Highlights

• Dual-WAN with Policy-Based Load-Balance and Fail-Over
• Flexible Traffic Management to optimize bandwidth usage
• Robust Object-based firewall preventing external attacks and simplifying Internet access policy settings
• DoS/DDoS protection to protect your network from external attacks
• Flexible access control for P2P (Peer-to-Peer) and IM (Instant Messenger) software
• QoS (Quality of Services) control allow users to prioritize Internet traffic and manage bandwidth usage separately
• Individual bandwidth control for both WAN ports
• Hardware-based VPN platform for high performance remote data access
• Friendly Web-based user interface and Quick Start Wizard

The Vigor2930 is a dual-WAN router with policy-based load balancing, fail-over and BoD (Bandwidth on Demand); it also features advanced bandwidth control mechanisms such as IP-layer QoS, NAT session limitation, bandwidth borrowed, etc., to allow easy, flexible and reliable access control and bandwidth management.

The SPI (Stateful Packet Inspection) firewall uses an object-based design to make firewall policies easy to configure. The CSM (Content Security Management) feature enables more precise and efficient access control for IM (Instant Messenger) and P2P (Peer to Peer) applications. Furthermore, functions such as DoS / DDoS (Denial of Service / Distributed DoS) and URL / Web content filtering minimize security threats both inside and outside the network.

With it's hardware-based VPN, the Vigor2930 supports up to 100 VPN tunnels with support for SSL / IPSec / PPTP / L2TP / L2TP over IPSec with AES / DES / 3DES for encryption and MD5 / SHA-1 for authentication.

Specifications

• Hardware Specification :
  2 x 10/100Mbps WAN port (RJ-45 connectors)
  4 x 10/100Mbps LAN ports (RJ-45 connectors)
• Dual-WAN :
  Outbound Policy-Based Load-Balancing (Auto/Customized)
  BoD (Bandwidth on Demand)
  WAN Connection Fail-over
• WAN Protocols:
  DHCP Client
  Static IP
  PPPoE
  PPTP
  L2TP
• Firewall Facilities :
  Object-Based Firewall
  CSM (Content Security Management) for IM/P2P Application
  Multi-NAT, DMZ host, port-redirect / open port
  DMZ host with True-DMZ mapping
  NAT Port-Redirect (single or ranging)
  NAT Open-Port up to 200 IP ports
  Policy-Based IP Packet Filter
  MAC Address Filter
  SPI (Stateful Packet Inspection)
  DoS/DDoS protection
  IP Address Anti-Spoofing
  E-Mail Alert and Logging via syslog
  Bind IP to MAC Address
• Content Filter :
  URL Keyword Blocking (Whitelist and Blocklist)
  Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
  Web Content Filter (SurfControl)
  Time Schedule Control
• Bandwidth Management Facilities (QoS) :
  QoS:
  Guarantee bandwidth for VoIP
  Class-based bandwidth guarantee by user-defined traffic categories
  Support of four priority-levels for each direction (Inbound/Outbound)
  Support of DiffServ Codepoint classifying
  Bandwidth Borrowed
  Bandwidth/Session Limitation
• Virtual Private Network (VPN) Facilities :
  Up to 100 VPN tunnels
  Multiple VPN pass-through
  Supported protocols: SSL, PPTP, IPSec, L2TP, L2TP over IPSec
  DHCP over IPSec
  Encryption: AES, MPPE and hardware-based DES/3DES
  Authentication: MD5, SHA-1
  IKE authentication: pre-shared key and digital signature (X.509)
  LAN-to-LAN, Teleworker-to-LAN
  Dead Peer Detection (DPD)
  Remote VPN compatible with other vendor firewalls/VPN devices including Cisco™ Pix, Nokia™, Sonicwall™, Checkpoint™, ZyWall™ and Watchguard™
• Network Features :
  DHCP client/relay/server
  IGMP Proxy / Snooping
  Dynamic DNS
  NTP client
  Call scheduling
  RADIUS client
  DNS cache/proxy
  Universal Plug'n'Play (uPnP) compliant
  Port-Based VLAN
  Wake On LAN (WOL)
  Routing protocol:
  Static routing
  RIP V2
• Network Management :
  Web-based user interface (HTTP/HTTPS)
  Quick Start Wizard
  CLI (Command Line Interface, Telnet/SHH)
  Administration access control
  Configuration backup/restore
  Built-in diagnostic function
  Firmware upgrade via TFTP/FTP
  Logging via Syslog
  SNMP management MIB-II