The Ideal DSL Router with 5G Broadband, Wi-Fi 6 and VPN for Business and Remote Working
DrayTek’s Vigor 2865 series Multi-WAN Firewall VPN routers are ideal for Superfast VDSL Broadband and Ethernet-based FTTP Fibre Broadband with Gigabit throughput, extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls.
The new Vigor 2865Lax-5G model integrates a 5G/LTE modem, enabling users to leverage mobile broadband effectively, whether for failover or load-balanced broadband connections. Additionally, its Wi-Fi 6 module ensures rapid and efficient wireless connectivity with DrayTek VigorAP access points and end devices.
Along with model options for fast WiFi and integrated 5G/LTE modem to take advantage of mobile broadband, the Vigor 2865 series provides a reliable, flexible, and secure network solution, that’s ideal for Small Business and Home Offices.
VDSL and Ethernet Load Balancer
The Vigor 2865 is a VDSL and Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. Connect the Vigor 2865 to Superfast Fibre with its integrated VDSL modem. Or connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN.
Featuring high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit Internet connections. Offering up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.
With Wi-Fi 6 AX3000 wireless, it provides ultra fast and efficient wireless coverage, to your network's computers and devices.
The integrated 5G/LTE modem provides fast 5G Mobile Broadband with Carrier Aggregation to get the best performance out of 5G Broadband, for use as a backup connection or primary Internet connection.
The 2865Vac model features wireless and an integrated VoIP SIP ATA, to connect 2 analogue handsets to Voice over IP, to connect PSTN telephones and fax machines.
Route Policy - Powerful Routing Management
The Vigor 2865 series provides full policy-based control of where and how outbound traffic is routed with Route Policy:
Integrated 5G LTE Modem
The Vigor 2865L '5G' router provides high speed mobile broadband connectivity for Internet access and VPN, with its built-in LTE 5G modem. The Category 19 mobile module uses carrier aggregation to improve 5G speeds, allowing you to get the best performance out of 5G Broadband.
DrayTek's LTE routers are not locked to any mobile network and are compatible with all major UK mobile networks, such as EE, Vodafone, O2 and Three, as well as any MVNOs on those networks.
The Vigor 2865L '5G' routers use four LTE aerials (antennae) which can rotate and tilt for optimum reception. The included extension bases provide a 1M extension cable to allow optimum positioning, avoiding obstructions, cabinets or equipment.
Constant Connectivity - Dual-SIM LTE
Where connectivity is mission critical, a single cellular network can become a single point of failure, in the event of a mobile network outage.
The Vigor 2865L '5G' router has two SIM slots, so that in the event of one mobile network not providing Internet connectivity, the router will switch to a secondary SIM and cellular network connection.
It intelligently monitors for Internet connectivity and latency; If the primary 5G SIM's network can't access a required location, or is too slow, it switches over to the backup SIM to resume connectivity.
For resilience in the event of mobile network outages, each SIM should be on a different cellular network (e.g. Vodafone and EE) and not 'virtual' networks which piggyback on the first (e.g. not Virgin Mobile and EE, as the former uses the latter's network).
Wireless Features
Mesh Wireless
The Vigor 2865 'ac' wireless routers can be used as part of DrayTek's Mesh wireless system, allowing the router to work as the Mesh Root, providing Internet access and management of Mesh VigorAPs directly, all without installing network cabling.
VLANs are also bridged across Mesh wireless, so if you have multiple SSIDs or separate network segments, those can also work across Mesh with DrayTek's wireless routers and VigorAPs.
For cabled wireless networks, the router's Central AP Management greatly reduces installation time and provides an easy way to manage VigorAPs, including auto-provisioning, so new VigorAPs are configured by the router when they're plugged into the router's network.
Mesh support for 'ax' models is planned to be made available in a future firmware release. Please visit the DrayTek Mesh Model Compatibility page for details.
Wi-Fi 6 - AX3000 Performance
The Vigor 2865 'ax' features ultra-fast and highly efficient Wi-Fi 6, or 802.11ax. OFDMA allows the router to send to more than one device at a time, splitting up wireless frequency into blocks, assigning more to users that need more e.g. video data, less to users that need less e.g. VoIP calls, then sending all at once. Which ensures all users have less of a wait, greatly improving efficiency. It allows the router to effectively and responsively, serve more wireless clients.
Click here to learn more about the exciting new features that Wi-Fi 6 brings to home and office wireless networks.
