High performance router with 2.5GbE WAN that’s ideal for connecting to FTTP modems
The DrayTek Vigor 2136ax Firewall VPN routers allow you to make the most of FTTP Fibre Broadband with future-proof 2.5 Gigabit WAN interfaces, extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls.
Future-proof 2GbE Fibre Ethernet Router
The Vigor 2136ax is an Ethernet WAN router with over 2 Gigabit performance, allowing you to make full use of DrayTek's advanced feature set, with Quality of Service, VPN and Content Filtering. Connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN.
Either connection, or an LTE USB modem can be used as the primary or Failover connections, so that if the main Internet connection goes down, the Vigor 2136ax can use its backup connections to guarantee reliable Internet access and VPN connectivity.
The 2136ax adds 802.11ax wireless, providing fast wireless coverage to your network's computers and devices. Moreover, use Wi-Fi connection as its WAN (Internet) feed. For example, where you are in a location which provides Wi-Fi access (a hotel, a web café, someone else's office etc.) you can use that to provide the Vigor's Internet connection instead of a fixed line. Importantly, when using this feature, your own Wireless LAN still works - i.e. the wireless base facility provided to your laptops/phones/tablets by the Vigor router still works.
Route Policy - Routing Management for WAN & VPN
The Vigor 2136ax provides full policy-based control of where and how outbound traffic is routed with Route Policy, to send traffic through VPN services and alternative LAN gateways:
VPN Routing |
Send all or select traffic through VPN services. |
Service Routing |
Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel. |
Failover & Failback |
Extensive control of Failover with multiple Failover rules and paths. Manage how connections are moved back to the primary connection, after a failover has occurred with Failback settings. |
Powerful SoHo VPN Router
DrayTek's Vigor routers feature extensive VPN (Virtual Private Networking) capabilities. The Vigor 2136ax is no exception, its VPN capabilities are well suited to SoHo (small office, home office) environments. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office.
The Vigor 2136ax allows you to make full use of Fibre broadband with VPN. Up to 390Mbps of IPsec VPN throughput for fast and secure connections, to VPN services and other offices.
Connect up to 4 VPN tunnels concurrently to access remote resources securely. Connect the Vigor 2136ax in a branch office or home office to a head office for seamless access to network resources.
It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients. Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, OpenVPN and WireGuard for both LAN to LAN and Dial-In teleworker VPNs.
User management for Dial-In Teleworkers is managed through the router's web interface, with mOTP 2-factor authentication, TOTP, Email or SMS available for IPsec, OpenVPN and WireGuard VPN Teleworker connections.
Connecting Remote Sites with LAN to LAN VPN
Supporting up to 4 concurrently active VPN tunnels and 390Mbps of IPsec VPN throughput, the Vigor 2136ax series is ideal as a branch-office or home-office router, to connect with a head office router such as the Vigor 3912S.
Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
Encrypted VPN for Dial-In Teleworkers & LAN to LAN
Connect up to 4 VPN tunnels. These encrypted tunnels securely link teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - similar to the HTTPS security that's used for most secure websites on the internet such as on-line banking and shopping services.
Teleworkers can connect with the secure IPsec, OpenVPN, or WireGuard VPN tunnels to the DrayTek Vigor 2136ax, using the free DrayTek Smart VPN Client app. Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices. The latter two protocols may need additional native software installed on your mobile devices.
Download the SmartVPN client and learn more about DrayTek VPN here.
Identity and Access Control Security Framework
Identity and Access Control (IAM) framework is designed to meet network security requirements. The network administrator can define access policies, control user privileges, and coordinate group policies with the firewall and traffic shaping settings.
Device Authentication |
Using each device’s unique IP and MAC address provides a strong basis for device identification and authentication. |
Reduced False Positives |
Using IP and MAC addresses reduces the likelihood of legitimate devices being blocked due to other potential factors. |
Holistic Security |
Combining user, device, and session-based policies enhances overall security without relying solely on one aspect. |
Enhanced Incident Response |
When security incidents occurs, you can quickly pinpoint the devices involved and take appropriate actions. |
AX3000 Wireless LAN
The Vigor 2136ax provides Wi-Fi 6 (802.11ax) simultaneous Dual-Band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its Antennas streaming data to different devices at once, improving efficiency over standard 802.11ax wireless and allowing the router to effectively serve more wireless clients.
With firmware 5.0.3, the Vigor 2136ax wireless router can be used as part of DrayTek's Mesh wireless system, allowing the router to work as the Mesh Root, providing Internet access and management of Mesh VigorAPs directly. For product compatibility, please visit our features compatibility page.
2.5GbE and 1GbE LAN Ports with VLANs
The Vigor 2136ax provides 4 LAN ports: 1x 2.5GbE and 3x 1GbE for wired links to Computers, Servers and Network Attached Storage.
Up to four LAN subnets and VLANs allow the Vigor 2136ax to manage guest networks that are fully separated from internal networks and data. Or any other configuration that can use up to four subnets, whether that's a separate LAN subnet to isolate printers, IoT and other smart devices from computers and servers, or simply providing multiple IP networks through the one router. Each network can have its own Content Filtering, Firewall, Quality of Service and Route Policy configurations.
