Draytek Vigor3220 Quad-WAN, Dual USB for 3G/4G, Firewall
Draytek

Draytek Vigor3220 Quad-WAN, Dual USB for 3G/4G, Firewall

  • Quad-WAN: 4 x Gigabit Ethernet WAN ports
  • 2 x USB ports (1 x USB 2.0, 1 x USB 3.0)
  • Multi-WAN Load Balance and Failover
  • 100 x VPN and 50 x SSL-VPN tunnels with Load Balance and Redundancy
  • 1 x Gigabit LAN port with 100,000 NAT sessions
  • 1 x Dedicated Gigabit Ethernet DMZ port for connecting servers
  • 1 x Console port (RS232)
  • Object-based SPI Firewall with Content Security Management (CSM)
  • IPv6 compliant
  • QoS functions
  • 2 x USB ports support 3G/4G modem, FTP server or network printer
  • Central VPN Management
  • Central AP Management
  • Central Switch Management
  • Supports Smart Monitor Traffic Analyzer (up to 200 nodes)
  • Supports VigorACS SI Central Management (TR-069)
  • 2 years back to base warranty
$675
 
 
 
Draytek Vigor3220 Quad-WAN, Dual USB for 3G/4G, Firewall
The Vigor3220 Quad-WAN security Firewall router is an enterprise level router suitable for any medium-sized business (SMB) that need to provide up to 100 VPN tunnels.
The Vigor3220 router supports 4 x Gigabit Ethernet WAN interfaces and 2 x USB ports for 3G/4G mobile dongles.

The Vigor3220 can connect to the Internet through any of these interfaces, or with a combination of interfaces for Load Balance and/or Failover functions. It supports business features including an object-oriented SPI (Stateful Packet Inspection) firewall, IPv6, 100 VPN tunnels, 50 SSL VPN tunnels, tag-based VLAN, multiple subnets, etc.

The dedicated DMZ port can be used to connect servers or computers that need to be exposed to the Internet without compromising internal LAN security.

The Centralised network management features provide a convenient console for the network administrator. These features include Central VPN Management, Central Switch Management, and Central AP Management.

The Vigor3220 series router can be rack mounted, using the supplied mounting brackets, into a standard 19” rack or cabinet.

1. WAN Connectivity

The Vigor3220 router supports 2 types of WAN Interfaces: 4 x Gigabit Ethernet WAN interfaces, and 2 x USB ports for supported USB 3G/4G USB modems.

With between more than 1 WAN interfaces connected, you can configure for Load Balancing or Failover. For example, you can use WAN 1 as your primary Internet connection and have a failover connection over a 4G LTE connection.

2. LAN and VLAN

The Vigor3220 has 1 x Gigabit LAN port supporting 100,000 NAT sessions.

The Vigor3220 supports both port-based and 802.1q tagged VLANs. Port-based VLANs allow the assignment of a VLAN and IP subnet to each router LAN port. On the other hand, 802.1q tagged VLANs can extend up to 8 VLANs and 8 IP subnets to an attached switch.

3. Quality of Service (QoS)

QoS functions allow the network administrator to set priorities for any traffic type to guarantee the required level of performance for data flow. For example, real-time traffic such as VoIP or Video over IP can be prioritised as these have less tolerance for delays caused by network congestion.

A traffic type can be assigned to each of the three QoS classes and reserved bandwidth allocated.

4. Firewall

The Vigor3220 has powerful firewall features including object-oriented SPI (Stateful Packet Inspection) firewall, DoS (Denial of Services), CSM (Content Security Management) and WCF (Web Content Filter).

Stateful Packet Inspection (SPI) Firewall monitors incoming and outgoing packets at layer 3 (OSI model) and passes or blocks the data packets based on the configuration.

The DoS feature protects the network for unwanted access requests from DoS attackers.

CSM enables network administrators to control and manage IM (Instant Messenger) and P2P (Peer-to-Peer) applications, for instance, to keep network users from accessing inappropriate contents and ensure that network traffic flow efficiently.

WCF classifies all websites into 64 categories and allows network administrators to select categories to protect the users from undesirable website content. DrayTek uses the CYREN WCF database for its Vigor routers, and each router includes a free 30-day trial license.

The object-based firewall provides flexibility by using Objects in the firewall settings. Objects can be created and placed in groups for IP, service type, keyword, file extension, etc. This allows a filter rule to be applied to many IP addresses, reducing the number of firewall filters required. In addition, these objects and groups can be reused for other firewall settings resulting in reduced amount of work required to create multiple firewall rules.

Firewall rules can be applied according to a Time Schedule to control access to the Internet or network services according to predetermined time slots. Up to 4 time-schedules can be applied to each firewall filter rule. For example, social media can be restricted during work hours and be allowed during off-work hours in a company.

5. VPN & SSL-VPN

Vigor3220 supports up to 100 simultaneous hardware based VPN tunnels, providing a throughput up to 40Mbps for each VPN tunnel. It utilises most supported protocols such as IPSec/PPTP/L2TP, and 50 tunnels of SSL VPN protocol. The dedicated VPN co-processor supports hardware encryption including AES/DES/3DES, hardware key hash of SHA-1/MD5, and LDAP authentication, and ensures that VPN traffic is secure and performance is maximised.

The SSL technology allows secure Web encryption such as those used for on-line banking. With Vigor3220, you can create SSL VPN in Full Tunnel mode or Proxy mode.

Furthermore, since the Vigor3220 supports multiple WANS Ethernet and 3G/4G, you can create VPN Trunking for VPN Load Balance and VPN Backup. For instance, you can use a number of connections to a site to increase the bandwidth, or have a backup connection when the primary connection fails.

6. Central VPN Management

Instead of manual VPN connection through web browsers, Vigor3220 supports Central VPN Management (CVM) which utilises TR-069 protocol. You can create VPN tunnels with just a few mouse clicks on the icons representing your local network (which may be public places such as a café) and remote locations (e.g. branch or home office), and the router will establish the connection automatically. This takes away the tedious process required for VPN tunnel creation.

Furthermore, CVM also provide a console to monitor multiple CPE devices and VPN tunnels. This includes displaying the CPE devices on a Google Map.

Other features include scheduling of CPE configuration backup/restore tasks as well as scheduled firmware upgrade of the CPE devices. Up to 8 DrayTek CPE devices are supported.

7. Central AP Management

Vigor3220 supports Central AP Management (APM) with a console to auto configure and manage up to 20 directly connected (via LAN cables) Draytek wireless Access Points including VigorAP 800, VigorAP 810, VigorAP 900, VigorAP 902 & VigorAP 910C.

The Dashboard feature displays the status such as traffic and number of attached stations, of all the attached Access Points.

With Auto Provisioning enabled on the attached Access Points, WLAN profiles can be created and applied to the selected Access Points from the central console.

The AP Maintenance feature allows a number of actions to be programmed, including Configuration Backup and Restore, Firmware Upgrade, Remote Reboot and Factory Reset, for selected Access Points.

The connected Access Points can also be displayed on a map or floor plan showing their locations and basic descriptions. Other features include Traffic Graph, Rogue AP detection, Event Log, Total Traffic, Station number and Access Point load balancing.

8. Central Switch Management

Central Switch Management provides a convenient and easy way to manage and configure supported VigorSwitches. Switched networks comprising VigorSwitches can be easily deployed from a single console. With a few mouse clicks in the graphical user interface, VLANs can be assigned to the switch ports and at the same time update the router configuration. This includes the creation of 802.1q trunk ports.

Another feature is the backup and restore of switch configurations. You can also reboot the switch or reset the switch to factory default settings

The Switch Status menu provides, at a glance, the status of all the attached switches. You can see the switch name, its IP address, the model number and system up time, how many ports are in use in each switch, port status, how many clients are connected, etc.

Central Switch Management simplifies VigorSwitch configuration tasks and reduces troubleshooting efforts.

9. Remote Access Management

The Vigor3220 supports a number of management options to control access to the router both locally and remotely.

The TR-069 feature integrates with the VigorACS-SI centralised management system, and allow system integrators or network administrators to configure, monitor and manage the Vigor3220 remotely from the comfort of their offices or homes. It can also be used to Auto-Provision the Vigor3220 remotely by sending configuration data to the router.

There are 3 wizards: a Configuration Wizard, a VPN Wizard and a Firmware Upgrade Wizard. These allow network administrators to quickly and easily carry out complex tasks.

Alarm & Log Management features ensure real time notifications and alerts to specified phone numbers or email accounts in relation to faults or status of the connected CPEs.

A number of diagnostic functions, including Data Flow Monitor, Traffic Graph and Syslog Explorer, allow the network administrator to monitor and troubleshoot network conditions remotely.

Like all Vigor routers, Vigor3220 supports management options include HTTP, HTTPS, FTP, SSH, Telnet and SNMP.

10. Dedicated DMZ Port

The DMZ port of Vigor3220 router provides an additional layer of protection to servers, such as Web servers, which need to be exposed to outside networks e.g. the Internet, but need to be kept from compromising the security of internal networks.

You can activate the DMZ by NAT or Physical mode to the chosen server through the user-friendly interface of Vigor3220 router.




Estimated Availability

Please call or e-mail us for availability¹
¹ In case of any change to this timeframe one of our staff members will contact you directly to discuss, excludes weekends.

*Our stock is a mix of Supplier and HT Stock.
All shipments are subject to our standard delivery policy.

Tax

Ex. GST:$613.64
GST Amount:$61.36

Details

Tech Code:BG166
Manufacturer Number:DV3220

Images may differ slightly from actual product
 
 
  • Quad-WAN: 4 x Gigabit Ethernet WAN ports
  • 2 x USB ports (1 x USB 2.0, 1 x USB 3.0)
  • Multi-WAN Load Balance and Failover
  • 100 x VPN and 50 x SSL-VPN tunnels with Load Balance and Redundancy
  • 1 x Gigabit LAN port with 100,000 NAT sessions
  • 1 x Dedicated Gigabit Ethernet DMZ port for connecting servers
  • 1 x Console port (RS232)
  • Object-based SPI Firewall with Content Security Management (CSM)
  • IPv6 compliant
  • QoS functions
  • 2 x USB ports support 3G/4G modem, FTP server or network printer
  • Central VPN Management
  • Central AP Management
  • Central Switch Management
  • Supports Smart Monitor Traffic Analyzer (up to 200 nodes)
  • Supports VigorACS SI Central Management (TR-069)
  • 2 years back to base warranty
 
 

Quantity: