The Vigor2920 is firewall broadband routers for connecting to xDSL/cable/VDSL2/Ethernet FTTx. The Gigabit WAN and 4-port Gigabit LAN switch facilitates unified communication applications in business CO/remote site to handle large data from subscribed higher speed broadband. The state-of-art router feature, VPN, security , Dual WAN provides integrated benefits for professional users and small offices.

Figure 1. Hardware Connection

Load-balance and backup

You can combine the bandwidth of the Dual WAN to speed up the transmission through the network. The Gigabit WAN port is ideal for connection to fast Internet feed such as Fiber and VDSL2. The 10/100 Base-Tx port can act as back up or primary WAN, which is suitable for sharing bandwidth of xDSL or cable modem. In case of your primary ISP or DSL line suffering temporary outage, WAN-backup offers you redundancy to let the secondary Internet access temporarily route Internet traffic. All traffic will be switched back to your normal communication port as services are resumed.

The Dual WAN features of Vigor2920 series ensure your operational efficiency and business network continuity.

Figure 2. Load-balance and backup

Enhanced Security

The Vigor2920 series offer your robust firewall options with both IP-layer and content-based protection. The DoS/DDoS prevention and URL/Web content filter strengthen the security outside and inside the network. The enterprise-level CSM (Content Security Management) enables users to control and manage IM (Instant Messenger) and P2P (Peer-to-Peer) applications more efficiently. The CSM hence prevents inappropriate content from distracting employees and impeding productivity. Furthermore, the CSM can keep office networks threat-free and available.

With CSM, you can protect confidential and essential data from modification or theft.

Figure 3. Enhanced Security

Comprehensive VPN

For remote tele-workers and inter-office links, the Vigor2920 series provide up to 32 simultaneous VPN tunnels (such as IPSec/PPTP/L2TP protocols) for secure data exchange and communication.

With a dedicated VPN co-processor, the hardware encryption of AES/DES/3DES and hardware key hash of SHA-1/MD5 are seamlessly handled, thus maintaining maximum router performance. The LAN-to-LAN and remote dial-in capabilities are ideal for remote office linking or tele-worker connections to access branch or head office resources to handle upcoming tasks wherever they are.

Vigor2920 comprehensive VPN functions simply escalate productivity in a secure and convenient approach.

Figure 4. Comprehensive VPN

Multi-task USB functionalities

Through mobility, brought by cellular networks, you can connect 3.5G USB mobile to 2.0 version USB port on Vigor2920 series. This can be used for your primary Internet feed while you are on the bus, in a car at your summer house or enjoying outdoor events. The 3.5G USB mobile can be a backup broadband connection if the primary fixed line drops. The Vigor2920 series USB port can also be used to add storage memory. You can connect USB disk or hard-drive to USB port for file sharing. The Vigor2920 series provides FTP access file uploading/downloading, which can be used from the local LAN or from anywhere on the Internet. If you are a freelance journalist, you can let newspaper or magazine download your report and photo because you deploy file depository on Vigor2920 series. The access can be using "username and password" or "public". Each of them can have their own directories and/or file access rights.

Figure 5. Multi-task USB functionalities

Hardware Interface	4 x 10/100/1000Based-Tx LAN Switch, RJ-45
	1 x 10/100Based-Tx WAN1 Port, RJ-45
	1 x 10/100/1000Based-Tx WAN2 Port, RJ-45
	1 x Factory Reset Button
	1 x USB Host 2.0 (for Printer / 3.5G USB Modem)
Dual-WAN (Ethernet / 3.5G)	Outbound Policy-Based Load-Balance
	BoD (Bandwidth on Demand)
	WAN Connection Fail-over
WAN Protocol	DHCP Client
	Static IP
	PPPoE
	PPTP
	BPA
	L2TP
VPN	Up to 32 VPN Tunnels
	Protocol: PPTP, IPSec, L2TP, L2TP over IPSec
	Encryption: MPPE and Hardware-based AES/DES/3DES
	Authentication: Hardware-based MD5, SHA-1
	IKE Authentication: Pre-shared Key and Digital Signature (X.509)
	LAN-to-LAN, Teleworker-to-LAN
	DHCP over IPSec
	NAT-Traversal (NAT-T)
	Dead Peer Detection (DPD)
	VPN Pass-through
Firewall	Multi-NAT, DMZ Host, Port-redirection and Open Port
	Object-based Firewall
	MAC Address Filter
	SPI (Stateful Packet Inspection) (Flow Track)
	DoS / DDoS Prevention
	IP Address Anti-spoofing
	E-mail Alert and Logging via Syslog
	Bind IP to MAC Address
	Time Schedule Control
USB	3.5G USB Modem as 2ndWAN
	Printer Sharing
	File System : Support FAT32 / FAT16 File System *
	File System : Support FTP Function for File Sharing *
	File System : Support Samba for Windows File Sharing *
Bandwidth Management	Class-Based Bandwidth Guarantee by User-Defined Traffic Categories
	DiffServ Code Point Classifying
	4-level Priority for Each Direction (Inbound/Outbound)
	Bandwidth Borrowed
	Bandwidth/Session Limitation
	Layer-2 (802.1p) and Layer-3 (TOS / DSCP) QoS Mapping *
Network Management	Web-Based User Interface (HTTP/HTTPS)
	Quick Start Wizard
	CLI (Command Line Interface, Telnet/SSH)
	Administration Access Control
	Configuration Backup/Restore
	Built-in Diagnostic Function
	Firmware Upgrade via TFTP/FTP/HTTP/TR-069
	Logging via Syslog
	SNMP Management with MIB-II
	Management Session Time Out
	2-level management (Admin/User Mode)
	TR-069 Management
	TR-104 Management
Content Security Management	IM/P2P Applications Blocking
	URL Keyword Filter (Whitelist and Blacklist)
	GlobalView Web Content Filter ( Powered by ) *
Network Features	DHCP Client/Relay/Server
	IGMP Proxy
	Dynamic DNS
	NTP Client
	Call Scheduling
	RADIUS Client
	DNS Cache/Proxy
	UPnP 30 Sessions
	Port-Based VLAN
	Packet Forwarding Acceleration
	Routing Protocol		Static Routing
			RIP V2
Temperature	Operating : 0°C ~ 45°C
	Storage : -25°C ~ 70°C
Humidity	10% ~ 90% ( non-condensing )
Max. Power	10 Watt
Dimension	L240.96 * W165.07 * H43.96 ( mm )
Power	DC 15V / 1.34A