DrayTek Vigor2860L-B User Manual

VigorLTE Series

Connectivity

ADSL2/2+/VDSL2 (Vigor2860L Series) DHCP Client Static IP/PPPoE/PPPoA/MPoA

802.1p/q Multi-VLAN Tagging

Ethernet WAN IPv4 - DHCP Client, Static IP, PPPoE, PPTP, L2TP, 802.1q Multi-VLAN Tagging IPv6 - Tunnel Mode: TSPC, AICCU, 6rd, Static 6in4 Dual Stack: PPP, DHCPv6 Client, Static IPv6 WAN Connection Failover/WAN Budgets Load-balancing/Route Policy

Ethernet LAN IPv4/IPv6 DHCP Server Static Routing/RIP Multiple Subnets Port/Tag-based VLAN

USB USB Dongle/Printer Server/File Sharing

LTE

LTE Connection Status on Dashboard Supports Sending Short Message Service (SMS) Feature Supports SMS Quota Limitation Show the SMS Information in SMS Inbox Get Router Status or Reboot Router via SMS Message

VPN

Supports SSL VPN Tunnels) Protocol : PPTP, IPsec, L2TP, L2TP over IPsec Encryption : MPPE and Hardware-based AES/DES/3DES Authentication : MD5, SHA-1 IKE Authentication : Pre-shared Key and Digital Signature (X.509) LAN-to-LAN, Teleworker-to-LAN IPsec NAT-traversal (NAT-T) Dead Peer Detection (DPD) VPN Trunk: VPN Backup and Load Balance

VPN Tunnels (Including

Security

Multi-NAT, DMZ Host, Port-redirection and Open Port Object-based Firewall, Object IPv6, Group IPv6 MAC Address Filter SPI (Stateful Packet Inspection) (Flow Track) DoS/DDoS Prevention IP Address Anti-spoofing User Management

Management

System Maintenance HTTP/HTTPS with 2-level Management (Admin/User) Logging via Syslog SNMP Management MIB-II (v2/v3) CLI (Command Line Interface, Telnet/SSH) Web-based Diagnostic Functionality Firmware Upgrade via TFTP/FTP/HTTP/TR-069 CWMP Support (TR-069/TR-104) LAN Port Monitoring

Network Management Bandwidth Management by Session/Bandwidth LAN DNS and DNS Proxy/Cache Dynamic DNS IGMP Snooping/Proxy v2 and v3 QoS (DSCP/Class-based/4-level Priority) Guarantee Bandwidth for VoIP Support Smart Monitor Central AP Management Central VPN Management

Hardware Interface

Vigor2860L Series

1 x ADSL2/2+/VDSL2 Port (WAN-1), RJ-11 for Annex A/RJ-45 for Annex B 1 x 1000Base-TX, RJ-45 (WAN-2) 6 x 10/100/1000Base-TX LAN, RJ-45 2 x Detachable LTE Antennas 2 x Detachable Wi-Fi Antennas (n Model) 1 x USB Host 2.0 1 x Factory Reset Button 1 x Wireless On/Off/ WPS Button (n Model) 4G LTE SIM Card Slot

Vigor2925L Series

2 x 1000Base-TX, RJ-45 (WAN1/WAN2) 5 x 10/100/1000Base-TX LAN, RJ-45 2 x Detachable LTE Antennas 2 x Detachable Wi-Fi Antennas (n Model) 1 x USB Host 2.0 1 x Factory Reset Button 1 x Wireless On/Off/ WPS Button (n Model) 4G LTE SIM Card Slot

VigorLTE

Series

LTE Router

VPN tunnels and VPN trunk (VPN backup and VPN load-balancing) Fail-over and load-balancing for multiple WANs and VPN Robust firewall (CSM and user management) VLAN for secure and efficient workgroup management Supports AP management Supports Smart Monitor traffic analyzer Supports central VPN management (CVM) Work with cloud-based VigorACS SI central management Get router status or reboot router via SMS message

The VigorLTE series is designed for companies which subscribe FTTx and/or 4G / LTE mobile to utilize super-fast broadband for business applications. The VigorLTE series has one SIM card slot for you to put the 4G/LTE SIM card. You can use 4G / LTE as primary connection or backup. Some businesses set up remote offices for extended services. The 4G/LTE can be very ideal broadband because it is quite easy to obtain.

