DrayTek Vigor 2860N VDSL2 ADSL2+ Modem Wireless N VPN Security Firewall Router USB 4G TM Streamyx Unifi

Capable of routing and load balancing almost any WAN source you connect to it, this router brings versatility to your business

The Draytek Vigor 2860n is among the most versatile business routers we've ever reviewed. It's capable of balancing or switching between up to three different WAN connections. A built-in modem supports ADSL and VDSL internet connections, including Fibre-To-The-Cabinet connections such as BT Infinity, while a dedicated 10/100/1000 port allows you to plug in a second WAN connection. Finally, you can connect a 3G or 4G mobile internet dongle to one of the router’s USB ports.

All the router's ports and indicator lights are on the front, with only a pair of replaceable Wi-Fi antennas, the power connector and a power switch at the back. There are two USB ports, an RJ11 port for your ADSL or VDSL connection, a Gigabit Ethernet WAN port and six Gigabit Ethernet ports for your local network. To the right of the ports is a panel of lights showing you the status of various features, including the WAN connections, VPN and wireless network. There’s also a factory reset button and a button to enable and disable your wireless network, as well as a WPS button for quickly connecting compatible devices.

Network administrators will be pleased to know that you don't have to be at the router to see its status lights and connected ports. The main page of Draytek's web-based admin interface is crowned by an image showing these with colour-coding to indicate which ports are connected and in use.

The Vigor 2860n’s web interface is packed with options, but fortunately there's a quick-start wizard that helps you configure it.

The Vigor 2850n can provide up to four wireless networks, and you can easily create a Guest network so that visitors or staff can get online without having unrestricted access to other directories and devices shared on your network. Each wireless SSID can be configured to "isolate member", which means that devices connected to it won't be able to see either each other or anything else on the network. There's also an "isolate VPN" option, which prevents users on the SSID communicating with users who've connected to the network via a VPN.

The router's NAT settings make it easy to open and forward ports, which you’ll need to do if your users ever need to access an online service or make a web or FTP server available outside your local network. The firewall menu includes simple content filtering based on your own blacklists of URLS and general keywords, and the ability to create APP Enforcement Profiles. These can block certain kinds of internet traffic, such as games, instant messaging or P2P file sharing services.

• 6 X Gigabit Ethernet (1000Mb/s) Ports
• Port-Based VLAN (Inclusive/Exclusive Groups)
• 802.1q VLAN Tagging

• WAN1 : ADSL/VDSL, RJ11
• WAN2 : Gigabit Ethernet (1000Mb/s) Ethernet for load balance and WAN failover
• WAN3 : USB Port for 3G Cellular Modem or Printer

• Firewall: Up to 200Mb/s
• IPSec VPN: Up to 50Mb/s

• ANSI T1.413 Issue2
• ITU-T G.992.1 G.dmt (ADSL)
• ITU-T G.992.2 G.lite
• ITU-T G.992.3 ADSL2
• ITU-T G.992.5 ADSL2+
• Annex L (READSL)
• Annex A
• Annex M
• ANFP Issue 3 Compliant/Certified (for Annex A & Annex M)
• DSL Forum : TR-048/67 & TR-100

• BT Infinity Option 1 & Option 2 Compatible
• ITU-T VDSL2 G.993.2
• ITU-T G.993.1, G.997.1
• Band Plan: G.998, G.997
• Annex A, Annex B, Annex C
• VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a
• OLR, UPBO, DPBO Supported
• US0 Supported
• Loop Diagnostic Mode
• Configurable SNR, INP, Rate Limit
• DSL Forum WT-114

• Outbound Policy-Based Load-Balance
• WAN Connection Fail-over
• BoD (Bandwidth on Demand)

• RFC-2684/RFC-1483 Multiple Protocol over AAL5
• RFC-2516 PPP over Ethernet
• RFC-2364 PPP over AAL5
• PPPoE pass through LAN/WLAN
• PPPoE/PPPoA Relay
• Transparent bridge for MPoA
• Multiple PVC support for Triple Play Applications (up to 8 simultaneous)

