Description

• Robust and comprehensive firewall

  Security is always taken seriously with DrayTek routers. The firewall protects against attacks including Dos (Denial of Service) attacks, IP-based attacks and access by unauthorized remote systems. Wireless, Ethernet and VPN are also protected by various protection systems. The DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organizations.

• Web content filtering

  The Content control features of the Vigor 2850 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal.

• Triple-WAN load balancing and backup

  As well as the primary ADSL (WAN) interface, the Vigor 2850 features two other WAN connections. WAN2 is Ethernet and WAN3 is a USB port for connection of a 3G modem. WAN2 (Ethernet) can connect to a second ADSL modem, a cable modem or any other Ethernet-based Internet feed. The multiple WAN interfaces can be used either for WAN-Backup or load balancing. WAN-Backup provides contingency (redundancy) in case of your primary ADSL line or ISP suffering temporary outage). Internet traffic will be temporarily routed via the secondary Internet access.

• 802.1q tagged, wireless and port based VLAN

  The Vigor 2850 features a hugely flexible VLAN system. In its simplest form, each of the four Gigabit LAN ports can be isolated from each other, for example to feed four different companies or departments but keeping their local traffic completely separated. For more sophisticated scenarios, the Vigor 2850 includes tagged VLANs (802.1q) whereby data is marked with a VLAN identifier. This identifier can be read by an onward Ethernet switch and directed to specific ports or just passed to the LAN for specific VLAN clients to pick up; priorities can also be applied for LAN-side QoS. The VLANs can each be tied into each of the different IP subnets that the router may also be operating, to provide even more isolation.

• User management/authentication

  The Vigor 2850 has built-in user management which allows you to provide Internet access to users based on their own unique login (stored in the router, or on an external Radius server). Accounts can be restricted by schedules or maximum usage times but also any other aspect of the firewall or content filtering can be applied on a user-by-user basis.

• Reliable and high-performance Wi-Fi

  The Vigor 2850 series 'n' models feature 802.11n wireless LAN specification and has been certified by the Wi-Fi alliance for cross compatibility and Wi-Fi compliance (including WPA/WPA2 and WMM). The Vigor 2850n model includes a hardware co-processor for Wi-Fi which can provide an increase of up to 40 Mbps for Wi-Fi connections compared to the other models.

• Selectable dual-band

  The Vigor 2850n includes Dual-Band technology. Most commonly, Wi-Fi operates in the "2.4 GHz" band but with the number of people using Wi-Fi these days, all sharing the same channels as well as DECT and Bluetooth also using the same band, congestion is a real problem. Everyone has to share the same bandwidth, and 802.11n uses three times as much as previous technologies. The Vigor 2850n model can be switched to use the 5.8 GHz band instead which is far less congested.

• Wireless security

  The Vigor 2850 series provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorized users only. The Web interface lets you see how many and which clients are currently connected as well as their current bandwidth usage. An 'instant' block lets you disconnect a wireless user temporarily in case of query. The wireless VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN.

Specifications