AC1300 Wireless LAN
The 2865 series 'ac' models provide 802.11ac simultaneous Dual-Band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its Antennas streaming data to different devices at once, improving efficiency over standard 802.11ac wireless and allowing the router to effectively serve more wireless clients.
Ideal VPN router for SMB
A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office.
The Vigor 2865 is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput and up to 32 concurrently active VPN tunnels.
IPsec Hardware Acceleration boosts performance, up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed Internet connections.
It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients. Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, DrayTek's SSL VPN and L2TP for both LAN to LAN and Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with OpenVPN.
User management for Dial-In Teleworkers is managed through the router's web interface, with mOTP 2-factor authentication available for IPsec, L2TP and SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server.
Connect VPNs from behind NAT with DrayTek's VPN Matcher
A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public Internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible.
DrayTek's new VPN Matcher service helps DrayTek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two DrayTek VPN routers that are behind NAT and could not normally establish a VPN tunnel.
Connect an OpenVPN Teleworker to a DrayTek router behind NAT
Connect two DrayTek router's behind NAT with a LAN-to-LAN VPN
Connecting Remote Sites with LAN to LAN VPN
Supporting up to 32 concurrently active VPN tunnels, the Vigor 2865 series is ideal for connecting multiple sites or home offices together with fast and secure IPsec VPN tunnels.
Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN
The Vigor 2865 supports up to 16 active DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - the same encryption that you use for secure web sites such as your bank.
Teleworkers can easily create a secure SSL VPN tunnel to the DrayTek Vigor 2865 using the free DrayTek Smart VPN Client app. Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices.
You can download the SmartVPN client and learn more about DrayTek SSL VPNs here.
5+1 Gigabit LAN Ports with VLANs
The Vigor 2865 series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage.
With 5 dedicated LAN ports and one flexible LAN/WAN port, the Vigor 2865 can connect up to 6 devices directly with a single DSL based WAN configuration, or 5 devices with a dual WAN configuration with DSL on WAN1 and Ethernet WAN on WAN2.
With Multiple LAN subnets and VLANs, the Vigor 2865 can manage up to 8 separate networks. For instance, an internal network with a separate network for Guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service and Route Policy applied.
The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the DrayTek VigorSwitch G1080 8-port switch, for additional network ports.
The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 906 to do the same, spanning the router's own wireless and any connected wireless APs.
Designed for Central Management
The Vigor 2865 series (along with most other DrayTek routers, Access points and switches) can be centrally managed by our VigorACS central management platform (version 3.6.0 or later required).
This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.
For full details of VigorACS, click here.
Robust & Comprehensive IPv4 / IPv6 Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.
The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.
The Vigor 2865 supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.
Web Content Filtering with DNS Filter
The content control features of the Vigor 2865 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.
Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).
Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
High Availability - Hardware Failover
For even greater resilience, the Vigor 2865 series provides High Availability (HA), with both a primary and secondary router able to provide connectivity to your network and subnets.
In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume Internet, routing and VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers.
With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time.
Read more about DrayTek High Availability here.
DrayDDNS - DrayTek Dynamic DNS Address
DrayTek provides a free Dynamic DNS address to each Vigor 2865 router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "myrouter.drayddns.com".
This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2865 router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.
The Vigor 2865 can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages and automates the certificate process. Keeping the certificate up to date and ready for use with SSL VPN and other services.
Manage Guest WiFi with Hotspot Web Portal
DrayTek routers make it easy to manage Guest Wireless with Hotspot Web Portal. The fully customisable captive portal can apply to both the router's wireless networks and LAN interfaces, for use with wireless access points.
Authentication can be handled by Google/Facebook or an external web Portal service such as Purple WiFi with RADIUS.
Upon connecting to the wireless network, users are presented with your company's branding and information. From there, depending on what you've set, they can simply click-through, provide their details or enter a PIN with Voucher generated by the router.
Once connected, the router can allow access until a user reaches their quota limit of time connected or bandwidth used.
Read more about Hotspot Web Portal here.
Quality of Service & Bandwidth Control
Prioritise latency-sensitive applications on your network with Quality of Service.
App QoS simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom and Skype.
Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support
Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.
Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.
Central AP & Switch Management
The Vigor 2865 manages DrayTek VigorAP access points and VigorSwitch switches connected locally to the router. This enables you to centrally control, manage and administer multiple AP & Switch devices installed around your building/campus from just the one router.
Central AP Management
The DrayTek router operating as the wireless controller can provision up to 20 DrayTek VigorAP access points with Central AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network.