Vigor 2136ax routers have full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support tagged VLANs. Such as the DrayTek VigorSwitch P2100 10-port switch, for additional network ports and features.
The Wireless LAN can also utilise VLANs, making the same Guest & Private networks possible simply by using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 805 to do the same, spanning the router's own wireless and any connected wireless APs.
Designed for Central Management
The Vigor 2136ax can be centrally managed along with VigorAP's and switches, with the VigorACS central management platform.
This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.
For full details of VigorACS, click here.
Robust & Comprehensive IPv4 / IPv6 Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.
The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.
The Vigor 2136ax supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.
Web Content Filtering with DNS Filter
The content control features of the Vigor 2136ax allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.
Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).
Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
DrayDDNS - DrayTek Dynamic DNS Address
DrayTek provides a free Dynamic DNS address to each Vigor 2136ax router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "vigor2136.drayddns.com".
This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2136ax router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.
The Vigor 2136ax can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages and automates the certificate process. Keeping the certificate up to date and ready for use with SSL VPN and other services.
Quality of Service with App QoS
Prioritise latency-sensitive applications on your network with Quality of Service.
App QoS simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom and Skype.
Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support
Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.
Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.
Multi-Purpose USB Ports
The Vigor 2136ax has two USB ports which can be used for 4G/5G modem, USB temperature sensor, storage, or a printer for shared access.
Connect a USB 4G/5G modem to the Vigor 2136ax and use mobile broadband as your Internet connectivity. That can be your primary connection or the router can switch over to 4G/5G, in the case of xDSL/Fibre outage so that you're always connected.
Use your Vigor 2136ax as a network attached storage (NAS) by connecting a USB flash drive or hard drive. With Windows networking (SMB) & FTP connectivity to allow Windows, Apple, Android and Linux devices to access the router's storage, locally and through VPN.
Virtual Controller
Virtual Controller is a management feature that helps with deployment and monitoring of DrayTek VigorAPs and VigorSwitches. The system can auto detect access points and switches. For smaller setups with fewer than 8 APs, it seamlessly enables Mesh mode where 1 root AP and up to 7 nodes can be linked together. In larger wired deployments, it activates AP management mode for up to 20 APs, while switch management supports up to 5 switches, ensuring enhanced control and scalability.
Wireless Management
DrayTek Vigor 2136ax series routers can manage up to 20 DrayTek VigorAP access points with Vitrual Controller AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network. This enables you to centrally control, manage and administer a full DrayTek network installed around the home or office, through the router's web interface. Ideal for local or remote management.
Switch Management
DrayTek DrayOS 5 SOHO routers such as the Vigor 2136ax series can also manage up to 5 VigorSwitches. The Vitrual Controller helps with fidning devices on the network, auto configuration of newly added VigorSwitches, monitoring of the devices, port control and maintenance.
Dashboard
View the status of the Vigor 2136ax in one place from the router's Dashboard.
CSM - Web Content Filtering, URL Filtering & App Enforcement
Control access to the Internet, either for all users or specific networks / clients only. Category based filtering greatly simplifies the task of filtering Internet access:
Virtual Controller
Discover, adopt, synch configuration, maintain and monitor your DrayTek wireless access points and switches thanks to the Virtual Controller management system
IAM - Identity and Access Control
Configure IAM users and groups and apply network security policies
Specifications
Vigor 2136ax Router
Key Specifications
- 2.5 Gigabit Ethernet Router with Failover
- Up to 2.3Gbps Firewall Throughput
- Up to 390Mbps IPsec VPN Throughput
- 4x LAN-to-LAN & Remote Teleworker VPN Tunnels
- 1x 2.5 Gigabit RJ-45 LAN Port
- 3x Gigabit RJ-45 LAN Ports
- AX3000 – Wi-Fi 6 Dual Band Wireless
- 4 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
- Optional VigorCare Available
- Can be centrally Managed by VigorACS
| UK Product Code | EAN | Product Name | Product Description |
|---|---|---|---|
| V2136AX-K | 4710484748409 | Vigor 2136ax (UK/IE) | Vigor 2136ax 2.5GbE Ethernet Router with Wi-Fi 6 AX3000 Wireless |
The EAN is a barcode number which identifies the unique specific product type. It is separate to the product serial number which is unique to each product. The EAN will also appear on your product box when you receive it so you can double check that you have been sent the right product.
These product codes are for UK/Irish products only. Please check with your local DrayTek office for the correct part nos. for your region if you are not in the UK/IE to ensure that you get the correct hardware and local support/warranty.
Technical Specification (UK Hardware Spec.)
