Prodoct Informations

Features of the Vigor3220 series Multi-Subnet security routers will satisfy the network requirements of small to medium business networks. Its Multi-Subnet interface with Multi-VLAN function allows users to easily divide network into different sections based on applications such as ERP and FTP. Each usage/ application or user group can get its dedicated bandwidth and administrator can have security control between user groups for preventing possible data leakage. The said series are equipped with four Gigabit Ethernet WAN ports, one gigabit Ethernet LAN port, one DMZ port, two USB ports, one console port and IEEE802.11n WLAN on n model. The console port allows a dedicated computer to be used for configuring the router. The Vigor3220 and Vigor3220n are designed for small offices using multi super-fast broadband for better business continuity and productivity.

• Support IPv6 and IPv4 network
• Enterprise level Content Security Management (CSM)
• Support up to 100 VPN Tunnels (including 50 SSL VPN tunnels)
• User-based Firewall with SPI, DoS defense, and DNS Filter Enhancement
• Central device management includes AP management and central VPN management
• 4-Port Gigabit WAN with load balance and redundancy to guarantee business essential data exchange

1. Multi-WAN (Ethernet / 3.5G)

• Outbound Policy-based Load-balance
• WAN Connection Failover

2. WAN Protocol

• DHCP Client
• Static IP
• PPPoE
• PPTP
• L2TP

3. VPN

• Up to 100 VPN Tunnels (including 50 SSL VPN tunnels)*
• Protocol: PPTP, IPSec, L2TP, L2TP over IPSec
• Encryption: MPPE and Hardware-based AES/DES/3DES
• Authentication: MD5, SHA-1
• IKE Authentication: Pre-shared Key and Digital Signature (X.509)
• LAN-to-LAN, Teleworker-to-LAN (remote user dial-in)
• DHCP over IPSec
• IPSec NAT-Traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-through
• mOTP

4. Firewall

• DMZ Host, Port-redirection (Up to 40 entries)  and Open Port (Up to 40 entries)
• Object-based Firewall
• MAC Address Filter
• SPI (Stateful Packet Inspection) (Flow Track)
• DoS / DDoS Prevention
• IP Address Anti-spoofing
• E-mail Alert and Logging via Syslog
• Bind IP to MAC Address
• Time Schedule Control

5. USB

• 3.5G (HSDPA) and 4G (LTE) as WAN5 by using USB dongle (USB1: Disk/sensor/printer, USB: 3G/LTEdongle/disk/sensor/printer)
• Printer Sharing
• File System : *

• Support FAT32 / FAT16 File System
• Support FTP Function for File Sharing

6. Bandwidth Management

• QoS :
  • Gurantee Bandwith for VoIP
  • Class-based Bandwidth Guarantee by User-defined Traffic Categories
  • DiffServ Code Point Classifying
  • 4-level Priority for Each Direction (Inbound/Outbound)
  • Bandwidth Borrowed

• Bandwidth / Session Limitation
• Layer-2 (802.1p) and Layer-3 (TOS / DSCP) QoS Mapping

7. Network Management

• Web-Based User Interface (HTTP/HTTPS)
• Quick Start Wizard
• CLI (Command Line Interface, Telnet/SSH)
• Administration Access Control
• Configuration Backup/Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP/FTP/HTTP/TR-069
• Logging via Syslog
• SNMP Management with MIB-II
• Management Session Time Out
• 2-level management (Admin/User Mode)
• TR-069 Management
• TR-104 Management

8. Central Device Management

• AP Management : 30 nodes (independent with External Device feature)*
• Central VPN Management : 8 nodes 
• Switch Management : 10 nodes *

9. Content Security Management

• AP Management : 30 nodes (independent with External Device feature)*
• Central VPN Management : 8 nodes 
• Switch Management : 10 nodes *

10. Content Security Management (CSM)

• APP Enforcement

• Support APPE Signature Upgrade by license.

• URL Content Filter

• Access Control : URL Keyword Blocking (White/Black List)
• Web Feature : Java Applet, Cookies, Active X, Compressed,Executable,Multimedia File Blocking

• Web Content Filter (support Cyren and BPjM)

11. Network Features

• Packet Forwarding Acceleration
• DHCP Client/Relay/Server
• DHCP Option: 1,3,6,51,53,54, 58,59,60,61, 66,125
• IGMP V2/V3
• LAN DNS/ DNS Forwarding
• Dynamic DNS
• NTP Client
• Call Scheduling
• RADIUS/TACACS+  Client
• RADIUS server
• Active Directory / LDAP compatible (client)
• DNS cache/Proxy
• UPnP 50 Sessions
• Wake on LAN
• Bonjour service
• Routing Protocol:

• Static Routing (IPv4 static route 40 entries, and IPv6 static route 40 entires)
• RIP V1/V2

10. Wireless Features (n Model)

• Support Single band 2.4G
• IEEE802.11b/g/n Compliant
• Wireless Wizard
• Wireless Client List
• Wireless LAN Isolation
• Security:

• 64/128-bit WEP
• WEP /802.1x only
• WPA /802.1x only
• WPA2 /802.1x only
• Mixed(WPA+WPA2)/802.1x only
• WPA/PSK
• WPA2/PSK
• Mixed(WPA+WPA2)/PSK

• Hidden SSID
• WPS
• WDS (Wireless Distribution System)
• MAC Address Access Control (Total is 64 entries)
• AP Discovery
• Station List
• Station Control
• 802.1x Authentication
• Multiple SSID (Up to 4 SSIDs)
• Bandwidth Management :

• Confidential: level 2 DrayTek Corp.

• Per SSID Bandwidth Limitation (Auto Adjustment)
• Per Station Bandwidth Limitation

• WMM
• SSID VLAN grouping with LAN port (Port based VLAN)
• DrayTek WLAN Security default settings:

• SSID: DrayTek

• Security Settings → Mode: Mixed(WPA+WPA2)/PSK