Vigor C510 Series Overview

The DrayTek Vigor C510 Series is a 5G/4G LTE business VPN router designed for reliable and secure network connectivity.
The Vigor C510 Series supports dual SIM failover, advanced VPN features, and enterprise-grade security, making it suitable for modern business networks.

Key Features of the Vigor C510 Series

The Vigor C510 Series includes dual SIM 5G/4G LTE connectivity for network redundancy.
In addition, the router offers advanced VPN capabilities, firewall protection, and centralized management for business environments.
As a result, businesses can maintain stable connections even during WAN outages.

Vigor C510 Series for Business Networks

The DrayTek Vigor C510 Series is ideal for small to medium enterprises that require secure VPN access and reliable 5G connectivity.
Therefore, it is commonly deployed in branch offices, remote work environments, and failover scenarios.

Why Choose the Vigor C510 Series

Compared to standard LTE routers, the Vigor C510 Series provides enhanced security, flexible WAN options, and centralized management features.

The Vigor C510 Series is a 5G business VPN router designed for secure and reliable connectivity.

  • Ready to connect to NTD (Network Termination Device) of NBN (Aust) and UFB (NZ)
  • 5G/4G LTE modem with dual nano SIM slots (SIM slot 2 for Failover) for SA and NSA 5G WAN
  • Supports 5G NR Sub-6 SA Band: n1, 3, 7, 8, 20, 28, 38, 40, 77, 78; great coverage in Australia and New Zealand
  • 5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**

  • 5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**

  • LTE FDD Band: 1, 3, 5, 7, 8, 20, 28
  • LTE TDD Band: 38,40
  • 1 x configurable GbE WAN/LAN port (P1)
  • Support dual-WAN Load Balance and Failover, with per-WAN Weight for Primary and Failover members
  • 3 x Gigabit LAN ports with 50,000 NAT sessions
  • NAT throughput 940 Mbps

  • IPsec VPN throughput up to 370 Mbps (AES 256 bits)

  • 802.11ax (WiFi 6, AX3000) Wi-Fi up to 574 + 2402 Mbps link speeds (ax model)
  • 16 x VPN tunnels, including IPsec, OpenVPN, and WireGuard, with EasyVPN features that simplify VPN setup for effortless connectivity

  • Object-based SPI Firewall, Content Security Management (CSM), URL/IP Reputation and Port Knocking
  • IAM (Identity and Access Management) to enhance security management and user experience

  • IPv6 & IPv4

  • Virtual AP Controller for the deployment of up to 20 wireless VigorAPs

  • Wireless Mesh (ax model) up to 7 VigorAPs

  • Virtual Switch Controller to manage up to 5 VigorSwitches

  • Supports VigorACS 3 Central Management Software for remote management

  • 2 years back-to-base warranty

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

The Vigor C510 series combines 4G LTE and 5G to provide excellent mobile coverage in Australia and New Zealand:

5G/LTE/WCDMA Specifications

5G NR Sub-6 SA Band: n1, 3, 7, 8, 20, 28, 38, 40, 77, 78
5G NR Sub-6 NSA Band: n1, 3, 7, 8, 20, 28, 38, 40, 77, 78
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
LTE FDD Band: B1, 3, 5, 7, 8, 20, 28
LTE TDD Band: B38, 40
LTE Category: Cat19 (DL) / Cat18 (UL)
WCDMA (3G) Band: B1, 8
WCDMA Max. Data Rate: 42Mbps (DL) / 5.76Mbps (UL)

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

High-Performance 5G & Wi-Fi 6 Dual-WAN VPN Solutions with Enterprise Security

Vigor C510

The DrayTek Vigor C510 Series is a powerful line of dual-WAN cellular routers engineered for high-speed 5G and 4G LTE network applications. Ideal for both businesses and remote professionals, the VigorC510 delivers ultra-fast performance, robust security, and seamless connectivity in any environment.

With Gigabit Ethernet, dual nano SIM slots, and WiFi 6 (AX3000) support, the Vigor C510 series ensures uninterrupted internet access with multi-WAN failover. Its advanced VPN capabilities allow secure remote access with IPSec, OpenVPN, and WireGuard. Featuring up to 3.4Gbps 5G download speeds, this router is built for high-performance applications, including VoIP, cloud services, and remote office deployments.

Designed with an enterprise-grade firewall and content filtering, the Vigor C510 series provides comprehensive security against cyber threats. Flexible management options include web-based UI, SSH, and SNMP, making network administration effortless.

For businesses requiring fast, reliable, and secure connectivity, the DrayTek Vigor C510 Series is the ideal networking solution.

Interface

Key Features

[DISPLAY OFF] —– MOBILE VIEW

5G Router with High Speed Mobile Connectivity

  • The integrated 5G/LTE modem with Category 19 supports carrier aggregation, providing high-speed mobile broadband connectivity for Internet access and VPN.
  • The dual SIM slot accepts two SIM cards from different mobile network providers. This ensures that the router can seamlessly switch to the secondary SIM and cellular network if the primary mobile connectivity is broken.
  • Equipped with four cellular antennas (2 internal + 2 external), the router allows users to optimise placement for the strongest possible signal coverage.

* Backwards compatible to 4G LTE

Effortless and Secure VPN Access with EasyVPN

Setting up a VPN can often be complex, involving protocol selection, manual configurations, and troubleshooting, especially for non-technical users. While Vigor routers support advanced VPN protocols such as IPsec, WireGuard, and OpenVPN, traditional setup methods can be time-consuming and daunting.

EasyVPN simplifies this process by offering a streamlined, hassle-free solution for secure remote connectivity. With EasyVPN, users can quickly establish encrypted connections without the need to:

  • Manually generate WireGuard keys
  • Import OpenVPN configuration files
  • Upload certificates

By automating these steps, EasyVPN delivers a fast, secure, and intuitive VPN experience—perfect for businesses and users who want robust protection without the technical complexity.

Stealth Security Protection with Port Knocking

DrayTek’s Port Knocking technology adds an advanced stealth security layer by keeping critical network services completely invisible to unauthorised users. Instead of exposing management ports or VPN services to the public internet, Port Knocking requires a predefined “knock” sequence before access is granted, ensuring that only trusted users can discover and use these services.

By integrating three powerful functions, Port Knocking provides robust protection against port scanning, brute-force attacks, and unauthorised access.

Port Redirection

  • Conceal real service ports from the public internet
  • Redirect unauthorised requests to non-existent services to prevent detection

Secure Router Management Access

  • Allow router management access only after a successful knock sequence or through a secure internal server
  • Completely eliminate direct exposure of the management interface to the open internet

VPN Service Control (WAN Binding)

  • Keep VPN services invisible until the correct knock sequence is received
  • Bind VPN availability to specific WAN interfaces and authorised IP addresses

How It Works

  • By default, all protected ports remain closed and undetectable
  • After the correct knock sequence is received, selected ports open temporarily for authorised access
  • Once the configured time window expires, services automatically return to hidden mode

With DrayTek Port Knocking, your network operates in stealth mode, invisible to attackers yet instantly accessible to authorised administrators and remote users. It is the ideal solution for organisations that demand high-level security without compromising accessibility.

IAM (Identity and Access Management)

Vigor C510 Series with the new DrayOS5 is Zero Trust ready!

IAM (Identity and Access Management) is a cybersecurity system that controls user access by managing digital identities, authentication, and authorisation, to ensure correct access to network resources such as applications and devices.

With processes including identifying, authenticating, authorising users or groups, and assigning appropriate levels of access, IAM enhances both security management and the user experience and plays an important role in cloud-based services.

The IAM solution from VigorC510 is Zero Trust Ready, and allows you to grant and categorise user privileges, create and manage access policies, and define large-scale group policies that integrate multiple filtering rules and traffic-shaping settings.

Users & Groups

  •  User accounts and user groups allow flexible access level control.
  •  Existing external authentication server is supported.
  •  User and MFA protection can be easily configured.