Central Switch Management
DrayTek VigorSwitch switches can be provisioned and managed through the router with DrayTek’s Central Switch Management system, which allows you to:
- Easily provision VLAN configuration and other port settings directly from the router.
- Set bandwidth rate limits and schedules for individual ports.
- Log switch events for alert notifications if network problems occur
- At a glance see the devices connected on your network with a virtual topology.
Provision & Manage VigorAPs with a DrayTek Vigor router
For further details of the central management feature, click here.
Dashboard
View the status of the Vigor 2865 in one place from the router's Dashboard.
Quality of Service
Ensure efficient use of your Internet connections with QoS. Prioritise important traffic over bulk traffic and allocate bandwidth to services:
Advanced App QoS
Easily prioritise or de-prioritise specific services with DrayTek's App QoS system, which detects an application's 'signature' network traffic:
CSM - Web Content Filtering, URL Filtering & App Enforcement
Control access to the Internet, either for all users or specific networks / clients only. Category based filtering greatly simplifies the task of filtering Internet access:
Border Gateway Protocol
Automate routing setup between networks with BGP:
Policy-based Routing
Configure Route Policy rules to control how outbound traffic is routed. Send traffic from specified LAN IPs, to Internet domains (i.e. www.bbc.co.uk) through a specific WAN interface, VPN or LAN Gateway:
Data Flow Monitor
Live view of Internet bandwidth usage, showing both WAN usage and which users are using bandwidth. Use the Block button to temporarily stop Internet access to disruptive clients:
Firewall Diagnostics
Quickly check how traffic is handled by the firewall to troubleshoot issues:
Integrated Dual-SIM 5G LTE Modem
Install 2 SIM cards into the Vigor 2865L '5G' to use the secondary SIM as a backup connection if the network used by the primary SIM card stops working, or runs out of credit:
Specifications
Vigor 2865 Router series
Key Specifications
- VDSL2 (Superfast Fibre) and Gigabit Ethernet WAN Router
- Multi-WAN Gigabit Performance Router with Load-Balancing & Failover
- Up to 950Mbps Firewall Throughput for Ethernet WAN
- 5+1 Gigabit RJ-45 LAN Ports
- Up to 800Mbps VPN Throughput with IPsec acceleration
- 32 LAN-to-LAN & Remote Teleworker VPN Tunnels
- 16 DrayTek SSL VPN or OpenVPN Tunnels
- 5G / 4G / LTE with dual-SIMs for second backup telco (‘L’ models)
- AX3000 – Wi-Fi 6 Dual Band Wireless(‘ax’ models)
- AC1300 - Wi-Fi 5 Dual Band Wireless with Mesh* (‘ac’ models)
- 8 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
- Optional VigorCare Available
- Can be centrally Managed by VigorACS
| UK Product Code | EAN | Product Name | Product Description |
|---|---|---|---|
| V2865-K | 4710484741257 | Vigor 2865 (UK/IE) | Vigor 2865 wired VDSL router |
| V2865AC-K | 4710484741240 | Vigor 2865ac (UK/IE) | Vigor 2865ac AC1300 wireless VDSL router |
| V2865AX-K | 4710484743862 | Vigor 2865ax (UK/IE) | Vigor 2865ax VDSL router with Wi-Fi 6 AX3000 wireless |
| V2865L-5G-K | 4712909127400 | Vigor 2865L-5G (UK/IE) | Vigor 2865L-5G wired VDSL router with 5G/LTE modem |
| V2865LAC-K | 4710484741233 | Vigor 2865Lac (UK/IE) | Vigor 2865Lac AC1300 wireless VDSL router with 4G/LTE modem |
| V2865LAX-5G-K | 4712909127370 | Vigor 2865Lax-5G (UK/IE) | Vigor 2865Lax-5G AX3000 wireless VDSL router with integrated 5G modem |
| V2865VAC-K | 4710484743206 | Vigor 2865Vac (UK/IE) | Vigor 2865Vac AC1300 wireless VDSL router with VoIP |
The Vigor 2865 series comes in several different models depending on the features required. Please double check when ordering that you have selected the correct product and a product intended for the correct region/network.
The EAN is a barcode number which identifies the unique specific product type. It is separate to the product serial number which is unique to each product. The EAN will also appear on your product box when you receive it so you can double check that you have been sent the right product.