The VigorLTE series inherited well-known VPN functionalities . You can establish secure LAN-to-LAN or remote access in terms of your network architecture. With the embedded Central VPN Management (CVM), VigorLTE series will let network administrator register up to 16 remote routers but run concurrent remote management over 8 remote routers. The CVM will let network administrator easily assist establish VPN settings for Vigor routers deployed at remote offices and/or teleworkers. For example, your main office is using VigorLTE series and your 16 sales members spread in the world are using Vigor2912n. With CVM, your network administrator can establish VPN tunnels between VigorLTE series and Vigor2912n without on-site visit.

Vigor2860L Series

If you require large-scale deployment, you can host VigorACS SI Central Management to manage more than 16-remotelydeployed Vigor routers. e.g. your main office is using VigorLTE series and your 22 teleworkers are using Vigor SOHO routers. You can host VigorACS SI Central Management to manage VPN connectivity of those 22 remotely-installed Vigor SOHO routers.

There are Gigabit Ethernet LAN ports for fast speed connectivity of any server or local PCs. You can connect DrayTek VigorSwitch to any port of LAN switch to extend your network for more cloud-based applications. With future firmware update, DrayTek will implement switch management mechanism on VigorLTE series to let your network administrator much easily set up the connected VigorSwitch for CRM, or ERP or Video server.

Vigor2925L Series

WLAN (n Model)

IEEE802.11n 2.0 Compliant Multiple SSIDs/Hidden SSID Encryption (64/128-bit WEP,WPA/WPA2, 802.1x) Wireless Rate Control Wireless LAN Isolation Access Point Discovery WDS (Wireless Distribution System) WMM (Wi-Fi Multimedia) SSID VLAN Grouping with LAN Port

991-2925000-LT E

Specifications subject to change at any time without notice, for more information please visit www.draytek.com or contact your local representative.

Vigor2925L Vigor2925L Vigor2860L Vigor2860L

xDSL

WLAN

VigorLTE Series

The n models are with IEEE802.11n to ensure best performance and encryption processing. In addition, IEEE802.11n allows you to have greater coverage and resilience to interference compared to previous wireless standards thanks to the Vigor’s antenna diversity arrangement and the MIMO technology. They provide you with different levels of security including authentication (802.11x), encryption (up to WPA2) and methods such as DHCP fixing to restrict access to authorized users only and Mac address locking. Through the Web User Interface (WUI), you can see how many and which clients are currently connected and how

much bandwidth usage they consume. The wireless VLAN function lets you isolate wireless clients from each other or from the “wired” LAN. You can set certain password for your guest to let guests access your WLAN with “password”. The Web-portal setup (log-in) can let you have four rules along with 4 multiple SSIDs. When users connect to your WLAN, they will be directed with your log-in screen before any Internet access is permitted. You can customize your Webportal setup (log-in) page. The multiple SSID features can let your network administrator set up four common or distinct virtual wireless access points. e.g. those with SSID1 can access to your ERP, those with SSID2 can surf internet. With the button of WPS (Wi-Fi protected setup), your client PC can get its security keys by pressing the WPS button on front of the router. There are several wireless channels for you to choose the best channel where is with the least congested wireless traffic. They are implemented with AP Management to facilitate deployment of multiple VigorAP 810 SOHO-level access point and VigorAP 900 enterprise-level access point. You can have overview over the status of multiple APs. For multiple wireless clients, to apply the AP Load Balancing to the multiple APs will manage wireless traffic with smooth flow and enhanced efficiency.

