1. Product Roadmap and Feature Update Tom Chen Marketing Department

2. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek Dual-WAN Products RoHS New Features Update Centralized System Manager - VigorView UTM Solutions – VigorPro101 / VigorPro200

3. Triple-Play Application

4. Port / VLAN and PVC Mapping

5. Multi-PVC Setting

7. VLAN Setting Enable the VLAN setting if you want to isolate the traffic

8. VLAN ID and PVC Mapping

9. Integration with Data and Voice

10. IGMP & Multicast

11. IGMP (Internet Group Manage Protocol) Host/router membership signalling protocol Hosts use IGMP to join/leave groups Routers use IGMP to build forwarding state

12. IGMP Proxy Learn and proxy group membership information Forward multicast packets based upon that information

13. IGMP Snooping Snoop on the IGMP negotiation between host and server Determine which Ethernet ports want what traffic –IGMP membership reports –IGMP leave messages Avoid the flooding of multicast traffics on all Ethernet ports

14. IGMP Proxy/Snooping Setting

15. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek Dual-WAN Products RoHS New Features Update Centralized System Manager - VigorView UTM Solutions – VigorPro101 / VigorPro200

16. Vigor2700e/Ge Cost competivity ADSL2/2+ security router Integrated with 802.11g WLAN Wireless Security –WEP/WPA/WPA2 Encryption, MAC Address Control and Wireless LAN Isolation IGMP Proxy & Snooping for video streaming Firewall supports IP Filter, MAC Address Control, DoS/DDoS Protection and URL Content Filter

17. Vigor2700 Series High-integration with ADSL2+, 802.11g, VoIP and ISDN Wireless Security –WEP/WPA/WPA2 Encryption, MAC Address Control, Wireless LAN Isolation and Wireless VLAN WDS (Wireless Distribution System) and Wireless AP Discovery IGMP Proxy & Snooping for video streaming Multiple PVCs for triple-play application

18. Vigor2700 Series Two FXS ports with six SIP registrars support One PSTN/ISDN Loop-through Supplementary services support Call Hold, Call Waiting, Call Transfer, Call Forwarding, DND (Do Not Disturb), Hotline and T.38 QoS –Class-based bandwidth guarantee by user-defined traffic categories –4-level priority for each direction (Inbound/Outbound) –Assure bandwidth for own VoIP service

19. Vigor2700 Series Firewall supports IP Filter, MAC Address Control, DoS/DDoS Protection, Web/URL Content Filter and IM/P2P Blocking HTTPS and SSH secure management Two VPN tunnels for teleworker and LAN-to-LAN Automatic ISDN backup when ADSL2+ fails

20. Vigor2700 Product Line

21. Vigor2800 Series High-integration with ADSL2+, 802.11g, VoIP and ISDN 2nd WAN provides fail-over and policy-based load balancing SuperG TM provides up to 108Mbps data rate Wireless Security –WEP/WPA/WPA2 Encryption, MAC Address Control, Wireless LAN Isolation, Wireless VLAN and 802.1x Authentication WDS (Wireless Distribution System), Wireless AP Discovery and Rate Control support

22. Vigor2800 Series Two FXS ports with six SIP registrars support ISDN BRI interface for VoIP on-net/off-net calls Supplementary services –Call Hold, Call Waiting, Call Transfer, Call Forwarding, DND (Do Not Disturb), Hotline and T.38 QoS –Class-based bandwidth guarantee by user-defined traffic categories –4-level priority for each direction (Inbound/Outbound) –Assure bandwidth for own VoIP service

23. Vigor2800 Series Firewall supports IP Filter, MAC Address Control, DoS/DDoS Protection, Web/URL Content Filter and IM/P2P Blocking HTTPS and SSH secure management 32 VPN tunnels with hardware-based DES/3DES encryption One USB 1.1 host for USB printer Automatic ISDN backup when ADSL2+ fails

24. Vigor2800 Product Line

25. Comparison of ADSL2+ CPEs

26. MP Schedule

27. ADSL2+ CPE Roadmap Vigor 2800V/VG Vigor2800VGi Vigor 2800/G Q4 ‘05Q1 ‘06 Vigor 2800i/Gi Vigor 2700/G Vigor 2700e/Ge Q2 ‘06 Vigor 2700V/VG (2S) Vigor 2700V/VG (2S1L) Vigor 2700Gi/VGi (Annex B only)

28. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek SDSL Products DrayTek Dual-WAN Products RoHS New Features Update Centralized System Manager - VigorView UTM Solutions – VigorPro101 / VigorPro200

29. G.SHDSL Symmetrical high-data-rate DSL G.SHDSL will be a significant factor in the rapidly growing worldwide marketplace for business- class and residential SDSL. Offers data at 192Kbps to 2.3Mbps over a single pair

30. G.SHDSL - Application Replace old leased-line (E1/T1) solution

31. G.SHDSL - Application Enterprise Campus Building

32. Vigor3100 Series G.SHDSL security router Symmetrical data rates up-to 2.3 Mbps ( Vigor3100 with one pair ) and 4.6 Mbps ( Vigor3120 with two pairs ) Configurable CPE/CO for Back-to-Back Application QoS –Class-based bandwidth guarantee by user-defined traffic categories –4-level priority for each direction (Inbound/Outbound)

33. Vigor3100 Series Firewall supports IP Filter, MAC Address Control, DoS/DDoS Protection, Web/URL Content Filter and IM/P2P Blocking HTTPS and SSH secure management 32 VPN tunnels with hardware-based DES/3DES encryption One USB 1.1 host for USB printer

34. Vigor3100 Product Line

35. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek Dual-WAN Products DrayTek Dual-WAN Products RoHS New Features Update Centralized System Manager - VigorView UTM Solutions – VigorPro101 / VigorPro200

36. Dual-WAN Policy-Based Load-Balancing Dynamic / Static weighted round robin Fail-over Bandwidth On Demand (BOD) Will be available on Vigor2920 and Vigor2800 (2nd WAN)

37. Load-balance Policy Structurally similar to routing table but more complete

38. Weight Setting for Dual-WAN

39. Vigor2920 Series High-integration with 802.11g, VoIP and ISDN Dual-WAN provides fail-over and policy-based load balancing SuperG TM provides up to 108Mbps data rate Wireless Security –WEP/WPA/WPA2 Encryption, MAC Address Control, Wireless LAN Isolation, Wireless VLAN and 802.1x Authentication WDS (Wireless Distribution System), Wireless AP Discovery and Rate Control

40. Vigor2920 Series Two FXS ports with six SIP registrars ISDN BRI interface for VoIP on-net/off-net calls Supplementary services –Call Hold, Call Waiting, Call Transfer, Call Forwarding, DND (Do Not Disturb), Hotline and T.38 QoS –Class-based bandwidth guarantee by user-defined traffic categories –4-level priority for each direction (Inbound/Outbound) –Assure bandwidth for own VoIP service

41. Vigor2920 Series Firewall supports IP Filter, MAC Address Control, DoS/DDoS Protection, Web/URL Content Filter and IM/P2P Blocking HTTPS and SSH secure management 32 VPN tunnels with hardware-based DES/3DES encryption One USB 1.1 host for USB printer Automatic ISDN backup when WAN connection fails

42. Vigor2920 product Line Vigor2920 will be available in May

43. Comparison Between Vigor2900 & Vigor2920

44. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek Dual-WAN Products RoHS RoHS New Features Update Centralized System Manager – VigorView UTM Solutions – VigorPro101 / VigorPro200

45. RoHS Impact Vigor2500, Vigor2600 and Vigor2900 will be phase-out and replaced by Vigor2700, Vigor2800 and Vigor2920 Other products will be compliant before 1st of July

46. RoHS Compliance

47. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek Dual-WAN Products RoHS New Features Update New Features Update Centralized System Manager – VigorView UTM Solution – VigorPro101 / VigorPro200

48. New VPN Features NAT Traversal (NAT-T) Dead Peer Detection (DPD)

49. IPSec Pass-through NAT The IPSec tunnel might be not established when a NAT device between two peers

50. NAT Traversal (NAT-T) RFC-3947 and RFC-3948 propose a solution You could use DrayTek Smart VPN Client, but need to update your Windows XP/2000 (http://support.microsoft.com/kb/818043/en-us)http://support.microsoft.com/kb/818043/en-us

51. NAT Traversal (NAT-T) The UDP port 500 need to be opened on firewall if VPN server behind it.

52. Dead Peer Detection (DPD) RFC-3706 standard Send HELLO/ACK message between two peers to keep IPSec tunnel alive Interoperability is better than old mechanism – Ping to Keepalive The IPSec tunnel will be re-established after six packets failure

53. Bandwidth Management Session Limitation –Limit the clients’ NAT session for Internet access Bandwidth Limitation –Control the Internet access bandwidth for clients

54. Session Limitation

55. Bandwidth Limitation

56. Bind IP to MAC Address A

57. ISDN On-net/Off-net ISDN BRI interface for VoIP on-net/off-net calls Support two VoIP calls in one ISDN-BRI concurrently

58. ISDN On-net Case 1

59. ISDN On-net Case 2

60. ISDN Off-net Case 1

61. ISDN Off-net Case 2

62. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek Dual-WAN Products RoHS New Features Update Centralized System Manager - VigorView Centralized System Manager - VigorView UTM Solutions – VigorPro101 / VigorPro200

