Gigabit Multi-WAN VPN Business Router

TWG-431BR (Version v1.0R)

Multi-WAN support
High Availability
IEEE 802.1Q inter-VLAN routing
WAN load-balancing and fail-over modes
SSL, IPsec, PPTP, and L2TP w/IPsec VPN support
Web browser and Command Line Interface (CLI) Management
Online firmware notification and upgrade
QoS for VoIP and media streaming
NDAA / TAA compliant (U.S. and Canada only)

TRENDnet's Gigabit Multi-WAN VPN Business Router, model TWG-431BR, features internet WAN load balancing, a network fail-safe backup, and encrypted Virtual Private Network (VPN) access for remote users. Improve peak-network-loading performance and eliminates network downtime with the use of the VPN router's multiple WAN ports. Smooth network loading, minimize network downtime, and allow employees to access your network from the Internet—all with a single router. The VPN router features advanced management, high availability, QoS, VLAN, VPN, and other capabilities to ensure optimal performance, scalability, and protection of your network. Advanced SPI, NAT and SNAT protects against Internet attacks.

Multi-WAN

Connect up to four separate WAN internet connections to efficiently load-balance traffic by distributing network traffic to the best available link.

A diagram showing a virtual private network (VPN) connection over the internet. On the left, there’s an icon for ‘Headquarters’ with a tall building and a smaller adjacent structure, connected by a solid line to a cloud labeled ‘INTERNET’. Within this cloud, there’s a ‘VPN Tunnel’ with a padlock symbol, indicating encryption. The VPN tunnel extends from the headquarters to two other icons on the right: one labeled ‘Branch Office’, depicted as another tall building, and another labeled ‘Remote User’, represented by a laptop with a human figure. The connection to the branch office is shown as a solid line while the connection to the remote user is dashed, suggesting different types of connections or access levels. This image illustrates how VPNs securely connect multiple sites and remote users to a central headquarters over the internet.

VPN Router

The VPN router creates an encrypted VPN tunnel to access local area network resources remotely using IPSec, PPTP, L2TP w/ IPsec, and SSL VPN protocols.

High Availability

Group multiple TWG-431BR routers together to create a high availability network with router redundancy to minimize downtime.

Network diagram showing the layout of a business office with different VLANs (Virtual Local Area Networks) and their connection to a business router. The office is divided into three VLANs: Technical Support VLAN, Engineering VLAN, and Marketing VLAN. Each VLAN is highlighted in blue and labeled accordingly

Multi-WAN

Supports up to four separate WAN internet connections for load-balancing or fault-tolerance modes

VPN Router

The VPN router supports IPsec, PPTP, L2TP w/ IPsec, and SSL VPN protocols for encrypted remote access to local area network (LAN) resources over the internet

Inter-VLAN Routing

Provides routing capabilities between VLANs

QoS

Intelligently prioritize voice, video, and other data traffic to improve network efficiency and overall performance

High Availability

Create a high availability network by grouping two or more routers on the network for redundancy

Ports

5 x Gigabit ports, 1x Console port

Rack Mount Design

Sturdy metal housing with rack mount brackets included

Online Firmware Updates

Automatic notification of firmware updates

Management

Supports web browser (HTTP, HTTPS), CLI, SSH and Telnet management

Standards	IEEE 802.3 IEEE 802.3u IEEE 802.3x IEEE 802.3ab IEEE 802.1Q
Device Interface	5 x Gigabit ports (Modes: 4 WAN ports / 1 LAN port or 1 WAN port / 4 LAN ports) 1 x USB 3.0 port (Backup & Restore Configuration / Export Logging) 1 x RJ-45 console port Reset button LED indicators On/off switch
Performance	NAT (LAN-to-WAN) Throughput: 900Mbps Routing Performance: 900Mbps Maximum Concurrent Sessions: 50,000 Maximum Number of VLANs: 8 (ID: 1-4093) IPsec VPN (AES-256/SHA-256/LAN-to-LAN) Throughput: 200Mbps SSL VPN Throughput (Blowfish/SHA-1/Bridge): 20Mbps
VPN	SSL VPN Client-to-Site (Up to 30 tunnels) IPsec VPN Site-to-Site / Client-to-Site (Up to 5 tunnels) PPTP/L2TP VPN Server / Client-to-Site (Up to 15 tunnels / 5 user accounts) L2TP with IPsec VPN Server / Client-to-Site (Up to 15 tunnels shared with L2TP) IPsec Encryption: 3DES, AES-128/192/256 IPsec Authentication: MD5, SHA-1, SHA-256 IPsec Key Exchange: IKE: Main/Aggressive Mode, Pre-shared Key, DH Groups 1/2/5/14 IPsec Protocols: ESP, PFS DH Groups 1/2/5/14, DPD, Local/Remote ID: IP Address, FQDN IPsec NAT Traversal SSL VPN Encryption: AES SSL VPN Certificate: RSA PPTP/L2TP Encryption: MPPE 40-bit, 128-bit, IPsec PPTP/L2TP Authentication: MS-CHAPv1/2
Networking	WAN Modes: NAT, Classical Routing NAT Modes: NAT, PAT IPv4 WAN Modes: DHCP, Static IP, PPPoE, PPTP IPv6 WAN Modes: Static, Auto-configuration (SLAAC/DHCPv6), Link-Local, PPPoE, 6to4, 6rd Routing: Static, dynamic RIPv2, OSPFv1/2, distribute RIPv2 over OSPFv1/2, routing policies (Up to 20 entries) Inter-VLAN Routing (Up to 8 VLANs, 8 IP interfaces) DHCP Server/Relay Dynamic DNS: dyn.com, no-ip.com WAN Failover WAN Load Balancing: Assign weight by percentage or bandwidth, source IP based, source & destination IP based, session based High Availability: Supports 1 active-passive cluster up to a total of 6 units (1 master + 5 standby) VPN passthrough: IPsec, PPTP, L2TP
Access Control	MAC address filtering (Up to 64 entries) IP address filtering: TCP, UDP, ICMP (Up to 64 entries) Content filtering: URL (HTTP only), Keyword, P2P, IM (Up to 64 entries) Scheduling: IP/MAC/Content filters, virtual server (Up to 10 entries) DMZ host
Quality of Service	Bandwidth Control: applicable by IP network, IP range, TCP/UDP port, SIP, RTSP, RTP, web
Management	CLI (Console/Telnet/SSHv2) command line management HTTP/HTTPS (SSL v2/3 TLS) web based management, upload custom SSL certificate SNMP v1, v2c, v3 SNMP trap (Up to 4 receivers) Scheduled automatic reboot Scheduled Wake-on-LAN (WoL) to remote network device Internal logging or send logging to external syslog server Manual or online firmware upgrade and notification Backup and restore configuration Diagnostic tools: Built-in ping & traceroute network utilities
MIB	MIB II RFC 1213
Power	Input: 100 – 240V AC, 50/60Hz, 0.5A Output: 12V DC, 1.5A external power adapter Max. consumption: 17.4W
MTBF	318,350 hours
Operating Temperature	0 – 50°C (32 – 122°F)
Operating Humidity	Max. 80% non-condensing
Certifications	CE FCC
Dimensions	265 x 185 x 44.45mm (10.4 x 7.28 x 1.75 in.) Rack mountable 1U height
Weight	1.1kg (2.44 lbs.)
Warranty	3 years

PACKAGE CONTENTS

TWG-431BR
Quick Installation Guide
RJ-45 to RS-232 console cable (1.5m / 5 ft.)
Power adapter (12V DC, 1A)
Rackmount kit

*Actual performance values may vary depending on network traffic and environment.

All references to speed are for comparison purposes only. Product specifications, size, and shape are subject to change without notice, and actual product appearance may differ from that depicted herein.

Not Available in the UK