Back to previous page

Draytek V2960-K hardware firewall 1U

Product Description

Vigor 2960 Dual-WAN Firewall
The Vigor 2960 is a high-performance dual-Gigabit WAN firewall. The two dedicated Gigabit WAN ports can provide load balancing or WAN failover. Based on a new DrayTek OS platform, the Vigor 2960 provides high performance with DrayTek's traditional ease of use and comprehensive features set. Extensive QoS, VLAN Web Content filtering features help keep your network efficiency and online productivity high.

As a VPN endpoint/concentrator, the Vigor 2960 will support up to 200 simultaneous teleworker or LAN-to-LAN VPNs with a VPN throughput of up to 500Mb/s dependant on protocol, thanks to its hardware-based VPN co-processor. VPN security includes certificate, MOTP or token/PSK based access and key-hash authentication to ensure maximum security.

For ease of remote access, the Vigor 2960 can provide up to 50 simultaneous SSL VPN tunnels or web-proxy links. SSL Web-Proxy makes remote access to your network possible from virtually anywhere without the inconvenience or compatibility issues of installing a VPN client. As SSL is a standard Internet protocol (used for web sites) SSL VPNs are also resilient to difficulties in creating tunnels through guest networks (web cafes, hotels etc.) where traditional IPSec/PPTP tunnels can often have difficulties. SSL encryption is strong too, using 128bit DES/3DES or AES. Using MoTP, your teleworker passwords are strong and realtime; a password is generated in real-time by your mobile phone (iphone, Android etc.) which can be used once only, and only at the time its generated. You can read more about SSL VPNs and MoTP here. In addition to Web-proxy mode, full SSL VPN tunnelling is supported for Windows OS, macOS, iOS / iPhone / iPad and Android, with the Smart VPN Client freely available on the UK downloads page.

High Availability
For even greater resilience, the Vigor2960 provides High Availability (HA). The CARP protocol (equivalent to VRRP or HSRP) lets you set up a master and secondary Vigor2960 whereby in the event of the master unit failing, the secondary unit can seamlessly and automatically switch over. This can remove the possibility of a single point of failure within your routers. Additionally, multiple active Vigor2960's can provide reciprocal routing backup to other active Vigor2960s.


Technical details
Rack mountingNo
Form factor1U
Data transmission
Maximum data transfer rate1000 Mbit/s
VPN throughput400 Mbit/s
Networking standardsIEEE 802.3,IEEE 802.3ab,IEEE 802.3u
VPN tunnels quantity200
Quality of Service (QoS) supportYes
Port forwardingYes
DHCP serverYes
DHCP clientYes
Security algorithms3DES,802.1x RADIUS,DES,HTTPS,MD5,SHA-1,SSH,SSL/TLS
Firewall securityMulti-NAT, SPI, CSM, DMZ, DoS/DDoS Prevention
Content filteringIM/P2P, URL
VPN supportIPsec/PPTP/L2TP
Management protocolsHTTP / HTTPS, SNMP v1/v2, PPTP/L2TP
Supported network protocolsPPTP, IPsec, L2TP, L2TP over IPsec
Routing protocolsOSPF,RIP-2
Built-in displayNo
Management features
LED indicatorsYes
Web-based managementYes
Remote administrationHTTP/HTTPS, Telnet/SSL, SSH, CLI, TFTP / SNMP
Management platformTR-069, SNMP, CLI, Web
Ports & interfaces
Connectivity technologyWired
USB 2.0 ports quantity2
WAN connectionEthernet (RJ-45)
ExpressCard slotNo
Ethernet LAN (RJ-45) ports4
Rack mountingNo
Form factor1U
Built-in displayNo
AC input voltage220-240 V
Input current1 A
Operational conditions
Operating temperature (T-T)0 - 45 °C
Storage temperature (T-T)-25 - 70 °C
Operating relative humidity (H-H)10 - 90%
Storage relative humidity (H-H)10 - 90%
Weight & dimensions
Width176 mm
Depth273 mm
Height46 mm

Draytek V2960-K hardware firewall 1U

Product code: V2960-K
£401.70 ex. VAT
24 in stock
Get insights from the XMA experts by connecting with us today.