Formosa AS | Vigor 2950

Vigor 2950

NB! Etter 31.12.2010 vil vi ikke lenger lagerføre denne modellen. Det må derfor påregnes leveringstid på 1 til 2 måneder. Modellen erstattes av Vigor 2955.

Dual-WAN med policy-basert lastbalansering og fail-over
iPhone app for tofaktor autentisering med mOTP
Content Security Management (CSM)
Objekt basert firewall stopper angrep og muligjør Internet tilgangs styring.
Hardware basert VPN gir høy ytelse på VPN tilkoblinger
Opp til 200 samtidige (IPSec/PPTP/L2TP) VPN tuneller
20 000 samtidige nat/firewall sessjoner
VPN trunking (VPN last-balansering og backup)
Opp til 50 samtidige SSL VPN tuneller with LDAP/RADIUS autentisering
Fleksibel båndbredde håndtering optimaliserer utnyttelsen av tilgjengelig båndbredde
Støtte for Smart Monitor for opp til 100 PC’er

Oversikt

Vigor 2950 er en rack monterbar Dual-WAN ruter for bedrifter med krav til høy sikkerhet og god kontroll.

Denne ruterens VPN funksjon har kapasitet til å ha 200 samtidige tilkoblinger. Tunellene kan settes opp som LAN-to-LAN eller dial-inn VPN ved hjelp av IPSec/PPTP/L2TP og L2TP over IPSec. AES/DES/3DES kryptering støttes, samt MD5/SHA-1 for autentifikasjon.

Dersom man benytter SSL kan man ha 50 samtidige tilkoblinger. Autentisering kan skje via LDAP eller RADIUS.
Ansatte kan med andre ord koble seg til arbeidsplassens nettverk/server for filoverføringer, e-post, database tilgang osv. på en sikker måte. VPN funksjonen kan også brukes til BBS betalings aksess IP for å kjøre kortterminaler over internett, og kutte analoge linjer eller ISDN løsninger.

Vigor 2950 har en funksjonell regelbasert brannmur, med bade IP-layer og Content based beskyttelse. DoS/DDoS detektering og URL/Web filter bidrar til effektiv kontroll og økt sikkerhet for bedriften.

Vigor2950Gi

VPN Trunking : VPN lastbalansering & Fail-Over

SSL VPN med LDAP/RADIUS/SSTP autentisering

Vigor2950G_Extendability

Funksjoner

1. WAN Protocol

Ethernet
ISDN

2. Dual WAN

Outbound policy based Load Balance

3. VPN

Protocols : PPTP, IPSec, L2TP, L2TP over IPSec
Up to 200 Sessions Simultaneously
VPN Trunking
SSL VPN
LDAP
VPN Throughput
NAT-Traversal (NAT-T)
PKI Certificate : Digital signature (X.509)
IKE Authentication : Pre-shared key; IKE phase 1 aggressive/standard modes & phase 2 selectable lifetimes
Authentication : Hardware-based MD5, SHA-1
Encryption : MPPE and hardware-based AES/DES/3DES
RADIUS Client
DHCP over IPSec
Dead Peer Detection (DPD)
Smart VPN Software Utility
Easy of Adoption
Industrial-standard Interoperability

4. Content Filter

URL Keyword Blocking
Web Content Filter
Time Schedule Control

5. Firewall

Stateful Packet Inspection (SPI)
Content Security Management (CSM)
Multi-NAT
Port Redirection
Open Ports
DMZ Host
Policy-based IP Packet Filter
DoS/DDoS Prevention
IP Address Anti-spoofing
Object-based Firewall
Notification
Bind IP to MAC address
WDS Security

6. Wireless Access Point

Wireless VLAN (Wireless LAN Isolation)
MAC address Access Control
VPN over WLAN
64/128-bit WEP
Hidden SSID
802.1X Authentication with RADIUS Client
WPA/WPA2
Wireless Distribution System ( WDS)
AP Discovery
Wireless Rate Control

7. System Management

Web-based User Interface (HTTP/HTTPS)
DrayTek’s Quick Start Wizard
User Administration
CLI ( Command Line Interface, Telnet/SSH)
DHCP Client/Relay/Server
Dynamic DNS
Administration Access Control
Configuration Backup/Restore
Port-based VLAN
Built-in Diagnostic Function
NTP Client/Call Scheduling
Firmware Upgrade via TFTP/HTTP/FTP
ISDN Remote Maintenance
Remote Maintenance
Wake On LAN
Logging via Syslog
SNMP Management

8. Bandwidth Management

Traffic Shaping
Bandwidth Reservation
Packet Size Control
DiffServ Codepoint Classifying
4 Priority Levels (Inbound/Outbound)
Individual IP Bandwidth/Session Limitation
Bandwidth Borrowing
User-defined Class-based Rules

9. Routing Functions

Router
Advanced Routing and Forwarding
DNS
DHCP
NTP
Policy-based Routing
Dynamic Routing
Static Routing

10. ISDN Functionality

Secure Call Back
Remote Activation
Bandwidth on Demand
Remote Dial-in Access
Virtual TA

11. Internet CSM (Content Security Management) Featuring

URL keyword filtering – whitelist or blacklist specific sites or keyword in URLs
Block web sites by category (subject to subscription)
Prevent accessing of web sites by using their direct IP address (thus URLs only)
Blocking automatic download of Java applets and Active X controls
Blocking of web site cookies
Block http downloads of file types (binary, compressed, multimedia)
Time schedules & exclusions for enabling/disabling these restrictions
Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazaa, WinMX etc.)
Block Instant messaging programs (e.g. IRC, MSN/Yahoo Messenger)

12. Support

Smart Monitor (Free & Optional Utility ) : Network service analyze, User Management, System Management, System Management, Top10 ranking system, Up to 100 PC Users
Firmware Upgrade : Free Firmware upgrade form Internet

Spesifikasjoner

Load Balancing featuring:
- Two dedicated Ethernet WAN Ports (10/100Mb/s)
- WAN Failover or Load-Balanced Connectivity
- Service/IP Based Preference Rules or auto-weight
Total WAN Throughput up to 90Mb/s
Five Gigabit Ethernet LAN Ports (10/100/1000 Mb/s)
High-Security Firewall with Stateful Packet Inspection (SPI)
Robust TCP/IP Stack with Selectable DoS/DDos Protection
LAN Mirroring & Monitoring Port (Ethernet Port No. 5)
High Capacity VPN Concentrator featuring:
- Dedicated VPN Co-Processor for encryption/authentication
- VPN Throughput up to 50Mb/s
- Up to 200 Simultaneous Tunnels
- Dial-in or dial-out, LAN-to-LAN or Teleworker-to-LAN
- Protocol support for PPTP, L2TP, IPSec
- MD-5 & SHA-1 Hardware-Based Authentication
- Encryption : MPPE, DES/3DES & AES
- PFS (Perfect Forward Secrecy) – Adds additional key protection
- Pre-shared/IKE keying & PKI (X.509) certificate support
- IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
- Dead Peer Detection (DPD) and NAT-Traversal (NAT-T)
- Radius Support for dial-in teleworker profiles
- No additional client or remote site licencing required
- Smart-VPN Software Utility provided for teleworker convenience (Windows)
- Compatible with other leading 3rd party vendor VPN devices
Internet CSM (Content Security Management) featuring:
- URL Keyword Filtering – Whitelist or Blacklist specific sites or keywords in URLs
- Surfcontrol Support – Block web sites by category (subject to subscription)
- Prevent accessing of web sites by using their direct IP address (thus URLs only)
- Blocking automatic download of Java applets and ActiveX controls
- Blocking of web site cookies
- Block http downloads of file types (binary, compressed, multimedia):
- Time Schedules & exclusions for enabling/disabling these restrictions
- Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
- Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger)
New DrayOS Version 3 Operating System including new object-based Firewall
QoS (Quality of Service) Assurance:
- User-Defined Class-Based Rules
- DiffServ Codepoint Classifying
- 4 Priority Levels (Inbound/Outbound)
- Bandwidth Borrowing
- Individual IP Bandwidth/Session Limitation
VLAN Blocking across LAN Ethernet ports
Flexible DHCP with ‘IP-MAC Binding’
PPPoE Client and Static/Dynamic WAN IP modes
NAT, Multi-NAT & Flexible Mapping/Forwarding
Up to 15,000 simultaneous NAT Sessions supported
Comprehensive Diagnostics & Reporting
Real Time Data Flow Monitor, with instant block
Rack Mountable (Brackets supplied) & Integral Power Supply