Functions and features
The VPN router - VR2020-D with VDSL/ADSL - is manufactured according to the highest quality standards and, thanks to its high flexibility, is ideally suited for setting up secure branch networks or connecting ATMs.
The VR2020-D achieves high-speed Internet access with extremely high reliability thanks to its intelligent backup management.
To enable the router to be operated on all modern DSL connections, including all-IP, the VR2020-D has an integrated DSL modem that supports the ADSL/2/2+ and VDSL/VDSL2 standards as well as VDSL2 vectoring. The Ethernet WAN port allows the implementation of any gateway connections as well as the connection of external modems (e.g. SDSL, cable, FTTH).
A VR2020-D router can be easily integrated into a branch network or connected to a head office via a permanently established VPN tunnel and can thus be reached directly via private IP addressing. DynDNS is not required for access in this case, but can be set up at any time.
The fully implemented VPN standards IPSec and OpenVPN ensure maximum security during data transmission. Authentication is carried out either by means of stored certificates or pre-shared keys. The VPN router supports all modern encryption algorithms such as AES with up to 256-bit key length. The device is optionally available with serial interface and clamp connection for power supply.
All features in detail
- Modular software structure
The modular software structure offers the possibility to integrate customer-specific/customer-developed software.
- DHCP (Dynamic Host Configuration Protocol)
A communication protocol that allows clients to retrieve and servers to assign the network configuration (client/relay/server).
z. B. IP, TCP, UDP, PPP, ARP, RARP, ICMP
- DNS (Domain Name System)
Administers the namespace in networks, e.g. for converting domain names into IP addresses (client/relay/server).
- Dynamic DNS
Dynamic DNS: It is used to dynamically update the IP address of a computer so that it can always be reached under the same name.
- NTP (Network Time Protocol)
Standard for time synchronization over networks (client/server)
Static Routing (IPv4 Forwarding)
Static Routing (IPv6 Forwarding)
Policy-based routing (PBR)
- NAT (Network Address Translation)
Source and Destination NAT/NAPT and Masquerading
- QoS (Quality of Service)
For prioritizing data packets to meet quality standards, especially for time-critical transmissions/applications.
- Real-time statistics and log function
- Syslog Client
- TPM (Trusted Platform Module)
The TPM chip is comparable to a fixed smart card. The TPM protects cryptographic keys; these can be generated, used and securely stored within the TPM. It provides protection against software and hardware attacks (physical manipulation results in the destruction of the stored keys). In addition, the integrated random number generator (RNG) provides secure number sequences as a basis for securely encrypted communication.
Zone based stateful inspection firewall (IPv4/IPv6) with packet filter and demilitarized zone (DMZ)
Free software based on OpenSSL for building a secure VPN over an encrypted connection. Both routed and bridged tunnels (client/server) are supported.
Internet Protocol Security: for secure VPN communication over potentially insecure IP networks. Supported are IKEv1/IKEv2/MOBIKE (Client/Server and IPSec Passthrough)
- L2TP (Layer 2 Tunneling Protocol), passthrough
Tunnel protocol for transferring the security layer (layer 2) of the OSI model between two networks
- WireGuard (beta status)
WireGuard uses the latest particularly powerful cryptographic algorithms, such as the Noise Protocol Framework, Curve25519, ChaCha20, Poly1305, BLAKE2, SipHash24 or HKDF. WireGuard gets a further performance boost from the fact that the software runs as a Linux kernel module on the server side. WireGuard uses only public keys for identification and encryption and can therefore do without a certificate infrastructure.
- Hash Algorithms
MD5, SHA1, SHA2 256/512
- Diffie Hellman Groups
Key exchange for backup: 1, 2, 5, 14, 15, 16, 17, 18
Modulo Prime Groups with Prime Order Subgroup: 22, 23, 24
NIST Elliptic Curve Groups: 25, 26, 19, 20, 21
Brainpool Elliptic Curve Groups: 27, 28, 29, 30
- Encryption algorithms
AES 128/192/256, Blowfish, Twofish 128/256, Serpent 128/256
- Number of VPN tunnels
The number of configurable VPN tunnels is not limited on the software side. Depending on the application, up to 30 VPN tunnels are possible.
- MultiWAN manager with complex backup options
o Multi-homed and multi-level backup target strategies
o Optimization of switching times
o Prevent unnecessary switching
o Optimization of the downshift
o Prevention of switching instabilities (flutter)
o Mobile telephony: Provider switching with Dual SIM
o Dynamic connection parameters (default route, DNS, gateway etc.)
o Configurable connection check (Ping, LCP echo etc.)
o Emergency Reboot/Reset, if e.g. 3G+/4G cannot be established
- VRRP (Virtual Router Redundancy Protocol)
With support of Multi group VRRP
Over the network using Command Line (SSH) and HTTPS and over Command Line (SSH) using the console port
- Remote configuration/maintenance
Remote configuration/maintenance can be performed via ACS (Auto-Configuration-Server according to the TR-069 standard) if required.
- Firmware update
Firmware updates can be implemented via SSH, HTTPS and (TR-069).
- SNMP (Simple Network Management Protocol)
SNMP is a network protocol developed to monitor and control network elements from a central station.
- Checkmk agent
For connection to the network management system Checkmk
Energy-efficient and fanless MIPS processor architecture
- System memory
Future-proof 128 MB Flash
- WAN port
- 4-port switch
10/100 Mbit/s; the ports have their own MAC addresses and can be virtually separated.
A power LED and 9 freely configurable LEDs are available for status information.
- USB ports
2x USB; e.g. backup, UPS management via USB-to-Serial-Adapter
- Crypto engine
Hardware acceleration for encryption/decryption
- TPM (Trusted Platform Module)
For secure storage of secret keys
- Console port
The Micro-USB configuration interface (Console), with integrated USB-to-Serial chip offers an easy way to address the router independent of the network.
- Connection for power supply via hollow connector
The power supply can optionally be equipped with a terminal.
- RS232 interface
Optionally available as terminal strip (Rx/Tx/GND)
ITU-T G.993.2 up to profile 30a
according to ITU-T G.993.5
ITU-T G.993.1, T1.424, TS 101 270
- DSL Forum Performance Specifications
ADSL TR-048/67, TR-100; VDSL: WT-114
- Erasure Decoding
Increased interleaver depth und Re-Transmission Bonding
- EFM (IEEE 802.3 ah)
- ITU-T G.998.2
- DSL connection
- Not available
- Not available
- Robust metal housing
optionally with top hat rail clip
185x33x155 (WxHxDmm, without antennas)
approx. 860 g
- Operating temperature
-20° C to +50° C (during operation)
- Power supply
Power supply 12V, 1A
- Input voltage
Wide range 9V..30V DC
- Power consumption
≤ 5W (DSL enabled), ≤ 3W (DSL disabled)
- 3 years bring-in manufacturer warranty
VR2020-D, Power Adapter, Patch Cable, Quickstart Guide