Draytek Vigor 2820N Firewall VPN Wireless-N Draft 2.0 ADSL2+
Annex M Router w/ Dual WAN & 3G Support

The DrayTek Vigor 2820 series is DrayTek's latest premium ADSL and broadband router/firewall family, featuring an entirely new stylish case design and new DrayOS 3 operating system- and comes with the DrayTek N61 Wireless-N USB adapter. Packed with features, the DrayTek 2820N offers truly comprehensive ADSL connetivity and security. Compatible with all variants of ADSL (include ADSLMax, ADSL2+ and Annex M), the Draytek Vigor 2820N can also be used for cable-modem and leased line applications thanks to its additional WAN port (Ethernet). A Gigabit Ethernet port on the WAN side provides high speed connectivity for your server (or uplink to a larger Ethernet Switch). The Draytek Vigor 2820N model supports the IEEE 802.11n (Draft 2.0) specification.

Wi-Fi CERTIFIED™ for 802.11n draft 2.0
802.11n is a breakthrough technology that enables Wi-Fi networks to do more, faster, over a larger area. 802.11n Wi-Fi provides the very best connection available for computer networking and home entertainment applications alike - delivering the range, bandwidth, and performance today's multimedia applications and products demand.

Robust & Comprehensive Firewall

As with previous DrayTek models, security is taken seriously on the Draytek Vigor 2820N. The firewall features measure for protection against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems (see later). A new DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations.

Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Using the SurfControl site categorisations enable you to block whole categories of web sites (e.g. gambling, pornography etc.), subject to subscription

Dual-WAN Load Balancing & Backup

As well as the primary ADSL interface, the DrayTek Vigor 2820N features a secondary WAN port for Internet access. This is an Ethernet interface and can connect to a second ADSL modem, cable modem or any other Ethernet-based Internet feed. The secondary interface can be used either for WAN-Backup or load balancing.

WAN-Backup provides contingency (redundancy) in case of your primary ADSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switch back to that.

If you don't have ADSL, the Ethernet WAN port can instead be used as your primary/only Internet connection so the same router can be used for either ADSL or Ethernet Internet connections.

The USB port provides an alternative connection method for Internet backup by connecting to a compatible USB modem (or cellphone) for access to the high speed 3G cellular networks* from UK providers such as Vodafone, Orange, 3 and T-Mobile. If you don't have ADSL at all, the USB/3G access method can be used as your primary/only Internet connection, ideal for temporary locations, mobile applications or where broadband access is not available. For 3G

802.11n Wireless LAN ('n' Models Only)

The Vigor 2820N support the latest 802.11n standard (Draft 2.0). This provides increased coverage range, resilience and speed compared to existing standards (802.11g and 802.11b). Using new methods, including packet aggregation and channel bonding, the Draytek Vigor 2820N provides a total wireless capacity of up to 300Mb/s. Real world throughput depends on your own environment (factors such as obstructions, number of hosts and distances all make a significant difference), but actual transfer speeds up to 100Mb/s are achievable (this is based on real world tests). Using an aerial arrangement known as 'MIMO' (Multiple In Multiple Out) three separate aerials (2T3R) are used to provide offset paths between hosts; this increases resilience considerably.

Wireless Security is comprehensive too; the Draytek Vigor 2820N provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorised users only. The VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN and you can also see details of wireless PCs connected at any time from the Draytek 2820N's web interface.

WDS provides two modes of operation to expand the Wireless range of your LAN, using the Draytek Vigor 2820N. In WDS 'Repeater' Mode, a slave unit within range of the main base unit repeats the main wireless signal into its own coverage area - this can effectively double the total range of the network (depending on the environment). In WDS 'Bridge' mode, two physically separated LAN can be joined wirelessly, in order than they can communicate with each other. This is ideal where two offices need to be linked but a cable cannot be run (e.g. across a road). For more information about WDS see here.

Vigor N61 Adapter (Included)
To compliment the Draytek Vigor 2820N wireless facilities, the Vigor N61 USB wireless adaptor is compatible with any Windows XP or Vista PC (desktop or laptop). It too support 802.11n Draft 2.0 technology, ensuring complete compatibility with the Draytek Vigor 2820N. Alternatively you can use the existing Wireless LAN connectivity built into your laptop PC, although this is likely to support only 802.11b or 802.11g speeds.

