DrayTek Vigor 2820n Dual WAN/ADSL 2+ VPN Wireless-N Router, Annex M, 3G Support (300Mbps)

DrayTek Vigor 2830n Wireless Router

The Draytek Vigor 2820N is the Wireless-N version of the Draytek Vigor 2820 series, DrayTek's latest premium ADSL and broadband router/firewall family, featuring an entirely new stylish case design and new DrayOS 3 operating system. Packed with features, the DrayTek 2820N offers truly comprehensive ADSL connetivity and security. Compatible with all variants of ADSL (include ADSLMax, ADSL2+ and Annex M), the Draytek Vigor 2820N can also be used for cable-modem and leased line applications thanks to its additional WAN port (Ethernet). A Gigabit Ethernet port on the WAN side provides high speed connectivity for your server (or uplink to a larger Ethernet Switch). The Draytek Vigor 2820N model supports the IEEE 802.11n specification.

Wi-Fi CERTIFIED™ for 802.11n

802.11n is a breakthrough technology that enables Wi-Fi networks to do more, faster, over a larger area. 802.11n Wi-Fi provides the very best connection available for computer networking and home entertainment applications alike - delivering the range, bandwidth, and performance today's multimedia applications and products demand.

Robust & Comprehensive Firewall

As with previous DrayTek models, security is taken seriously on the Draytek Vigor 2820N. The firewall features measure for protection against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems (see later). A new DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations.

Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content.

Dual-WAN Load Balancing & Backup

As well as the primary ADSL interface, the DrayTek Vigor 2820N features a secondary WAN port for Internet access. This is an Ethernet interface and can connect to a second ADSL modem, cable modem or any other Ethernet-based Internet feed. The secondary interface can be used either for WAN-Backup or load balancing.

WAN-Backup provides contingency (redundancy) in case of your primary ADSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switch back to that.

If you don't have ADSL, the Ethernet WAN port can instead be used as your primary/only Internet connection so the same router can be used for either ADSL or Ethernet Internet connections.

The USB port provides an alternative connection method for Internet backup by connecting to a compatible USB modem (or cellphone) for access to the high speed 3G cellular networks* from UK providers such as Vodafone, Orange, 3 and T-Mobile. If you don't have ADSL at all, the USB/3G access method can be used as your primary/only Internet connection, ideal for temporary locations, mobile applications or where broadband access is not available. For 3G application information, Click Here.

To see a load balancing connectivity photograph, Click Here.

802.11n Wireless LAN ('n' Models Only)†

The Vigor 2820N support the latest 802.11n standard. This provides increased coverage range, resilience and speed compared to existing standards (802.11g and 802.11b). Using new methods, including packet aggregation and channel bonding, the Draytek Vigor 2820N provides a total wireless capacity of up to 300Mb/s. Real world throughput depends on your own environment (factors such as obstructions, number of hosts and distances all make a significant difference), but actual transfer speeds up to 100Mb/s are achievable (this is based on real world tests). Using an aerial arrangement known as 'MIMO' (Multiple In Multiple Out) three separate aerials (2T3R) are used to provide offset paths between hosts; this increases resilience considerably.

Wireless Security is comprehensive too; the Draytek Vigor 2820N provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorised users only. The VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN and you can also see details of wireless PCs connected at any time from the Draytek 2820N's web interface.

WDS provides two modes of operation to expand the Wireless range of your LAN, using the Draytek Vigor 2820N. In WDS 'Repeater' Mode, a slave unit within range of the main base unit repeats the main wireless signal into its own coverage area - this can effectively double the total range of the network (depending on the environment). In WDS 'Bridge' mode, two physically separated LAN can be joined wirelessly, in order than they can communicate with each other. This is ideal where two offices need to be linked but a cable cannot be run (e.g. across a road). For more information about WDS.

DrayTek 2820N Main Feature Highlights

• ADSL/ADSL2+ and Broadband Router
• Annex A, Annex L (READSL) & Annex M Support
• Dual-WAN ports for ADSL or cable modem or both
• 3G (Cellular) Modem support* Comprehensive and Robust Firewall Content Filtering
• Ethernet and WLAN Virtual LAN segmentation (common or distinct groups)
• Configurable QoS Features (For traffic prioritisation)
• VPN Dial-in/dial-out for up to 32 concurrent tunnels with hardware co-processor
• 802.11n Wireless LAN
• Multiple SSIDs (Up to 4 available)
• Gigabit Ethernet LAN Port for LAN Server connectivity
• USB Port for Printer sharing or 3G Modem connection
• Highly configurable but easy to install and monitor
• DrayTek Vigor N61 available† for Laptop / Desktop connections
• Note for Failover/Loadbalance configurations:
• The ADSL WAN can failover to either 3G or Ethernet WAN
• 3G WAN can failover to ADSL WAN
• Ethernet WAN can failover to ADSL WAN
• Ethernet WAN cannot failover to 3G WAN or vice versa (This configuration is available on the Drayek Vigor 2830 Series)

3G support by FREE firmware release, available here

† Draytek N61 USB Adapter is not included with this product. Draytek UK discontinued the bundle as market research showed a preference for a cheaper router compared to a bundled USB adapter.

