|
|
Products Center
Dual WAN SSL VPN Appliance
Vigor2950i |
|
|
1. Dual-WAN
- Outbound Policy-Based Load-Balance
- BoD ( Bandwidth on Demand )
- WAN Connection Fail-over
|
2. SSL VPN
- Up to 50 SSL VPN Tunnels
- SSL Web Proxy
|
3. ISDN
- Euro ISDN Compatible
- Automatic ISDN Backup
- Support 64/128Kbps ( Multilink-PPP
) / BoD ( Bandwidth on Demand )
- Remote Dial-In / LAN-to-LAN Connection
- Remote Activation
- Virtual TA
|
4. WAN Protocol
- DHCP Client
- Static IP
- PPPoE
- PPTP
- BPA
- L2TP*
|
5. Firewall
- SPI ( Stateful Packet Inspection
)
- CSM (Content Security Management)
for IM / P2P Application
- Multi-NAT, DMZ Host, Port-Redirection
/ Open Port
- Policy-Based IP Packet Filter
- DoS / DDoS Protection
- IP Address Anti-Spoofing
- E-Mail Alert and logging via Syslog
- Bind IP to MAC Address
|
6. VPN
- Up to 200 VPN Tunnels
- Protocol : PPTP, IPSec, L2TP, L2TP
over IPSec
- Encryption : AES, MPPE and Hardware-Based
DES / 3DES
- Authentication : Hardware-Based
MD5, SHA-1
- IKE Authentication : Pre-shared
Key and Digital Signature ( X.509
)
- LAN-to-LAN, Teleworker-to-LAN
- DHCP over IPSec
- NAT-Traversal ( NAT-T )
- Dead Peer Detection ( DPD )
- VPN Pass-Through
- VPN Backup
- VPN Load-balance
|
7. Bandwidth Management
- Class-based Bandwidth Guarantee
by User-Defined Traffic Categories
- DiffServ Code Point Classifying
- 4-level Priority for Each Direction
(Inbound / Outbound)
- Bandwidth Borrowed
- Bandwidth / Session Limitation
|
8. Network Management
- Web-Based User Interface (HTTP /
HTTPS)
- Quick Start Wizard
- CLI (Command Line Interface) / Telnet
/ SSH*
- Administration Access Control
- Configuration Backup/Restore
- Built-in Diagnostic Function
- Firmware Upgrade via TFTP / FTP
/ TR-069
- Logging via Syslog
- SNMP Management with MIB-II
- TR-069
|
9. Content Filter
- URL Keyword Blocking ( White list
and Black list )
- Java Applet, Cookies, Active X,
Compressed / Executable / Multimedia
File Blocking
- Web Content Filter ( SurfControl
)
- Time Schedule Control
|
10. Network Features
- DHCP Client / Relay / Server
- Dynamic DNS
- NTP Client
- Call Scheduling
- RADIUS Client
- DNS Cache / Proxy
- UPnP
- Port-Based VLAN
- Routing Protocol:
|
*
Firmware Upgradeable |
|
|
Technical
Specifications of Vigor2950i |
| Hardware
Interface |
LAN |
Maximum 5-port 10/100/1000
Base-TX Switch |
| WAN |
2-port 10/100 Base-TX
Ethernet |
| ISDN |
1-port ISDN with RJ-45
connector |
| Dual WAN |
Outbound Policy-Based
Load-Balance |
| BoD ( Bandwidth on
Demand ) |
| WAN Connection Fail-over |
| SSL VPN |
Up to 50 SSL VPN Tunnels |
| SSL Web Proxy |
| ISDN |
Euro ISDN Compatible |
| Automatic ISDN Backup |
| Support 64/128Kbps ( Multilink-PPP
) / BoD ( Bandwidth on Demand ) |
| Remote Dial-In / LAN-to-LAN
Connection |
| Remote Activation |
| Virtual TA |
| WAN Protocol |
DHCP Client |
| Static IP |
| PPPoE |
| PPTP |
| BPA |
| L2TP* |
| Firewall |
SPI ( Stateful Packet
Inspection ) |
| CSM (Content Security
Management) for IM / P2P Application |
| Multi-NAT, DMZ Host, Port-Redirection
/ Open Port |
| Policy-Based IP Packet
Filter |
| DoS/DDoS Protection |
| IP Address Anti-Spoofing |
| E-Mail Alert and Logging
via Syslog |
| Bind IP to MAC Address |
| VPN |
Up to 200 VPN Tunnels |
| Protocol |
PPTP , IPSec , L2TP,
L2TP over IPSec |
| Encryption |
MPPE |
| Hardware-Based AES / DES / 3DES
|
| DHCP over IPSec |
| IKE Authentication : Pre-shared
Key and Digital Signature (X.509) |
| NAT-Traversal ( NAT-T ) |
| Dead Peer Detection ( DPD
) |
| VPN Pass-Through |
| LAN to LAN / Teleworker
to LAN |
| VPN Backup |
| VPN Load-balance |
| Bandwidth
Management |
Class-Based Bandwidth
Guarantee by User-Defined Traffic Categories |