Comprehensive VPN

For remote teleworkers and inter-office links, Vigor provide simultaneous VPN tunnels (such as IPsec/PPTP/ L2T P pr o to co l s) f o r se c ur e d a ta e x c ha ng e a nd communication. With a dedicated VPN co-processor, the hardware encryption of AES/DES/3DES and hardware key hash of SHA-1/MD5 are seamlessly handled, thus maintaining maximu m route r perfo rmance. Telewor kers can be authenticated directly with your LDAP server if preferred. The VPN trunking (VPN load-balancing and VPN backup) are hence implemented on VigorLTE series. With VPN trunking, you can create multiple WAN connections to a remote site in order to increase bandwidth. The VPN trunking also can allow you to have failover (backup) of VPN route through a secondary WAN connection.

With SSL VPN, VigorLTE series let teleworkers have convenient and simple remote access to central site VPN. The teleworkers do not need to install any VPN software manually. From regular web browser, you can establish VPN connection back to your main office even in a guest network or web cafe. The SSL technology is same as the encryption that you use for secure web sites such as your online bank. The SSL VPNs can be operated in either full tunnel mode or Proxy mode.

LTE series

DrayTek IPv6 solutions

We support Dual Stack (PPP, DHCPv6 Client, Static IPv6, 6rd) and Tunnel Mode (TSPC, AICCU, 6in4 static-tunnel) to let your business operation successfully be migrated to the era of IPv6.

Multi-subnet

With the Gigabit switch on the LAN side provides extremely high speed connectivity for the highest speed local data transfer of any server or local PCs. The tagged VLANs (802.1q) can mark data with a VLAN identifier. This identifier can be carried through an onward Ethernet switch to specific ports. The specific VLAN clients can also pick up this identifier as it is just passed to the LAN. You can set the priorities for LAN-side QoS. You can assign each of VLANs to each of the different IP subnets that the router may also be operating, to provide even more isolation. The said functionality is tagbased Multi-subnet. Each of the wireless SSIDs can also be grouped within one of the VLANs.

Multi-task USB functionalities

You can connect USB disk or hard-drive to USB port for memory storage and file sharing. The VigorLTE series provide you with FTP access file uploading/downloading, which can be used from the local LAN or from anywhere on the Internet. The access can be using "username and password" or 'public'. Each of them can have their own directories and/or file access rights.

Secured networking

DrayTek VigorLTE series inherited versatile firewall mechanism from previous Vigor series routers. The objectbased design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy with ease. Object-based firewall is flexible and allows your network be safe. DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside. The enterprise-level CSM (Content Security Management) enables users to control and manage IM(Instant Messenger) and P2P (Peer-toPeer) applications more efficiently. The CSM hence prevents inappropriate content from distracting employees and impeding productivity. Furthermore, the CSM can keep office networks threat-free and available.

By adoption of the world-leading CYREN GlobalView Web Content Filtering, you can block whole categories of web sites (e.g. sports, online shopping), subject to an annual subscription to the CYREN GlobalView WCF, which is timely updated with changed or new site categorizations. A free 30day trial can be activated via activation wizard of WUI.

The "User Management" implemented on your router firmware can allow you to prevent any computer from accessing your Internet connection without a username or password. You can set scheduler or maximum usage time to your employees within office network. The user accounts can also be restricted by any other aspect of the firewall rule on a user-by-user basis.

Vigor series support DrayTek’s SmartMonitor network

LTE traffic analyzer, which captures actual live data of activities in your managed network, such as the content of MSN entering to or out of your network. You can track specified files download/upload or view statistics on data type activities to realize what corporate related information have been released accidentally or on purpose.

Multi-WAN

WAN3

Service Network

Mobile Office

Applied Models:

Mobile Banking/Logistic/Manufacturing /Real Estate/Healthcare

e-Order Tracking of logistic status Project development status ERP Con-call e-Healthercare (e.g. medical record)

SMS Application

Get Router Status

Mobile

Internet

Built in 4G LTE

Mobile

Internet

USB

WAN1

WAN1WAN4

Backup of Different Network Infrastructure

Encrypted tunnel via IP- VPN

3G/4G Router Backup

4G/LTE

Mobile Operators

Reboot Router

Vigor2925LTE

Dual-WAN Security Router

WAN2

LAN

WAN2

Modem

Corp.

Intranet

5 x Gigabit LAN ports

Remote Management Portal

Smart Meter for Utility

Smart Meter for Water

Surveillance

4 5