63. Vigor View A web-based centralized management tool with hierarchical network Router management –Firmware upgrade –Configuration backup/restore –Configuration for multiple routers –Traffic monitor –Syslog server –Secure VigorView –VPN connection wizard –Auto-provisioning Server Log management

64. Requirement Hardware –Normal PC with Network Device –Vigor 2xxx, 3300 router OS –Linux or Windows XP/2000 Web Server –Apache 2.X or Apache 1.X PHP5 –Built in Sqlite support (database)

65. VPN Connection Wizard

66. Firmware Upgrade

67. Auto-Provisioning Automatically download configuration and upgrade firmware using HTTP protocol

68. Provisioning Server Provide the VoIP settings and firmware for device to provision

69. Syslog Use Telnet command “sys name” or Router Name on the Static/Dynamic IP of WUI to change router name

70. WUI Configuration Windows Modify the same setting for some routers

71. TUI Configuration Script Apply one script file to some routers # telnet script example # set system name sys name abc # set domain name sys domainname draytek.com

72. Router Status

73. Online Traffic

74. Traffic Graph

75. Schedule List

76. Secure VigorView

77. Management can be via VPN tunnel if router has VPN capability

78. Command Log

79. System Log

80. Agenda Triple-Play Application DrayTek ADSL2+ Products DrayTek SDSL Products DrayTek Dual-WAN Products RoHS New Features Update Centralized System Manager - VigorView UTM Solutions – VigorPro101 / VigorPro200 UTM Solutions – VigorPro101 / VigorPro200

81. UTM Unified Threat Management The unification of Firewall/VPN, Gateway, Anti- Virus, IDP… into a single platform Reduce Complexity –Integrated functionality, all-in-one Reduce management efforts –Separate device: independent logging and multiple GUI –Easy configuration & management –Easy troubleshooting

82. What VigorPro™ Provide All-in-one security firewall –Unified Anti-Virus, Anti-Intrusion, Firewall, VPN, … threat management Network-level protection –Block viruses at the point of network entry –Provide protection of all hosts inside network edge before threats intrude Hardware-based real-time response –CICP (Content Inspection Co-Processor) –MSSI™ (Multi-Stack Stateful Inspection) Paten pending inline scanning No proxy: high throughput, low latency

83. What VigorPro™ Provide Content-based protection –Scan all major network protocols –Scan POP3/SMTP/IMAP4 –Scan own VPN tunnel –Scan FTP –Scan HTTP –Scan ZIP/GZIP/BZIP2 Lower TCO( Total cost of Ownership) –All functionality can be managed remotely from HQ, no IT personnel required for branch office

84. MSSI MSSI™(Multi-Stack Stateful Inspection) –The patent-pending technology developed by DrayTek –Inline scanning –No proxy: scan on the fly, real-time response –Cross packets inspection –No file size limitation

85. victim Format Parser Stack Decoder Stack Decompression Stack

86. VigorPro200 Dual WAN Up to 2x 100/1000 DMZ Ports Up to 5x 100/1000 LAN Ports Anti-Virus Alert IDP Alert Super G Wireless LAN 1x 100/1000 Monitor Port

87. VigorPro101

88. Key Feature Comparison ModelVigorPro101VigorPro200eVigorPro200 AV/IDP v -- v VPN50200 LAN4FE5G WAN2FE DMZ222 WLANSuperG  11nSuperG NAT Session TBD20K

89. Desktop Enforcement DE is considered to be supported on VigorPro Force desktop/laptop inside network follow the security policy –AV software installation, get the most updated virus signature

90. VigorPro, D-SWAT and Service

91. D-SWAT The D rayTek S ecurity W arning and A nti-attack T eam Research –Hacking technique analysis –Virus sample collection & analysis –Exploit collection & analysis Service –Security portal website –Virus signature update –Security advisories –News letter  Training –Hacking Techniques –Incident handling

92. Step 1. End user purchases VigorPro100 From DrayTek’s reseller Step 2. Log on www.vigorpro.com for registrationwww.vigorpro.com Step 3. Activate or extend AV/IDP services Service Flow: AV/IDP DrayTek Service portal Distributor/ reseller Internet Step 1 Step 2 Residential SOHO SMB users Step 3

93. www.vigorpro.com visitor Product registration news alert subscription Service Activation/ Extension Registration User User profile update Virus/IDP signature download D-SWAT business hour tech support Product maintenance delete/reinstall/rename/transfer Submit virus to DT Lab D-SWAT online advisory New signature alert M ember of V igor P rotection

94. Product Registration Product serial number Product’s nick name Authentication code (MAC address)

95. Product Maintenance

96. Service Maintenance Product delete Product rename Product & service is transferred RMA, product is transferred

97. License Key Projection Type AB IDPDrayTek Anti-VirusDrayTek-- KL D-SWAT business hour technical support VV

98. Q&A