DrayTek Vigor 3910

The Vigor 3910 is specially designed to cope with the throughput demands of large networks and as a VPN concentrator, has suitable processing power to meet the demands of hundreds of active VPN tunnels.

Firewall and NAT throughput of the router can exceed 9 Gigabits per second when connected via the 10 Gigabit SFP+ ports or spread over multiple Internet connections with Load Balancing.

The Vigor 3910 accelerates LAN-to-LAN IPsec VPN throughput up to 3 Gigabits per second, with up to 500 active VPN tunnels it can provide enough throughput to each tunnel, without becoming a bottleneck to the user experience.

The SSL VPN capabilities of the Vigor 3910 are also increased, with over 1 Gigabit per second of total SSL VPN throughput, suitable to cater to the bandwidth requirements of up to 200 active SSL VPN users.

The Vigor 3910 features Multi-WAN connectivity with up to 8 WAN interfaces:

• 4 RJ-45 1GbE ports
• 2 RJ-45 2.5GBase-T (backwards compatible with 1GbE) ports
• 2 SFP+ module slots

The Ethernet and 2.5GBase-T ports can be connected to:

• Leased Lines
• DSL modems (e.g. Vigor 130) for ADSL, VDSL and G.Fast connectivity
• 4G and LTE through the Vigor 2620Ln in LTE bridge mode
• Cable modems
• Any other Ethernet-based Internet feed

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems.

The DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of Firewall rules and Content Filtering to suit a large office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.

The Vigor 3910 supports IPv6 - the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv6 can be provided directly by your ISP, but if your WAN interfaces do not (yet) support IPv6, the Vigor 3910 also supports IPv6 broker/tunnel services to provide IPv6 access using either TSPC or AICCU via 3rd party IPv6 providers over each of its interfaces. To learn more about IPv6, you read our detailed IPv6 guide here.

The advanced networking features of the Vigor 3910, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.

The content control features of Vigor routers allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.

Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).

Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.

The Vigor 3910 (along with most other DrayTek routers, Access points and switches) can be centrally managed by our VigorACS central management platform.

This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.

For full details of VigorACS, click here.

Prioritise latency-sensitive applications on your network with Quality of Service.

Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support

Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.

Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.