IT SUPPORT CAMBRIDGE - DrayTek 3100 SDSL

Features

Vigor3100 Features :

G.SHDSL Router & Firewall
Four port 10/100BaseT Switch with VLAN (exclusive/inclusive)
Internet Gateway and Firewall with SPI
VPN Server for Teleworkers and LAN-to-LAN - up to 32 simultaneous tunnels (See Vigor2800)
Internet Content Filtering (See Vigor2800)
USB Printer Port for sharing a printer between LAN users
QoS Assurance - Guarantee available bandwidth for priority services
Rack Mountable (19" fixings included)

Technical Specification

SDSL Compatibility : G.SHDSL / G.991.2, up to 2.3Mb/s Full duplex/symmetric
Note: The Vigor3100 will not operate on ADSL lines
WAN Protocol : PPPoA (AAL5), PPPoE, MPoA
Routing : NAT, PAT, MultiNAT and fully routed connections (simultaneously)
Network Protocols :
- DHCP server/relay/client
- DNS cache and proxy
- Dynamic DNS (Updating remote servers)
- SNMP client
- Call scheduling
- RADIUS client
- MicroSoft UPnP
- Routing protocol: Static routing, RIP V2
VPN Protocols :
- PPTP, IPSec, L2TP, L2TP over IPSec
- Dial-In, Dial-Out, LAN-to-LAN or Teleworker-to-LAN
- Max. Simultaneous Tunnels : 32
- Encryption: AES, MPPE and hardware-based DES/3DES
- Authentication: MD5, SHA-1
- IKE key management
- IKE authentication: pre-shared key and X.509 protocol with digital signature
- Dial-in/Dial-out, LAN-to-LAN, Teleworker-to-LAN
- IPSec pass through
- Radius Authentication for Teleworkers
Router Management / Monitoring:
- Web-based user interface : HTTP / HTTPS
- Command Line Interface (Telnet)
- Administration access control list (limit by local/remote IP)
- Configuration backup/restore
- Built-in diagnostic functions / logging
- Local Firmware upgrade via TFTP
- Remote firmware upgrade via FTP
- Logging via syslog
- SNMP management MIB-II
QoS Operation:
- Class-based bandwidth guarantee by user-defined traffic categories
- Four priority levels
Ethernet Ports :
- Four 10/100BaseT Switched Ethernet Ports
- Auto uplink detect (to another switch/backbone), auto speed/duplex
- Port based VLAN (Segmenting Inclusive/Exclusive Peers, per port)
Dimensions : 273mm (W) x 166mm (D) x 44mm (H) (1U - Rack Mountable - bracket supplied)
Environment : Operating 0-40 degrees C. Storage -25-40 degrees C.
Humidity : 10-90% Non-Condensing
Weight :
Power : 220-240 VAC, Internal PSU

Product Highlights

Combination Ethernet router, VPN Device, Firewall and Load-Balancer
Primary Ethernet WAN Interface
Selectable secondary WAN Interface - New!
Load Balancing across both WAN ports with automatic or user-defined policies - New!
WAN Backup using secondary WAN in case of fisr WAN failure - New!
Four-Port 10/100BaseT autosensing Ethernet interface with manual speed over-ride (one port switchable to WAN2 port)
Printer Port - built-in USB port compatible with most standard printers and any Windows 98SE, 2000 or XP client PC.
Internet Firewall facilities featuring :
- Automatic Keep-state facility for tracking packets and denying unsolicitied incoming data
- Selectable DoS/DDoS protection
- IP Address anti-spoofing
- User-configurable packet-filtering with new Object Manager - New!
- NAT/PAT for Automatic LAN/WAN Mapping and Security
- NAT Port Redirection with automatic internal ranging - New!
- NAT Port Forwarding (Up to 200 IP ports) - New!
- True-DMZ for WAN IP Address Passthrough - New!
QoS (Quality of Service) assurance with 8 selectable levels & support

Internet Content Filtering

Internet Content Filtering:
- URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
- Surfcontrol Support - Block Web sites by category (subject to subscription)
- Prevent accessing of web sites by using their direct IP address (thus URLs only)
- Blocking automatic download of Java applets and ActiveX controls
- Blocking of web site cookies
- Block http downloads of file types :
  - Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
  - Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
  - Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
  - Time Schedules for enabling/disabling these restrictions
- Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
- Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger)

VPN Facilities

VPN facilities :

High performance VPN supports up to 32 simultaneous VPN tunnels.
Dial-in or dial-out, LAN-to-LAN or Teleworker-to-LAN
Protocol support for PPTP, L2TP, IPSec
MD-5 & SHA-1 Authentication
Encryption : MPPE, DES/3DES & AES
Hardware Co-processor for VPN Encryption
PFS (Perfect Forward Secrecy) - Adds additional key protection
Pre-shared/IKE keying & PKI (X.509) certificate support
IKE Phase 1 Agressive/Standard Modes & Phase 2 Selectable lifetimes
Radius Support for dial-in teleworker profiles
Compatible with other leading 3rd party vendor VPN devices
For further details about Vigor VPN click here

VOIP Facilities

VoIP Facilities (Vigor2910V / Vigor2910VG only) :

Voice calls carried over existing ADSL connection
Two VOIP ports (RJ11 to BT type sockets)
Automatic QoS Assurance for Voice-over-IP Calls - VoIP given highest priority
SIP Standard Compliant
VoIP Codecs : 8Kb/s-64Kb/s
Registration with multiple different SIP Registrars at the same time - New!
Distinctive Ring for incoming calls on different accounts - New!
Automatically select different SIP providers depending on destination called - New!
Manually select SIP provider for outgoing calls by user-defined prefix - New!
Hotline Facility - connects to a fixed destination when you lift the handset - New!
Do Not Disturb - Phones can be set to not ring according to a time schedule (e.g. at night) - New!
Speed Dial (Phone Book) for quick dialling
Caller ID on phone ports (UK Standard Compliant) - New!
Integration with the PSTN via ITSP (e.g. DrayTel) enabling you to make/recieve calls from regular phone lines
Connect any standard analogue phone into the phone ports
UK Standard Call progress Tones (Ring, Busy cadence etc.)
Adjustable Gain (volume) for voice tx/rx
Log of incoming/outgoing calls & realtime Status reporting
DTMF Transmission : In-Band, Out-of-Band (RFC2833), SIP Info
Low latency queuing (LLQ), Random Early Detection
G.168 Line Electrical Echo cancellation & Jitter Buffer (125 ms)
Support for VoIP through VPN tunnels
Built-in Call Handling (PBX) Facilities:
- Intercom (call) between local voice/phone ports - New!
- SIP Compliant Call Diversion (Forwarding) - Always, Busy or No-Answer
- DND (Do Not Disturb) with automatic time schedule - New!
- Call Waiting - New!
- Call Transfer - New!
T.38 Fax Facilities - New!
Outbound NAT Proxy / STUN Server Support

wireless Features

Wireless Features (Vigor2910VG only) :

802.11g Super-G Wireless LAN (Total bandwidth up to 108Mb/s) - New!
Twin gain aerials provide diversity and optimum coverage
Optional Higher-Gain Aerials (see here)
Backward compatible with 802.11b (11Mb/s) and regular 802.11g (54Mb/s) standards
Wireless Security Features :
- WEP, WPA and WPA2 Wireless Security & Encryption - New!
- WLAN Isolation - Isolate WLAN from wired LAN - New!
- SSID Stealthing
- Restricted access list for clients (by MAC address)
- Time Scheduling (WLAN can be disabled at certain times of day)
- 802.1x User Authentication (via Radius Server, EAP-TLS Mode) - New!
Optional Username/Password Required for Wireless Users
WDS (Wireless Distribution system) for WLAN Bridging and Repeating (see here) - New!
Wireless Client Rate control - New!
Wireless VLAN - Set inclusive/Exclusive wireless groups - New!
Active Client list in Web Interface

ISDN Features

ISDN Features (Vigor2910VGi only):

Compatible with ISDN2e, BT's Home/Business Highway & BT Midband™ lines
Uses ISDN for shared Internet access (dial-on-demand)
Support for 64Kb/s and 128Kb/s (Multilink-PPP)
Automatic ISDN backup for Internet access during WAN port (broadband) failure
Bandwidth-on-demand (automatically switches between 64Kb/s and 128Kb/s)
Direct ISDN Dial-up LAN-to-LAN connectivity (to another ISDN site)
Remote 'teleworker' direct dial-in access to your LAN (from a remote ISDN line)
Remote activation of ISP dial-up (dials ISP on receipt of recognised Caller ID)

Dynamic DNS

Dynamic DNS Posting, compatible with popular services

DHCP Server facility with pre-settable allocations and alien lock-out

Support for non-NAT public subnets (multiple public IP addresses)

LAN Side IP address range and built-in DHCP server/relay is fully configurable

RIP & Static Routing configurable

Diagnostic Facilities:

SNMP Reporting/Monitoring - compatible with industry standard tools
Comprehansive Syslog logging/monitoring (DrayTek Syslog tool supplied)
Ping & TraceRoute from WUI - New!
Real Time Data Flow Monitor, with instant block (cut of any user immediately!) - New!

VPN Passthrough for VPN client/server running behind the router

On the Vigor2910VG, the Wireless interface can be turned off and you do not have to use VoIP. A version of the Vigor2910VG without VoIP (Vigor2910G) or without Wireless LAN (Vigor2910G) is also available, to special order, if it is particularly required.