- a combined ADSL router for Internet access, firewall, VPN device and Ethernet switch. The Vigor2800 includes features such as VLAN, QoS, Content filtering, VPN support for up to 16 tunnels and a USB printer port and support for all current ADSL technologies. Parental control and Peer-to-peer software restriction (blocking of Messenger, file-sharing etc.) is also supported on the Vigor2800.

ADSL Interface
The Vigor2800 supports selectable QoS (Quality of Service). This enables you to select specific protocols/services to have guaranteed levels of your Internet bandwidth. For example, if you need POP3 email to have priority, you could specify that 50% of your download (or upload, or both) bandwidth is reserved for POP3 when required. When it's not being used by POP3, the bandwidth is available for all other regular traffic. The Vigor2800 is very flexible on QoS - you can set several groups of services to have different priorities and bandwidth reservations.
Printer Port

The USB port on the back of the router allows you to connect most standard USB based printers and then print to them from any Windows98SE/XP/2000 PC, using built-in O/S support from any application, thus not needing to have a particular PC be on to provide printer sharing to its peers.
High Performance VPN

A VPN (Virtual Private Network) is a method for using a public network (Internet) to carry private data between offices or from teleworkers to office. The Vigor2800 can act as a VPN concentrator (endpoint) for up to 16 remote sites - i.e. running 16 simultanous tunnels to remote locations; either single teleworkers or remote networks/offices. The VPNs use induststry standard protocols including IPSec, PPTP and with high level encryption including 3DES, AES and MPPE. Cross compatibility with with common Microsoft Windows and MacOS VPN software clients is supported as well as compatibility with many other 3rd party VPN vendor's products, including Cisco™ Pix, Nokia™, Sonicwall™, Checkpoint™, ZyWall™ and Watchguard™. For more details on VPN, see DrayTek VPN.
Vigor 2800 Enhanced Firewall
The Vigor 2800 includes full packet-level Stateful Packet Inspection, not just the inherrent NAT security and port-blocking of other routers. The router also employs keep-state packet recording; put simply, this means that when a packet is sent out, a reciprocal record is kept to allow a packet coming back in the opposite direction, but a default 'deny' policy means that any packet arriving which appears unsolicited won't get through. With SPI enabled, this is stricter and more secure than NAT alone, and also works for non-NAT routed connections. The Vigor2800 also features automatic protection from Dos/DDos (Denial of Service/Distributed Denial of Service) attacks and IP anti-spoofing. User-definable filters also allow you to add additional protection to your connection (see right). For added confidence, potential or foiled attacks are logged and can be reported via the router's syslog facility.           

Wireless LAN Features (Vigor2800G only)
802.11g "Super-G" Performance

802.11 Super-G Logo          The Vigor2800G supports 802.11b and 802.11g standards for wireless with Super-G support. With a super-G compatible card/adaptor in your PC, this gives a total wireless bandwidth of 108Mb/s (compared to 54Mb/s on standard 802.11g). This gives a real-world throughput of up to 40Mb/s. Note that, at DrayTek, we live in the real world so we explain this carefully - do not expect to actually download at 108Mb/s - that is the total wireless capacity. Range and performance will vary depending on environment.
Wireless Security

The convenience of wireless LAN means that laptop users or those where running a cable is impractical can have access to your network and the internet, but security of Wireless LANs is vital; to this end, the Vigor2800G supports multiple independent levels of wireless security.

The Vigor2800G supports industry standard WEP and WPA protocols for encrypting your wireless LAN traffic as well as the new WPA2 standard (for a comparison, click here). You can lock the router down further so that only PCs whose unique hardware ('MAC') address is authorised can access the router. An 'at a glance' list can show you all wireless clients connected (see example below). "SSID Stealthing" makes your base more difficult to other people to scan for. For larger wireless LANs, the Vigor2800G also supports 802.1x Authentication to allow a permitted wireless user database on your Radius server.
WDS - Wireless Distribution System

WDS provides two modes of operation to expand the Wireless range of your LAN. Where you install two or more compatible wireless routers, the WDS-enabled router becomes a satellite (slave) to the main base. In 'Repeater' Mode, the slave unit is within range of the main base unit and then repeats the main wireless signal into its own coverage area - this can effectively double the total range of the network (depending on the environment). In WDS Bridge mode, two physically separated LAN can be joined wirelessly, in order than they can communicate with each other. This is ideal where two offices need to be linked but a cable cannot be run (e.g. across a road). For more information about WDS see here.
Wireless VLAN & Rate Control

As with the VLAN facility on the wired (RJ45) ethernet ports, the Wireless VLAN facility enables you to create groups of LAN clients which are common (can communicate with each other) or distinct (cannot communicate with each other) whilst still allowing Internet access to all clients. Wireless VLAN Groups can be combined with VLAN groups on the wired ports too. Wireless Rate Control allows you to limit the wireless rate that a particular wireless client can use.
Wireless LAN Feature Summary (Vigor2800G only)

    * 802.11g Super-G Wireless LAN (Total bandwidth up to 108Mb/s)
    * Twin gain aerials provide diversity and optimum coverage
    * Optional Higher-Gain Aerials (see here)
    * Backward compatible with 802.11b (11Mb/s) and regular 802.11g (54Mb/s) standards
    * Wireless Security Features :
          o WEP, WPA and WPA2 Wireless Security & Encryption
          o WLAN Isolation - Isolate WLAN from wired LAN
          o SSID Stealthing
          o Restricted access list for clients (by MAC address)
          o Time Scheduling (WLAN can be disabled at certain times of day)
          o 802.1x User Authentication (via Radius Server, EAP-TLS Mode)
    * WDS (Wireless Distribution system) for WLAN Bridging and Repeating (see here) - New!
    * Wireless Client Rate control - New!
    * Wireless VLAN - Set inclusive/Exclusive wireless groups - New!
    * Active Client list in Web Interface