Draytek Vigor 3200

 Обзор Draytek Vigor 3200

Маршрутизатор имеет 4 гигабитных WAN порта и возможность организовать 5 WAN через  USB при помощи 3G модема.

Все эти WAN подключения могут быть сконфигурированы в режиме балансировки нагрузки, увеличения полосы пропускания или в режиме резервирования для повышения отказа устойчивости подключения.

Помимо поддержки 3G модемов, порт USB может использоватся для подключения принтера, а также позволяет подключать USB диск или жесткий диск для передачи файлов FTP через Интернет или по локальной сети. Администратор сети может установить имя пользователя / пароль и каталогов / файлов, доступ привилегий для отдельных пользователей.

Если у Вас есть собственный веб-сервер, FTP-сервер и почтовый сервер, 4 WAN порта обеспечат дополнительную пропускную способность для клиентов.

Кроме того, один гигабитный  LAN порт коммутатора совместим с PoE коммутатором (например, VigorSwitch P2260) и гигабитным коммутатором (например, VigorSwitch G2080/G2240) это позволит поддерживать большие передачи данных и подключения к нескольким устройствам клиента (ПК / серверы), в малых и средних локальных сетях.

Vigor 3200 снабжен функwией Tagging VLAN.

Например, вы можете выделить ваше широкополосное подключение 100 Мбит/с для приложений критических к временной задержке, таких как VoIP, веб-или FTP-серверам и для текущих дел департаментов, таких как продажи и техническая поддержка.

Для передачи пакетов , которые не требуют быстрой передачи данных / голоса можно использовать дешевое DSL подключение.

Таким образом малый и средний бизнес может получить высокую экономическую эффективность и безопасность сети, используя Vigor3200 серии.

VPN туннелирование у 3200 обеспеченно на аппаратной основе и позволяет организовывать до 64 одновременных VPN подключений с пропускной способностью до 40 Мбит/с. Каждый из них может быть настроен на использование любого из протоколов VPN: PPTP, IPSec, L2TP и L2TP поверх IPSec, и т.д., и с одним из самых современных шифрований (MPPE, AES/DES/3DES), Аутентификация (MD5, SHA-1), Pre-Shared Key, цифровая подпись (X.509).

Про межсетевой экран писать смысла нет, он как всегда на высоте.

Полная спецификация

• 4-Port Gigabit WAN with load balance and redundancy to guarantee business essential data exchange
• Extra USB port for 3.5G mobile WAN or FTP/printer servers
• WAN/USB 3.5G ports enable user-defined WAN redundancy and Load Balance policy
• 1-Port Gigabit LAN switch facilitating the execution of unified communication applications in business CO/remote site
• Firewall with SPI based IP filters, Dos/DDoS prevention, and Object-based policy for easy settings
• Enterprise level Content Security Management (CSM)
• GlobalView Web Content Filter powered by 
• VPN with 64 hardware-based tunnels on comprehensive VPN protocols; up to 40Mbps IPSec throughput

• Network management features including CLI/Telnet/SSH, Diagnostic tables, SNMP, 2-level Access Control, TR-069, TR-104 management, etc
• Network features including call scheduling, RADIUS support, UPnP, VLAN, QoS, Packet Forward Acceleration, etc

Features of the Vigor3200 series Multi-Subnet security routers will satisfy the network requirements of small to medium business networks. Its Multi-Subnet interface with Multi-VLAN function allows users to easily divide network into different sections based on applications, such as VoIP, web or ftp server or user groups, such as Sales, Technical Support or HR dept. Each usage/application or user group can get its dedicated bandwidth and administrator can have security control between user groups for preventing possible data leakage.

Multi-WAN with Bandwidth Management

All these 4xGbps WAN ports support current xDSL/Cable/Satellite broadband and the USB port also allows connection to the 3.5G Mobile Broadband. The WAN ports can be configured to increase data throughput, backup each other (Failover mode), or share the traffic (Load Balance). If you have your own Web server, FTP server and mail server, the 4 WAN ports will provide additional bandwidth for customers. In addition, the 1xGbps LAN port switch compatible with PoE switch (e.g. VigorSwitch P2260) and Gigabit switch (e.g. VigorSwitch G2080/G2240) can support large data transfer and connect to multiple client devices (PC/servers) in small to medium LAN networks.

Vigor3200 series embedded with tag-based multi-subnet function can maximize the investment of your obtained bandwidth. For example, you can allocate your 100Mbps broadband connection(s) to timing critical applications such as VoIP, web or ftp severs and business essential departments such as Sales and Technical Support team. You additional low monthly fee DSL or cable line can be used by mail server or HR team which don’t need fast data/voice packet transmission for daily operation. SMB can get highly cost-effective and secure network as adopting Vigor3200 series.

USB Port for 3.5G or FTP/Printer Server

The capability of the USB port to connect to 3.5G mobile broadband means that the router can be used in anywhere with 3.5G coverage, such as moving vehicles, temporary events, offices where xDSL or Cable are not available, etc.

Apart from supporting printer servers, the USB port also allows the connection of a USB disk or hard drive for FTP file transfer through the Internet or local networks. The network administrator can set username/password and directory/file access privilege for individual users.

 DMZ Port for providing servers with extra protection 

The DMZ port of Vigor3200 series can provide additional layer protection to servers, such as Web server, which need to expose resources from untrusted network: e.g. Internet but also have uncompromising internal LAN security requirements.

Through the user-friendly WUI of Vigor3200 series, admin can activate DMZ by NAT or Physical mode to the chosen server. That would makes external attacks only have access to the external-facing equipment in the DMZ, not entire LAN to insert extra layer of protection to SMB’s internal network.

Security Firewall

The Vigor3200 series offer you robust firewall options with both IP-layer and content-based protection. The DoS/DDoS prevention and URL/Web content filter strengthen the security outside and inside the network. The enterprise-level CSM (Content Security Management) enables users to control and manage IM (Instant Messenger) and P2P (Peer-to-Peer) applications more efficiently. The CSM hence prevents inappropriate content from distracting employees and impeding productivity. Furthermore, the CSM can keep office networks threat-free and available.

Comprehensive VPN

Up to 64 simultaneous hardware based VPN tunnels are supported providing a throughput up to 40Mbps. Each of these can be configured to use any of the common VPN protocols: PPTP, IPSec, L2TP, L2TP over IPSec, etc., and with any of the most up-to-date encryption (MPPE, AES/DES/3DES), Authentication (MD5, SHA-1), Pre-shared Key, Digital Signature (X.509). These tunnels can be used for LAN-to-LAN or remote dial-in.

Easy Network Management

Configuring Vigor3200 router is easy with the web based configuration pages, plus the CLI/Telnet/SSH methods. Tools allowing network administrators to manage and maintain the networks with ease include:

• Diagnostic Tables that show network connection status
• SNMP for network traffic monitoring
• Two levels of Access Control to prevent unauthorized access to the router
• TR-069 and TR-104 for service providers to manage user devices remotely

More features are available to support business networks’ operations, such as Call Scheduling, RADIUS support, UP&P, VLAN, QoS, Packet Forward Acceleration, etc.