These product codes are for UK/Irish products only. Please check with your local DrayTek office for the correct part nos. for your region if you are not in the UK/IE to ensure that you get the correct hardware and local support/warranty.
Technical Specification (UK Hardware Spec.)
Physical Interfaces
- WAN1: VDSL2 / VDSL2 35b / ADSL2+, RJ-11
- WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x USB 2.0 Ports for LTE Modem, thermometer or Printer
or 1x USB 2.0 Port (‘L’ models) - 2x PSTN RJ-11 Telephone Ports (‘Vac’ model)
- 2x Removable Wireless antennas (wireless models)
- 2x Removable 4G/LTE Wireless antennas (‘L’ models)
or 4x Removable 5G LTE antennas (‘5G’ models) - Wireless On / Off / WPS button
- Recessed Factory Reset button
Performance
- NAT Performance:
- 100 Mb/s Max Sync Rate with VDSL2
- 300 Mb/s Max Sync Rate with VDSL2 35b
- 950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
- 1.3Gb/s Total Multi-WAN NAT Throughput
- 800 Mb/s NAT Throughput per WAN without Hardware Acceleration
- 60,000 NAT Sessions
- 8000 Hardware Accelerated NAT Sessions
- VPN Performance:
- 300 Mb/s IPsec (AES256) VPN Performance
- 800 Mb/s Hardware Accelerated IPsec VPN Performance - New!
- 130 Mb/s SSL VPN Performance
- Max. 32 Concurrent VPN Tunnels
- Max. 16 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
- WAN1: VDSL2 / VDSL2 35b / ADSL2+
- WAN2: Gigabit Ethernet
- WAN3: 2.4GHz Wireless WAN (‘ac’ models only. Not available with 'ax' models)
- WAN4: 5GHz Wireless WAN (‘ac’ models only. Not available with 'ax' models)
- WAN5: LTE USB Modem (not included, see supported LTE modem list)
or Integrated 4G/LTE Category 6 Modem (‘L’ models only)
or 5G-NR: Integrated 5G/LTE Modem (‘5G’ models) - WAN6: LTE USB Modem (not included, see supported LTE modem list)
Internet Connection
- Load Balancing: IP-based, Session-based
- Hardware Acceleration
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- 2.4GHz & 5GHz Simultaneous Wireless WAN (with 'ac' models only. Not available with 'ax' models.)
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget
- Dynamic DNS
- DrayDDNS – with automated LetsEncrypt Certificates
- Full Feature-set Hardware Acceleration:
- Hardware Accelerated Quality of Service
- Multi-WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
- Hardware Acceleration for Wireless Clients – New!
- IPv4 Connection Types: PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)
- IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
- 5G/4G/LTE Modem & USB LTE Modem: TSPC, AICCU
VDSL & ADSL Features
- BT Infinity Option 1 & Option 2 Compatible
- Compliant with Openreach SIN 498
- Auto Detection of VDSL and ADSL line modes
- Support for G.INP & Vectoring
- VDSL Standards:
- ITU-T G.993.1 VDSL
- ITU-T G.993.2, G.997.1 VDSL2
- Band Plan: G.998, G.997
- Annex A, Annex B, Annex C
- VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
- OLR, UPBO, DPBO Supported
- US0 Supported
- Loop Diagnostic Mode
- DSL Forum WT-114
- ADSL Standards:
- ANSI T1.413 Issue2
- ITU-T G.992.1 G.dmt (ADSL)
- ITU-T G.992.2 G.lite
- ITU-T G.992.3 ADSL2
- ITU-T G.992.5 ADSL2+
- ATM Protocols:
- RFC-2684/RFC-1483 Multiple Protocol over AAL5
- RFC-2516 PPP over Ethernet
- RFC-2364 PPP over AAL5
- Support for RFC4638 for MTU up to 1500
Integrated 5G Modem Features – New! (‘5G’ models)
- Dual-SIM Failover
- 5G LTE Category 19 (DL) Modem with fallback to 4G/LTE
- Unlocked to any network (EE, 3, O2, Vodafone, Eircom)
- 5G Max Data Rates:
Please note that the maximum real-world throughput speed is estimated to be approximately 600Mbps. Below are the theoretical maximum data link rates for 5G New Radio Standalone (NR SA) and 5G New Radio Non-standalone (NR NSA) for the device.- 5G NR SA
- 2.4Gbps Downlink (Category 19)
- 900Mbps Uplink (Category 18)
- 5G NR NSA
- 2.8Gbps Downlink (Category 19)
- 555Mbps Uplink (Category 18)
- 5G NR SA
- 5G NR Sub-6 SA Bands: 1, 3, 7, 8, 20, 28, 38, 40, 77, 78
- 5G NR Sub-6 NSA Bands: 1, 3, 7, 8, 20, 28, 38, 40, 77, 78
- 4G LTE (FDD) Bands: 1, 3, 7, 8, 20, 28
- 4G LTE (TDD) Bands: 38, 40
- 3G (WCDMA) Bands: 1, 8
- 4x 5G Antennas included with 1m extension cables