Access Policies

System administrators can create access policies for the local users in this tab. The access policies can be configured based on:

  • MAC address filter list
  • The allowed / blocked user list
  • The login sessions lifetime

Access policies can be combined to create a robust security framework for your system.

Group Policies

Group policies can be configured for predefined local resources such as employees, workstations, network printers, and local servers. Network Firewall and traffic shaping policies can be configured to enhance network security and optimise traffic flows.

Conditional Access Policy

Conditional access policies can be configured to request users to provide multiple forms of authentication before granting appropriate access to a resource.

  • Specify a period for the user to re-authenticate
  • Restrict access to specific source IP addresses or ranges of IP addresses
  • Specify VLAN-based access level in your conditional policies
  • Set up time schedules when users are allowed to log-in

Resources Tab

Configure local resources such as IP and Mac addresses for workstations, network printers, PBX systems, NVR systems, servers, etc.

Hotspot Web Portal

DrayTek’s Hotspot Web Portal offers a fully customizable Wi-Fi login experience with multiple authentication methods, including username/password, social media login, and voucher-based access. It also supports quotation management, Wi-Fi marketing tools for promotions, and custom branding options to enhance user engagement and brand visibility.

Network administrators can easily manage user access, set bandwidth limits, and monitor real-time usage, making it an ideal solution for guest Wi-Fi in cafés, hotels, retail stores, and event venues.

Account Status

The Account Status feature includes brute force protection, which automatically logs key details such as the attacking IP address, targeted username or profile, and the service under attack. It also tracks the protection duration, recording the start and end times of the block, along with the total number of attempted hits.

For flexibility, administrators can manually unblock access in cases where a legitimate user was mistakenly restricted.

Backup and Restore

Easily back up or restore router settings, including Users and Groups, Access Policies, Group Policies, and more. For added security, password protection can be applied during the backup and restore process to prevent unauthorised access.

URL Reputation

URL Reputation is a cloud-based threat intelligence service that adds an extra layer of security to protect LAN clients during their online activities.

With a total of 82 content categories, including 10 security-focused ones, it provides comprehensive and up-to-date protection for both home and business networks.

These categories cover a wide range of areas—from malware, spyware, and adware, to parental controls, business productivity, and social networking—helping to create a safer online environment, enhance employee productivity, and support efficient bandwidth management.

IP Reputation

Every internet communication involves source and destination IP addresses. Cybercriminals often exploit known malicious IPs to launch attacks using various techniques, including:

  • Botnets
  • TOR nodes and anonymous proxies
  • Command-and-Control (C2) servers
  • Phishing servers
  • Distributed Denial of Service (DDoS) attacks

IP Reputation helps identify and block traffic from these high-risk IP addresses, adding an essential layer of network protection against cyber threats.

Blocking communication with malicious IP addresses is critical for network security. However, relying on static blocklists is no longer effective, as they lack the real-time, predictive intelligence needed to combat evolving threats. The IP Reputation Service addresses this challenge by delivering dynamic, real-time scoring and classification of IP addresses. It enables the automatic blocking of:

  • High-risk traffic
  • Suspicious proxies
  • Malware distributors
  • IPs associated with recent malicious activity

The system evaluates IPs based on multiple factors, including infection history, protocol behaviour, and attack frequency. Each IP is assigned a reputation score, which determines whether it should be trusted, monitored, or blocked, ensuring proactive and intelligent network protection.

You can purchase a URL Reputation B card for your VigorC510 series

Vigor C510ax 5G Cellular Router with AX3000 (WiFi 6) Capacity

The Vigor C510ax is a high-performance 2×2 dual-band WiFi 6 and 5G cellular router, delivering blazing-fast wireless connectivity with 160MHz channel bandwidth and 1024-QAM modulation for significantly increased throughput. With theoretical speeds of up to 3000Mbps—574Mbps on the 2.4GHz band and 2402Mbps on the 5GHz band, it offers up to 2.5 times the speed of a standard 802.11ac 2×2 dual-band router.

