Firewalls and routers

DrayTek Vigor2962

Business edge router and firewall; multi-WAN, VPN, port redirection, inter-LAN isolation

Rebuilt and firmware-upgraded
Custom API automation
Login throttling reverse-engineered

What we did with it

We have rebuilt one from a factory reset, including a firmware upgrade and the inbound service mappings, and wrote our own API automation so that operations previously done by clicking through the web console became programmable. Along the way we established several behaviours the manual does not document: the SSH management interface enforces a cooldown after each successful login, a second login inside that window always fails, and every failure resets the timer, so retrying only extends the lockout. The web console login path has no such limit. Port redirection and the Open Ports table are separate, and changing one does not affect the other. Inter-LAN filtering is symmetric, so one-directional blocking is not possible, which directly constrains how multi-site isolation can be designed.

Management interfaces

Available interfaces: Web console and CLI
CLI login throttling: A cooldown follows each successful login; a second login inside the window always fails
The trap: Every failure resets the timer, so retrying only extends the lockout, regardless of whether the password is correct
Path without throttling: The web console login path has no such limit and can be driven repeatedly

Inbound service mapping

Two separate tables: Port redirection and the Open Ports table are independent; changing one does not affect the other
Viewing from the CLI: The redirection table requires an index to display; without one it returns nothing

Site and segment isolation

Filter behaviour: Inter-LAN allow and block rules are symmetric
Architectural consequence: One-directional blocking is impossible, so isolation has to be handled at another layer

Our tooling and track record

API automation: Written in house, turning operations that previously required clicking through the console into programmable calls
Rebuild: Full rebuild from a factory reset, including firmware upgrade and inbound service mappings

Same category

All firewalls and routers →

Talk to us All hardware