The DrayTek Vigor 2860 Triple-WAN VDSL/ADSL2+ Broadband Router support either ADSL 2/2+ or VDSL (BT Infinity/FTTC), making it ideal for users with ADSL now who might upgrade to VDSL later. Alternative WAN ports can instead provide connectivity to Ethernet feeds, secondary xDSL modems or a 3G cellular service using a USB adaptor. This DrayTek Vigor 2860 router includes support for professional features such as VLAN tagging, Gigabit Ethernet and is IPv6 ready.
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems. The latest ('Version 3') DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations. The DrayTek Vigor 2860 now also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to VPN. In addition, QoS (Quality of Service Assurance) can now be selectively applied to specific users.
The DrayTek Vigor 2860 supports IPv6 - the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv4 address space is full up and IPv6 allows for much more efficient routing and a larger address space. IPv6 is supported both from your own ISP, but if your ISP does not (yet) support IPv6, the DrayTek Vigor 2860 also supports IPv6 broker/tunnel services to provide IPv6 accss using either TSPC or AICCU via 3rd party IPv6 providers.
The Content control features of the DrayTek Vigor 2860 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or univeral. Using DrayTek's GlobalView service (not included), you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview service, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
A feature central to DrayTek Vigor 2860 is VPN (Virtual Private Networking), which enables you to link two remote offices, branch offices back to HQ or home-based/mobile teleworkers back to your office. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
The DrayTek Vigor 2860 allows you to set up to 32 simultaneous VPN tunnels to remote offices or teleworkers. This DrayTek Vigor 2860 supports all industry standard protcols, including encryption and authentication methods. Teleworkers can authenticate directly with your LDAP server if preferred.
The DrayTek Vigor 2860 supports VPN trunking; this allows you to create tunnels down multiple WAN connections to a remote site in order to increase bandwidth. VPN trunking also provides failover (backup) of your VPN route down a secondary WAN connection.
The DrayTek Vigor 2860 also supports SSL VPN. These are encrypted tunnels linking your teleworker back to your main office but they are 'clientless' in that your O/S does not need to generate the tunnel and you do not need to install any VPN software manually. You can integrate an SSL tunnel from your regular web browser, so it could be in a web café or guest network. The tunnel is created using SSL technology - the same encryption that you use for secure web sites such as your bank. The DrayTek Vigor 2860 can operate SSL VPNs in either Proxy or full tunnel mode and allows up to 5 simultaneous incoming users.
As well as a primary ADSL/VDSL interface, the DrayTek Vigor 2860 features two other WAN connections. WAN2 is Ethernet (Gigabit, switchable with LAN4) and two USB port fors connection of a 3G/4G LTE modem. WAN2 (Ethernet) can connect to a second ADSL 2/2+ or VDSL2 modem (e.g. Vigor 130), a cable modem or any other Ethernet-based Internet feed. The multiple WAN interfaces can be used either for WAN-Backup or load balancing.
WAN-Backup provides contingency (redunancy) in case of your primary ADSL/VDSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL/VDSL line, all traffic is switch back to that.
If you don't have VDSL/ADSL, the Ethernet WAN port can instead be used as your primary/only Internet connection (using NAT) so the same router can be used for either ADSL or Ethernet Internet connections.
The DrayTek Vigor 2860 features a hugely flexible VLAN system. In its simplest form, each of the six Gigabit LAN ports can be isolated from each other, for example to feed six different companies or departments but keeping their local traffic completely separated. For more sophisticated scenarios, the DrayTek Vigor 2860 includes tagged VLANs (802.1q) whereby data is marked with a VLAN identifier. This identifier can be read by an onward Ethernet switch and directed to specific ports or just passed to the LAN for specific VLAN clients to pick up; priorities can also be applied for LAN-side QoS.
The VLANs can each be tied into each of the different IP subnets that the router may also be operating, to provide even more isolation.
Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Using DrayTek's new GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview server, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware).