Broadband VIGOR2930 SERIES DUAL-WAN SECURITY FIREWALL Dual-WAN with policy-based load-balance and fail-over Flexible bandwidth management to optimize bandwidth usage Object-based firewall preventing external attacks and simplifying the Internet access policy settings Hardware-based VPN platform for high performance remote data access 802.11n (Draft-n) improves wireless speed and coverage VoIP capabilities with twin analogue phone ports, one ISDN port dedicated to ISDN phone and one ISDN port configurable for ISDN phone / line The Vigor2930 is a dual-WAN router with policy-based loadbalance, fail-over and BoD (Bandwidth on Demand); it also features advanced bandwidth control mechanisms such as IP-layer QoS, NAT session limitation, bandwidth borrowed, etc., to allow easy, flexible and reliable access control and bandwidth management. The SPI (Stateful Packet Inspection) firewall uses object-based design to make settings of firewall policies easy. The CSM (Content Security Management) feature enables more precise and efficient access control for IM (Instant Messenger) and P2P (Peer to Peer) applications. Furthermore, functions such as DoS / DDoS (Denial of Service / Distributed DoS) and URL / Web content filtering minimize security threats both inside and outside the network. With hardware-based implementation of the VPN protocols, the Vigor2930 supports up to 100 VPN tunnels in compliance with advanced protocols such as IPSec / PPTP / L2TP / L2TP over IPSec with AES / DES / 3DES for encryption and MD5 / SHA-1 for authentication. Vigor2930 "n" models conform to IEEE 802.11n Draft-n standards. They support WEP / WPA / WPA2 encryption, MAC address control, wireless LAN isolation, wireless VLAN and 802.1X authentication. The wireless rate control function can adjust the data rate of each wireless station (client). WDS can help users to extend wireless coverage easily. Vigor2930 “V” models provide twin analogue phone ports. “S” models support two ISDN ports. Combining the characteristics of “V” and “S” models, “VS” models can offer two ISDN ports additionally besides analogue phone ports. ISDN S0 port is dedicated to for ISDN phone; another ISDN port is configurable for ISDN line and phone. It supports multiple SIP registrars with highly flexible configuration and call handling options. Dual-WAN Outbound Policy-Based Load-Balance BoD (Bandwidth on Demand) WAN Connection Fail-over WAN Protocol DHCP Client Static IP PPPoE PPTP L2TP* BPA VIGOROUS BROADBAND ACCESS Firewall CSM (Content Security Management) for IM / P2P Applications Multi-NAT, DMZ Host, Port-Redirection and Open Port Policy-based Firewall MAC Address Filter SPI (Stateful Packet Inspection) DoS / DDoS Prevention IP Address Anti-spoofing E-Mail Alert and Logging via Syslog Bind IP to MAC address Wireless Access Point (for n model) IEEE802.11n Compliant Wireless Client List Access Point Discovery WDS (Wireless Distribution System) Wireless LAN Isolation Wireless Rate-Control 64/128-bit WEP WPA/WPA2 802.1X Authentication with RADIUS Client Hidden SSID MAC Address Access Control Multiple SSIDs Content Filter URL Keyword Blocking (White List and Black List) Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking Web Content Filter (SurfControl) Time Schedule Control Firmware Upgradeable VoIP (for V model) Protocol: SIP, RTP / RTCP One Dozen SIP Registrars G.168 Line Echo-cancellation Automatic Gain Control Jitter Buffer (125ms) Voice Codec: G.711 A / u law G.723.1 G.726 G.729 A / B VAD / CNG Tone Generation and Detection: DTMF, Dial, Busy, Ring Back, Call Progress DTMF Tone : In Band / Out Band (RFC-2833) / SIP Info FAX / Modem Support : G.711 Pass-Through T.38 for FAX Supplemental Services : Call Hold / Retrieve Call Waiting Call Waiting with Caller ID Call Transfer Call Forwarding (Always, Busy and No Answer) DND (Do Not Disturb) Call Barring (Incoming / Outgoing) MWI (Message Waiting Indicator) (RFC-3842) Hotline ISDN Loop-Through (VS model only) ISDN On-Net/Off-Net (VS model only) Network Management Web-based User Interface (HTTP / HTTPS) Quick Start Wizard CLI (Command Line Interface, Telnet / SSH*) Administration Access Control Configuration Backup / Restore Built-in Diagnostic Function Firmware Upgrade via TFTP / FTP Logging via Syslog SNMP Management MIB-II Network Features DHCP Client / Relay / Server Port-based VLAN Dynamic DNS NTP Client Call Scheduling RADIUS Client DNS Cache /Proxy UPnP Routing Protocol: Static Routing RIP V2 VPN Up to 100 VPN Tunnels Protocol : PPTP, IPSec, L2TP, L2TP over IPSec Encryption : MPPE and Hardware-based AES / DES / 3DES Authentication : Hardware-based MD5, SHA-1 IKE Authentication : Pre-shared Key and Digital Signature (X.509) LAN-to-LAN, Teleworker-to-LAN DHCP over IPSec NAT-Traversal (NAT-T) Dead Peer Detection (DPD) VPN Pass-Through ISP 1 Internet ISP 2 991-9293000-00 Trademarks and brand names are the properties of their respective owners. The scope of delivery and other details are subject to change without prior notice.