Security Router

Vigor2866 Series

admin — Sun, 02 May 2021 14:34:13 +0000

Vigor2866 Series admin Sun, 05/02/2021 - 16:34

Prev Next

Vigor 2866 Series

G.fast Dual-WAN VPN Firewall Router

- G Fast
- Built-in 35b/VDSL/ADSL & LTE Modem
- 60k NAT Sessions
- 32 Concurrent VPN
- AX 3000 (optional)

Overview

Models

Specs

Interface
Fixed WAN Port	1x RJ-11 for VDSL2 35b or ADSL2/2+
LAN/WAN Switchable Port	1x 10/100/1000Base-TX RJ-45
Fixed LAN Port	5x 10/100/1000Base-TX RJ-45
USB Port	2x USB 2.0
Wirelss Antenna	2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (ac model)
2.4G WLAN	802.11n 2x2 MIMO 400Mbps (ac model)
5G WLAN	802.11ac Wave 2 2x2 MU-MIMO 867Mbps (ac model)
FXS RJ-11	2 (V model)
Performance
NAT Throughput	800 Mbps
NAT Throughput w/ Hardware Acceleration	940 Mbps (Ethernet WAN) 1.3 Gbps (Ethernet WAN + DSL WAN)
IPsec VPN Performance	300 Mbps (AES 256 bits)
SSL VPN Performance	130 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	32
Max. Concurrent OpenVPN + SSL VPN	16
VDSL/ADSL
VDSL Standards	ITU-T G.993.2 Annex A/B/M/Q (up to Profile 35b but excluding 30a) T1.424 ITU-T G.993.5 (Vectoring)
VDSL2 Profile	8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b (not G.fast)
ADSL Standards	ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other Standards	ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan	998, 997
Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN	(ac model)
3G/4G/LTE WAN with USB modem
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
Multicast	IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Local RADIUS server
SMB File Sharing	(Requires external storage)
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
Wireless LAN (ac model)
Number of SSID	4 per radio band
Security Mode	WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1X
WPS	PIN, PBC
WDS	Repeater (5GHz only)
Access Control	Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering	(ac model)
MU-MIMO	(5GHz Only) (ac model)
WMM
VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF
Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2862
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management	8 VPN
Central AP Management	20 VigorAP
Mesh Network	7 VigorAP
Central Switch Management	10 VigorSwitch
Physical
Power Supply	DC 12V @ 2A
Max. Power Consumption	24 watts (ac model)
Dimension	241mm x 166mm x 46mm
Weight	620g (ac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

Notes :

All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Web Live Demo

Firmware

Vigor2962

admin — Fri, 30 Apr 2021 19:33:45 +0000

Vigor2962 admin Fri, 04/30/2021 - 21:33

Prev Next

Vigor 2962

High Performance Dual-WAN Router/VPN Gateway

Vigor2962 is a high performance and dynamic firewall router with configurable WAN/LAN ports. With the selection of 2.5GbE port, 1GbE Fiber port, and 2 of 1GbE ports, users can set 2 of the ports as WAN for load balancing/failover purpose and enjoy overall 2.2Gbps NAT throughput.

- 2 Ethernet WANs
- 1 GbE/SFP Combo port
- 300k NAT Sessions
- 200 Concurrent VPN

