DrayTek Vigor 2952 Dual WAN Security Firewall

Based on 0 ratings.

SKU:V2952-K

£405.00 inc. VAT

If you are a Wireless or comms reseller and are interested in selling 4Gon products as part of your business offering, you can apply to become an authorised reseller. Once accepted, you will have access to reseller pricing. Apply now

Draytek Vigor 2952 Datasheet (PDF)

Key Features

IPv6/IPv4 Dual-Stack
DrayOS Operating System
DrayTek Firewall with huge flexibility

Product Details
Specification
Reviews
Questions

Please Note: This product has been discontinued. Please see the Draytek Vigor 2962 as an alternative.

Draytek Vigor 2952 Dual WAN High Performance Router Firewall

The Draytek Vigor 2952 is a router/firewall with two Gigabit Ethernet WAN ports, providing load balancing or failover for up to two WAN connections. WAN1 can be selected as either RJ-45 or SFP format (SFP is for fibre modules). There are four LAN RJ-45 ports (Gigabit). The Vigor 2952 runs DrayTek's own DrayOS operating system, providing familiarity for users of other existing DrayTek products.

Draytek Vigor 2952 Key Features

Supports two Gigabit Ethernet WAN Ports with selectable SFP Socket for WAN1
USB 3G/4G/LTE USB modem can also be added
Wireless Management of up to 30 DrayTek APs
IPv6/IPv4 Dual-Stack
DrayOS Operating System
High performance - up to 500Mb/s firewall throughput
DrayTek Firewall with huge flexibility
High Availability (Hardware failover)

Draytek Vigor 2952 - Technical Specifications

LAN Ports:

4 X RJ-45 Gigabit Ethernet (1000Mb/s) - LAN

WAN Ports:

WAN1 Selectable:
RJ-45 Gigabit Ethernet (1000Mb/s) or
- SFP Gigabit Slot for Fibre or other module
WAN2 : RJ-45 Gigabit Ethernet (1000Mb/s)
WAN3 : USB3.0 Port for 3G/4G Cellular Modem or NAS feature

Performance:

Firewall: Up to 500Mb/s
IPSec VPN: Up to 200Mb/s
NAT Sessions : 100,000

Load Balance/Failover Features:

Outbound Policy-Based Load-Balance
WAN Connection Fail-over
BoD (Bandwidth on Demand)

WAN Protocols (Ethernet):

DHCP Client
Static IP
IPv4 / IPv6
PPPoE
PPTP
L2TP

IPv6 Features:

Operation on all of the WAN ports
Default-Deny Firewalling
Static IP, DHCPv6 or PPP
Connectivity to ISPs provided direct/native IPv6
Built-in tunnelling to IPv6 brokers:
- TSPC
- AICCU
- 6in4
- 6rd
Default stateful firewall for all IPv6 LAN Clients/Devices
DHCPv6 & RADVD for client configuration
IP Filtering Rules
QoS for IPv6 with DiffServ
Router Management over IPv6 (Telnet/HTTP) with IPv6 Access List
Dual-Stack (Concurrent) operation with IPv4)

Firewall & Security Features:

CSM (Content Security Management):
- URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
- Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)
- Prevent accessing of web sites by using their direct IP address (thus URLs only)
- Blocking automatic download of Java applets and ActiveX controls
- Blocking of web site cookies
- Block http downloads of file types :
  - Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
  - Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
  - Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
- Time Schedules for enabling/disabling the restrictions
- Block P2P (Peer-to-Peer) popular file sharing programs
- Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
Multi-NAT, DMZ Host
Port Redirection and Open Port Configuration
Policy-Based Firewall
MAC Address Filter
SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
DoS / DDoS Protection
IP Address Anti-spoofing
E-Mail Alert and Logging via Syslog
Bind IP to MAC Address

Bandwidth Management:

QoS
Guaranteed Bandwidth for VoIP
Class-based Bandwidth Guarantee by User-Defined Traffic Categories
Layer 2&3 (802.1p & TOS/DCSP)
DiffServ Code Point Classifying
4-level Priority for each Direction (Inbound / Outbound)
Bandwidth Borrowed
Temporary (5 minute) Quick Blocking of any LAN Client
Bandwidth / Session Limitation

VPN Facilities

Up to 100 Concurrent VPN Tunnels (incoming or outgoing)
Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
IPSec Main and Aggressive modes
IKE Phase 1 DiffieHelman Groups 1,2,5 & 14
IKE Phase 2 DiffieHelman Groups 1,2,5 & 14 (will match phase 1 selection)
Encryption : MPPE, DES and Hardware-Based AES (128/192/256bits) / DES / 3DES (168bits)
Authentication : Hardware-Based MD5, SHA-1 and SHA-256
IKE Authentication : Pre-shared Key or X.509 Digital Signature
SSL VPN for teleworkers - Up to 50 user. Proxy or tunnel.
LAN-to-LAN & Teleworker-to-LAN connectivity
DHCP over IPSec
NAT-Traversal ( NAT-T )
Dead Peer Detection (DPD)
VPN Pass-Through (PPTP, L2TP, IPSec)
MOTP (Mobile One Time Password)

SSL VPN:

SSL Application support for RDP, VNC & Samba
Encryption/Authentication : RC4 (128bits), AES (128bits), DES/3DES
X.509 Digital Signature

Network Features:

DHCP Client / Relay / Server
DHCP Option 66 support
Dynamic DNS
NTP Client (Synchronise Router Time)
Call Scheduling (Enable/Trigger Internet Access by Time)
RADIUS Client
UPnP Support

Routing Protocols:

Static Routing
RIP V2

Certificate Management

Trusted CA
Local Certificate
CA Server

Operating Requirements:

Rack Mountable (brackets included)
Temperature Operating : 0°C ~ 45°C
Storage : -25°C ~ 70°C
Humidity 10% ~ 90% (non-condensing)
Power Consumption: Watt Max.
Dimensions: ( mm )
Operating Power: 220-240VAC directly to unit
Warranty : Two (2) Years RTB

Please see product User Guide here.

Specifications Tab

There are currently no product reviews.

Questions Tab