Technical Specification (UK Hardware Spec.)



Physical Interfaces




• WAN1: VDSL2 / VDSL2 35b / ADSL2+, RJ-11

• WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45

• LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45

• 1x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer

• 2x Removable Wireless antennas (wireless models)

• 2x Removable 4G/LTE Wireless antennas (‘L’ models)

• Wireless On / Off / WPS button

• Recessed Factory Reset button




Antenna Specifications




• Wireless Antennas:
  
  • 2x External Dipole
  
  • 5GHz Gain: 4 dBi
  
  • 2.4GHz Gain: 2 dBi
  
  

• LTE Antennas:
  
  • 2x External Dipole
  
  • 2x 1m extension base included
  
  • Gain: 3 dBi
  
  




Performance




• NAT Performance:
  
  • 100 Mb/s Max Sync Rate with VDSL2
  
  • 300 Mb/s Max Sync Rate with VDSL2 35b
  
  • 950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
  
  • 1.3Gb/s Total Multi-WAN NAT Throughput
  
  • 800 Mb/s NAT Throughput per WAN without Hardware Acceleration
  
  • 60,000 NAT Sessions
  
  • 8000 Hardware Accelerated NAT Sessions
  
  

• VPN Performance:
  
  • 300 Mb/s IPsec (AES256) VPN Performance
  
  • 800 Mb/s Hardware Accelerated IPsec VPN Performance - New!
  
  • 130 Mb/s SSL VPN Performance
  
  • Max. 32 Concurrent VPN Tunnels
  
  • Max. 16 Concurrent SSL VPN / OpenVPN Tunnels
  
  




WAN Interfaces




• WAN1: VDSL2 / VDSL2 35b / ADSL2+

• WAN2: Gigabit Ethernet

• WAN3: 2.4GHz Wireless WAN (‘ac’ models)

• WAN4: 5GHz Wireless WAN (‘ac’ models)

• WAN5: Integrated 4G/LTE Category 6 Modem (‘L’ models only)

• WAN6: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)




Internet Connection




• Load Balancing: IP-based, Session-based

• Hardware Acceleration

• 802.1p/q Multi-VLAN Tagging

• Multi-VLAN/PVC

• 2.4GHz & 5GHz Simultaneous Wireless WAN (with ‘ac’ models)

• WAN Active on Demand:  Link Failure, Traffic Threshold

• Connection Detection: PPP, ARP Detect, Ping Detect

• WAN Data Budget

• Dynamic DNS

• DrayDDNS – with automated LetsEncrypt Certificates

• Full Feature-set Hardware Acceleration:
  
  • Hardware Accelerated Quality of Service
  
  • Multi-WAN Data Budget
  
  • Traffic Graph & Data Flow Monitor
  
  • Bandwidth Limit
  
  

• IPv4 Connection Types:  PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)

• IPv6 Connection Types: 
  
  • Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
  
  • 4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU
  
  




VDSL & ADSL Features




• BT Infinity Option 1 & Option 2 Compatible

• Compliant with Openreach SIN 498

• Auto Detection of VDSL and ADSL line modes

• Support for G.INP & Vectoring

• VDSL Standards:
  
  • ITU-T G.993.1 VDSL
  
  • ITU-T G.993.2, G.997.1 VDSL2
  
  • Band Plan: G.998, G.997
  
  • Annex A, Annex B, Annex C
  
  • VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
  
  • OLR, UPBO, DPBO Supported
  
  • US0 Supported
  
  • Loop Diagnostic Mode
  
  • DSL Forum WT-114
  
  

• ADSL Standards: 
  
  • ANSI T1.413 Issue2
  
  • ITU-T G.992.1 G.dmt (ADSL)
  
  • ITU-T G.992.2 G.lite
  
  • ITU-T G.992.3 ADSL2
  
  • ITU-T G.992.5 ADSL2+
  
  

• ATM Protocols:
  
  • RFC-2684/RFC-1483 Multiple Protocol over AAL5
  
  • RFC-2516 PPP over Ethernet
  
  • RFC-2364 PPP over AAL5
  
  • Support for RFC4638 for MTU up to 1500
  
  




Integrated 4G LTE Modem Features (‘L’ models)




• Dual-SIM Failover (1 SIM online at a time)

• 4G LTE Category 6 Modem with fallback to 3G

• Unlocked to any network (BT, EE, 3, O2, Vodafone, Eircom)

• 4G LTE Max Data Rates:
  
  • 300Mbps Downlink (Category 6)
  
  • 50Mbps Uplink (Category 6)
  
  

• 4G LTE (FDD) Bands: 1, 3, 5, 7, 8, 20, 28, 32

• 4G LTE (TDD) Bands: 38, 40, 41

• 3G (WCDMA/HSPA+/UMTS) Bands: 1, 3, 5, 8

• 2x LTE Antennas included with 1m extension cables

• Per-SIM-Card WAN Data Budget

• 2x Standard-Size SIM-Card Slots

• Removable SIM slot cover

• SMS Inbox - Send & Receive SMS text messages

• SMS Router Commands - Status Report, Reboot via text message

• LTE Bridge Mode - New!