Overview

Specs

Interface
WAN/LAN Switchable Port	1x 2.5G Ethernet, RJ-45 1x GbE/SFP Combo 2x GbE, RJ-45 *up to 2 simultaneous WANs
Fixed LAN Port	2x GbE, RJ-45
USB Port	1x USB 2.0 + 1x USB 3.0 for storage* (since f/w v3.9.6)
Performance
NAT Throughput w/ Hardware Acceleration	2.2 Gbps
IPsec VPN Performance	800 Mbps (AES 256 bits)
SSL VPN Performance	500 Mbps
NAT Sessions	300,000*(since f/w v3.9.6, 150,000 with f/w v3.9.3.1 or before)
Max. Concurrent VPN Tunnels	200
Max. Concurrent OpenVPN + SSL VPN	50
Internet Connection
IPv4	PPPoE, DHCP, Static IP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping, Strict ARP
WAN Data Budget	(since f/w v3.9.6)
Dynamic DNS
DrayDDNS
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	20
Number of LAN Subnet	20
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, OSPF, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
Multicast	IGMP Proxy*, Bonjour(since f/w v3.9.6)
Local RADIUS server
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN)
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256, MD5
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Service Type
VoIP Prioritization
Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Central AP Management	50 VigorAP
Central Switch Management	30 VigorSwitch
Physical
Rack Mountable	Mouting Kit Included
Power Supply	AC 100-240V @ 1A
Max. Power Consumption	15 watts
Dimension	273 mm x 171 mm x 45 mm
Weight	1.3 kg
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

Notes :

All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Web Live Demo

Firmware

Accessories

Vigor2927 LTE Series

admin — Fri, 28 May 2021 15:53:10 +0000

Vigor2927 LTE Series admin Fri, 05/28/2021 - 17:53

Prev Next

Vigor 2927 LTE

4G LTE Embedded Dual-WAN VPN Firewall Router

2 Gigabit Ethernet WAN ports for Load Balancing or Failover
4G/LTE Connectivity with Built-In sim card slot.
2 USB ports for 3G/4G modem or extra storage
Built-in 802.11ac Wave 2 dual-band Wi-Fi, delivers speed up to 1.7Gbps (ac/Vac model)
50 simultaneous VPN Tunnels
SPI Firewall with Content Filtering by URL Keyword, Category, and Apps
Central Management for Vigor AP and Vigor Switch
Supports DrayDDNS
Supports IPTECHVIEW

Overview

Vigor2927 LTE Series is a dual-Ethernet WAN firewall router with embedded 4G/LTE connectivity. Embedded 2 SIM slots (1 SIM online at a time) and compliant with LTE Cat 6 to deliver the lightning speed of up to 300/50 Mbps (DL/UL), providing load-balancing and failover for your business continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal, and a lot more, this is the ultimate router that does it all for SMB. The series includes built-in 802.11ac Wave 2 Wi-Fi models.

Vigor2927 Series provides reliable broadband connectivity with the multi-WAN accesses. The two Gigabit Ethernet WAN ports can be operated in failover or load balancing mode to ensure a steady Internet connection. The two USB ports can work with 3G/4G/LTE USB modem to add additional wireless Internet access.

Vigor2927 Series also covers comprehensive functions, including VLAN, Bandwidth Management, Quality of Service, DNS Control, SPI Firewall, Web Content Filtering, and Central Management solutions to provide a reliable and secure business network.

WAN Load Balancing and Failover

Vigor2927 Series has two Gigabit Ethernet WAN ports that can be used for any types of connection, 3G/4G/LTE USB modem can also be attached to the USB ports of the router, and offer wireless Internet connectivity in case the fixed lines are not available. All of the WAN interfaces can be configured to be operated in either Load Balancing mode, which will be active all the time, or in Failover mode, which will be active only when detecting connection loss or heavy load on the primary connection.

On Vigor2927 Series, Load Balancing can be either IP-based mode, which will distribute the packets destined to different IP address across different WANs, or Session-based mode, which allows the packets of different sessions to take different paths, which means a multiple-session connection can be established across multiple WANs, and use multiple WAN's bandwidth at the same time. Policy-based Load Balancing is also supported so that you may specify the path for some certain packets.

To increase network accessibility, Vigor2927 Series also supports High Availability feature and allows one or more redundant Vigor2927 Series to be added to the network and operated in standby mode.

