The Vigor 2620Ln is a low cost router/firewall with LTE/4G as the headline connection method. In addition, it can use any one of three methods for its primary WAN (Internet) connectivity, falling back to one of the others in case of service interruption. It has a Dual-SIM cellular (3G/4G/LTE) modem, VDSL2 / ADSL2+ modem (Phone Line Broadband) and Ethernet (RJ45 - which can connect to many other WAN delivery sources), the Vigor 2620Ln provides extreme flexibility to ensure a reliable connection
With the built-in 4G, the Vigor 2620Ln is ideal for mobile Internet connectivity, or locations which wish to use LTE as their primary connectivity method or temporary workplaces. You have the benefits of a DrayTek firewall, with optional web content filtering, shared by multiple users on wireless or wired connections to the unit. You slot regular (standard size) SIMs into the back of the vigor 2620Ln for use on any of the UK cellular networks or MVNOs (exc. Relish).
The Vigor 2620Ln then provides Internet access to your local clients and the VPN facility fires up automatically and can provide a secure VPN link back to your HQ, or channel all of your traffic through a compatible 3rd party VPN provider for added security.
Integrated LTE 4G/3G Modem
The Vigor 2620Ln provides high speed mobile broadband connectivity for Internet access and VPN, with its built-in LTE 4G/3G modem. Downloading at speeds of up to 150Mbps and Uploading at up to 50Mbps.
It's not locked to any mobile network and is compatible with all major UK mobile networks, such as EE, Vodafone, O2 and Three, as well as any MVNOs on those networks.
The Vigor 2620Ln can even be used as an LTE modem so that you can connect another firewall or router to the Vigor 2620Ln. With its LTE Bridge mode, the Vigor 2620Ln directly links whatever's connected to the mobile broadband, without any additional network translation (NAT).
The two aerials on the Vigor 2620Ln for the LTE/cellular connectivity provide increased gain and signal diversity for improved reception and a robust connection. The aerials can also be removed and replaced with specialist aerials (higher gain, outdoor) or an optional extension base used to position them most optimally.
Ideal for Mission Critical Backup
The Vigor2620Ln with a cellular service is ideal for mission critical connectivity such as retail/EPOS or security monitoring applications where continuous uninterrupted connectivity is essential.
The flexibility of its interfaces means that your primary Internet connection can go through the Vigor 2620Ln, switching over to LTE when required, or the Vigor2620Ln could provide the LTE connection to an existing multi-WAN router/firewall.
For additional failover, the Vigor 2620Ln also has a built-in DSL interface, compatible with an ADSL or VDSL line, as well as the option for Ethernet WAN (switchable with LAN port P2). In all failover scenarios, the router continues to monitor the primary WAN feed and will switch back to that when restored. Alternatively DSL, or Ethernet can be primary with LTE/4G as failover.
Constant Connectivity - Dual-SIM LTE
Where connectivity is mission critical, a single cellular network can be a single point of failure, in the event of a mobile network outage.
The Vigor 2620Ln has two SIM slots, so that in the event of one mobile network not providing Internet connectivity, the Vigor 2620Ln will switch to a secondary SIM and cellular network connection.
It intelligently monitors for Internet connectivity and latency; If the primary 4G SIM's network can't access a required location, or is too slow, it switches over to the backup SIM to resume connectivity.
For resilience in the event of mobile network outages, each SIM should be on a different cellular network (e.g. Vodafone and EE) and not 'virtual' networks which piggyback on the first (e.g. not Virgin Mobile and EE, as the former uses the latter's network).
SMS Text Message Control & Reporting
As a cellular network device, the Vigor 2620Ln takes advantage of text messaging (SMS) to allow remote interrogation and control. Send simple text message commands to the router from your phone to have it reply with its status (IP addresses, data usage), or reboot the router.
Access to the SMS control features is secured with a PIN code and an Access List, a whitelist that allows messages only from your specified phone numbers to manage the router via text messaging.
View SMS text messages received through the router's web interface in the SMS Inbox, for instance, checking for service messages indicating that you are low on credit. Or have the router forward received SMS messages to you via email, to ensure that you're continually updated on the Vigor 2620Ln's status.
Send and receive text messages through the router from your web browser, or via command line, for automation and integration.
VDSL2 & ADSL2+ Modem
Many broadband connections offered by ISPs are referred to as Fibre Broadband, although technically in many cases they're actually VDSL based connections which run over your phone line.
The phone line's twisted pair telephone cable runs from the premise to a street cabinet (these are typically 4ft green boxes with a Openreach logo on) which contain a VDSL MSAN (multi-service access node) that connects to fibre infrastructure which runs to the local exchange and then on to the ISPs core network.
