Draytek Vigor 3910 Multi-WAN Router

Key Features

• Quad-Core processor
• Flexible WAN Architecture
• Switchable WAN & LAN Ports

Powerful 10GbE-Capable Internet Gateway

The Vigor 3910 is specially designed to cope with the throughput demands of large networks and as a VPN concentrator, has suitable processing power to meet the demands of hundreds of active VPN tunnels. Firewall and NAT throughput of the router can exceed 9 Gigabits per second when connected via the 10 Gigabit SFP+ ports or spread over multiple Internet connections with Load Balancing. The Vigor 3910 accelerates LAN-to-LAN IPsec VPN throughput up to 3 Gigabits per second, with up to 500 active VPN tunnels it can provide enough throughput to each tunnel, without becoming a bottleneck to the user experience. The SSL VPN capabilities of the Vigor 3910 are also increased, with over 1 Gigabit per second of total SSL VPN throughput, suitable to cater to the bandwidth requirements of up to 200 active SSL VPN users.

High-Performance VPN Concentrator

A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices. The Vigor 3910 allows you to have up to 500 simultaneous VPN tunnels to remote offices or teleworkers, with over 3Gbps of VPN throughput. It supports all common industry standard protocols, encryption types and authentication methods (see specification tab for full support list). Teleworkers can authenticate directly with your LDAP server if preferred. The Vigor 3910 supports VPN trunking; this allows you to create tunnels down multiple WAN connections to a remote site in order to increase bandwidth. VPN trunking also provides failover (backup) of your VPN route down a secondary WAN connection.You can learn more about DrayTek VPN here. Teleworkers can also use 2FA (Two factor authentication) such as MOTP.

Load Balancing - Ultimate Resiliency & Reliability

The SFP+ ports, when fitted with an optional SFP+ or SFP module, can be linked to 1GbE or 10GbE uplinks, through Fibre or any other link type with a suitable transceiver.Fibre is of particular use for longer distance deliveries, beyond the range of standard Ethernet, or where copper connections cannot be used. These multiple WAN interfaces can be used either for WAN-Backup or Load Balancing with Policy-based Routing giving you full control of where and how traffic is routed. Load-balancing or failover supports IPv4 only currently (not IPv6). WAN-Backup provides contingency (redundancy) in case of your primary Internet connection or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services are restored to your primary Internet line, all traffic is switched back to that.

Flexible WAN & LAN Ports

The Vigor 3910 features 12 physical ports in total, with 8 ports that can be switched between LAN and WAN usage to fit your network requirements, with many combinations being possible:

High Availability

For even greater resilience, the Vigor 3910 provides High Availability (HA), with both a primary and secondary router able to provide connectivity to your network and subnets. In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume Internet, routing and VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time.

Manage Multiple Networks

The Vigor 3910 features a hugely flexible local network interface, with the router managing up to 50 separate Local Networks (or Subnets) through the use of 802.1Q VLAN Tags. Each network can be used in NAT or Routing modes, containing anywhere from 253 to 1022 devices each, with larger subnet support. Each of the 50 VLAN subnets can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated. With Inter-LAN routing, specified networks can allowed to communicate with each other or share resources, with the router’s Firewall controlling access. To take full advantage of VLAN tagging, the Vigor 3910 can be connected to any one of the switches from the DrayTek VigorSwitch range such as the VigorSwitch P2280x.