• 802.11n
• Multiple SSID : Create up to 4 virtual wireless LANs (independent or joined)
• Packet Aggregation and Channel Bonding
• Optional Higher Gain or directional aerials available
• Compatible with 802.11b and 802.11g Standards
• Active Client list in Web Interface
• Wireless LAN Isolation (from VLAN groups and wired Ethernet interfaces)
• 64/128-bit WEP Encryption
• WPA/WPA2 Encryption
• Switchable Hidden SSID
• Restricted access list for clients (by MAC address)
• Time Scheduling (WLAN can be disabled at certain times of day)
• Access Point Discovery
• WDS (Wireless Distribution system) for WLAN Bridging and Repeating
• 802.1x Radius Authentication
• Wireless VLAN
• Wireless Rate-Control
• Automatic Power Management
• 802.11e WMM (Wi-Fi Multimedia)

• CSM (Content Security Management):
  • URL Keyword Filtering - Whitelist or Blacklist specific sites or keywords in URLs
  • Block Web sites by category (e.g. Adult, Gambling etc. Subject to subscription)
  • Prevent accessing of web sites by using their direct IP address (thus URLs only)
  • Blocking automatic download of Java applets and ActiveX controls
  • Blocking of web site cookies
  • Block http downloads of file types :
    • Binary Executable : .EXE / .COM / .BAT / .SCR / .PIF
    • Compressed : .ZIP / .SIT / .ARC / .CAB/. ARJ / .RAR
    • Multimedia : .MOV / .MP3 / .MPEG / .MPG / .WMV / .WAV / .RAM / .RA / .RM / .AVI / .AU
  • Time Schedules for enabling/disabling the restrictions
  • Block P2P (Peer-to-Peer) file sharing programs (e.g. Kazza, WinMX etc. )
  • Block Instant Messaging programs (e.g. IRC, MSN/Yahoo Messenger etc.)
• Multi-NAT, DMZ Host
• Port Redirection and Open Port Configuration
• Policy-Based Firewall
• MAC Address Filter
• SPI ( Stateful Packet Inspection ) with new FlowTrack Mechanism
• DoS / DDoS Protection
• IP Address Anti-spoofing
• E-Mail Alert and Logging via Syslog
• Bind IP to MAC Address

• QoS
• Guaranteed Bandwidth for VoIP
• Class-based Bandwidth Guarantee by User-Defined Traffic Categories
• Layer 2&3 (802.1p & TOS/DCSP)
• DiffServ Code Point Classifying
• 4-level Priority for each Direction (Inbound / Outbound)
• Bandwidth Borrowed
• Temporary (5 minute) Quick Blocking of any LAN Client
• Bandwidth / Session Limitation

• Web-Based User Interface (HTTP / HTTPS)
• CLI ( Command Line Interface ) / Telnet / SSH
• Administration Access Control
• Configuration Backup / Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP / FTP
• Logging via Syslog
• SNMP v3 Management with MIB-II
• TR-069
• TR-104

• Up to 32 Concurrent VPN Tunnels (incoming or outgoing)
• Tunnelling Protocols: PPTP, IPSec, L2TP, L2TP over IPSec
• IPSec Main and Agressive modes
• Encryption : MPPE and Hardware-Based AES / DES / 3DES
• Authentication : Hardware-Based MD5 and SHA-1
• IKE Authentication : Pre-shared Key or X.509 Digital Signature
• SSL VPN for teleworkers - Up to 5 simultaneous users. Proxy or tunnel
• LAN-to-LAN & Teleworker-to-LAN connectivity
• DHCP over IPSec
• NAT-Traversal ( NAT-T )
• Dead Peer Detection (DPD)
• VPN Pass-Through
• MOTP (Mobile One Time Password)

• DHCP Client / Relay / Server
• DHCP Option 66 support
• Dynamic DNS
• NTP Client (Synchronise Router Time)
• Call Scheduling (Enable/Trigger Internet Access by Time)
• RADIUS Client
• Microsoft UPnP Support

• Static Routing
• RIP V2

• Rack Mountable (Optional Vigor RM1 mounting bracket required)
• Wall Mountable
• Temperature Operating : 0°C ~ 45°C
• Storage : -25°C ~ 70°C
• Humidity 10% ~ 90% (non-condensing)
• Power Consumption: 18 Watt Max.
• Dimensions: L240.96 * W165.07 * H43.96 ( mm )
• Operating Power: DC 15V (via external PSU, supplied)