Vigor 3900 Quad-WAN Firewall

High Performance Multi-WAN VPN Appliance
The Vigor 3900 is a high-performance quad-Gigabit WAN router for high-performance applications including remote access, firewalling, load-balancing and failover. Its WAN throughput runs at up to 1Gb/s, adequate for the most demanding SME applications. The WAN ports on the Vigor 3900 can provide load balancing or WAN failover. Based on a new DrayTek OS platform, the Vigor 3900 combines high performance and capacity with DrayTek’s traditional ease of use and comprehensive features set.

For multi-tenant or departmental flexibility, the Vigor3900 will support multiple LAN IP subnets, together with VLAN capabilities and user management, providing access to WAN resources only to the appropriate users or departments, as well as maintaining infrastructure effciency.

Four WAN ports for load-balancing or failover
Four Gigabit Ethernet WAN ports and one SFP slot (for fibre modules or an additional Ethernet module) provide 5 independent WAN ports for either load-balancing or failover applications. Gigabit Ethernet and SFP LAN Interfaces provide high speed connectivity to your LAN. Fibre is of particular use for longer distance deliveries, beyond the range of standard Ethernet, or where copper connections cannot be used. WAN Load-balancing weight or traffic-type rules can be set or on an automatic basis to spread WAN traffic evenly across all interfaces on a best-endeavour basis.

Firewall
The Vigor 3900’s firewall is fully stateful, with a flowtrack mechanism and comprehensive WAN defences, including DoS/DDoS protection and flexible IP packet filtering. On the content side, the Vigor 3900 has several methods of content filtering to control user access to the web to keep their access appropriate, safe and productive. That helps keep your network efficient, your data secure and your online productivity high.

QoS
Extensive QoS facilities allow for efficient local traffic handling, ensuring that critical traffic is given the appropriate priority and that your network topology handles data in the most efficient way to help avoid congestion and bottlenecks. WAN traffic can be assigned one of 7 different priority levels for egress and 2 levels for ingress. Bandwidth can be reserved for critical applications.. Rules can be based on service type, users or IP source/desintations.

VPN
As a VPN endpoint/concentrator, the Vigor 3900 will support up to 500 simultaneous teleworker or LAN-to-LAN VPNs with a VPN throughput of up to 700Mb/s, thanks to its hardware-based VPN co-processor. VPN security includes certificate, MOTP or token/PSK based access and key-hash authentication to ensure maximum security.

VPN Trunking
By the use of multiple WAN connections, the Vigor 3900’s VPN-Trunking features can increase the bandwidth/capacity of your VPN connections, creating a single virtual tunnel between locations using 2, 3 or all 4 WAN connections.

VPN Trunking is the facility to create more than one VPN tunnel, over a second Wan connection, to the same remote location in order to provide either increased bandwidth between the two sites (load balancing) or resilience (failover) in the event that one tunnel/connection is interrupted. The Vigor 3900 supports both Failover and Load Balancing modes for VPN Trunks.

The Vigor 3900 already supports load balancing to the Internet using its four-WAN ports. What VPN trunking does is enables a single virtual tunnel to be created across two or more WAN connections to the same remote location creating a single virtual tunnel, recombining the tunnel at the other end. As far as the traffic and LAN devices/clients are concerned, there is just a single tunnel, with increased bandwidth.

SSL VPN
For ease of remote access, the Vigor 3900 can provide up to 50 simultaneous SSL VPN tunnels or web-proxy links. SSL Web-Proxy makes remote access to your network possible from virtually anywhere without the inconvenience or compatibility issues of installing a VPN client. As SSL is a standard Internet protocol (used for web sites) SSL VPNs are also resilient to difficulties in creating tunnels through guest networks (web cafes, hotels etc.) where traditional IPSec/PPTP tunnels can often have difficulties. SSL encryption is strong too, using 128bit DES/3DES or AES. Using MoTP, your teleworker passwords are strong and realtime; a password is generated in real-time by your mobile phone (iphone, Android etc.) which can be used once only, and only at the time its generated. You can read more about SSL VPNs and MoTP here. In addition to Web-proxy mode, full SSL VPN tunnelling is supported for Windows OS, macOS, iOS / iPhone / iPad and Android, with the Smart VPN Client freely available on the UK downloads page.

High Availability
For even greater resilience, the Vigor 3900 provides High Availability (HA). The CARP protocol (equivalent to VRRP or HSRP) lets you set up a master and secondary Vigor 3900 whereby in the event of the master unit failing, the secondary unit can seamlessly and automatically switch over. This can remove the possibility of a single point of failure within your routers. Additionally, multiple active Vigor3900’s can provide reciprocal routing backup to other active Vigor3900s.

