Description

DrayTek Vigor 2860 Triple-WAN VDSL/ADSL2+ Broadband Router w/ Load Balancing

• VDSL2/ADSL2+ Fall-back
• Fail-over and Load Balancing with a second WAN through a Gigabit Ethernet WAN port
• Object-based SPI Firewall and CSM (Content Security Management) for network security
• 2 USB ports for 3G/4G mobile, file sharing and network printers
• 32 VPN tunnels with comprehensive secure protocols
• VLAN for secure and efficient workgroup management
• 6 x Gigabit LAN ports
• Embedded Central VPN Management for 8 remote Vigor routers
• Embedded Central AP Management for multi-deployed Vigor wireless access points*
• Working with Smart Monitor Network Traffic Analyzer (30-nodes)
• Working with VigorACS SI Central Management for multi-site deployment

Multi-subnet

With the 6-port Gigabit switch on the LAN side provides extremely high speed connectivity for the highest speed local data transfer of any server or local PCs. The tagged VLANs (802.1q) can mark data with a VLAN identifier. This identifier can be carried through an onward Ethernet switch to specific ports. The specific VLAN clients can also pick up this identifier as it is just passed to the LAN. You can set the priorities for LAN-side QoS. You can assign each of VLANs to each of the different IP subnets that the router may also be operating, to provide even more isolation. The said functionality is tag-based Multi-subnet.

On the Wireless-equipped models (Vigor2860n/Vigor2860n plus/Vigor2860Vn plus) each of the wireless SSIDs can also be grouped within one of the VLANs.

 

With multi-subnet, the traffic can be sent through non-NAT mode with higher performance.If you deploy Vigor2860 series with MPLS network with your main office, the multi-subnet settings will let your data transactions be carried out without NAT.

 

 

DrayTek IPv6 solutions 

We support Dual Stack (PPP, DHCPv6 Client, Static IPv6, 6rd) and Tunnel Mode (TSPC, AICCU, 6in4 static-tunnel) to let your business operation successfully be migrated to the era of IPv6.  

 

Because the IPv4 addresses are limited and IPv6 allows for a larger address space and much more efficient routing.  The Vigor2860 series support IPv6 and IPv4.  The Vigor2860 series can support IPv6 broker/tunnel services to provide IPv6 access using either AICCU or TSPC via 3rd party IPv6 providers if your ISP does not support IPv6 yet.
 

• can be run on any one of the WAN ports (ADSL/VDSL2, Ethernet or 3G; but the USB WAN port can run AICCU/TSPC tunnel mode only)
• can connect to direct native IPv6 ISPs
• can build tunnel to 3rd party IPv6 brokers using either AICCU or TSPC methods
• Default stateful firewall for all IPv6 LAN clients/ devices
• DHCPv6 Client
• Static IPv6 Client
• DHCPv6 & RADVD (Router Advertisement Server) for client configuration
• QoS for IPv6 with DiffServ
• IP Filtering Rules
• Router Management over IPv6 (Telnet/HTTP) with IPv6 access list
• Concurrent operation with IPv4 (“Dual-Stack”)
• Other router features are only available on IPv4

 

 

Multi-task USB functionalities

Through mobility, brought by cellular networks, you can connect 3.5G/4G USB mobile to 2.0 version USB port on Vigor2860 series. This can be a backup broadband connection if the primary fixed line drops. You can connect USB disk or hard-drive to USB port for memory storage and file sharing. The Vigor2860 series provide you with FTP access file uploading/downloading, which can be used from the local LAN or from anywhere on the Internet. The access can be using “username and password” or 'public'. Each of them can have their own directories and/or file access rights. The VDSL2/ADSL2+ interface, Gigabit Ethernet interface and USB mobile can be used either for WAN-backup or load balancing.

 

Secured networking

DrayTek Vigor2860 series inherited versatile firewall mechanism from previous Vigor series routers. The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy with ease. Object-based firewall is flexible and allows your network be safe. DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside. The enterprise-level CSM (Content Security Management) enables users to control and manage IM(Instant Messenger) and P2P (Peer-to-Peer) applications more efficiently. The CSM hence prevents inappropriate content from distracting employees and impeding productivity. Furthermore, the CSM can keep office networks threat-free and available.

