DrayTek Vigor2928 Dual-WAN 10G VPN Security Router

Technical Specification (UK Hardware Spec.)

Physical Interfaces

• WAN Port (P1): 1x Gigabit Ethernet (1G/100M/10M), RJ-45
• P2/P3/P4: 2 can be used out of 3 at once
• WAN Port (P2): 1x 10G/1G SFP+ Fiber Slot
• WAN/LAN Switchable (P3): 1x 10 Gigabit Ethernet (10G/2.5G/1G/100M/10M), RJ-45
• LAN Port (P4): 1x 10G/1G SFP+ Fiber Slot
• LAN Port (P5): 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45
• LAN Ports (P6-P8): 3x Gigabit Ethernet (1G/100M/10M), RJ-45
• 2x USB 2.0 Ports for LTE Modem, Thermometer or Printer
• Recessed Factory Reset button

Performance

• NAT Performance:
  • Up to 9.3 Gb/s NAT Throughput
  • 60,000 NAT Sessions
• VPN Performance:
  • Up to 430 Mb/s IPsec VPN Performance
  • Max. 50 Concurrent VPN Tunnels

WAN Interfaces

• WAN1: Gigabit Ethernet
• WAN2: 10 Gigabit SFP+ Slot for Fibre or another module
• WAN3/LAN Switchable Port: 10 Gigabit Ethernet
• WAN7: LTE USB Modem (not included)
• WAN8: LTE USB Modem (not included)

Internet Connection

• Load Balancing and Failover / Backup WAN
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• Connection Detection: ARP Detect, Ping Detect
• WAN Data Budget
• Dynamic DNS
• DrayDDNS – with automated Let’s Encrypt Certificates
• Full Feature-set Hardware Acceleration:
  • Hardware Accelerated Quality of Service
  • Multi-WAN Data Budget
  • Bandwidth Limit
• IPv4 Connection Types:  PPPoE, DHCP, Static IP
• IPv6 Connection Types: 
  • Ethernet: PPP, Static IPv6, DHCPv6, TSPC, 6in4, 6rd

Firewall & Content Filtering

• IP-based or User-based (IAM) Firewall Policy
• User-based Time Quota (IAM)
• DoS Attack Defence
• Spoofing Defence
• Content Filtering:
  • Application Content Filter
  • URL Content Filter
  • Web Category Filter*

NAT Features

• NAT Port Forwarding/Redirection
• Open Ports
• DMZ Host
• Port Trigger
• UPnP
• ALG (Application Layer Gateway):  SIP, RTSP, FTP, H.323
• NAT Traversal (NAT-T)

LAN Management

• 802.1q Tag-based, Port-based VLAN
• Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
• Up to 8 VLANs
• DHCP Server:
  • Multiple IP Subnet
  • Custom DHCP Options
  • Bind-IP-to-MAC
  • DHCP Relay per LAN
• Wired 802.1x Port Authentication
• Port Mirroring
• Conditional DNS Forwarding
• Hotspot Web Portal
  • Hotspot Authentication: Click-Through, External Portal Server, Social Login 

Networking Features

• Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname
• DNS Security (DNSSEC)
• Local RADIUS server
• SMB File Sharing (Requires external USB storage)
• Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP, OSPF

VPN Features

• Up to 50 active VPN tunnels
• Up to 430Mb/s IPsec
• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
• Teleworker-to-LAN – Dial-In VPN Server
• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
• Encryption: DES, 3DES, AES (128/192/256)
• Authentication: SHA-256, SHA-1
• Dead Peer Detection (DPD)
• IPsec NAT-Traversal (NAT-T)
• DHCP over IPsec
• VPN Protocols:
  • IPsec IKEv1, IKEv2, IKEv2 EAP
  • IPsec-XAuth
  • OpenVPN
  • WireGuard
  • EasyVPN – New!
• User Authentication:
  • Local
  • RADIUS
  • TACACS+
  • TOTP - Time-based One Time Password, compatible with Google Authenticator

Bandwidth Management

• IP-based Bandwidth Limit
• IP-based Session Limit
• QoS (Quality of Service):
  • Classify via TOS, DSCP, 802.1p, IP Address, Service Type
  • 4 Priority Queues
  • App QoS
  • VoIP Prioritization

Management

• Local Service: HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
• Config File Export & Import
• Firmware Upgrade via TFTP, HTTP, TR-069
• 2-Level Administration Privilege
• Access Control Features: Access List, Brute Force Protection
• Syslog
• SMS, E-mail Notification Alert
• SNMP: v1, v2c, v3
• Compatible with DrayTek VigorACS Management Platform**

Router-based Central Management Features

• Virtual AP Controller: Up to 20 VigorAP wireless access points
• Virtual Switch Controller: Up to 5 VigorSwitch network switches

Operating Requirements

• PSU Power Requirements: 100-240VAC
• Power Consumption (Watts, maximum):
  • Vigor 2928: 18W (12V @ 1.5A)
• Temperature Operating: 0 °C ~ 45 °C
• Storage: -25 °C ~ 70 °C
• Humidity 10% ~ 90% (non-condensing)
• Wall or Shelf Mountable
• Rack Mountable (Optional Vigor RM1 mounting bracket required)

Physical Specifications

• Dimensions:
  • 241mm Width
  • 165mm Depth
  • 43mm Height
• Weight
  • Vigor 2928: 590.6g

Box Contents

• Vigor 2928 router
• Quick Start Guide
• RJ-45 Network Cable
• DC 12V Power Supply with UK Plug