Vigor C410/C510 Series Cellular VPN Security Router
The Vigor C410/C510 Series is a high-performance Cellular WAN Security Router featuring embedded cellular connectivity for seamless and reliable internet access. Designed as a primary WAN solution, it is set to operate in "Always On" mode by default, ensuring uninterrupted connectivity. It is equipped with advanced features such as VPN, QoS, route policy, web content filtering, Identity and Access Management (IAM), a hotspot web portal, and more.
Key Features
- Cellular WAN connectivity
- 16 VPN Tunnels
- 50K Sessions
- AX3000 Wi-Fi (ax models only)
Hardware Overview
The front panel of the C410ax and C510ax models features the following:
- 1. Fixed WAN Port: A GbE RJ-45 port for WAN connection.
- 2. LAN/WAN Switchable Port: A GbE RJ-45 port that can be configured as either LAN or WAN.
- 3. Fixed LAN Ports: 4 x GbE RJ-45 ports for the C410 series, and 3 x GbE RJ-45 ports for the C510 series.
- 4. SIM Slot: Two Nano-sized SIM slots for cellular connectivity.
- Other Ports: 1 x Factory Reset button, 1 x WLAN/WPS button (on ax models).
Management Features
- Local Service: HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
- Configuration: Backup/Restore, Firmware Upgrade via TFTP, HTTP, TR-069
- Access Control: Role-based Privilege, Access List, Brute Force Protection
- Notifications: SMS, E-mail alerts
- Monitoring: SNMP v1, v2c, v3, Syslog
- Centralized Management: Virtual AP Controller (20 APs), Mesh (7 APs), Virtual Switch Controller (5 VSCs), VigorACS Management
Cellular Connectivity
C510 Series (5G/LTE/WCDMA)
- 5G Bands: n1, 3, 7, 8, 20, 28, 38, 40, 77, 78
- 5G Max Link Rate: NR SA: 2.4Gbps (DL) / 900Mbps (UL), NR NSA: 3.4Gbps (DL) / 550Mbps (UL)
- LTE FDD Bands: B1, 3, 7, 8, 20, 28
- LTE TDD Bands: B38, 40
- LTE Category: Cat19 (DL) / Cat18 (UL)
- LTE Max Link Rate: 1.6Gbps (DL) / 200Mbps (UL)
- WCDMA (3G) Bands: B1, 8
C410 Series (LTE)
- LTE FDD Bands: B1, 3, 7, 8, 20, 28
- LTE TDD Bands: B38, 40
- LTE Category: Cat6
- LTE Max Link Rate: 300 Mbps (DL) / 50 Mbps (UL)
- WCDMA (3G) Bands: B1, 8
Internet Connection Features
- IPv4: PPPoE, DHCP, Static IP
- IPv6: PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel
- VLAN: 802.1p/q Multi-VLAN Tagging
- Failover: Supported
- Connection Detection: WPS Button, PIN Code
- WAN Data Budget: Supported
- Dynamic DNS: Supported (DrayDDNS)
LAN Features
- VLAN: 802.1q Tag-based, Port-based
- Max. Number of VLANs: 8
- LAN Subnets: 4
- DHCP Server: Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
- Wired 802.1x Authentication: Supported
- Port Mirroring: Supported
- Local DNS Server: Supported
- Conditional DNS Forwarding: Supported
- Hotspot Web Portal: Supported
- Hotspot Authentication: Click-Through, External Portal Server
WLAN Features (ax model)
- WiFi 6: Supported
- Max. Number of SSIDs (per band): 8 (4)
- Security Modes: OWE, WEP, WPA, WPA2, WPA2/WPA, WPA3, WPA3/WPA2
- Authentication: Pre-Shared Key, 802.1x
- OFDMA: Supported
- Roaming: Assisted Roaming
- WPS: WPS Button, PIN Code
- WDS: Repeater mode
- Access Control: Access List, Client Isolation, Hide SSID, WLAN Scheduling
- AirTime Fairness: Supported
- Band Steering: Supported
- WMM: Supported
- Mesh: Supported (5GHz Only, Root mode)
Networking Features
- Routing: IPv4 Static Route, IPv6 Static Route, Policy Route, Inter-VLAN Route, RIP v1/v2, BGP, OSPF (v2/v3)
- Policy-based Routing: Based on Protocol, IP Address, Port
- DNS Security: DNSSEC support
- IGMP: IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
- Local RADIUS Server: Supported
Identity and Access Management (IAM)
- Users & Groups management
- Access Policies
- Group Policies
- Conditional Access Policies
- Resources management
- Account Status
- Backup and Restore
Bandwidth Management
- Traffic Shaping Policy
- IP-based Bandwidth Limit
- IP-based Session Limit
- QoS (Quality of Service): IP Address, Port, Application
- APP QoS
- Default Policy
- VoIP Prioritization
Security Features
- URL/IP Reputation filtering
- Firewall Filter: IP, Content, Traffic
- Port Knocking
- Defense Setup: ARP Spoofing, IP Spoofing
- MAC Filtering Profile
- IPv6 Address Security
NAT Features
- Port Forwarding
- DMZ Host
- Port Trigger
- ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
- UPnP: Supported
VPN Features
- Type: Site-to-Site, Teleworker VPN, EasyVPN
- Protocols: IPsec, IKEv1/IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN, WireGuard
- Max. VPN Tunnels: 16
- User Authentication: Local, RADIUS, TACACS+, mOTP, TOTP
- IKE Authentication: Pre-Shared Key, X.509
- IPsec Authentication: SHA-1, SHA-256
- Encryption: AES, DES, 3DES
- Single-Armed VPN: Supported
- NAT-Traversal (NAT-T): Supported
- VPN Connection Status: Monitored
- Backup & Restore: Supported
Monitoring Features
- Clients List
- Log Center
- Wireless Information
- WAN Status
- ARP Table
- Route Table
- DHCP Table
- IPv6 TSPC Table
- IPv6 Neighbor Table
- LLDP Neighbors information
- DNS Cache Table
- PPPoE Pass-Through
- Session Table