Flexible LAN Management

The 5-port Gigabit Ethernet switch on the LAN side provides high-speed connectivity for the servers and PCs on the local network, and the Virtual LAN (VLAN) feature allows you to separate the LAN clients into different logical domains thus to increase the security and network efficiency. Vigor2926 Series support 802.1Q standard and can build a Tag-based VLAN system with an 802.1Q-support switch, Port-based VLAN is also supported that each LAN port can be configured as a member of different VLAN and be isolated from each other without the use of VLAN tag.

Firewall and Security

Vigor2927 Series supports Stateful Packet Inspection (SPI) Firewall and flexible filtering rules, it can accept or deny packets based on the information in the packet header (such as source IP, destination IP, protocol, and port number) or the packet's application. IP-based restrictions can be set to filter certain HTTP traffic as well as various application software and help you to prevent time and network resource wasting on inappropriate network activities.

With an annual subscription to Cyren Web Content Filtering service, you may also filter the websites by their categories, and set up restrictions to block the whole categories of websites (such as Social Networking, Gambling.. etc.) without the need to specify every site you would like to block. The Cyren service is constantly updating the categorization, and a free 30-day trial is included in each new router.

The Vigor2927 Series firewall also includes DoS (Denial of Service) Defense to protect the network against variants of attacks.

Comprehensive VPN

Vigor2927 Series supports both LAN-to-LAN VPN and Remote Dial-in VPN, up to 50 VPN tunnels can be set up simultaneously. All the industry standard tunneling protocols are supported, including PPTP, L2TP, IPsec, and GRE, and it's compatible with 3rd party VPN devices.

Vigor2927 Series also support SSL VPN - a type of VPN based on the very common encryption method which is used by all the HTTPS websites. While the traditional VPN protocols might be filtered by the firewall and NAT of public networks, SSL VPN will be passed as long as the HTTPS is allowed. DrayTek also offers free official client App for Windows, iOS, and Android.

VPN Trunking is also supported by Vigor2927 Series, this allows you to establish two VPN tunnels to the same remote site but through different WAN interfaces. The two trunking tunnels can be set up in load balancing or failover mode.

Centralized Management

Vigor2927 Series can be the central management portal for all the Vigor devices on the same network, including VigorAPs and VigorSwitches, which allows the administrator to manage all the devices through a single portal. Vigor2927 Series also embeds CVM (Central VPN Management), an easier way for Network administrator to establish and manage VPN connections between several CPEs (VPN Client). The router itself supports TR-069 protocol and can be remotely managed and monitored through the TR-069-based VigorACS system, thus to reduce the need for on-site technicians.

Models

Application

Specs

Interface
Fixed WAN Port	1x GbE RJ-45
WAN/LAN Switchable Port	1x GbE RJ-45
Fixed LAN Port	5x GbE RJ-45
USB Port	2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
RJ-11 Port for Voice	2x FXS (V model)
Wi-Fi Antenna	2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (wireless model)
2.4G WLAN	802.11n 2x2 MIMO 400Mbps (wireless model)
5G WLAN	802.11ac Wave 2 2x2 MU-MIMO 867Mbps (dual-band model)
Performance
NAT Throughput	800 Mbps
NAT Throughput w/ Hardware Acceleration	940 Mbps (Single WAN) 1.8 Gbps (Dual WAN)
IPsec VPN Performance	290 Mbps (AES 256 bits)
SSL VPN Performance	120 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	50
Max. Concurrent OpenVPN + SSL VPN	25
Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN	(ac model)
3G/4G/LTE WAN with USB modem
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
Multicast	IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Local RADIUS server
SMB File Sharing	(Requires external storage)
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
Wireless LAN (ac model)
Number of SSID	4 per radio band
Security Mode	WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1X
WPS	PIN, PBC
WDS	Repeater (5GHz only)
Access Control	Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering	(ac model)
MU-MIMO	(5GHz Only) (ac model)
WMM
VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF
Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2926
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management	8 VPN
Central AP Management	20 VigorAP
Mesh Network	7 VigorAP
Central Switch Management	10 VigorSwitch
Physical
Power Supply	DC 12V @ 2A
Max. Power Consumption	24 watts (ac model)
Dimension	241mm x 165mm x 44mm
Weight	630g (ac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