For specialist coverage applications, optional aerials can be used with the Draytek Vigor 2820N to potentially increase the range of wireless coverage (depending on enviroment) or provide directional coverage in order that your wireless transmission is focussed and concentrated into one direction only, for example into a room or across open space.

DrayTek 2820N Main Feature Highlights

ADSL/ADSL2+ and Broadband Router
Annex A, Annex L (READSL) & Annex M Support
Dual-WAN ports for ADSL or cable modem or both
3G (Cellular) Modem support*
Comprehensive and Robust Firewall
Content Filtering
Ethernet and WLAN Virtual LAN segmentation (common or distinct groups)
Configurable QoS Features (For traffic prioritisation)
VPN Dial-in/dial-out for up to 32 concurrent tunnels with hardware co-processor
802.11n Draft 2.0 Wireless LAN (Draytek Vigor 2820N model only)
Gigabit Ethernet LAN Port for LAN Server connectivity
USB Port for Printer sharing or 3G Modem connection
Highly configurable but easy to install and monitor

* 3G support by FREE future firmware release

Physical Interfaces:

LAN Ports (Switch)
- 1 X Gigabit Ethernet (1000Mb/s) Ports
- 3 X Megabit (100Mb/s) Ports
- Port-Based VLAN (Inclusive/Exclusive Groups)
WAN Ports:
- ADSL Port Compliant with:
  - ANSI T1.413 Issue2
  - ITU-T G.992.1 G.dmt (ADSL)
  - ITU-T G.992.2 G.lite
  - ITU-T G.992.3 ADSL2
  - ITU-T G.992.5 ADSL2+
  - Annex L (READSL)
  - Annex M
- Secondary WAN Port : 10/100 Base-TX Ethernet for load balance and WAN failover
- USB Port for 3G Cellular Modem*

Load Balance/Failover Features:

Outbound Policy-Based Load-Balance
WAN Connection Fail-over
BoD (Bandwidth on Demand)

Vigor 2820 ATM Protocols (DSL):

RFC-2684/RFC-1483 Multiple Protocol over AAL5
RFC-2516 PPP over Ethernet
RFC-2364 PPP over AAL5
PPPoE pass through LAN/WLAN
PPPoE/PPPoA Relay
Transparent bridge for MPoA
Multiple PVC support for Triple Play Applications (up to 8 simultaneous)

Wireless LAN Features (Vigor2820 'n' Models Only):

802.11n Compliant (Draft 2.0)
Latest 'MIMO' Technology with three aerials (2T3R)
Packet Aggregation and Channel Bonding
Optional Higher Gain or directional aerials available - Click Here.
Compatible with 802.11b and 802.11g Standards
Active Client list in Web Interface
Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
64/128-bit WEP Encryption
WPA/WPA2 Encryption
Switchable Hidden SSID
Restricted access list for clients (by MAC address)
Time Scheduling (WLAN can be disabled at certain times of day)
Access Point Discovery
WDS (Wireless Distribution system) for WLAN Bridging and Repeating (see here)
802.1x Radius Authentication
Wireless Rate-Control
Automatic Power Management
802.11e WMM (Wi-Fi Multimedia)

WAN Protocols (Ethernet):

DHCP Client
Static IP
PPPoE
PPTP
L2TP *
BPA

Firewall & Security Features:

CSM (Content Security Management):
- URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
- Surfcontrol Support - Block Web sites by category (subject to subscription)
- Prevent accessing of web sites by using their direct IP address (thus URLs only)
- Blocking automatic download of Java applets and ActiveX controls
- Blocking of web site cookies
- Block http downloads of file types :
  - Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
  - Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
  - Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
- Time Schedules for enabling/disabling the restrictions
- Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
- Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
Multi-NAT, DMZ Host
Port Redirection and Open Port Configuration
Policy-Based Firewall
MAC Address Filter
SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
DoS / DDoS Protection
IP Address Anti-spoofing
E-Mail Alert and Logging via Syslog
Bind IP to MAC Address