Vigor2952 is a Dual-WAN broadband VPN firewall router designed for businesses that is looking for reliability and security in their office network. It is equipped with dual Ethernet WAN ports, with WAN 1 is usable as the SFP port, 4 Gigabit Ethernet LAN ports, and 2 USB ports for 3G/4G WAN connections or other applications. In addition, there's Vigor2952P which is equipped with 4 PoE LAN ports instead.
Excellent VPN performance is a highlight of the Vigor2952. It supports 200 concurrent VPN tunnels, with IPsec VPN throughput up to 200 Mbps, and support of all the industry-standard VPN protocols.
Up to 4 WAN
Load balancing, NAT throughput up to 500 Mbps
200 VPN
IPsec VPN throughput up to 200 Mbps
50 SSL VPN
Throughput up to 90 Mbps
60k SessionsRecommended for a network of 100 hosts
Maximize throughput and reliability by using multiple Internet connections. Learn more
Build a secure and private tunnel from the LAN of Vigor2952 to the remote offices and teleworkers over the Internet. Learn more
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Use Point-to-Point connection on LAN to keep track of individual user's traffic. Setup Guide
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Use the Vigor2952 router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Vigor2952
Rack Mount Kit (brackets)
RJ-45 Cat-5 Ethernet Cable
Power Cord
Quick Start GuideThe throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| WAN Port | 1x GbE/SFP Combo port + 1x GbE port |
| LAN Port | 4x GbE |
| USB Port | 1x USB 3.0 + 1x USB 2.0 |
Performance | |
| NAT Throughput | 500 Mbps |
| NAT Throughput w/ Hardware Acceleration | 900 Mbps |
| IPsec VPN Performance | 200 Mbps (AES 256 bits) |
| SSL VPN Performance | 90 Mbps |
| Max. Number of NAT Sessions | 60,000 |
| Max. Concurrent VPN Tunnels | 200 |
| Max. Concurrent OpenVPN + SSL VPN | 50 |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| Multi-VLAN/PVC | |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 8 |
| Number of LAN Subnet | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| PPPoE Server | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| Multicast | IGMP Proxy, IGMP Snooping, Bonjour |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN(Host to LAN) |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256, MD5 |
| VPN Redundancy | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323, TFTP |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, TR-069, FTP, SNMP |
| Config File Export & Import | |
| Config File Compatibility | Vigor2925, Vigor2920, Vigor2930, Vigor2950, Vigor2955 |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Syslog | |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Managed by VigorACS | |
| Central VPN Management | 8 VPN |
| Central AP Management | 30 VigorAP |
| Central Switch Management | 10 VigorSwitch |
Physical | |
| Rack Mountable | Mouting Kit Included |
| Power Supply | AC 110-220V @ 1A |
| Max. Power Consumption | 15 watts |
| Dimension | 273mm x 171mm x 45mm |
| Weight | 1.94kg |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -20 to 70°C |
| Operating Humidity | 10 to 90% (non-condensing) |
| Certificate | 
|
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