Web Live Demo

Firmware

Vigor 2927 Series

admin — Sun, 04 Apr 2021 18:15:20 +0000

Vigor 2927 Series admin Sun, 04/04/2021 - 20:15

Prev Next

Vigor 2927 Series

Dual-WAN VPN Firewall Router

2 Gigabit Ethernet WAN ports for Load Balancing or Failover
2 USB ports for 3G/4G modem or extra storage
Built-in 802.11ac Wave 2 dual-band Wi-Fi, delivers speed up to 1.7Gbps (ac/Vac model)
50 simultaneous VPN Tunnels
SPI Firewall with Content Filtering by URL Keyword, Category, and Apps
Central Management for Vigor AP and Vigor Switch
Supports DrayDDNS
Supports IPTECHVIEW

Overview

WAN Load Balancing and Failover

To increase network accessibility, Vigor2927 Series also supports High Availability feature and allows one or more redundant Vigor2927 Series to be added to the network and operated in standby mode.

Flexible LAN Management

Firewall and Security

The Vigor2927 Series firewall also includes DoS (Denial of Service) Defense to protect the network against variants of attacks.

Comprehensive VPN

Centralized Management

Models

Application

Specs

Interface
Fixed WAN Port	1x GbE RJ-45
WAN/LAN Switchable Port	1x GbE RJ-45
Fixed LAN Port	5x GbE RJ-45
USB Port	2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
RJ-11 Port for Voice	2x FXS (V model)
Wi-Fi Antenna	2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (wireless model)
2.4G WLAN	802.11n 2x2 MIMO 400Mbps (wireless model)
5G WLAN	802.11ac Wave 2 2x2 MU-MIMO 867Mbps (dual-band model)
Performance
NAT Throughput	800 Mbps
NAT Throughput w/ Hardware Acceleration	940 Mbps (Single WAN) 1.8 Gbps (Dual WAN)
IPsec VPN Performance	290 Mbps (AES 256 bits)
SSL VPN Performance	120 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	50
Max. Concurrent OpenVPN + SSL VPN	25
Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN	(ac model)
3G/4G/LTE WAN with USB modem
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
Multicast	IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Local RADIUS server
SMB File Sharing	(Requires external storage)
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
Wireless LAN (ac model)
Number of SSID	4 per radio band
Security Mode	WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1X
WPS	PIN, PBC
WDS	Repeater (5GHz only)
Access Control	Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering	(ac model)
MU-MIMO	(5GHz Only) (ac model)
WMM
VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF
Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2926
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management	8 VPN
Central AP Management	20 VigorAP
Mesh Network	7 VigorAP
Central Switch Management	10 VigorSwitch
Physical
Power Supply	DC 12V @ 2A
Max. Power Consumption	24 watts (ac model)
Dimension	241mm x 165mm x 44mm
Weight	630g (ac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

Web Live Demo

Firmware

Vigor3912 Series

admin — Fri, 30 Apr 2021 19:43:54 +0000

Vigor3912 Series admin Fri, 04/30/2021 - 21:43

Prev Next

Vigor 3912 Series

10G High-Performance Load-Balancing VPN Concentrator

- 8 x WAN/LAN Switchable ports & 4x fixed LAN ports
- 2 10G SFP+ & 2x 2.5G Ethernet for WAN or LAN
- 1000k NAT Sessions recommended for a network of 500+hosts

- 256GB M.2 SSD (Vigor 3912S)