| DiffServ Code Point Classifying |
| 4-level Priority for Each
Direction ( Inbound / Outbound ) |
| Bandwidth Borrowed |
| Bandwidth/Session Limitation |
| Network Management
|
Web-Based User Interface
( HTTP / HTTPS ) |
| Quick Start Wizard |
| CLI (Command Line Interface)
/ Telnet / SSH* |
| Administration Access Control |
| Configuration Backup /
Restore |
| Built-in Diagnostic Function |
| Firmware Upgrade via TFTP
/ FTP / TR-069 |
| Logging via Syslog |
| SNMP Management with MIB-II |
| TR-069 |
| Content Filter
|
URL Keyword Blocking (White
list and Black list) |
| Java Applet, Cookies,
Active X, Compressed / Executable / Multimedia
File Blocking |
| Web Content Filter (SurfControl
) |
| Time Schedule Control |
| Network Features
|
DHCP Client / Relay /
Server |
| Dynamic DNS |
| NTP Client |
| Call Scheduling |
| RADIUS Client |
| DNS Cache/Proxy |
| UPnP |
| Port-Based VLAN |
| Routing Protocol |
Static Routing |
| RIP V2 |
| Temperature |
Operating : 0°C ~ 45°C |
| Storage : -25°C ~ 70°C |
| Humidity |
10% ~ 90% ( non-condensing
) |
| Max. Power |
22 Watt |
| Dimension |
L273 * W166 * H44.6 (
mm ) |
| Power |
AC 100~240V, 50/60Hz |
*
Firmware Upgradeable |
|
The Vigor2950 is a broadband router with dual-WAN
interface It provides policy-based load-balance, fail-over
and BoD ( Bandwidth on Demand ) , and also integrates
IP layer QoS, NAT session/bandwidth management to
help users control and allocate the bandwidth on networks.
|
| Dual
WAN Application |
| It allows users to access Internet and combine the
bandwidth of the dual WAN to speed up the transmission
through the network. Each WAN port can connect to
different ISPs, Even if the ISPs use different technology
to provide telecommunication service (such as DSL,
Cable modem, etc.). If any connection problem occurred
on one of the ISP connections, all the traffic will
be guided and switched to the normal communication
port for proper operation. |
|
| SSL
VPN Application |
Without the necessity of installing
VPN client on individual PC, the Secure Socket Layer
(SSL) virtual private network (VPN) facility lets
remote workers connect to the office network at any
one time. SSL is supported by standard web browsers
such as FireFox and IE. For users of small offices
and teleworkers who need to access enterprises's internal
applications, file server and file sharing, Vigor2950
security router series allow up to 50 concurrent SSL
sessions.
Figure 3. SSL VPN Application |
|
| Firewall
& VPN Application |
By adopting hardware-based VPN platforms,
hardware encryption of AES/DES/3DES and hardware key
hash of SHA-1/MD5, the router increases the VPN performance
greatly and offers several protocols ( such as IPSec/PPTP/L2TP
) with support for up to 200 VPN tunnels.
The object-oriented design used in SPI ( Stateful
Packet Inspection ) firewall allows users to set firewall
policies with ease. CSM ( Content Security Management
) enables users to control and manage IM (Instant
Messenger) and P2P (Peer to Peer) application more
efficiently than before. By the way, Dos/DDoS prevention
and URL/Web content filter strengthen the security
outside and inside the network.
Figure 4 . Smart VPN Client
/ Firewall Application |
|
| VPN Trunk Management |
It is a backup mechanism which can set
multiple VPN tunnels as backup tunnel. It can assure
the network connection not tobe cut off due to network
environment blocked by any reason.
VPN trunk includes four features - VPN Backup,
VPN load balance, GRE over IPSec, and
Binding tunnel policy.
Figure 5 . VPN Back-up
Application |
Figure 6. VPN Load-Balance
Application |
|
|
|
|
Page last modified : 09 September 2008 |