Wireless Features (‘ac’ models)




• 

  AC1300 - 11ac 'Wave 2' Dual Band Wireless (‘ac’ models):

  
  
  • 802.11ac 2x2 wireless access point
  
  • Compatible with 802.11a/b/g/n wireless
  
  • Dual-band (2.4/5Ghz) simultaneous wireless
  
  • Up to 866Mbps PHY rate at 80MHz with 5GHz
  
  • Up to 400Mbps PHY rate at 40MHz with 2.4GHz (256-QAM)
  
  • Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80MHz for 5GHz
  
  • MU-MIMO
  
  • Tx Beamforming
  
  

• Mesh Root support with DrayTek VigorAP Mesh Nodes* – New! (requires f/w 4.3.0, available in Q2 2021)

• Up to 4 SSIDs per radio band

• Extended 5Ghz Band - Channels 36-48, 52-64, 100-140

• Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering

• Bandwidth Management (Per Station / Per SSID)

• WMM (Wireless MultiMedia)

• WPS - WiFi Protected Setup

• Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)

• EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK

• Wireless Security:
  
  • WPA2
  
  • WPA3 – New! (requires f/w 4.3.0)
  
  • Pre-Shared Key authentication
  
  • Enterprise 802.1x authentication
  
  • WEP/WPA for Legacy Clients
  
  • Access Control – Blacklist / Whitelist client MAC addresses per SSID
  
  




Firewall & Content Filtering




• IP-based or User-based Firewall Policy

• User-based Time Quota

• DoS Attack Defence

• Spoofing Defence

• Content Filtering:
  
  • Application Content Filter
  
  • URL Content Filter
  
  • DNS Keyword Filter
  
  • Web Features
  
  • Web Category Filter (requires GlobalView subscription)
  
  




NAT Features




• NAT Port Redirection

• Open Ports

• Port Triggering

• DMZ Host

• UPnP

• ALG (Application Layer Gateway):  SIP, RTSP, FTP, H.323

• VPN Pass-Through:  PPTP, L2TP, IPsec




LAN Management




• 802.1q Tag-based, Port-based VLAN

• Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)

• Up to 16 VLANs

• DMZ Port

• DHCP Server:
  
  • Multiple IP Subnet
  
  • Custom DHCP Options
  
  • Bind-IP-to-MAC
  
  • DHCP Pool Count up to 1022 addresses for LANs 1-3
  
  • DHCP Pool Count up to 253 addresses for LANs 4-8
  
  • DHCP Relay per LAN
  
  

• LAN IP Alias

• Wired 802.1x Port Authentication

• Port Mirroring

• Local DNS Server

• Conditional DNS Forwarding

• Hotspot Web Portal

• Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server




Networking Features




• Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country

• High Availability: Active-Standby, Hot-Standby

• DNS Security (DNSSEC)

• Local RADIUS server

• SMB File Sharing (Requires external storage)

• Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour

• Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP




VPN




• Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels

• Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New! (requires f/w 4.2.1)

• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client

• Teleworker-to-LAN – Dial-In VPN Server

• User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP

• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)

• Encryption: MPPE, DES, 3DES, AES (128/192/256)

• Authentication: SHA-256, SHA-1

• VPN Trunk (Redundancy): Load Balancing, Failover

• Dead Peer Detection (DPD)

• IPsec NAT-Traversal (NAT-T)

• Virtual IP Mapping – Resolve VPN IP subnet/range conflicts

• DHCP over IPsec

• DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!

• VPN Protocols:
  
  • IPsec IKEv1, IKEv2, IKEv2 EAP
  
  • IPsec-XAuth
  
  • DrayTek SSL VPN
  
  • OpenVPN (Remote Dial-In User only)
  
  • GRE over IPsec
  
  • PPTP
  
  • L2TP, L2TP over IPsec
  
  




Bandwidth Management




• IP-based Bandwidth Limit

• IP-based Session Limit

• User-based Data Quota




Quality of Service (QoS)




• Classify via TOS, DSCP, 802.1p, IP Address, Service Type

• 4 Priority Queues

• App QoS

• VoIP Prioritization

• Class-based Outbound Traffic Tagging: DSCP & IP Precedence




Management




• Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069

• Config File Export & Import

• Import Config from:
  
  • Vigor 2860 series
  
  • Vigor 2862 series
  
  • Vigor 2866 series* (planned for f/w 4.4.0)
  
  

• Auto Backup Config to USB Storage – New!

• Firmware Upgrade via TFTP, HTTP, TR-069

• 2-Level Administration Privilege

• Access Control Features: Access List, Brute Force Protection

• Syslog

• SMS, E-mail Notification Alert

• SNMP: v1, v2c, v3

• Managed by VigorACS




Router Central Management Features




• AP Management: Up to 20 VigorAP access points

• Switch Management: Up to 10 VigorSwitch network switches

• VPN Management: Up to 8 Vigor routers

• DrayTek Mesh: Up to 7 VigorAP access points* – New! (requires f/w 4.3.0, available in Q2 2021)




Operating Requirements




• Rack Mountable (Optional Vigor RM1 mounting bracket required)

• Wall or Shelf Mountable with included fittings

• Temperature Operating: 0 °C ~ 45 °C

• Storage: -25 °C ~ 70 °C

• Humidity 10% ~ 90% (non-condensing)

• Power Consumption: 24 watts maximum ('ac' model)

• Operating Power: DC 12V (via external PSU, supplied)

• Power Requirements : 220-240VAC

• Weight: 620g ('ac' model)

• Dimensions:
  
  • 241mm Width
  
  • 165mm Depth
  
  • 44mm Height
  
  




Warranty




• Two (2) Year Manufacturer's RTB

• Optional VigorCare Enhanced Warranty Available
  
  • VigorCare B3 3 Year Subscription: VCARE-B3
  
  • VigorCare B5 5 Year Subscription: VCARE-B5
  
  




Box Contents




• Vigor 2865Lac router

• Quick Start Guide

• Screws & wall plugs for wall mounting

• 2m Cat-5e RJ-45 Network Cable

• 2x Detachable Wireless LAN Antennas (‘ac’ models)

• 2x Detachable LTE Antennas (‘L’ models)

• 2x 1m LTE Extension Base (‘L’ models)

• DC 12V Power Supply with UK Plug




* - visit the DrayTek Mesh Model Compatibility page for details.