Overview

Aplication

Specs

Interface
WAN/LAN Switchable Port	2x 10G/2.5G/1G SFP+ Fiber Slot 2x 2.5G/1G/100M/10M Ethernet, RJ-45 4x 1G/100M/10M Ethernet, RJ-45
Fixed LAN Port	4x 1G/100M/10M Ethernet, RJ-45
USB Port	2x USB 3.0 for storage* (since f/w v3.9.6)
Console Port	1x RJ-45
Button	1x Factory Reset
Performance
NAT Throughput	9.4 Gbps
IPsec VPN Performance	3.3 Gbps
SSL VPN Performance	1.7 Gbps
NAT Sessions	1,000,000
Max. Concurrent VPN Tunnels	500
Max. Concurrent OpenVPN + SSL VPN	200
Internet Connection
IPv4	PPPoE, DHCP, Static IP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping, Strict ARP
WAN Data Budget	(since f/w v3.9.6)
Dynamic DNS
DrayDDNS
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	50
Number of LAN Subnet	50
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
IP Pool Count	Up to 4K per LAN Subnet
PPPoE Server
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, OSPFv2, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability	Active-Standby, Hot-Standby
DNS Security (DNSSEC)
Multicast	IGMP Proxy*, Bonjour(since f/w v3.9.6)
Local RADIUS server
SMB File Sharing	(Requires external storage)
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IPsec-XAuth, OpenVPN(Host to LAN)
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509, XAuth, EAP
IPsec Authentication	SHA-1, SHA-256, MD5
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Service Type
VoIP Prioritization
Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Syslog
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Managed by VigorACS
Central AP Management	50 VigorAPs
Central Switch Management	30 VigorSwitches
Physical
Rack Mountable	Mouting Kit Included
Dimension	443 mm x 285 mm x 45 mm
Weight	3.23 kg
Power	AC 110~220V @ 1A
Max.Power Consumption	35 watts
Operating Temperature	0 to 45°C
Storage Temperature	-10 to 55°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

Notes :

All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Web Live Demo

Firmware

Accessories

Vigor2135 Series

admin — Thu, 29 Apr 2021 17:33:33 +0000

Vigor2135 Series admin Thu, 04/29/2021 - 19:33

Prev Next

Vigor 2135 Series

Gigabit Broadband Single-WAN Router for Home/SOHO

- Gigabit Ethernet WAN
- 50K NAT Sessions
- 2 Concurrent VPN
- Built-in 11ac Wave 2 WLAN (optional)

Model	2.4GHz WLAN	5GHz WLAN	Wireless Antenna	Max Link Rate	VoIP Gateway	FXS RJ-11
Vigor2866	-	-	-	-	-	-
Vigor2866ax	Yes	Yes	2x Dual-Band (3.5dBi for 5GHz, 2.3dBi for 2.4GHz)	2.4 GHz: 574 Mbps 5 GHz: 2.4 Gbps	-	-
Vigor2866ac	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	-	-
Vigor2866Vac	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	Yes	2

Model	WAN Port	2.4GHz WLAN	5GHz WLAN	Wireless Antenna	Max Link Rate	Mesh	VoIP Gateway	FXS RJ11
Vigor2927	GbE, RJ-45	-	-	-	-	-	-	-
Vigor2927ax	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 574 Mbps 5 GHz: 2.4 Gbps	-	-	-
Vigor2927ac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	Yes	-	-
Vigor2927Vac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	Yes	Yes	2
Vigor2927L	GbE, RJ-45	-	-	-	-	-	-	-
Vigor2927Lac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	Yes	-	-

Model	WAN Port	2.4GHz WLAN	5GHz WLAN	Wireless Antenna	Max Link Rate	Mesh	VoIP Gateway	FXS RJ11
Vigor2927	GbE, RJ-45	-	-	-	-	-	-	-
Vigor2927ax	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 574 Mbps 5 GHz: 2.4 Gbps	-	-	-
Vigor2927ac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	Yes	-	-
Vigor2927Vac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	Yes	Yes	2
Vigor2927L	GbE, RJ-45	-	-	-	-	-	-	-
Vigor2927Lac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	Yes	-	-

Model	WAN Port	2.4GHz WLAN	5GHz WLAN	Wireless Antenna	VoIP Gateway	FXS RJ11
Vigor2135	GbE, RJ-45	-	-	-	-	-
Vigor2135ac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	-	-
Vigor2135Vac	GbE, RJ-45	Yes	Yes	2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz)	Yes	2