 

By adoption of the world-leading CYREN GlobalView Web Content Filtering, you can block whole categories of web sites (e.g. sports, online shopping), subject to an annual subscription to the CYREN GlobalView WCF, which is timely updated with changed or new site categorizations. A free 30-day trial can be activated via activation wizard of WUI.

 

The “User Management” implemented on your router firmware can allow you to prevent any computer from accessing your Internet connection without a username or password. You can set scheduler or maximum usage time to your employees within office network. The user accounts can also be restricted by any other aspect of the firewall rule on a user-by-user basis.

 

Vigor2860 series support DrayTek’s SmartMonitor network traffic analyzer (up to 30 users), which captures actual live data of activities in your managed network, such as the content of MSN entering to or out of your network. You can track specified files download/upload or view statistics on data type activities to realize what corporate related information have been released accidentally or on purpose.  

 

 

Multi-WAN & subnets

 

 The USB Temperature

 

The CVM (Central VPN Management) of Vigor2860*

 

The AP Management of Vigor2860 

 

Support Smart Monitor up to 30 PC Users

AP Management

Vigor2860 series with rackmount bracket

 

DrayTek Vigor 2860 Features 

VDSL2/ADSL2/2+

• ITU-T G.993.2 (VDSL2)
• ITU-T G.992.1/3/5 (ADSL1/2/2+) Annex A & Annex B
• DSL Forum Performance Speci?cation: ADSL TR-048/67, TR-100; VDSL: WT-114
• Erasure Decoding, Increased Interleaver Depth and Re-transmission
• EFM (IEEE 802.3 ah)
• VDSL2 Profile: up to 30a

WAN Protocol

• DSL (WAN-1)/Giga Ethernet (WAN-2)
• DHCP Client
• Static IP
• PPPoE 
• PPTP / L2TP (WAN-2 only)
• PPPoA (ADSL2 only)
• 1q Multi-VLAN Tagging 
• USB (WAN-3)
• PPP/DHCP
• IPv6
• Tunnel Mode: TSPC, AICCU, 6rd, Static 6in4
• Dual Stack: PPP, DHCPv6 Client, Static IPv6

 USB

• 5G (HSDPA) as WAN
• Printer Sharing
• File System :
• Support FAT32 File System
• Support FTP Function for File Sharing
• Support Samba for File Sharing

VPN

• Up to 32 VPN Tunnels
• Protocol : PPTP, IPsec, L2TP, L2TP over IPsec
• Encryption : MPPE and Hardware-based AES/DES/3DES
• Authentication : MD5, SHA-1
• IKE Authentication : Pre-shared Key and Digital Signature (X.509)
• LAN-to-LAN, Host-to-LAN
• DHCP over IPsec
• IPsec NAT-traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-through
• VPN Wizard
• mOTP 
• SSL VPN: 16 Tunnels
• VPN Trunk (Load Balance/Backup)

Multi-WAN

• Load-Balance/Route Policy 
  (The VDSL2/ADSL2+ interface, Gigabit Ethernet interface and USB mobile can be used either for WAN-backup or load balancing.)
• WAN Connection Failover

Network Management

• Web-based User Interface (HTTP/HTTPS)
• Quick Start Wizard
• CLI (Command Line Interface, Telnet/SSH)
• Administration Access Control
• Configuration Backup/Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP/FTP/HTTP/TR-069
• Logging via Syslog
• SNMP Management MIB-II
• Management Session Time Out
• 2-level Management (Admin/User Mode)
• TR-069
• TR-104
• LAN Port Monitoring
• Support Smart Monitor (30 nodes)
• Central AP Management
• Central VPN Management (Up to 8 Remote Routers)

Firewall

• Multi-NAT, DMZ Host, Port-redirection and Open Port
• Object-based Firewall, Object IP v6, Group IPv6
• MAC Address Filter
• SPI (Stateful Packet Inspection) (Flow Track)
• DoS/DDoS Prevention
• IP Address Anti-spoofing
• E-mail Alert and Logging via Syslog
• Bind IP to MAC Address
• Time Schedule Control
• User Management