The Vigor 2620Ln's built-in DSL interface (WAN1) is ideal for connecting this type of VDSL based connection, or to standard ADSL, ADSL2+ & Annex M lines.
Designed for Central Management
The Vigor 2620Ln (along with most other DrayTek routers, Access points and switches) can be centrally managed by our VigorACS central management platform.
This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.
Gigabit LAN Ports and VLANs
The Vigor 2620Ln has 2 Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage. With 2 LAN subnets, the Vigor 2620Ln can create 2 separate network segments, for instance an internal network with a separate network for Guests to use, completely separate from the private network, with its own filtering and rules applied.
The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the DrayTek VigorSwitch G1080 8-port switch, for additional network ports.
The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 903 to do the same, spanning the router's own wireless and any connected wireless APs.
Wireless LAN
The Vigor 2620Ln provides 802.11n wireless network connectivity, for up to 300Mbps throughput. Operating on 2.4GHz, it is backwards compatible with 802.11b/g clients.
Up to 4 separate wireless networks (SSIDs) can be used, with individual security settings, Access Control lists (blacklist / whitelist), client isolation settings and VLAN configurations. With the use of VLANs on the Vigor 2620Ln, it's possible to configure a fully separate guest wireless network, which can be shared with additional wireless access points, via 802.1Q VLAN tagging.
LTE Bridge
The Vigor2620Ln's integrated LTE modem can be used in LTE Bridge Mode, which passes its connection directly through to a connected Router or other device, through Ethernet.
The ISP assigned IP address is relayed directly to the connected router; allowing direct access to any services that the router is hosting, along with its VPN services and Remote Management (where the ISP assigns a publically routable IP address).
Robust & Comprehensive IPv4 / IPv6 Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.
The DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.
The Vigor 2620Ln supports IPv6 - the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv6 can be provided directly by your ISP, but if your ISP does not (yet) support IPv6, the Vigor 2620Ln also supports IPv6 broker/tunnel services to provide IPv6 access using either TSPC or AICCU via 3rd party IPv6 providers over each of its interfaces, including 4G / LTE.
The advanced networking features of the Vigor 2620Ln, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.
Web Content Filtering with DNS Filter
The content control features of the Vigor 2620Ln allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.
Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).
Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
LAN to LAN VPN
A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link the Vigor 2620Ln in a home office back to HQ.
Once connected, computers and devices connected to the Vigor 2620Ln's network can access your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
With the 2 subnets available on the Vigor 2620Ln, access to the VPN can be limited to the internal / private subnet only. The guest network segment will be able to access the Internet with no access to your Site to Site VPN tunnel.
DrayTek SSL VPN
The Vigor 2620Ln supports 2 DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - the same encryption that you use for secure web sites such as your bank.
Site to site VPN tunnels can connect branch offices to a main office, with DrayTek SSL VPN encryption securing the connection between the two offices, a TLS encrypted HTTPS tunnel which can be more secure than PPTP, and easier to configure than an IPsec VPN tunnel.
Teleworkers can easily create a secure DrayTek SSL VPN tunnel to the DrayTek Vigor 2620Ln using the DrayTek Smart VPN Client app, which is free and supports Windows OS, macOS, Apple iOS (iPad, iPhone) and Android.
SSL VPN is simple to configure, providing a more secure alternative to Point to Point Tunneling Protocol (PPTP VPN); which has known weaknesses and is considered to be insecure. Setup is similar to a PPTP VPN tunnel in that it authenticates with an SSL VPN Username and Password.
Quality of Service & Bandwidth Control
Prioritise latency-sensitive applications on your network with Quality of Service.
Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support
Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.
Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.
DrayDDNS - DrayTek Dynamic DNS Address
DrayTek provides a free Dynamic DNS address to each Vigor 2620Ln router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "my2620ln.drayddns.com".
This address automatically updates whenever the Internet connection's IP changes, so if the ISP's address allocation is dynamic, or the IP changes when switching from VDSL2 to LTE, you can easily locate and access your Vigor 2620Ln router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.
Central AP Management
The Vigor 2620Ln can centrally manage 2 DrayTek VigorAP access points. This enables you to centrally control, manage and administer multiple AP devices installed around your building/campus:
- Monitor Status information
- View Traffic Graphs
- Provision Wireless Configurations (with Auto Provisioning)
- Manage Access Control Lists (blacklist / whitelist for wireless client MAC addresses)
- Track the usage of each AP over time
- View Event Logs
- View Temperature Sensor graphs
- Load Balance APs - automatically move clients off of busy access points onto nearby, less busy access points
- Backup and restore AP configurations
- Perform VigorAP firmware upgrades remotely through the router
The DrayTek router operating as the wireless controller can provision both DrayTek VigorAP access points and its own Wireless LAN settings with Central AP Management profiles configured on the router, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network.
