DrayTek Vigor 3910 Multi-WAN Broadband Router with VPN, Load Balancing, 3G/4G LTE Support & Rackmount Kit

Product Information

For even greater resilience, the Vigor 3910 provides High Availability (HA), with both a primary and secondary router able to provide connectivity to your network and subnets. In the event of the primary unit failing, the secondary unit (sold separately) will take its place on the network, automatically switching over to resume internet, routing and VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. The DrayTek router operating as the wireless controller can provision up to 50 DrayTek VigorAP access points with Central AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network. Central Switch Management The Vigor 3910 allows you to have up to 500 simultaneous VPN tunnels to remote offices or teleworkers, with over 3Gbps of VPN throughput. It supports all common industry standard protocols, encryption types and authentication methods (see specification tab for full support list). Teleworkers can authenticate directly with your LDAP server if preferred. SIP sessions (UDP port 5060) can be cleared from the router if these sessions are inactive, resulting in a situation where IP phones and PBX systems connected to the router can make outgoing calls, but incoming calls are sometimes not received. One of the key features of the Vigor3910 is the ability to manage a wider network made up of DrayTek devices. It can handle 50 wireless access points, and 30 switches right from the interface.

VigorACS can be installed on a Windows or Linux server, locally or in the cloud, and doesn’t need particularly demanding specs unless you run thousands of nodes. Getting it up and running is a pretty normal process from an IT administrator perspective, but still fairly involved compared to consumer products. Once VigorACS is configured it can provide huge time savings that make it well worth the cost. Of course, there are other paid, free and open source TR-069 management software solutions available, but VigorACS is designed to work well with Draytek hardware.N/A - Not Applicable. This feature or limitation is not applicable to, and does not affect this model. Feature affecting Hardware Acceleration The SFP+ ports provide compatibility with your choice of SFP / SFP+ modules (not included) and therefore the most appropriate medium for your application. The Vigor 3910 can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages the certificate process and keeps the certificate up to date and ready for use with SSL VPN and other services. Quality of Service & Bandwidth Control

The SFP+ ports, when fitted with an optional SFP+ or SFP module (sold separately, see accessories tab), can be linked to 1GbE or 10GbE uplinks, through Fibre or any other link type with a suitable transceiver. Fibre is of particular use for longer distance deliveries, beyond the range of standard Ethernet, or where copper connections cannot be used.

The faster 10 Gigabit uplink capability allows you to make high bandwidth links to both WAN connections and LAN devices. One use for all this bandwidth is VPN connections, for a business with many remote workers or offices. The Vigor3910 can handle up to 500 concurrent VPN connections, with 3.3 Gbps of throughput. 200 of those can be encrypted SSL VPN connections, with 1.6 Gbps of throughput. The Vigor3910 supports all the industry standards for VPNs, and can also do VPN trunking, where multiple WAN connections can be used to link to the remote device, giving extra bandwidth and failover support. While the Vigor3910 can enable extremely fast internet connections, it also needs to handle all that data. Thanks to a 1.2GHz quad-core CPU and hardware acceleration, the NAT throughput is a huge 9.4Gbps, and 1 million NAT sessions. Application flexibility is ensured through 8 switchable LAN/WAN ports, and 10GbE SFP+ ports for fibre connectivity, which offer a NAT throughput over 9Gb/s.

DSL modems (e.g. Vigor 130 - sold separately, see accessories tab) for ADSL, VDSL and G.Fast connectivity DrayTek VigorSwitch switches (sold separately, see accessories tab) can be provisioned and managed through the router with DrayTek’s Central Switch Management system, which allows you to: WireGuard is a secure, fast, and modern VPN Protocol. A WireGuard VPN connection is made by exchanging public keys and intends to be considerably more performant than OpenVPN. We support the new VPN protocol on Vigor2962/3910 routers since firmware version 4.3.1. This article will show how to establish a WireGuard VPN tunnel between Vigor3910 and Smart VPN Client.

DrayTek SSL VPN

There are specific features on the router that when enabled can limit the capability of hardware acceleration.

It supports all common industry standard protocols, encryption types and authentication methods (see specification tab for full support list). Teleworkers can authenticate directly with your LDAP server if preferred. Fibre is of particular use for longer distance deliveries, beyond the range of standard Ethernet, or where copper connections cannot be used. Note - QoS with Multiple Ethernet WANs - On purely Ethernet WAN routers such as the Vigor 2952 or Vigor 2925, QoS can be enabled on Ethernet WAN interfaces but Hardware Acceleration will not take effect on any WAN interfaces that have QoS enabled. This could allow WAN2 to be accelerated without QoS, while WAN1 could have QoS enabled and operate without affecting the router's Hardware Acceleration. Setting Recommendation of "Available*"

Central AP & Switch Management

This is applicable to DrayTek's current router models, the Vigor 2765/66, Vigor 2865/66 and the Vigor 2927 series. Up to 4.3.1.x Firmware