Draytek As Vigor 2850n + Support for VDSL/Infinity or ADSL/2+

The Vigor 2850 features a hugely flexible VLAN system. In its simplest form, each of the four Gigabit LAN ports can be isolated from each other, for example to feed four different companies or departments but keeping their local traffic completely separated. For more sophisticated scenarios, the Vigor 2850 includes tagged VLANs (802.1q) whereby data is marked with a VLAN identifier. This identifier can be read by an onward Ethernet switch and directed to specific ports or just passed to the LAN for specific VLAN clients to pick up; priorities can also be applied for LAN-side QoS. The VLANs can each be tied into each of the different IP subnets that the router may also be operating, to provide even more isolation.

The Vigor 2850 has built-in user management which allows you to provide Internet access to users based on their own unique login (stored in the router, or on an external Radius server). Accounts can be restricted by schedules or maximum usage times but also any other aspect of the firewall or content filtering can be applied on a user-by-user basis.

The Vigor 2850 series provides several independent levels of security including encryption (up to WPA2), authentication (802.11x) and methods such as MAC address locking and DHCP fixing to restrict access to authorized users only. The web interface lets you see how many and which clients are currently connected as well as their current bandwidth usage. An 'instant' block lets you disconnect a wireless user temporarily in case of query. The wireless VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN.