Scan code: LN102935 Manufacturer code: V2960-K

DrayTek Vigor 2960 High-Performance Dual-WAN Router/Firewall

DrayTek Vigor 2960 High-Performance Dual-WAN Router/Firewall

Thumbnail 1 : DrayTek Vigor 2960 High-Performance Dual-WAN Router/Firewall
DrayTek Vigor 2960 High-Performance Dual-WAN Router/Firewall : image 1
Scan code: LN102935 Manufacturer code: V2960-K
From £18.72 / month (APR 14.9%)
Monthly Payment: £67.68
Instalment Rate: 14.9% p.a. (fixed)
Cost of purchase: £389.99
Total inc. interest: £406.04
Monthly Payment: £35.01
Instalment Rate: 14.9% p.a. (fixed)
Cost of purchase: £389.99
Total inc. interest: £420.12
Monthly Payment: £24.14
Instalment Rate: 14.9% p.a. (fixed)
Cost of purchase: £389.99
Total inc. interest: £434.54
Monthly Payment: £18.72
Instalment Rate: 14.9% p.a. (fixed)
Cost of purchase: £389.99
Total inc. interest: £449.27
If you are approved for a credit limit with PayPal Credit and use it for future purchases, the APR for those purchases won't be more than 19.9% and may be even lower.

Representative Example:

Purchase Rate: 19.9% p.a. (variable)

Representative: 19.9% APR (variable)

Assumed Credit Limit: £1,200

Subject to status. Terms and Conditions apply.
With a 10% deposit from just £9.74 / month (APR 15.9%)
Delivery Options
  • By DPD On 19th Nov 2019 to your specified address. | £5.48 Receive SMS with one-hour delivery window Weekend, timed and European delivery options are available at checkout

    Have your parcel delivered by DPD to your specified address. Receive SMS with one-hour delivery window

    Weekend, timed and European delivery options are available at checkout
  • Collect instore Collect from our Bolton store, BL6 6PE | Free

    Order online, collect from our Bolton store (25-28 Enterprise Park, Middlebrook, Horwich, Bolton, BL6 6PE)

  • UPS and DPD Pickup Pickup from local convenience store | £4.79

    Collect your parcel from your newsagents, petrol stations and convenience stores

  • SCANPROTECT Protect against installation damage for 28 days. More info

    ScanProtect is an enhanced warranty specifically designed and offered by Scan to reduce the risk of any mishap or damage to components during installation.

    Our aim with ScanProtect is to encourage our customers to upgrade or build their own PC confidently. For a small additional fee our customers are provided with complete peace of mind.

Product Overview Vigor 2960 Dual-WAN Firewall
The Vigor 2960 is a high-performance dual-Gigabit WAN firewall. The two dedicated Gigabit WAN ports can provide load balancing or WAN failover. Based on a new DrayTek OS platform, the Vigor 2960 provides high performance with DrayTek's traditional ease of use and comprehensive features set. Extensive QoS, VLAN Web Content filtering features help keep your network efficiency and online productivity high.

High-Performance Router/Firewall
Load Balancing & WAN Failover
Native IPv4 & IPv6 dual-stack
Two Gigabit WAN ports
Four Gigabit LAN Ports
Twin Independent USB Ports
IPSec VPN - LAN-to-LAN or Teleworker (200 tunnels)
SSL VPN Tunnel or Web-Proxy (50 tunnels)
802.1q Tagged and port-based VLANs
QoS Assurance on different traffic types
VPN Trunking (Backup/aggregation)
Mobile One-Time Passwords for Teleworker VPNs
Multiple LAN-side private IP subnets
Internet Content Filtering
Central Management of up to 30 DrayTek VigorAPs - New!
Central Switch Management - New!
Optional VigorCare Available

As a VPN endpoint/concentrator, the Vigor 2960 will support up to 200 simultaneous teleworker or LAN-to-LAN VPNs with a VPN throughput of up to 500Mb/s dependant on protocol, thanks to its hardware-based VPN co-processor. VPN security includes certificate, MOTP or token/PSK based access and key-hash authentication to ensure maximum security.

For ease of remote access, the Vigor 2960 can provide up to 50 simultaneous SSL VPN tunnels or web-proxy links. SSL Web-Proxy makes remote access to your network possible from virtually anywhere without the inconvenience or compatibility issues of installing a VPN client. As SSL is a standard Internet protocol (used for web sites) SSL VPNs are also resilient to difficulties in creating tunnels through guest networks (web cafes, hotels etc.) where traditional IPSec/PPTP tunnels can often have difficulties. SSL encryption is strong too, using 128bit DES/3DES or AES. Using MoTP, your teleworker passwords are strong and realtime; a password is generated in real-time by your mobile phone (iphone, Android etc.) which can be used once only, and only at the time its generated. You can read more about SSL VPNs and MoTP here. In addition to Web-proxy mode, full SSL VPN tunnelling is supported for Windows OS, macOS, iOS / iPhone / iPad and Android, with the Smart VPN Client freely available on the UK downloads page.

High Availability
For even greater resilience, the Vigor2960 provides High Availability (HA). The CARP protocol (equivalent to VRRP or HSRP) lets you set up a master and secondary Vigor2960 whereby in the event of the master unit failing, the secondary unit can seamlessly and automatically switch over. This can remove the possibility of a single point of failure within your routers. Additionally, multiple active Vigor2960's can provide reciprocal routing backup to other active Vigor2960s. Features
Technical Specification (UK Hardware Spec.)

Physical Interfaces
LAN: 4-port Gigabit (10/100/1000 Base-T)
WAN: 2-port Gigabit (10/100/1000 Base-T) Ethernet
USB: 2 USB 2.0 Ports (for flash storage and 3G)
WAN Protocols: PPPoE, PPTP, DHCP Client, Static IP
Load Balancing: Policy based or automatic
WAN Failover: Switch to other connection when primary WAN lost
VPN Services
Remote Dial In Teleworker Protocols:
L2TP over IPSec
LAN to LAN VPN Tunnel Protocols:
GRE (LAN to LAN Tunnel) - New!
Up to 200 simultaneous tunnels (LAN-to-LAN or Teleworker-to-LAN)
PPTP Acceleration (90Mbps with encryption, 400Mbps without encryption)
Dial-in and Dial-out supported
VPN Trunking: allows alternative failover route or multiple tunnels to the same destination to increase capacity/throughput
Multiple SA (Security Association) IPsec VPN support: send multiple Local and Remote subnets through one VPN tunnel - New!
Teleworker - Remote Dial-In VPN Features:
LDAP/Active Directory: Teleworker VPNs can be authenticated by a LDAP/AD server
XAuth authentication support for IPsec Remote Dial-In Teleworker VPN tunnels - New!
Radius Client: Authentication for Remote Dial-In Teleworkers
Scheduled Remote Dial-In VPN - configure times that specified Teleworkers are allowed to Dial In - New!
DrayTek Smart-VPN Software utility
IPsec IKE Protocols:
IKEv2 - New!
IPsec IKE Authentication:
Pre-shared key (PSK)
PKI Certificate (RSA): Use X.509 Digital Signatures
Phase 1 Main Mode or Aggressive Mode
Phase 2 selectable lifetimes
Hardware-based AES (128, 192, 256 bits)
Hardware-based DES/3DES (56 & 168 bits)
Hardware-based MD5, SHA-1 & SHA-256
MPPE (40 or 128 bits)
IKE Phase 1 DiffieHelman Groups 1,2,5 & 14
IKE Phase 2 DiffieHelman Groups 1,2,5 & 14 (will match phase 1 selection)
DHCP over IPSec
GRE over IPSec
Dead-Peer-Detection (DPD)
NAT-Traversal (NAT-T): VPN over routes without VPN Passthrough
No extra licencing or additional VPN client costs.
Interoperability : Compatible with other 3rd party VPN devices
Stateful Packet Inspection (SPI)
Content Security Management (CSM)
Multi-NAT: Set one-to-one mappings between your private and public IP addresses
NAT Port Forward Features:
Port Redirection - 256 entries with 16 port ranges per entry
DMZ Host
Server Load Balance & Inbound Load Balance
SIP Application Layer Gateway (ALG)
H.323 Application Layer Gateway (ALG)
Policy-based IP Packet Filter. Fully configurable policies based on IP address, MAC address (source or destination), DiffServ attribute, direction, bandwidth, remote site
DoS/DDoS Protection
IP Address Anti-spoofing
Object-Based Firewall
Notification: Email alerts and logs to syslog
Bind IP to MAC address
User-Controlled Rules: Interrogates LDAP server to permit access or enforce policies
DNSSEC support - New!
LAN DNS Features:
Control DNS resolution for A and CNAME records for configured hostnames
Wildcard support
Conditional Forwarding to specified DNS Server(s)
Web Content Filtering & CSM
URL Keyword Blocking: Blacklist or Whitelist
Content Type Blocking: Java applet, cookies, Active-X
Application Enforcement (APPE): IM, P2P, Protocol, Tunnelling, Streaming, Remote Cotnrol, Wed HD
Auto APPE Signature Upgrade
Block P2P Applications (inc. Kazza, WinMX, Bittorrent)
Block Instant messaging
Block access of web sites by direct IP address (thus URLs only)
Block HTTP download of compressed, executable or multimedia files
Web Content Filter: GlobalView filtering of 64 web site categories (e.g. adult, gambling sites etc.). subscription required (free trial included)
Time Scheduling: Blocking rules can be activated based on time schedules
User Management
Manage account features through User Profiles - VPN, PPPoE, Web Portal, FTP, Samba
Internal RADIUS Server
External LDAP / Active Directory server authentication with SSL support
External RADIUS server authentication
PPPoE Server
Guest Profiles with Guest Account Generator
Web Portal Features:
User Authentication for Internet access with Time Quotas
SMS Authentication (requires SMS provider)
Web Portal Login Page Customisation
Login History
System Management
Web-Based User Interface: Integrated server for router management (via HTTP or HTTPS)
Telnet/SSH : Command line control and configuration
Configuration Backup/Restore
Built-in diagnostics, dial-out triger, routing table, ARP table, DHCP Table, NAT Sessions Table, data flow monitor, traffic graph, ping diagnostics, traceroute
Firmware Upgrade by HTTP, TFTP & FTP
Syslog Logging
SNMP Management: v1/v2/v3, MIB II
Mail Alert & Mail Notifications with SSL & StartTLS encryption support
Vigor ACS-SI Centralised Management: TR-069 compatible for ACS platform
Compatible with Smart Monitor Traffic Analyser : Windows software for up to 100 users
Central Management
AP Management - Manage up to 30 compatible VigorAP access points - New!
Switch Management - Manage up to 10 compatible VigorSwitch switches - New!
VPN Management - Manage up to 12 DrayTek Vigor routers
Certificate Management
Local Certificates for HTTPS, SSL & VPN
Remote Certificates; Sign and manage certificates from other devices - New!
Bandwidth Management
Traffic Shaping: Dynamic bandwidth management with IP traffic shaping
Bandwidth Reservation: Connection or client based
Packet Size Control
DiffServ Codepoint Classifying
4 Priority Levels (Inbound/Outbound)
Individual IP Bandwidth Session Limits per user/group
Bandwidth Borrowing
User-defined class-based rules
Routing Functions
IPv4 & IPv6 Dual-Stack
Up to 20 LAN Subnets / VLANs
DNS Cache/Proxy
DHCP Client, Server & Relay
DHCP Options: 1,3,6,51,53,54,58,59,60,61,66,125
IGMP v1/v2 & Proxy/Snooping
uPnP: 500 Sessions
NAT: 80,000 Sessions
NTP Client with DST Adjustments
Static routing
Policy-based routing with scheduling - New!
BGP Routing protocol
Dynamic DNS : Updates DDNS servers with public IP address
Port-Based VLAN
Tag-Based VLAN: 802.1q
Client/Call Scheduling : Real-time clock, with NTP updating schedules access or connectivity
Wake-on-LAN : Passed from WAN to preset LAN device
Operating Requirements
Rack Mountable (Mount brackets included)
Temperature Operating : 0 °C ~ 45 ° ° C
Storage : -10 °C ~ 70 °C
Humidity 10% ~ 90% (non-condensing)
Power Consumption: 19W Max
Dimensions: L273 * W166 * H44 (mm) (1U Height)
Operating Power: 220-240VAC (internal PSU)
Warranty : 2 Years Manufacturer's RTB included
Networking, Connectivity & Ports
Device Type N/A
Compatible Internet Connections  
Network Connectivity  
Network Ports  
Other Connectors N/A
USB Applications  
Wired Protocols  
Total LAN Connections  
Total WAN Connections  
64 Bytes L3 Forwarding Performance  
512+ Bytes L3 Forwarding Performance  
Wireless Speed N/A
Wireless Protocols N/A
Wireless Band  
Operation Channel  
Wireless Transmitter Power N/A
Core Features
Router/Modem Processor  
Internal RAM Memory  
Internal RAM Memory Type  
Internal Flash Memory  
LED Indicators  
OS Support  
Max. Power Consumption  
PSU Type  
Security & VPN
Security Protocols N/A
Firewall/NAT No
VPN Support  
Physical Specifications
Additional Information
Scan Code LN102935
Model Number V2960-K
GTIN 4716779071795

Please note your statutory rights are not affected.

For further information regarding Scan's warranty procedure please see our terms and conditions

24 months
Return to base
DOA Period:
14 days
RTB Period:
24 months
Manufacturer Contact Details
0845 527 7864 9:00am-5:30pm Mon/Fri
Questions & Answers