Draytek Vigor 2962 2.5Gb Ethernet Dual-WAN Firewall Router and VPN Connector
The Draytek Vigor 2962 Dual-WAN Load Balancing Firewall VPN router surpasses Gigabit speeds, to get the best performance out of FTTP Fibre Broadband and more. Connects to 2.5Gb Ethernet and SFP Fibre, for LAN or WAN use. The Vigor 2962 provides a reliable, flexible, and secure network solution with extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls. An ideal VPN concentrator with 650Mbps SSL VPN performance. Connect up to 50 SSL VPN & OpenVPN users, or 200 IPsec tunnels. With up to 20 LAN subnets, BGP and OSPF, it’s well equipped to manage larger, more complex networks and Multi Occupancy Offices.
Draytek Vigor 2962 Key Features
- Dual-WAN, 2.5 Gigabit, Ethernet & SFP WAN Router
- Load Balancing & Failover with Route Policy for advanced routing management
- Up to 2.2Gbps Total Throughput for single or multi-WAN configurations
- Manage larger networks with 300k sessions, BGP & OSPF
- Up to 900Mbps IPsec VPN Throughput
- 200 LAN-to-LAN & Remote Teleworker VPN Tunnels
- 50 DrayTek SSL VPN or OpenVPN Tunnels
- Flexible port configuration, up to 5 LAN ports with 2.5GbE, SFP & RJ-45 Gigabit Ports
- 20 LAN Subnets with VLANs (Port-based / 802.1q
- SPI Firewall and Content Filtering
- Optional VigorCare Available
- Compatible with VigorACS central management platform
The firewall feature also helps protect your network from external threats, as well as allowing you to control what and when your local users can access or download.
High Performance Dual WAN Router
The Vigor 2962 makes full use of FTTP Fibre Broadband at up to 2.2Gbps throughput for single or dual-WAN configurations. With Quality of Service, Firewall and Content Filtering. Benefits: Unleash the full potential of Fibre broadband. High performance CPE.
Capable SSL VPN Concentrator
Securely connect up to 50 users at once with DrayTek’s SSL VPN, providing 650Mbps throughput. Supports all common VPN protocols, with extensive IPsec, L2TP and OpenVPN support. Benefits: Performance suitable to connect many remote worker’s VPN tunnels, simultaneously.
Advanced Draytek Router Functionality
Take advantage of DrayTek’s rich feature set and useful functionality; fully configurable Quality of Service, Route Policy for advanced routing/failover, Hotspot Web Portal, VPN Matcher, DrayDDNS and more.
Manage Multiple Networks
Up to 20 separate networks with VLANs, port-based or tag-based. Handles larger and more complex networks with up to 300,000 active NAT sessions, BGP and OSPF support.
Flexible LAN/WAN Ports
Make full use of 2 WAN ports and 4 LAN ports, in any configuration. Use the 2.5-Gigabit Ethernet port and Gigabit SFP ports for Internet or LAN use, to fit your network’s requirements.
Great Central Management
Easily configure and manage DrayTek routers, APs and switches remotely from the VigorACS central management platform, for whole network visibility.
Draytek Vigor 2962 - Technical Specifications
Physical Interfaces
- WAN/LAN Switchable Ports:
- 1x 2.5Gb Ethernet (2.5G/1G/100M/10M), RJ-45
- 1x SFP (1G/100M) module slot or Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x Gigabit Ethernet (1G/100M/10M), RJ-45
- LAN Ports: 2x Gigabit Ethernet (1G/100M/10M), RJ-45
- USB Ports for USB thermometer, USB storage or Printer:
- 1x USB 3.0 Port
- 1x USB 2.0 Port • Recessed Factory Reset button
- Recessed Factory Reset button
Performance
- NAT Performance:
- 2.2Gb/s Total NAT Throughput for single or dual WAN
- 300,000 NAT Sessions
- VPN Performance:
- 900 Mb/s IPsec (AES256) VPN Performance
- 650 Mb/s SSL VPN Performance
- Max. 200 Concurrent VPN Tunnels
- Max. 50 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
- WAN1: 2.5Gb or Gigabit Ethernet
- WAN2: SFP Fibre or Gigabit Ethernet
Internet Connection
- Load Balancing: IP-based, Session-based
- Hardware Acceleration
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget
- Dynamic DNS
- DrayDDNS – with automated Lets
- Encrypt Certificates
- Full Feature-set Hardware Acceleration:
- Hardware Accelerated Quality of Service
- Multi-WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
- IPv4 Connection Types: PPPoE, DHCP, Static IP
- IPv6 Connection Types: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
Firewall & Content Filtering
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- - DNS Keyword Filter
NAT Features
- NAT Port Redirection (100 entries)
- Open Ports (100 entries)
- Port Triggering • DMZ Host
- ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
- VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 20 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 20 VLANs
- IP Routed Subnet
- Link Aggregation (LACP) for LAN ports 3 & 4* - New!
- Wired 802.1x Port Authentication*
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
-DHCP Pool Count up to 1021 addresses for all LAN subnets
- LAN IP Alias • Port Mirroring (physical port or .pcap download)
- Local DNS Server • Conditional DNS Forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, Social Login, SMS PIN, Email PIN, Voucher PIN, RADIUS, External Portal Server
Network Features
- Policy-based Routing: Protocol, IP Address, Port, Domain/ Hostname, Country
- High Availability: Active-Standby, Hot-Standby
- DNS Security (DNSSEC)
- Local RADIUS server
- SMB File Sharing (Requires external storage)
- Multicast: IGMP Proxy, IGMP Snooping* & Fast Leave, Bonjour
- Routing Features:
- IPv4 & IPv6 Static Routing
- Inter-VLAN Routing
- RIP v1/v2/ng - BGP
VPN
- Up to 200 active VPN tunnels - including up to 50 SSL VPN or OpenVPN Tunnels
- LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: MPPE, DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- VPN Trunk (Redundancy): Load Balancing, Failover
- Dead Peer Detection (DPD) • IPsec NAT-Traversal (NAT-T)
- Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
- DHCP over IPsec
- DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
- VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth - DrayTek SSL VPN
- OpenVPN - GRE over IPsec
- PPTP (for legacy applications)
- L2TP, L2TP over IPsec
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
- QoS (Quality of Service):
- Classify via TOS, DSCP, 802.1p, IP Address, Service Type
- 4 Priority Queues - App QoS
- VoIP Prioritisation
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export
- Firmware Upgrade via TFTP, HTTP, TR-069
- 2-Level Administration Privilege
- Access Control Features: Access List, Brute Force Protection
- Syslog
- SMS, E-mail Notification Alert
- User-defined MSG LED on router, displays ACS connection statusby default* – New!
- SNMP: v1, v2c, v3
- Managed by VigorACS
- Router Central Management Features:
- AP Management: Up to 50 VigorAP access points
- Switch Management: Up to 30 VigorSwitch network switches
Operating Requirements
- Rack Mountable with fittings included – 1U height
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Power Consumption: - 15 Watts Max.
- Dimensions:
- 273mm Width
- 170mm Depth
- 45mm Height
- Weight: 1.7kg
- Warranty: Two (2) Years RTB
- Power Requirements: 220-240VAC