Packed with business-grade features such as URL Reputation filtering, Route Policy, Application-based QoS, and more, the Vigor C510ax is an ideal solution for professional smart homes, SOHO users, and anyone who demands complete control and visibility over their network.

OFDMA (Orthogonal Frequency Division Multiple Access)

With OFDMA modulation scheme, each channel is made up of 256 subcarriers spaced 78.125 kHz apart, compared to 64 subcarriers spaced 312.5 kHz apart with OFDM. With up to 4 times data efficiency and more advanced channel sharing technologies, a device can be allotted bandwidth based on the assessed needs for the highest airtime efficiency possible. For example, users on streaming or VoIP services can be allocated more bandwidth and time, while services such as email or website browsing can be assigned less bandwidth that is still sufficient for the tasks, thus improving user experience in high-density environments.

OFDM

OFDMA

MU-MIMO functions by transmitting data to multiple users simultaneously, much like several delivery trucks operating in parallel. This improves overall network capacity and boosts individual user speeds.

BSS Colouring Instead of CSMA/CA which allows only one device to transmit at a time, 802.11ax uses BSS Colouring to manage collision avoidance. Each Wi-Fi device is assigned a Basic Service Set (BSS), a 6-bit colour field, while adjacent devices are allocated with different colours. Before transmitting, the device checks the BSS and backs off only when the BSS is of the same colour as its own. In this way, the spectral efficiency is maximized as APs and Wi-Fi clients can transmit simultaneously even if they are on the same channel.

TWT (Target wake time)
Devices negotiate with the AP for a Target Wake Time (TWT), or joint a TWT broadcast session, and transmit data only when the TWT arrives, thereby reducing power consumption and increase network efficiency.

WPA3 (Wi-Fi Protected Access 3) enhances the security of Wi-Fi networks by addressing vulnerabilities in previous standards (WEP, WPA and WPS2) and introduces new features including stronger authentication, better encryption, and improved protection against attacks such as brute-force password guessing and man-in-the-middle exploits.

DrayTek’s WiFi 6 encryption:

  • WEP (64 / 128-bit)
  • WPA / WPA2 / WPA3 / OWE

The comparison table below compares security design of Wi-Fi security protocols WEP, WPA, WPA2 and WPA3.

WEPWPAWPA2WPA3
EncryptionRC4TKIP / RC4AES-CCMPAES-CCMP /
AES-GCMP
Session Key64/128 bit128 bit128 bit128/256 bit
AuthenticationOpen system,
shared key
Pre-shared keyPre-shared keyAES-CCMP /
AES-GCMP
Level of SecurityVery lowlowModerateHigh

[DISPLAY OFF] —– MOBILE VIEW

WEPWPAWPA2WPA3
EncryptionRC4TKIP /
RC4
AES-
CCMP
AES-
CCMP /
AES-
GCMP
Session Key64/128
bit
128
bit
128 bit128/256

bit

AuthenticationOpen
system,
shared
key
Pre-
shared
key
Pre-
shared
key
AES-
CCMP /
AES-
GCMP
Level of
Security
Very
low
lowModerateHigh
EncryptionWEP:
RC4
WPA:
TKIP / RC4
WPA2:
AES-CCMP
WPA3:
AES-CCMP /
AES-GCMP
Session KeyWEP:
64/128 bit
WPA:
128 bit
WPA2:
128 bit
WPA3:
128/256 bit
AuthenticationWEP:
Open system,
shared key
WPA:
Pre-shared key
WPA2:
Pre-shared key
WPA3:
AES-CCMP /
AES-GCMP
Level of SecurityWEP:
Very low
WPA:
low
WPA2:
Moderate
WPA3:
High

AP-Assisted Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

Extend Transmission Range

When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.

Improve Data Rates

When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.

Better User Experience

Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.

No Controller Required

Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.

Mesh Wi-Fi (Vigor C510ax only)

Vigor C510ax supports up to 7 APs, which can form one or more Wireless Groups. Each group can form Mesh links automatically based on the optimum signal level among the APs and devices.

