The DrayTek Vigor 2962 is a versatile and robust firewall/VPN router designed for small to medium-sized businesses and advanced home networks. It offers flexible WAN/LAN configurations, including a 2.5 GbE port, 1 GbE SFP port, and two 1 GbE ports, allowing users to set up to four WAN connections for load balancing or failover purposes. This configuration supports a maximum 2.2 Gbps NAT throughput, ensuring high-speed internet access.

KEY FEATURES

• NBN (National Broadband Network – Australia) Ready to connect to NTD (Network Termination Device)
• 2 x GbE configurable LAN/WAN ports *
• 1 x 2.5GbE configurable LAN/WAN port *
• 1 x 1GbE combo SFP Fibre / Ethernet configurable WAN/LAN port *
• Multi-WAN Load Balancing & Failover
• Up to 5 x Gigabit LAN ports with 300,000 NAT sessions
• 2.2 Gbps NAT throughput
• 4 x Gigabit PoE LAN ports with a total power budget of 65 Watts (Vigor2962P) **
• 2 x USB ports for USB disk storage
• Object-based SPI Firewall, Content Security Management (CSM) and QoS
• 200 x VPN tunnels (including 50 x OpenVPN/ SSL-VPN tunnels) with most security protocols. The built-in EasyVPN features simplify VPN setup, ensuring effortless and reliable connectivity.
• Up to 1 Gbps site-to-site IPsec VPN throughput
• Fast VPN throughput, VPN Load Balancing, Failover, and backup for site-to-site applications
• 20 x VLANs and LAN subnets for secure and efficient workgroup management
• IPv6 & IPv4
• High-Availability (with CARP) ensuring 24/7 system uptime
• Bandwidth management
• Supports VigorACS 2 and VigorACS 3 Central Management Software for remote management
• SD WAN capability when used with VigorACS 3
• Central AP Management for up to 50 Vigor Access Points
• Central Switch Management for up to 30 VigorSwitches
• Rack-mountable
• 2 years back to base warranty

SPECIFICATION

Interface
LAN/WAN Configurable Port	1x 2.5G Ethernet, RJ-45 (PoE capable port for P model) 1x GbE/SFP Combo 2x GbE, RJ-45 (PoE capable port(P4) for P model) * up to 2 simultaneous WANs
Fixed LAN Port	2x GbE, RJ-45 (PoE capable ports for P model)
USB Port	1x USB 2.0 + 1x USB 3.0 for USB disk storage (since f/w v3.9.4)

Performance
NAT Throughput w/ Hardware Acceleration	2.2 Gbps
IPsec VPN Performance	1 Gbps (AES 256 bits)
SSL VPN Performance	800 Mbps
Max. Number of NAT Sessions	300,000 NAT sessions (since f/w v3.9.6)
Max. Concurrent VPN Tunnels	200
Max. Concurrent OpenVPN/ SSL-VPN	50

PoE (P model)
PoE Capable Ports	4 (P1/P4/P5/P6)
PoE Standards	PoE/PoE+ (802.3af/802.3at)
Power Budget	65 watts
PD Device Check

Internet Connection
IPv4	PPPoE, DHCP, Static IP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping, Strict ARP
WAN Data Budget	(since f/w v3.9.6)
Dynamic DNS
DrayDDNS

LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	20
Number of LAN Subnet	20
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server

Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, OSPF, BGP (IPv4)
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server

Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, OSPF, BGP (IPv4)
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN (Host to LAN)
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256, MD5
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher

Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (* subscription required)
DoS Attack Defense
Spoofing Defense

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Service Type
VoIP Prioritisation

Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central AP Management	50 VigorAPs
Central Switch Management	30 VigorSwitches

Physical
Rack Mountable	Mouting Kit Included
Power Supply	AC 100-240V @ 1A
Max. Power Consumption	100 watts (P model)
Dimension	273mm x 171mm x 45mm
Weight	1.53 kg (P model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate