Vigor2915ac

Dual-WAN Security Router

Dual-WAN for load-balancing or redundancy
1 USB port for 3G/4G WAN, printer, or network storage
16 concurrent VPN tunnels, including up to 8 SSL VPN
Bandwidth management & QoS for the best VoIP quality
SPI Firewall with Content Filtering by Apps, URL keyword, and web category
IPv6 Support
Built-in 802.11ac Wi-Fi

OVERVIEW
SPECIFICATIONS

OVERVIEW

The Vigor2915ac is an integrated network management solution designed for small businesses. The Dual-WAN
provides link redundancy to ensure reliable Internet access, and it is also a robust VPN server for up to 16 concurrent
tunnels. The firewall and content filtering features allow management of the incoming and outgoing network traffic,
and it also offers bandwidth management functions that optimize the bandwidth allocation and make the best use of
the subscribed bandwidth.

DUAL-WAN LOAD-BALANCING

Vigor2915ac can have up to 2 active WAN links for load balancing. There is a fixed Ethernet WAN port as the primary interface, and the secondary can be either the Ethernet port number 4, the USB port (requires a 3G/4G modem), or the Wi-Fi. The secondary interface can be configured as failover only, and it will be activated automatically in the event of primary link failure or heavy traffic.

VPN FOR SECURE REMOTE ACCESS

Vigor2915ac is also a robust VPN server providing Site-toSite and Remote Access VPN connections. It supports all the standard protocols, including PPTP, IPsec, IKEv2, GRE over IPsec, and SSL VPN. The Dual-WAN also allows a redundant VPN tunnel, so that if the main VPN fails due to the disconnection of the primary WAN, the router can automatically build a backup VPN over the alternative WAN.

FIREWALL & SECURITY

Vigor2915ac supports Stateful Packet Inspection (SPI) Firewall with Layer 3 filtering. Rules can be created to filter outgoing traffic based on its application, URL keywords, and categories, this helps to protect the local network from insecure websites, and also prevent time and network resource wasting on inappropriate network activities.

BANDWIDTH MANAGEMENT & TRAFFIC PRIORITIZATION

Vigor2915ac features Bandwidth Limit and Session Limit to restrict the maximum bandwidth or session number that a host can use, thus to ensure fair allocation of router and bandwidth resources. Quality of Service (QoS) allows you to reserve a certain amount of bandwidth for the critical clients or time-sensitive applications, such as audio and video. Vigor2915ac also offers a simple option to prioritize the VoIP traffic that helps to optimize the call quality easily.

SPECIFICATIONS

IP Version

IPv4
IPv6

NAT

NAT Session: up to 50,000
Support Hardware NAT
Application Layer Gateway

WAN Protocol

Giga Ethernet WAN
- – DHCP Client
  – Static IP
  – PPPoE
  – PPTP
  – L2TP
  – 802.1q/p Multi-VLAN Taggin
  IPv4
IPv6
– Dual Stack: PPP, DHCPv6 Client
Static IPv6
– Tunnel Mode: TSPC, AICCU, 6rd,
6in4 Static Tunnel
USB WAN (backup only)
IPv4
– DHCP Client (for 3G)
– CDC Driver (for 4G)
IPv6
– TSPC
– AICCU

Multi WAN

Outbound Policy-based Load-balance
WAN Connection Failover
Multi-VLAN
2 WAN Interfaces
- WAN1 is always on and dedicated to
  WAN port 1
- WAN2 can be set to use LAN port 4,
  USB or Wi-Fi as interface

Routing

Load Balance and Router Policy
Static Route
Routing Protocol: RIPv1 / v2

LAN Switch

8 x VLAN
4 x LAN Subnet + 1 x IP Routed Subnet
Port-based VLAN
Tag-based VLAN
VLAN Tagging (802.1q) on LAN
Bind-IP to MAC Address
LAN Port Mirror
Wired 802.1X

Wireless AP

Support Concurrent 2.4GHz + 5GHz Band
Auto Channel Selection
64 / 128-bit WEP
WPA / WPA2
802.1X Authentication
Multiple SSID (4 x SSID for Each Band)
SSID VLAN Grouping with LAN Port
Hidden SSID
WPS
Wireless Client List
Wireless LAN Isolation
MAC Address Control
Access Point Discovery
WDS (Wireless Distribution System)
Wireless Rate-control
WMM
Airtime Fairness
Band Steering
Router-assisted Client Roaming

Firewall

Port Mapping
User-based / Rule-based Firewall
Object-Based Firewall
SPI (Stateful Packet Inspection, Flow Track)
DoS Defense
Time Schedule Control
User Management
Firewall Wizard and Advanced Mode
Email Alert and Logging vai Syslog
IP Address Anti-Spoofing
IPv6 Firewall

Content Security Management

APP Enforcement
URL Content Filter :
- URL Keyword Blocking
  (White List and Black List)
- Java Applet, Cookies, Active X, Compressed,
  Executable, Multimedia File Blocking
- Excepting Subnets
WEB Content Filter
DNS Filter

VPN

Up to 16 VPN Tunnels
(Including 8 SSL VPN Tunnels)
Protocol : PPTP, IPsec, L2TP, L2TP over IPsec,
IKEv2, SSL
Encryption : MPPE and Hardware-based
AES/DES/3DES
Authentication :MD5, SHA-1, SHA256
IKE Authentication : Pre-shared key and Digital
Signature (X.509)
mOTP
LAN-to-LAN, Teleworker-to-LAN
DHCP over IPsec
IPSec NAT-traversal (NAT-T)
Dead Peer Detection (DPD)
VPN Pass-through
VPN Wizard
VPN Trunk (Backup mode only)

Bandwidth Management

QoS
- Guarantee Bandwidth for VoIP
- Class-based Bandwidth guarantee
- DiffServ Code Point Classifying
- 4-level Priority for Inbound / Outbound
- Bandwidth Borrowed
Layer-3 (TOS / DSCP) QoS
Layer-2 (802.1p) QoS
APP QoS
Bandwidth Limitation
Sessions Limitation
WAN Budget

Hardware Interface

1 x 10/100/1000Base-Tx WAN, RJ-45
4 x 10/100/1000Base-Tx LAN Switch, RJ-45 (Configurable WAN2 on LAN Port 4)
1 x USB Host 2.0
1 x Factory Reset Button
1 x Wireless On/Off/WPS Button
2 x Detachable Antennas