand:  Link Failure, Traffic Threshold
• Connection Detection: PPP, ARP Detect, Ping Detect
• WAN Data Budget*
• Dynamic DNS
• DrayDDNS – with automated LetsEncrypt Certificates
• Full Feature-set Hardware Acceleration:
  • Hardware Accelerated Quality of Service
  • Multi-WAN Data Budget
  • Traffic Graph & Data Flow Monitor
  • Bandwidth Limit
• IPv4 Connection Types:  PPPoE, DHCP, Static IP, PPTP/L2TP
• IPv6 Connection Types: 
  • Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
  • USB 4G/LTE Modem: TSPC, AICCU

Firewall & Content Filtering

• IP-based or User-based Firewall Policy
• User-based Time Quota
• DoS Attack Defence
• Spoofing Defence
• Content Filtering:
  • Application Content Filter
  • URL Content Filter
  • DNS Keyword Filter
  • Web Features
  • Web Category Filter (requires GlobalView subscription)

NAT Features

• NAT Port Redirection (100 entries)
• Open Ports (100 entries)
• Port Triggering
• DMZ Host
• ALG (Application Layer Gateway):  SIP, RTSP, FTP, H.323
• VPN Pass-Through:  PPTP, L2TP, IPsec

LAN Management

• 802.1q Tag-based, Port-based VLAN
• Up to 20 LAN Subnets (NAT or Routing mode selectable per LAN interface)
• Up to 20 VLANs
• IP Routed Subnet
• Link Aggregation (LAG) for LAN ports 3 & 4* - New!
• Wired 802.1x Port Authentication*
• DHCP Server:
  • Multiple IP Subnet
  • Custom DHCP Options
  • Bind-IP-to-MAC
  • DHCP Pool Count up to 1021 addresses for all LAN subnets
• LAN IP Alias
• Port Mirroring (physical port or .pcap download)
• Local DNS Server             
• Conditional DNS Forwarding       
• Hotspot Web Portal
• Hotspot Authentication: Click-Through, Social Login, SMS PIN, Email PIN, Voucher PIN, RADIUS, External Portal Server

Networking Features

• Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
• High Availability: Active-Standby, Hot-Standby
• DNS Security (DNSSEC)
• Local RADIUS server
• SMB File Sharing (Requires external storage)
• Multicast: IGMP Proxy, IGMP Snooping* & Fast Leave, Bonjour

Routing Features

• IPv4 & IPv6 Static Routing
• Inter-VLAN Routing
• RIP v1/v2/ng
• BGP
• OSPF - New!

VPN - Virtual Private Networking Features

• Up to 200 active VPN tunnels - including up to 50 SSL VPN or OpenVPN Tunnels
• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
• Teleworker-to-LAN – Dial-In VPN Server
• User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
• Encryption: MPPE, DES, 3DES, AES (128/192/256)
• Authentication: SHA-256, SHA-1
• VPN Trunk (Redundancy): Load Balancing, Failover
• Dead Peer Detection (DPD)
• IPsec NAT-Traversal (NAT-T)
• Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
• DHCP over IPsec
• DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
• VPN Protocols:
  • IPsec IKEv1, IKEv2, IKEv2 EAP
  • IPsec-XAuth
  • DrayTek SSL VPN
  • OpenVPN (Remote Dial-In User only, LAN to LAN supported in a future firmware release)
  • GRE over IPsec
  • PPTP
  • L2TP, L2TP over IPsec

Bandwidth Management

• IP-based Bandwidth Limit
• IP-based Session Limit
• User-based Data Quota

Quality of Service (QoS)

• Classify via TOS, DSCP, 802.1p, IP Address, Service Type
• 4 Priority Queues
• App QoS
• VoIP Prioritization
• Class-based Outbound Traffic Tagging: DSCP & IP Precedence

Management

• Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
• Config File Export
• Firmware Upgrade via TFTP, HTTP, TR-069
• 2-Level Administration Privilege
• Access Control Features: Access List, Brute Force Protection
• Syslog
• SMS, E-mail Notification Alert
• User-defined MSG LED on router, displays ACS connection status by default* – New!
• SNMP: v1, v2c, v3
• Managed by VigorACS

Router Central Management Features

• AP Management: Up to 50 VigorAP access points
• Switch Management: Up to 30 VigorSwitch network switches

Operating Requirements

• Rack Mountable with fittings included – 1U height
• Temperature Operating: 0 °C ~ 45 °C
• Storage: -25 °C ~ 70 °C
• Humidity 10% ~ 90% (non-condensing)
• Power Consumption: 15 Watts Max.
• Dimensions:
  • 273mm Width
  • 170mm Depth
  • 45mm Height
• Weight: 1.7kg
• Warranty
  • Two (2) Year Manufacturer's RTB
  • Optional VigorCare Enhanced Warranty Available
    • VigorCare C3 3 Year Subscription: VCARE-C3
    • VigorCare C5 5 Year Subscription: VCARE-C5
• Power Requirements: 220-240VAC

Box Contents:

• Vigor 2962 router
• Quick Start Guide
• 1u Rack Mount Fittings
• 2m Cat-5e RJ-45 Network Cable
• IEC C13 Power Cord with UK Plug