SPECIFICATIONS

Physical Interfaces:

• LAN Ports (Switch)
• 1 X Gigabit Ethernet (1000Mb/s) Ports
• 3 X Megabit (100Mb/s) Ports
• Port-Based VLAN (Inclusive/Exclusive Groups)
• WAN Ports:
• Secondary WAN Port : 10/100 Base-TX Ethernet for load balance and WAN failover
• USB Port for 3G Cellular Modem*
• ADSL Port Compliant with:
• ANSI T1.413 Issue2
• ITU-T G.992.1 G.dmt (ADSL)
• ITU-T G.992.2 G.lite
• ITU-T G.992.3 ADSL2
• ITU-T G.992.5 ADSL2+
• Annex L (READSL)
• Annex M

Load Balance/Failover Features:

• Outbound Policy-Based Load-Balance 
• WAN Connection Fail-over 
• BoD (Bandwidth on Demand)

Vigor 2820 ATM Protocols (DSL):

• RFC-2684/RFC-1483 Multiple Protocol over AAL5
• RFC-2516 PPP over Ethernet
• RFC-2364 PPP over AAL5
• PPPoE pass through LAN/WLAN
• PPPoE/PPPoA Relay
• Transparent bridge for MPoA
• Multiple PVC support for Triple Play Applications (up to 8 simultaneous)

Wireless LAN Features:

• 802.11n Compliant
• Latest 'MIMO' Technology with three aerials (2T3R)
• Packet Aggregation and Channel Bonding
• Optional Higher Gain or directional aerials availabl
• Compatible with 802.11b and 802.11g Standards
• Active Client list in Web Interface
• Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
• 64/128-bit WEP Encryption
• WPA/WPA2 Encryption
• Switchable Hidden SSID
• Restricted access list for clients (by MAC address)
• Time Scheduling (WLAN can be disabled at certain times of day)
• Access Point Discovery
• (Wireless Distribution system) for WLAN Bridging and Repeating (see here)
• 802.1x Radius Authentication
• Wireless Rate-Control
• Automatic Power Management
• 802.11e WMM (Wi-Fi Multimedia)

WAN Protocols (Ethernet):

• DHCP Client
  
• Static IP
• PPPoE
• PPTP
• L2TP *
• BPA

Firewall & Security Features:

• CSM (Content Security Management):
• URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in
• URLs Prevent accessing of web sites by using their direct IP address (thus URLs only)
• Blocking automatic download of Java applets and ActiveX controls
• Blocking of web site cookies
• Block http downloads of file types :
  
  • Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
  • Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
  • Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
• Time Schedules for enabling/disabling the restrictions
• Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
• Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
• Multi-NAT, DMZ Host Port Redirection and Open
• Port Configuration
• Policy-Based Firewall
• MAC Address Filter
• SPI (Stateful Packet Inspection) with new FlowTrack Mechanism
• DoS / DDoS Protection
• IP Address Anti-spoofing
• E-Mail Alert and Logging via Syslog
• Bind IP to MAC Address

Bandwidth Management:

• QoS
• Guaranteed Bandwidth for VoIP
• Class-based Bandwidth Guarantee by User-Defined Traffic Categories
• DiffServ Code Point Classifying
• 4-level Priority for each Direction (Inbound / Outbound)
• Bandwidth Borrowed
• Temporary (5 minute) Quick Blocking of any LAN Client
• Bandwidth / Session Limitation

Network/Router Management:

• Web-Based User Interface (HTTP / HTTPS)
• CLI ( Command Line Interface ) / Telnet / SSH*
• Administration Access Control
• Configuration Backup / Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP / FTP
• Logging via Syslog
• SNMP Management with MIB-II
• TR-069
• TR-104

VPN Facilities:

• Up to 32 Concurrent VPN Tunnels (incoming or outgoing)
• Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over
• IPSec IPSec Main and Agressive modes
• Encryption : MPPE and Hardware-Based AES / DES / 3DES
• Authentication : Hardware-Based MD5 and SHA-1
• IKE Authentication : Pre-shared Key and X.509 Digital Signature
• LAN-to-LAN & Teleworker-to-LAN connectivity
• DHCP over IPSec
• NAT-Traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-Through

Network Features:

• DHCP Client / Relay / Server
• Dynamic DNS
• NTP Client (Syncrhonise Router Time)
• Call Scheduling (Enable/Trigger Internet Access by Time)
• RADIUS Client
• DNS Cache / Proxy
• Microsoft™ UPnP Support

Routing Protocols:

• Static Routing
• RIP V2

Operating Requirements:

• Mountable (Optional Vigor 2820 mounting bracket required)
• Wall Mountable
• Temperature Operating : 0°C ~ 45°C Storage : -25°C ~ 70°C
• Humidity 10% ~ 90% (non-condensing)
• Power Consumption: 18 Watt Max.
• Dimensions: L240.96 * W165.07 * H43.96 (mm)
• Operating Power: DC 15V (via external PSU, supplied)
• Warranty : Two (2) Years RTB
• Power Requirements : 220-240VAC