MIT
產地台灣
10G 高性能負載平衡 VPN 路由器防火牆
Vigor3912系列能夠滿足頻寬要求較高的網路。該路由器配備強大的四核心處理器、8 個WAN 介面（包括兩個用於光纖連接的10G SFP+、兩個2.5G 乙太網路RJ-45 和四個千兆乙太網路RJ-45），為您提供高達9.4 Gbps 的NAT 吞吐量。所有 WAN 連接埠均可在 WAN 和 LAN 之間切換，為網路管理員提供充分利用路由器的靈活性。此外，該路由器還擁有4個千兆乙太網路埠，RJ-45作為固定LAN介面。
- 8 個 WAN/LAN 可切換連接埠和 4 個固定 LAN 連接埠
- 2 個 10G SFP+ 和 2 個 2.5G 以太網，用於 WAN 或 LAN
- 1000k session
- 256GB M.2 固態硬碟 (Vigor 3912S)
- 1對8 NAT Server Load Balance
- 支援 OSPF，BGP
- 支援 內網VPN Zero Trust 零信任
- 支援 Suricata 入侵偵測系統IDS
Vigor3912S 路由器的入侵偵測與防護（IDP/IPS）功能具有以下優勢：
免費訂閱的 Suricata IDS/IPS 防護：Vigor3912S 首次引入 Suricata IDS/IPS 防護，提供免費訂閱服務。該功能能夠檢測網路漏洞，及時發出警示，並調整策略，以維護網路安全。
智慧動作自動阻擋：透過智慧動作功能，Vigor3912S 能夠自動阻擋可疑活動，提升網路防護能力。
內部網路防護：Vigor3912S 支援內部對內部（LAN to LAN）的防護，確保內部網路間的通訊安全。
高效能硬體配置：該路由器配備 8GB DDR4 記憶體和 256GB SSD 儲存空間，以支援 Suricata IDS/IPS 及其他安全應用，確保高效能運作。
綜合而言，Vigor3912S 的 IDP/IPS 功能透過免費的 Suricata 防護、智慧自動阻擋、內部網路防護以及高效能硬體配置，為使用者提供全方位的網路安全保障。
硬體式防火牆
P5~P8 WAN/LAN 可單獨自定義，和Vigor3910最大的不同
Performance |
|
| NAT Session | 1000K |
| Max. NAT with Software Acceleration (Mbps) | 12500 |
WAN |
|
| Switchable WAN/LAN (GbE) | 6 |
| SFP (WAN/LAN Switchable) | 2 |
Internet Connection |
|
| IPv4 |
PPPoE
DHCP
Static IP
|
| IPv6 |
PPP
DHCPv6
Static IPv6
TSPC
AICCU
6rd
6in4 Static Tunnel
|
| 802.1p/q Multi-VLAN Tagging | 有 |
| Multi-VLAN/PVC | 有 |
| Failover | 有 |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping, Strict ARP |
| WAN Data Budget | 有 |
| Dynamic DNS | 有 |
| DrayDDNS | 有 |
LAN |
|
| Fixed LAN (RJ-45, GbE) | 4 |
| LAN Subnet | 100 |
| VLAN |
802.1q Tag-based VLAN
Port-based VLAN
|
| Max. Number of VLAN | 100 |
| DHCP Server |
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
|
| LAN IP Alias | 有 |
| IP Pool Count | 4000 |
| PPPoE Server | 有 |
| Port Mirroring | 有 |
| Local DNS Server | 有 |
| Conditional DNS Forwarding | 有 |
| Hotspot Web Portal (Profile No.) | 4 |
| Hotspot Authentication |
Click-Through
Social Login
SMS PIN
RADIUS
External Portal Server
|
Other Ports |
|
| Console (RJ-45) | 1 |
| USB | 2 |
| USB Type | 3.0 |
Networking |
|
| Routing |
IPv4 Static Route
IPv6 Static Route
Policy Route
Inter-VLAN Route
Fast Routing
RIP v1/v2
BGP
OSPFv2
|
| Policy-based Routing |
Protocol
IP Address
Port
Domain
Country
|
| Smart Action | 有 |
| High Availability | 有 |
| DNS Security (DNSSEC) | 有 |
| IGMP |
IGMP v2/v3
IGMP Proxy
IGMP Snooping & Fast Leave
|
| Local RADIUS server | 有 |
VPN |
|
| LAN-to-LAN | 有 |
| Teleworker-to-LAN | 有 |
| Protocols |
PPTP
L2TP
IPsec
L2TP over IPsec
SSL
GRE
IKEv2
IPsec-XAuth
OpenVPN(Host to LAN)
Wireguard
|
| Max. VPN Tunnels | 500 |
| Max. OpenVPN + SSL VPN Tunnels | 200 |
| IPsec VPN Throughput (AES 256 bits) (Mbps) | 3000 |
| SSL VPN Throughput (Mbps) | 3000 |
| User Authentication |
Local
RADIUS
LDAP
TACACS+
mOTP
TOTP
|
| IKE Authentication | EAP, Pre-Shared Key, X.509, XAuth |
| IPsec Authentication | MD5, SHA-1, SHA-256, SHA-512 |
| Encryption |
MPPE
DES
3DES
AES
|
| VPN Trunk (Redundancy) | Failover, Load Balancing |
| Single-Armed VPN | 有 |
| NAT-Traversal (NAT-T) | 有 |
| VPN from LAN | 有 |
| VPN Isolation | 有 |
| VPN Packet Capture | 有 |
| VPN 2FA Authentication for AD/LDAP | 有 |
| VPN Matcher | 有 |
Firewall & Content Filtering |
|
| NAT |
Port Redirection
Open Ports
Port Triggering
Port Knocking
Fast NAT
DMZ Host
UPnP
Server Load Balance
|
| ALG (Application Layer Gateway) | FTP, H.323, RTSP, SIP |
| VPN Pass-Through | IPsec, L2TP, PPTP |
| IP-based Firewall Policy | 有 |
| Content Filtering |
APP
URL Keyword
DNS Keyword
Web Features
Web Category*(*subscription required)
|
| DoS Attack Defense | 有 |
| Spoofing Defense | 有 |
Bandwidth Management |
|
| IP-based Bandwidth Limit | 有 |
| IP-based Session Limit | 有 |
| QoS (Quality of Service) |
TOS
DSCP
802.1p
IP Address
Service Type
|
| VoIP Prioritization | 有 |
| APP QoS | 有 |
Management |
|
| Local Service |
HTTP
HTTPS
Telnet
SSH v2
FTP
TR-069
|
| Config Backup/Restore | 有 |
| Firmware Upgrade | HTTP, TFTP, TR-069 |
| 2-Level Administration Privilege | 有 |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | E-mail, SMS |
| SNMP | v1, v2c, v3 |
| Syslog | 有 |
| AP Managment (APM) | 50 |
| Switch Management (SWM) | 30 |
| VigorACS Management (Since f/w) | V4.3.5.1 |
Physical |
|
| Power Input | AC 100~240V @ 0.6A |
| Max. Power Consumption (watts) | 35 |
| Dimension (mm) | 443 x 285 x 45 |
| Weight (g) | 3350 |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -10 to 55°C |
| Operating Humidity (non-condensing) | 10 to 90% |
招標規範
Vigor3912s Suricata IDS
MIT
產地台灣 NGFW UTM
DrayTek URL Reputation 銀卡
如何符合台積電供應商資安要求