Physical Interfaces
- WAN Ports: 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45
- WAN/LAN Switchable Port: 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45
- LAN Ports: 3x Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x USB 2.0 Ports for LTE Modem, Thermometer or Printer
- 2x Removable Wireless LAN antennas
- Wireless On / Off / WPS button
- Recessed Factory Reset button
Performance
- NAT Performance:
- 2.3 Gb/s NAT Throughput for Single WAN
- 50,000 NAT Sessions
- VPN Performance:
- 390 Mb/s IPsec (AES256) VPN Performance
- 90 Mb/s WireGuard VPN Throughput
- Max. 4 Concurrent VPN Tunnels
WAN Interfaces
- WAN1: 2.5 Gigabit Ethernet
- WAN2: 2.5 Gigabit Ethernet (LAN switchable)
- WAN3: 2.4GHz Wireless WAN
- WAN4: 5GHz Wireless WAN
- WAN5: LTE USB Modem (not included)
- WAN6: LTE USB Modem (not included)
Internet Connection
- Hardware Acceleration (Always On)
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- 2.4GHz or 5GHz Wireless WAN
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget
- Dynamic DNS
- DrayDDNS – with automated LetsEncrypt Certificates
- Full Feature-set Hardware Acceleration:
- Hardware Accelerated Quality of Service
- Multi-WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
- IPv4 Connection Types: PPPoE, DHCP, Static IP
- IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel
Wireless Features
- AX3000 Wi-Fi 6 Wireless:
- 802.11ax 2x2 wireless access point
- Compatible with 802.11a/b/g/n/ac wireless
- Dual-band (2.4/5Ghz) simultaneous wireless
- Up to 2400Mbps PHY rate at 160MHz with 5GHz
- Up to 574Mbps PHY rate at 40MHz with 2.4GHz
- Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
- OFDMA
- MU-MIMO
- Tx Beamforming
- 1024-QAM
- Mesh Root support with DrayTek VigorAP Mesh Nodes^
- Up to 8 SSIDs per radio band
- Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
- Wireless Optimisation: AP-Assisted Mobility, Band Steering
- Bandwidth Management (Per Station / Per SSID)
- WMM (Wireless MultiMedia)
- WPS - WiFi Protected Setup
- Station Control - Time-limited wireless connectivity per Station (e.g. 1 hour)
- EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
- Wireless Security:
- WPA2
- WPA3
- Pre-Shared Key authentication
- Enterprise 802.1x authentication
- WEP/WPA for Legacy Clients
- Access Control – Blacklist / Whitelist client MAC addresses per SSID
Antenna Specifications
- Wireless Antennas:
- 2x External Dipole
- 5GHz Gain: 2.7 dBi
- 2.4GHz Gain: 2.6 dBi
- RP-SMA fitting antenna connectors
Firewall & Content Filtering
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter*
NAT Features
- NAT Port Redirection
- Open Ports
- Port Triggering
- DMZ Host
- UPnP
- ALG (Application Layer Gateway): SIP, RTSP
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 4 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 8 VLANs
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 253 addresses per subnet
- DHCP Relay per LAN
- Wired 802.1x Port Authentication
- Port Mirroring (CLI)
- Local DNS Server
- Conditional DNS Forwarding
Networking Features
- Policy-based Routing: Protocol, IP Address, Port
- Local RADIUS server
- SMB File Sharing (Requires external USB storage)
- Multicast: IGMP Proxy, IGMP Snooping & Fast Leave
- Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP, OSPF
VPN Features
- Up to 4 active VPN tunnels
- Up to 390Mb/s IPsec
- LAN-to-LAN - Dial-Out VPN Client / Dial-In VPN Server
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, TACACS+, mOTP, TOTP
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
- DHCP over IPsec
- VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- OpenVPN
- WireGuard
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
- QoS (Quality of Service):
- Classify via TOS, DSCP, 802.1p, IP Address, Service Type
- 4 Priority Queues
- App QoS
- VoIP Prioritization
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export & Import
- Firmware Upgrade via TFTP, HTTP, TR-069
- 2-Level Administration Privilege
- Access Control Features: Access List
- Syslog
- SMS, E-mail Notification Alert
- SNMP: v1, v2c, v3
- Managed by VigorACS
Router Central Management Features
- AP Management: Up to 20 VigorAP access points
- Switch Management: Up to 5 VigorSwitch network switches
- DrayTek Mesh: Up to 7 VigorAP access points^
Operating Requirements
- Power Requirements: 100-240VAC
- Power Consumption (Watts, maximum): 18W
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Operating Power: DC 12V @ 1.5A (via external PSU, supplied)
- Wall Mountable
Physical Specifications
- Dimensions:
- 207mm Width
- 131mm Depth
- 42mm Height
- Weight: 508g
Box Contents
- Vigor 2136ax series router
- Quick Start Guide
- Screws & wall plugs for wall mounting
- 2m Cat-5e RJ-45 Network Cable
- 2x Detachable Wireless LAN Antennas
- DC 12V Power Supply with UK Plug
ROHS, UKCA & CE Compliant
Warranty:
- Standard: Two (2) Year, RTB
- Software security updates:
5 years after the EOL notification. Please note that this only applies to products sold in the UK - Optional VigorCare Extended Warranty
- VigorCare A3 3 Year Subscription: VCARE-A3
- VigorCare A5 5 Year Subscription: VCARE-A5
* - subscription required: Group B, URLR-B (includes free 30-day trial)
^ - visit the DrayTek Mesh Model Compatibility page for mesh compatibility details
Copyright © 2025 DrayTek