The DrayTek Vigor 2860 Triple-WAN VDSL/ADSL2+ Broadband Router support either ADSL 2/2+ or VDSL (BT Infinity/FTTC), making it ideal for users with ADSL now who might upgrade to VDSL later. Alternative WAN ports can instead provide connectivity to Ethernet feeds, secondary xDSL modems or a 3G cellular service using a USB adaptor. This DrayTek Vigor 2860 router includes support for professional features such as VLAN tagging, Gigabit Ethernet and is IPv6 ready.
- Supports VDSL, ADSL, 3G and Ethernet-based Broadband.
- Supports either VDSL or ADSL, ideal if you have ADSL now and might get VDSL later.
- VDSL with compatible BT Infinity.
- 3-WAN Simultaneous : VDSL/ADSL, Ethernet and 3G(USB).
- IPv6 Ready - See below for feature support.
- High performance - up to 300Mb/s firewall throughput.
- DrayTek Firewall with huge flexibility.
- 6-Port Gigabit Ethernet LAN Switch.
- Multiple Private LAN Subnets.
- SMS (Text Message) Alert.
- VLANs (Port or 802.1q based).
- IGMP v3 MultiCast.
- Includes SmartMonitor software.
- Content Filtering (by keyword, data type or category).
- Ethernet and WiFi VLANs (common/distinct groups).
- LDAP Integration for VPN and user access.
- QoS (Layer 2&3, 802.1p & TOS/DCSP).
- Up to 32 VPN tunnels for LAN-to-LAN or teleworkers.
- VPN Trunk/Backup to remote sites.
- SSL VPN - Tunnel or Proxy (16).
- USB Port for Printer, Logs or 3G Modem.
Robust & Comprehensive Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems. The latest ('Version 3') DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations. The DrayTek Vigor 2860 now also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to VPN. In addition, QoS (Quality of Service Assurance) can now be selectively applied to specific users.
IPv6 - Next Generation Internet Routing
The DrayTek Vigor 2860 supports IPv6 - the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv4 address space is full up and IPv6 allows for much more efficient routing and a larger address space. IPv6 is supported both from your own ISP, but if your ISP does not (yet) support IPv6, the DrayTek Vigor 2860 also supports IPv6 broker/tunnel services to provide IPv6 accss using either TSPC or AICCU via 3rd party IPv6 providers.
IPv6 on the DrayTek Vigor 2860 provides the following features:
- Operation on any one of the WAN ports (ADSL/VDSL, Ethernet or 3G).
- Connectivity to direct native IPv6 ISPs.
- Built-in tunneling to 3rd party IPv6 brokers suppporting TSPC or AICCU methods.
- Default stateful firewall for all IPv6 LAN Clients/Devices.
- DHCPv6 Client or Static IPv6 Client.
- DHCPv6 and RADVD for client configuration.
- IP Filtering Rules.
- QoS for IPv6 with DiffServ.
- Router Management over IPv6 (Telnet/HTTP) with IPv6 Access List.
- Simultaneous (concurrent) operation with IPv4 ("Dual-Stack").
Web Content Filtering
The Content control features of the DrayTek Vigor 2860 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or univeral. Using DrayTek's GlobalView service (not included), you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview service, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
VPN - Linking Remote Offices, HQ, Teleworkers And Mobile Staff
A feature central to DrayTek Vigor 2860 is VPN (Virtual Private Networking), which enables you to link two remote offices, branch offices back to HQ or home-based/mobile teleworkers back to your office. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
The DrayTek Vigor 2860 allows you to set up to 32 simultaneous VPN tunnels to remote offices or teleworkers. This DrayTek Vigor 2860 supports all industry standard protcols, including encryption and authentication methods. Teleworkers can authenticate directly with your LDAP server if preferred.
The DrayTek Vigor 2860 supports VPN trunking; this allows you to create tunnels down multiple WAN connections to a remote site in order to increase bandwidth. VPN trunking also provides failover (backup) of your VPN route down a secondary WAN connection.
The DrayTek Vigor 2860 also supports SSL VPN. These are encrypted tunnels linking your teleworker back to your main office but they are 'clientless' in that your O/S does not need to generate the tunnel and you do not need to install any VPN software manually. You can integrate an SSL tunnel from your regular web browser, so it could be in a web café or guest network. The tunnel is created using SSL technology - the same encryption that you use for secure web sites such as your bank. The DrayTek Vigor 2860 can operate SSL VPNs in either Proxy or full tunnel mode and allows up to 5 simultaneous incoming users.
Triple-WAN Load Balancing & Backup
As well as a primary ADSL/VDSL interface, the DrayTek Vigor 2860 features two other WAN connections. WAN2 is Ethernet (Gigabit, switchable with LAN4) and two USB port fors connection of a 3G/4G LTE modem. WAN2 (Ethernet) can connect to a second ADSL 2/2+ or VDSL2 modem (e.g. Vigor 130), a cable modem or any other Ethernet-based Internet feed. The multiple WAN interfaces can be used either for WAN-Backup or load balancing.
WAN-Backup provides contingency (redunancy) in case of your primary ADSL/VDSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL/VDSL line, all traffic is switch back to that.
If you don't have VDSL/ADSL, the Ethernet WAN port can instead be used as your primary/only Internet connection (using NAT) so the same router can be used for either ADSL or Ethernet Internet connections.
802.1q Tagged, Wireless and Port Based VLAN
The DrayTek Vigor 2860 features a hugely flexible VLAN system. In its simplest form, each of the six Gigabit LAN ports can be isolated from each other, for example to feed six different companies or departments but keeping their local traffic completely separated. For more sophisticated scenarios, the DrayTek Vigor 2860 includes tagged VLANs (802.1q) whereby data is marked with a VLAN identifier. This identifier can be read by an onward Ethernet switch and directed to specific ports or just passed to the LAN for specific VLAN clients to pick up; priorities can also be applied for LAN-side QoS.
The VLANs can each be tied into each of the different IP subnets that the router may also be operating, to provide even more isolation.
The Draytek Vigor 2860 and 3G/4G LTE USB modem setup is ideal for:
- Backup to your primary Internet feed (ADSL, cable etc.)
- Providing lower cost broadband than a fixed line solution
- Areas without fixed line broadband access
- Compatible with a wide range of 3G modems/phones
- Temporary Locations
- Mobile Homes
- Locations on the move - coaches, trains
- Fairgrounds and temporary exhibitions
- Outdoor locations (the router and modem itself must be indoors!)
- Disaster Planning and High Availability
Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Using DrayTek's new GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview server, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware).