Draytek Vigor 2620Ln Office 4G Router / VDSL (Ethernet LAN/WAN and 802.11B/G/N WiFi)

Description

Draytek 2620Ln Office 4G Router

Physical Interfaces

LAN Ports (Switch)

• 2 x Gigabit Ethernet (1000Mb/s) Ports (P2 switchable to WAN2 port)

WAN Ports (one as primary, others as failover)

• WAN1 : ADSL/VDSL – RJ-11
• WAN2 : Gigabit Ethernet – RJ-45
• LTE : 3G/4G/LTE modem – Dual-SIM Slot

Performance

• Firewall: Up to 300Mb/s
• NAT Sessions: 30,000
• Wireless LAN: Up to 300Mb/s (2 Spatial Streams @ 40MHz)
• IPSec VPN: Up to 50Mb/s (using AES 256-bit encryption)
• SSL VPN: Up to 25Mb/s

4G LTE Modem Features

• Dual SIM
• LTE Category 4
• Unlocked to any network (BT, EE, 3, O2, Vodafone, Eircom)
• LTE FDD
• Supported Frequency Bands: 1, 3, 7, 8, 20
• Max Data Rates:
  • 150Mbps Downlink
  • 50Mbps Uplink
• Two (2) Standard-Size SIM Slots (primary & backup)
• Removable SIM slot cover
• Two (2) Removable LTE Wireless Antennas (SMA connector fitting)
• SMS Inbox – Send & Receive SMS text messages
• SMS Router Commands – Status Report, Reboot via text message

Wireless LAN Features

• 2.4GHz – 802.11b/g/n Wireless
• Wireless LAN On/Off button
• Two (2) Internal Wireless Antennas
• Up to 4 SSIDs
• Whitelist / Blacklist individual wireless clients per SSID (by MAC address)
• Time Scheduling for Wireless radio and/or individual SSIDs
• Active Client list in Web Interface
• Station Control, limit wireless client access time per day
• Wireless Rate-Control
• Wireless Client Isolation per SSID
• WPA/WPA2 Encryption
• Access Point Discovery
• WDS (Wireless Distribution system) for WLAN Bridging and Repeating
• WMM (WiFi Multimedia) support

Firewall & NAT Features

• 40 Port Redirection rules
• 40 Open Port rules (10 port ranges per rule)
• DMZ Host
• Configurable SIP (VoIP) & RTSP Application Layer Gateway (ALG) services
• Policy-Based Firewall
• MAC Address Filter
• SPI ( Stateful Packet Inspection ) with FlowTrack Mechanism
• DoS / DDoS Protection
• IP Address Anti-spoofing
• E-Mail Alert and Logging via Syslog
• Bind IP to MAC Address
• Object-based Firewall to apply rules to Objects / Groups as well as subnet/network addresses

Content Security Management (CSM) Features

• Part of the DrayOS Object based Firewall system
• Apply Content Filtering to specific IP ranges and subnets
• Apply different Content Filter profiles to different groups
• Schedule restrictions to specific times of day
• URL Keyword Filtering:
  • Whitelist or Blacklist specific sites or keywords in URLs
  • Prevent accessing of web sites by using their direct IP address (thus URLs only)
• Web Content Filtering:
  • Block Web sites by category e.g. Adult, Gambling etc.
  • Includes free 30-day trial
• App Enforcement:
  • Block access to services and applications passing through the router
  • Block popular P2P (Peer-to-Peer) file sharing programs
  • Control access to Instant Messaging programs such as Skype, Whatsapp and Facebook Messenger
  • Block VPN connections and other Tunneling services being established through the router
  • Control access to Streaming services such as Youtube

Bandwidth Management

• Temporary (5 minute) Quick Blocking of any LAN Client
• Bandwidth Limit (Shared or individual limit)
• Smart Bandwidth Limitation (Triggered by Traffic / Session)
• Session Limit

Quality of Service (QoS)

• Guaranteed Bandwidth for VoIP
• Class-based Bandwidth Guarantee by User-Defined Traffic Categories
• Layer 2&3 (802.1p & TOS/DCSP)
• DiffServ Code Point Classifying
• 4-level Priority for each Direction (Inbound / Outbound)
• Bandwidth Borrowing

Dial-in (Host) VPN Facilities

• SSL VPN (TLS) connections
• Two (2) Concurrent active Remote Dial-In User VPN Tunnels

LAN-to-LAN Dial-Out VPN Facilities

• Two (2) Concurrent active dial out VPN Tunnels
• VPN Pass-Through
• Tunnelling Protocols:
  • PPTP
  • IPSec
  • L2TP
  • L2TP over IPSec
  • DrayTek SSL
• IPSec Features:
  • Internet Key Exchange : IKEv1 (Main and Aggressive mode) & IKEv2
  • Security Protocols : AH mode, ESP mode
  • IKE Authentication : Pre-shared Key or X.509 Digital Signature
  • DHCP over IPSec
  • NAT-Traversal (NAT-T)
  • Dead Peer Detection (DPD)
  • Virtual IP Mapping, map a remote IP subnet/range to another range to resolve IP subnet/range conflicts
  • DiffieHelman (DH) Groups:
    • IKEv1 : 1,2,5,14
    • IKEv2 : 1,2,5,14,19,20,21
  • Encryption:
    • DES / 3DES (168bits)
    • AES (128/192/256bits) – Hardware-Accelerated
  • Authentication – Hardware-Accelerated:
    • MD5
    • SHA-1
    • SHA-256

Network Features

• Two (2) LAN Subnets with NAT/Routing modes (IPv4)
• IPv6 Subnet (as provided by your ISP)
• LAN Clients : Up to 253 per subnet
• Multi Subnet DHCP Servers with DHCP Relay
• Port-Based VLAN (Inclusive/Exclusive Groups)
• 802.1q VLAN Tagging
• Custom DHCP Option support
• Port Mirroring
• Dynamic DNS
• DrayTek DrayDDNS Support
• DNS Transparent Proxy
• DNS Caching
• NTP Client (Synchronise Router Time)
• Maximum MTU 1534

Router Management

• Web-Based User Interface (HTTP / HTTPS)
• CLI ( Command Line Interface ) via Web Console, Telnet or SSH
• Administration Access Control
• SMS Alert Service
• Brute Force Protection
• Configuration Backup / Restore
• Built-in Diagnostic Function (ping, traceroute)
• Firmware Upgrade via Web Interface, TFTP, VigorACS
• Logging via Syslog
• SNMP v2 & v3 Management with MIB-II
• TR-069
• TR-104
• Access Point Management: Centrally Manage 2 DrayTek VigorAP wireless access points

WAN Features

• WAN Connection Fail-over
• WAN1 Service & Customer (double-tag) VLAN support
• IGMP Proxy – for compatibility with IPTV services
• Multi-PVC/VLAN virtual WAN interfaces for Management / IPTV services

WAN Protocols

• DHCP Client
• Static IP
• PPPoE
• PPTP/L2TP (Ethernet WAN only)

ADSL & VDSL Compatibility

• BT Infinity Option 1 & Option 2 Compatible
• Support for G.INP & Vectoring
• BT Openreach SIN 498 MCT Approved
• ADSL Standards
  • ANSI T1.413 Issue2
  • ITU-T G.992.1 G.dmt (ADSL)
  • ITU-T G.992.2 G.lite
  • ITU-T G.992.3 ADSL2
  • ITU-T G.992.5 ADSL2+
  • Annex L (READSL)
  • Annex A
  • Annex M
  • ANFP Issue 3 Compliant/Certified (for Annex A & Annex M)
  • DSL Forum : TR-048/67 & TR-100
• VDSL Standards
  • ITU-T VDSL2 G.993.2
  • ITU-T G.993.1, G.997.1
  • Band Plan: G.998, G.997
  • Annex A, Annex B, Annex C
  • VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a
  • OLR, UPBO, DPBO Supported
  • US0 Supported
  • Loop Diagnostic Mode
  • DSL Forum WT-114
• ATM Protocols
  • RFC-2684/RFC-1483 Multiple Protocol over AAL5
  • RFC-2516 PPP over Ethernet
  • RFC-2364 PPP over AAL5
  • PPPoE pass through LAN/WLAN
  • PPPoE/PPPoA Relay
  • Transparent bridge for MPoA
  • Multiple PVC support for Triple Play Applications (up to 8 simultaneous)
  • Support for RFC4638 for MTU up to 1500

Operating Requirements

• Wall Mountable
• Operating Temperature : 0 °C ~ 45 °C
• Storage Temperature : -25 °C ~ 70 °C
• Humidity 10% ~ 90% (non-condensing)
• Power Consumption: 12 Watt Max.
• Dimensions:
  • Length: 207mm
  • Width: 131mm
  • Height: 39mm
• Weight: 440g (without antenna)
• Operating Power: DC 12V 1A (via external PSU, supplied)
• Power Requirements : 220-240VAC

The Draytek Vigor 2620Ln is a low cost router/firewall with LTE/4G as the headline connection method. In addition, it can use any one of three methods for its primary WAN (Internet) connectivity, falling back to one of the others in case of service interruption. It has a Dual-SIM cellular (3G/4G/LTE) modem, VDSL2 / ADSL2+ modem (Phone Line Broadband) and Ethernet (RJ45 – which can connect to many other WAN delivery sources), the Vigor 2620Ln provides extreme flexibility to ensure a reliable connection for your office.