- Per-SIM-Card WAN Data Budget
- 2x Nano-Size SIM-Card Slots
- Removable SIM slot cover
- SMS Inbox - Send & Receive SMS text messages
- SMS Router Commands - Status Report, Reboot via text message
Integrated 4G LTE Modem Features (‘L’ models)
- Dual-SIM Failover
- 4G LTE Category 6 Modem with fallback to 3G
- Unlocked to any network (BT, EE, 3, O2, Vodafone, Eircom)
- 4G LTE Max Data Rates:
- 300Mbps Downlink (Category 6)
- 50Mbps Uplink (Category 6)
- 4G LTE (FDD) Bands: 1, 3, 5, 7, 8, 20, 28, 32
- 4G LTE (TDD) Bands: 38, 40, 41
- 3G (WCDMA/HSPA+/UMTS) Bands: 1, 3, 5, 8
- 2x LTE Antennas included with 1m extension cables
- Per-SIM-Card WAN Data Budget
- 2x Standard-Size SIM-Card Slots
- Removable SIM slot cover
- SMS Inbox - Send & Receive SMS text messages
- SMS Router Commands - Status Report, Reboot via text message
- LTE Bridge Mode - New!
Wireless Features (‘ac’ & 'ax' models)
-
Wi-Fi 6 - AX3000 wireless (‘ax’ models):
- 802.11ax 2x2 wireless access point
- Compatible with 802.11a/b/g/n/ac wireless
- Dual-band (2.4/5Ghz) simultaneous wireless
- Up to 2400Mbps PHY rate at 160MHz with 5GHz
- Up to 574Mbps PHY rate at 40MHz with 2.4GHz
- Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
- OFDMA
- MU-MIMO
- Tx Beamforming
- 1024-QAM
- Hardware Acceleration for Wireless Clients – New!
-
AC1300 - 11ac 'Wave 2' Dual Band Wireless (‘ac’ models):
- 802.11ac 2x2 wireless access point
- Compatible with 802.11a/b/g/n wireless
- Dual-band (2.4/5Ghz) simultaneous wireless
- Up to 866Mbps PHY rate at 80MHz with 5GHz
- Up to 400Mbps PHY rate at 40MHz with 2.4GHz (256-QAM)
- Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80MHz for 5GHz
- MU-MIMO
- Tx Beamforming
- Mesh Root support with DrayTek VigorAP Mesh Nodes* – New! ('ac' models only)
- Up to 4 SSIDs per radio band
- Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
- Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
- Bandwidth Management (Per Station / Per SSID)
- WMM (Wireless MultiMedia)
- WPS - WiFi Protected Setup
- Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
- EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
- Wireless Security:
- WPA2
- WPA3 – New! (requires f/w 4.3.0)
- Pre-Shared Key authentication
- Enterprise 802.1x authentication
- WEP/WPA for Legacy Clients
- Access Control – Blacklist / Whitelist client MAC addresses per SSID
Antenna Specifications
- Wireless LAN Antennas (wireless 'ax' models):
- 2x External Dipole
- 5GHz Gain: 4.5 dBi
- 2.4GHz Gain: 5 dBi
- RP-SMA fitting antenna connectors
- Wireless LAN Antennas (wireless 'ac' models):
- 2x External Dipole
- 5GHz Gain: 4 dBi
- 2.4GHz Gain: 2 dBi
- RP-SMA fitting antenna connectors
- 5G/LTE Antennas (‘5G’ models):
- 4x External Dipole
- 4x 1m extension base included
- Gain: 4.37 dBi
- SMA fitting antenna connectors
- 4G/LTE Antennas (‘L’ models):
- 2x External Dipole
- 2x 1m extension base included
- Gain: 3 dBi
- SMA fitting antenna connectors
Firewall & Content Filtering
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter (requires GlobalView subscription)
NAT Features
- NAT Port Redirection
- Open Ports
- Port Triggering
- DMZ Host
- UPnP
- ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
- VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 16 VLANs
- DMZ Port
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 1022 addresses for LANs 1-3
- DHCP Pool Count up to 253 addresses for LANs 4-8
- DHCP Relay per LAN
- LAN IP Alias
- Wired 802.1x Port Authentication
- Port Mirroring
- Local DNS Server
- Conditional DNS Forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking Features
- Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
- High Availability: Active-Standby, Hot-Standby
- DNS Security (DNSSEC)
- Local RADIUS server
- SMB File Sharing (Requires external storage)
- Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
- Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN
- Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels
- Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New! (requires f/w 4.2.1)
- LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP, TOTP – New!