Interface
WAN Port	1x Gigabit Ethernet or 100/1000M Fiber SFP (F model)
LAN Port	4x Gigabit Ethernet
USB Port	2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
Wirelss Antenna	2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (ac model)
2.4G WLAN	802.11n 2x2 MIMO 400Mbps (ac model)
5G WLAN	802.11ac Wave 2 2x2 MU-MIMO 867Mbps (ac model)
FXS RJ-11	2 (V model)
Performance
NAT Throughput	600 Mbps
NAT Throughput w/ Hardware Acceleration	940 Mbps
IPsec VPN Performance	150 Mbps (AES 256 bits)
SSL VPN Performance	100 Mbps
Max. Number of NAT Sessions	50,000
Max. Concurrent VPN Tunnels	2
Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
3G/4G/LTE WAN with USB modem
WAN Failover
Connection Detection	ARP, Strict ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	8
Number of LAN Subnet	4
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Mail PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
DNS Security (DNSSEC)
Multicast	IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
SMB File Sharing	(Requires external storage)
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN
User Authentication	Local, RADIUS, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256, MD5
Encryption	MPPE, DES, 3DES, AES
Single-Armed VPN
NAT-Traversal (NAT-T)
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
APP QoS
Wireless LAN (ac model)
Number of SSID	4 per radio band
Security Mode	WEP, WPA, WPA2, Mixed(WPA+WPA2)
Authentication	Pre-Shared Key, 802.1X
WPS	PIN, PBC
WDS	Repeater (5GHz Only)
Access Control	Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering	(ac model)
MU-MIMO	(5GHz Only) (ac model)
WMM
VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	6
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF
Management
Local Service	HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2132 Series, Vigor2133 Series
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central AP Management	2 VigorAP
Physical
Power Supply	DC 12V @ 1-1.5A
Max. Power Consumption	18 watts (Vac model)
Dimension	207mm x 131mm x 42mm
Weight	440g (Vac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

Security Router

Vigor2866 Series

Vigor 2866 Series

G.fast Dual-WAN VPN Firewall Router

The Ultimate DSL Router for SMB

Interface

Performance

VDSL/ADSL

Internet Connection

LAN Management

Networking

VPN

Firewall & Content Filtering

Bandwidth Management

Wireless LAN (ac model)

VoIP Gateway (V model)

Management

Physical

Notes :

Vigor2962

Vigor 2962

High Performance Dual-WAN Router/VPN Gateway

Interface

Performance

Internet Connection

LAN Management

Networking

VPN

Firewall & Content Filtering

Bandwidth Management

Management

Physical

Notes :

WCF License

DAC-CX10

Vigor2927 LTE Series

Vigor 2927 LTE

4G LTE Embedded Dual-WAN VPN Firewall Router

Multi-site Business Deployment

Comprehensive Firewall

802.11ac Wave 2 (ac/Vac model)

Central Management

Support Smart Monitor up to 30 PC Users

Flexible Installation with Rackmount

Interface

Performance

Internet Connection

LAN Management

Networking

VPN

Firewall & Content Filtering

Bandwidth Management

Wireless LAN (ac model)

VoIP Gateway (V model)

Management

Physical

Vigor 2927 Series

Vigor 2927 Series

Dual-WAN VPN Firewall Router

Multi-site Business Deployment

Comprehensive Firewall

802.11ac Wave 2 (ac/Vac model)

Central Management

Support Smart Monitor up to 30 PC Users

Flexible Installation with Rackmount

Interface

Performance

Internet Connection

LAN Management

Networking

VPN

Firewall & Content Filtering

Bandwidth Management

Wireless LAN (ac model)

VoIP Gateway (V model)

Management

Physical

Vigor3912 Series

Vigor 3912 Series

10G High-Performance Load-Balancing VPN Concentrator