Vigor 3900 Specification

• Physical Interfaces:
  • LAN Interfaces:
    • 2 x Gigabit (10/100/1000 Base-T)
    • 1 x Active SFP Slot
  • WAN Interfaces:
    • 4 x Gigabit (10/100/1000 Base-T)
    • 1 x Active SFP Slot
    • 3.5G (Cellular) Access via compatible USB Adaptor (‘dongle’) – Later firmware upgrade (Schedule TBA)
  • 2 x USB 2.0 Host Ports
  • Console (RJ45)
• WAN Connectivity/Protocols:
  • DHCP Client
  • Static IP
  • IPv4
  • IPv6 (available on a single WAN port only)
  • PPPoE
  • L2TP (Later firmware upgrade)
  • 3G / 3.5G (later firmware upgrade)
  • Port Load-Balancing
  • Port Failover
  • QoS
  • 802.1q Tag-Based VLAN
• Network Protocols:
  • DHCP Client/Server
  • DHCP Options
  • Dynamic DNS Service Updating
  • NTP Client
  • DNS Cache/Proxy
  • Static Routing
• NAT (IPv4):
  • 100,000 Sessions
  • Port Redirection
  • One-to-One Public-to-Private Mappping
  • MultiNAT
• VPN:
  • Dial-in and Dial-out LAN-to-LAN
  • Dial-in Teleworker
  • Protocols:
    • PPTP
    • L2TP
    • IPSec
    • L2TP over IPSec
  • Encryption/authentication:
    • Hardware-based AES (128, 192, 256 bits)
    • Hardware-based DES/3DES (56 & 168 bits)
    • MPPE (40 or 128 bits)
    • Hardware-based MD5, SHA-1 & SHA-256
    • IKE Phase 1 DiffieHelman Groups 1,2,5 & 14
    • IKE Phase 2 DiffieHelman Groups 1,2,5 & 14 (will match phase 1 selection)
    • IKE authentication : Pre-shared Key (PSK)
    • PKI : X.509 Digital Signature (certificate)
    • Certificate Server (CA) / Trusted CA / Local Certificate
    • MOTP for Teleworkers
  • Dead Peer Detection (DPD)
  • VPN Passthrough : PPTP, L2TP, IPSec, SSL
  • NAT Traversal (NAT-T)
  • DHCP over IPSec
  • GRE over IPSec
• Traffic / Content Management:
  • QoS (7/2 levels egress/ingress)
  • DiffServ Codepoint Classifying
  • Session & Bandwidth Limitation (IP-based)
  • Globalview Categoric Web Content Filtering
  • Web URL Keyword Blocking
• SSL VPN:
  • Tunnel Mode : up to 50 Web Proxy Tunnels
  • SSL Full tunnelling
  • SSL Applications : HTTP (web), VNC, RDP
  • Encryption : RC4 (128 bits), AES (128 bits), DES/3DES
  • Digital Signature (X.509)
  • Pre-shared key
  • MOTP
• Management Facilities:
  • Web Interface (HTTP & HTTPS)
  • CLI : Telnet and SSH
  • Firmware Upgrade : TFTP and HTTP
  • Configuration Backup/Restore (Binary)
  • Admin Access Control
  • SNMP Management (MIB-II))
  • Syslog
  • TR-069
  • Supported by Vigor-ACS Platform
• Operating Requirements:
  • Rack Mountable. 1U. (Mount brackets included)
  • Temperature Operating : 0°C ~ 45°C
  • Storage : -10°C ~ 70°C
  • Humidity 10% ~ 90% ( non-condensing )
  • Power Consumption: 20W max (typically 10-15W)
  • Dimensions: 443 x 280 x 44 mm (LxWxH) – 1U
  • Operating Power: 220-240VAC
  • Warranty : 2 Years Manufacturer’s RTB included

• Vigor 3900
• Quick Start Guide
• Power Adapter
• Ethernet Cable

Next Day Delivery
For UK orders received before 12pm Monday to Friday, we operate a next business day delivery service, subject to availability. We use next day services from the leading delivery companies.

Specific Time Delivery
If you need an item urgently, or delivered at a specific time, please contact us.

Delivery Methods
We use several leading delivery companies. The majority of our deliveries are made by
DPD, including most international orders.

Shipping prices are calculated during the checkout process.
We deliver to almost every country. For international delivery services, we use DHL, a high quality, fast delivery service. Prices are provided based on the weight of the order; this is calculated when you reach the checkout.

For full shipping information please visit our shipping page.

Hosted Business VoIP Provider Unlimited Calls from £10/month
If you’re looking for a reliable and competitive VoIP provider for your small business, we can offer you one of the UK’s most trusted services. No need to compromise on quality, either. The capabilities of our VoIP PBX system have been developed over a decade, with our roadmap for the future incorporating even more improvements. Your business VoIP is in safe hands with us.

With SIP trunking, your business can operate its own on-site IP PBX system. Sipdesk has been offering our own SIP trunk solutions for over 10 years.

Business SIP trunking is a service that enables your company to operate a selection of telecommunications systems over your IP network. It offers a number of benefits – from cheaper international call costs to improved business flexibility. Incorporating a Disaster Recovery strategy to give access to an increased quantity of numbers, business SIP trunking from Sipdesk can enhance the way your business stays connected.