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: MPPE, DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- VPN Trunk (Redundancy): Load Balancing, Failover
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
- Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
- DHCP over IPsec
- DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
- VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- DrayTek SSL VPN
- OpenVPN
- WireGuard - New!
- GRE over IPsec
- PPTP
- L2TP, L2TP over IPsec
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
Quality of Service (QoS)
- Classify via TOS, DSCP, 802.1p, IP Address, Service Type
- 4 Priority Queues
- App QoS
- VoIP Prioritization
- Class-based Outbound Traffic Tagging: DSCP & IP Precedence
VoIP Features (‘Vac’ model)
- 2x RJ-11 PSTN Telephone Ports (FXS)
- Integrated VoIP SIP ATA (Analogue Telephone Adapter)
- 6 SIP Accounts with VoIP Setup Wizard
- Protocols: SIP, RTP / RTCP
- G.168 Line Echo-cancellation
- Dial Plan: Phone Book, Digit Map, Call Barring
- Voice Codecs: G.711 A / Law, G.723.1, G.726, G.729 A / B, VAD / CNG
- Tone Generation: DTMF, Dial, Busy, Ring Back, Call Progress
- DTMF Transmission: In Band, Out Band (RFC-2833), SIP info
- FAX / Modem Support with G.711 Pass-through and T.38
- Supplemental Services: Caller ID, Call Hold/Retrieve, Waiting, Transfer, Forwarding, Barring
- DND (Do not Disturb)
- MWI (Message Waiting Indicator) (RFC-3842)
- Hotline (Dial preset number when handset lifted)
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export & Import
- Import Config from:
- Vigor 2860 series
- Vigor 2862 series
- Vigor 2866 series* (planned for f/w 4.4.0)
- Auto Backup Config to USB Storage – New!
- Firmware Upgrade via TFTP, HTTP, TR-069
- 2-Level Administration Privilege
- Access Control Features: Access List, Brute Force Protection
- Syslog
- SMS, E-mail Notification Alert
- SNMP: v1, v2c, v3
- Managed by VigorACS (version 3.6.0 or later)
Router Central Management Features
- AP Management: Up to 20 VigorAP access points
- Switch Management: Up to 10 VigorSwitch network switches
- VPN Management: Up to 8 Vigor routers
- DrayTek Mesh: Up to 7 VigorAP access points* – New! (wireless models only)
Operating Requirements
- Power Requirements : 220-240VAC
- Maximum Power Consumption: 31.2W
- Operating Power: DC 12V (via external PSU, supplied)
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Rack Mountable (Optional Vigor RM1 mounting bracket required)
- Wall or Shelf Mountable with included fittings
Physical Specifications
- Dimensions:
- 241mm Width
- 165mm Depth
- 44mm Height
- Weight: 670g (‘Lax’ model)
ROHS, UKCA & CE Compliant
Warranty
- Two (2) Year Manufacturer's RTB
- Software security updates:
5 years after the EOL notification. Please note that this only applies to products sold in the UK - Optional VigorCare Enhanced Warranty Available
- VigorCare B3 3 Year Subscription: VCARE-B3
- VigorCare B5 5 Year Subscription: VCARE-B5
Box Contents
- Vigor 2865 series router
- Quick Start Guide
- Screws & wall plugs for wall mounting
- 2m Cat-5e RJ-45 Network Cable
- 2x Detachable Wireless LAN Antennas (‘ac’ & 'ax' models)
- 2x Detachable LTE Antennas (‘L’ models)
or 4x Detachable LTE Antennas (‘5G’ models) - 2x 1m LTE Extension Base (‘L’ models)
or 4x 1m LTE Extension Base (‘5G’ models) - DC 12V Power Supply with UK Plug
* - visit the DrayTek Mesh Model Compatibility page for details.
Copyright © 2024 DrayTek