Vigor3912 Series is designed for bandwidth-demanding networks, featuring a 2GHz Quad-Core CPU for fast connection speed, even with multiple connected devices. The router has 8 WAN interface, including 2x 10G SFP+ for fiber connectivity, 2x 2.5G Ethernet, and 4x 1G Ethernet, providing ultra-fast NAT throughput. Port1 to port8 are configurable independently for WAN or LAN to offer flexibility and optimize the router performance.
Vigor3912 Series can serve as a VPN server to establish LAN-to-LAN or remote dial-in VPN connections. It includes SMB-friendly features like VPN 2FA authentication and VPN from LAN, ensuring a more secure and efficient VPN network.
Vigor3912S comes equipped with 256GB SSD storage inside, supporting Linux applications with Docker. Suricata and VigorConnect are supported. This feature allows users to effortlessly install and run powerful softwares directly on the Vigor3912S, eliminating the need for additional computer to installing servers.
including 10G SFP+ and 2.5G Ethernet
provides 15.6 Gbps NAT throughput*
provides 5.7 Gbps IPsec throughput*
Reserve 2048 entries for Bind-IP-to-MAC
*bi-directional(TX+RX) performance
Model |
Vigor3912 |
Vigor3912S |
|
Performance |
||
| NAT Session | 1000K | |
| Max. NAT with Software Acceleration (single-directional) (Mbps) | 9450 | |
| Max. NAT with Software Acceleration (bi-directional) (Mbps) | 15600 | |
|
WAN |
||
| Switchable WAN/LAN (GbE) | 6 | |
| SFP (WAN/LAN Switchable) | 2 | |
|
Internet Connection |
||
| IPv4 | ||
| IPv6 |
PPP
DHCPv6
Static IPv6
TSPC
AICCU
6rd
6in4 Static Tunnel
|
|
| 802.1p/q Multi-VLAN Tagging | ||
| Multi-VLAN/PVC | ||
| Failover | ||
| Load Balancing | IP-based, Session-based | |
| WAN Active on Demand | Link Failure, Traffic Threshold | |
| Connection Detection | ARP, Ping, Strict ARP | |
| WAN Data Budget | ||
| Dynamic DNS | ||
| DrayDDNS | ||
|
LAN |
||
| Fixed LAN (RJ-45, GbE) | 4 | |
| LAN Subnet | 100 | |
| VLAN |
802.1q Tag-based VLAN
Port-based VLAN
|
|
| Max. Number of VLAN | 100 | |
| DHCP Server |
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
|
|
| LAN IP Alias | ||
| IP Pool Count | 4000 | |
| PPPoE Server | ||
| Port Mirroring | ||
| Local DNS Server | ||
| Conditional DNS Forwarding | ||
| Hotspot Web Portal (Profile No.) | 4 | |
| Hotspot Authentication |
Click-Through
Social Login
RADIUS
External Portal Server
|
|
|
Other Ports |
||
| Console (RJ-45) | 1 | |
| USB | 2 | |
| USB Type | 3.0 | |
|
Networking |
||
| Routing |
IPv4 Static Route
IPv6 Static Route
Policy Route
Inter-VLAN Route
Fast Routing
RIP v1/v2
BGP
OSPFv2
|
|
| Policy-based Routing |
Port
Country
|
|
| Smart Action | ||
| High Availability | ||
| DNS Security (DNSSEC) | ||
| IGMP |
IGMP v2/v3
IGMP Proxy
IGMP Snooping & Fast Leave
|
|
| Local RADIUS server | ||
|
VPN |
||
| LAN-to-LAN | ||
| Teleworker-to-LAN | ||
| Protocols |
PPTP
L2TP
IPsec
L2TP over IPsec
GRE
IKEv2
IPsec-XAuth
OpenVPN(Host to LAN)
Wireguard
|
|
| Max. VPN Tunnels | 500 | |
| Max. OpenVPN + SSL VPN Tunnels | 200 | |
| IPsec VPN Throughput (AES 256 bits) (single-directional) (Mbps) | 3300 | |
| IPsec VPN Throughput (AES 256 bits) (bi-directional) (Mbps) | 5700 | |
| SSL VPN Throughput (single-directional) (Mbps) | 3300 | |
| SSL VPN Throughput (bi-directional) (Mbps) | 4300 | |
| Wireguard VPN Throughput (single-directional) (Mbps) | 900 | |
| Wireguard VPN Throughput (bi-directional) (Mbps) | 1080 | |
| User Authentication |
Local
RADIUS
LDAP
TACACS+
mOTP
TOTP
|
|
| IKE Authentication | Pre-Shared Key, X.509, XAuth, EAP | |
| IPsec Authentication | SHA-1, SHA-256, SHA-512, MD5 | |
| Encryption |
MPPE
DES
3DES
AES
|
|
| VPN Trunk (Redundancy) | Load Balancing, Failover | |
| Single-Armed VPN | ||
| NAT-Traversal (NAT-T) | ||
| VPN from LAN (Mainline fw only) | ||
| VPN Isolation (Mainline fw only) | ||
| VPN Packet Capture (Mainline fw only) | ||
| VPN 2FA Authentication for AD/LDAP (Mainline fw only) | ||
| VPN Matcher | ||
|
Firewall & Content Filtering |
||
| NAT |
Port Redirection
Open Ports
Port Triggering
Port Knocking
Fast NAT
DMZ Host
Server Load Balance
|
|
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 | |
| VPN Pass-Through | PPTP, L2TP, IPsec | |
| IP-based Firewall Policy | ||
| Content Filtering |
URL Keyword
DNS Keyword
Web Features
Web Category*(*subscription required)
|
|
| DoS Attack Defense | ||
| Spoofing Defense | ||
|
Linux Applications |
||
| Suricata | ||
| VigorConnect | ||
|
Bandwidth Management |
||
| IP-based Bandwidth Limit | ||
| IP-based Session Limit | ||
| QoS (Quality of Service) |
TOS
DSCP
802.1p
IP Address
Service Type
|
|
| VoIP Prioritization | ||
| APP QoS | ||
|
Management |
||
| Local Service |
SSH v2
FTP
TR-069
|
|
| Config Backup/Restore | ||
| Firmware Upgrade | TFTP, HTTP, TR-069 | |
| 2-Level Administration Privilege | ||
| Access Control | Access List, Brute Force Protection | |
| Notification Alert | SMS, E-mail | |
| SNMP | v1, v2c, v3 | |
| Syslog | ||
| AP Managment (APM) | 50 | |
| Switch Management (SWM) | 30 | |
| VigorACS Management (Since f/w) | V4.3.5.1 | |
|
Physical |
||
| Power Input | AC 100~240V @ 0.5-0.7A | |
| Max. Power Consumption (watts) | 35 | |
| Memory | 8GB DDR4 | 8GB DDR4 + 256GB SSD |
| Dimension (mm) | 443 x 285 x 45 | |
| Operating Temperature | 0 to 45°C | |
| Storage Temperature | -10 to 55°C | |
| Operating Humidity (non-condensing) | 10 to 90% | |