The DrayTek Vigor 2860n Triple-WAN Wireless-N ADSL2+ and Fibre Broadband Router is a brand new variant of the popular Vigor 2850 series with the addition of a built-in interface which supports both ADSL/ADSL2+ and also VDSL lines such as the BT Infinity Fibre Broadband service. This latest series includes support for professional features such as VLAN tagging, Gigabit Ethernet, 3G failover and a Six (6) port Gigabit switch and WLAN AP management feature for deployment of multiple access points such as the Vigor AP-900.
•Optimal Storage for NAS and Scale-Out Architectures
•Supports VDSL, ADSL, 3G and Ethernet-based Broadband
•Supports either VDSL or ADSL, ideal if you have ADSL now and might get VDSL later
•VDSL with compatible BT Infinity
•Triple-WAN ports for VDSL/ADSL, cable modem and 3G/4G LTE
•IPv6 Ready - See below for feature support
•High performance - up to 300Mb/s firewall throughput
•DrayTek Firewall with huge flexibility
•6-Port Gigabit Ethernet LAN Switch
•Wireless Guest Portal
•Multiple Private LAN Subnets
•SMS (Text Message) Alert
•VLANs (Port or 802.1q based)
•IGMP v3 MultiCast
•Includes SmartMonitor software
•Content Filtering (by keyword, data type or category)
•Ethernet and WiFi VLANs (common/distinct groups)
•LDAP Integration for VPN and user access
•QoS (Layer 2 and 3, 802.1p and TOS/DCSP)
•Up to 32 VPN tunnels for LAN-to-LAN or teleworkers
•VPN Trunk/Backup to remote sites
•SSL VPN - Tunnel or Proxy (5 users)
•USB Port for Printer, Logs or 3G Modem
•Optional VigorCare Available
Wireless 802.11n Single Band (300Mbps)
The DrayTek Vigor 2860n features the latest 802.11n wireless LAN specification and has been certified by the WiFi alliance for cross compatibility and WiFi compliance (including WPA/WPA2 and WMM). This DrayTek Vigor 2860n includes a hardware co-processor for WiFi which can provide an increase of up to 40Mb/s for WiFi connections compared to our previous model.
The DrayTek Vigor 2860n provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorised users only. The Web interface lets you see how many and which clients are currently connected as well as their current bandwidth usage. An 'instant' block lets you disconnect a wireless user temporarily in case of query. The Wireless VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN.
This DrayTek Vigor 2860n also allows guest access with password protection so that visitors can use your WiFi access, but only with a preset password which you set for them. When the user connects to your wireless LAN, they are firstly presented with your login screen before any Internet access is permitted. This is in addition to any encryption system you have running.
The Multiple SSID features enables you to have up to four distinct or common virtual wireless access points. For example, you could have one for company usage, with access to your company LAN and another for public access which allows internet surfing only. Setting up wireless security is made easier thanks to the WPS feature (WiFi protected setup) whereby your client PC can get it's security keys by pressing a button on the front of the router.
Robust and Comprehensive Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems. The latest ('Version 3') DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations. The DrayTek Vigor 2860n now also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to VPN. In addition, QoS (Quality of Service Assurance) can now be selectively applied to specific users.
IPv6 - Next Generation Internet Routing
The DrayTek Vigor 2860 supports IPv6 - the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv4 address space is full up and IPv6 allows for much more efficient routing and a larger address space. IPv6 is supported both from your own ISP, but if your ISP does not (yet) support IPv6, the DrayTek Vigor 2860 also supports IPv6 broker/tunnel services to provide IPv6 accss using either TSPC or AICCU via 3rd party IPv6 providers.
IPv6 on the Vigor 2860 provides the following features:
•Operation on any one of the WAN ports (ADSL/VDSL, Ethernet or 3G)
•Connectivity to direct native IPv6 ISPs
•Built-in tunneling to 3rd party IPv6 brokers suppporting TSPC or AICCU methods
•Default stateful firewall for all IPv6 LAN Clients/Devices
•DHCPv6 Client or Static IPv6 Client
•DHCPv6 and RADVD for client configuration
•IP Filtering Rules
•QoS for IPv6 with DiffServ
•Router Management over IPv6 (Telnet/HTTP) with IPv6 Access List
•Simultaneous (concurrent) operation with IPv4 ("Dual-Stack")
Web Content Filtering
The Content control features of the DrayTek Vigor 2860n allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or univeral. Using DrayTek's GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview service, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
VPN - Linking Remote Offices, HQ, Teleworkers And Mobile Staff
A feature central to DrayTek routers is VPN (Virtual Private Networking), which enables you to link two remote offices, branch offices back to HQ or home-based/mobile teleworkers back to your office. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
The Vigor 2860 allows you to set up to 32 simultaneous VPN tunnels to remote offices or teleworkers. The Vigor2860 supports all industry standard protcols, including encryption and authentication methods. Teleworkers can authenticate directly with your LDAP server if preferred.
The vigor 2860 supports VPN trunking; this allows you to create tunnels down multiple WAN connections to a remote site in order to increase bandwidth. VPN trunking also provides failover (backup) of your VPN route down a secondary WAN connection.
The Vigor 2860 also supports SSL VPN. These are encrypted tunnels linking your teleworker back to your main office but they are 'clientless' in that your O/S does not need to generate the tunnel and you do not need to install any VPN software manually. You can integrate an SSL tunnel from your regular web browser, so it could be in a web cafe or guest network. The tunnel is created using SSL technology - the same encryption that you use for secure web sites such as your bank. The Vigor2860 can operate SSL VPNs in either Proxy or full tunnel mode and allows up to 5 simultaneous incoming users.
Triple-WAN Load Balancing and Backup
As well as a primary ADSL/VDSL interface, the DrayTek Vigor 2860n features two other WAN connections. WAN2 is Ethernet (Gigabit, switchable with LAN4) and WAN3 is a USB port for connection of a 3G/4G LTE modem. WAN2 (Ethernet) can connect to a second ADSL modem or VDSL modem such as the Vigor 130, a cable modem or any other Ethernet-based Internet feed. The multiple WAN interfaces can be used either for WAN-Backup or load balancing.
WAN-Backup provides contingency (redunancy) in case of your primary ADSL/VDSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL/VDSL line, all traffic is switch back to that.
If you don't have VDSL/ADSL, the Ethernet WAN port can instead be used as your primary/only Internet connection (using NAT) so the same router can be used for either ADSL or Ethernet Internet connections.
802.1q Tagged, Wireless and Port Based VLAN
The DrayTek Vigor 2860n features a hugely flexible VLAN system. In its simplest form, each of the six Gigabit LAN ports can be isolated from each other, for example to feed six different companies or departments but keeping their local traffic completely separated. For more sophisticated scenarios, the DrayTek Vigor 2860n includes tagged VLANs (802.1q) whereby data is marked with a VLAN identifier. This identifier can be read by an onward Ethernet switch and directed to specific ports or just passed to the LAN for specific VLAN clients to pick up; priorities can also be applied for LAN-side QoS.
The VLANs can each be tied into each of the different IP subnets that the router may also be operating, to provide even more isolation.
The Draytek Vigor 2860n and 3G/4G LTE USB modem setup is ideal for:
•Backup to your primary Internet feed (ADSL, cable etc.)
•Providing lower cost broadband than a fixed line solution
•Areas without fixed line broadband access
•Compatible with a wide range of 3G/4G LTE modems/phones
•Locations on the move - coaches, trains
•Fairgrounds and temporary exhibitions
•Outdoor locations (the router and modem itself must be indoors!)
•Disaster Planning and High Availability
Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Using DrayTek's new GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview server, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware).
Network Attached Storage (NAS)
The DrayTek Vigor 2860n's USB port can also be used to add storage memory to the unit in the form of a USB memory key (as shown right) or for higher capacity a USB hard drive (normally requires its own power). The DrayTek Vigor 2860n then provides FTP access file uploading/downloading which can be from the local LAN or from anywhere on the Internet - ideal for a simple to deploy file depository.
Access can be 'public' or using usernames and passwords, each of which can have their own directories and/or file access rights. As well as FTP, file sharing is available as a Windows 'network drive'. Using Internet Explorer, you can view the contents of the USB drive connected to the DrayTek Vigor 2860n and read or write files.