Management Solution

On-Device Network Management with DrayTek Virtual Controller

The DrayTek Virtual Controller is a built-in management platform available on supported routers and firewalls.
It delivers centralised network control without cloud dependency, helping reduce data exposure risks while
enhancing security and privacy.

Wireless Management

  • Mesh Controller – Easily build and manage wireless mesh networks with auto-routing and self-healing capabilities.
  • AP Management (APM) – Automatically discover, configure, and monitor connected VigorAPs, making it simple to deploy multiple APs with unified settings.

Switch Management

  • Central Switch Manager (SWM) – Detect and manage supported VigorSwitches, push configurations, monitor device status, and apply VLAN or QoS policies, all from a single local interface.

Wireless Management Solution

Mesh (ax model)

Up to 7 APs

  • DrayTek Wireless app-support
  • Discovery
  • Auto-Provisioning
  • Monitoring
  • Centralized Hierarchy View

Virtual AP Controller

Up to 20 VigorAPs

  • Auto-Discovery
  • Auto-Provisioning
  • Monitoring
  • Centralized View
  • Alarm
  • Reboot VigorAP Remotely
  • Wi-Fi Client Load Balancing

Device Management

View and Configure VigorAPs

  • Device List
  • Mesh Status
  • Optimize All Mesh Links
  • AP Adoption
  • AP Discovery

Switch Management Solution

SWM

Virtual Switch Controller
Up to 5 VigorSwitches

Device Management

Display VigorSwitch name, MAC address, IP address, Firmware Version, Model, Online Status, System Uptime, Port in Use, Clients, and Last Process Status.

Scan the network to add new VigorSwitches.

Port Profile

Create profiles that include general settings, VLAN, GVRP, Multicast STP, and QoS settings, which can be applied to the managed switch.

Maintenance

Perform maintenance tasks for selected VigorSwitch.

Tasks include Configuration backup and restore, Remote Reboot and Factory Reset of the selected switch.

Software Management

VigorACS 3

  • Zero Touch Deployment & Provisioning
  • Auto VPN
  • Interface Quality & SLA
  • VoIP Optimisation & Monitoring
  • Application Visibility
  • Application Based SD-WAN Policy
  • Customized Hotspot Page with Multilingual
  • Hotspot Clients Analytics
  • ACS Server Load Balancing / Failover

In-the-Box

Vigor C510 Series

2 x Cellular Antennas

2 x Wi-Fi Antennas
(ax model)

RJ-45 Cable
(Ethernet)

Power Adaptor

Quick Start Guide

Note: The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Models

ModelVigor C510Vigor C510ax
Product
Gigabit WAN11
Selectable Gigabit WAN/LAN11
5G/4G LTE2 x nano SIM slots
(SIM slot 2 for Failover)
2 x nano SIM slots
(SIM slot 2 for Failover)
Wireless WAN
2
Gigabit LAN33
VPN Tunnels1616
Wireless LAN
WiFi 6, AX3000
Wi-Fi Antenna
2.8 dBi for 5GHz
2.1 dBi for 2.4GHz
VoIP (2xFXS)

Vigor C510

Vigor C510
  • Gigabit WAN: 1
  • Selectable Gigabit WAN/LAN: 1
  • 5G/4G LTE:
    • 2 x nano SIM slots
      (SIM slot 2 for Failover)
  • Wireless WAN: n/a
  • Gigabit LAN: 3
  • VPN Tunnels: 16
  • Wireless LAN: n/a
  • Wi-Fi Antenna: n/a
  • VoIP (2xFXS): n/a

Vigor C510ax

Vigor C510ax
  • Gigabit WAN: 1
  • Selectable Gigabit WAN/LAN: 1
  • 5G/4G LTE:
    • 2 x nano SIM slots
      (SIM slot 2 for Failover)
  • Wireless WAN: 2
  • Gigabit LAN: 3
  • VPN Tunnels: 16
  • Wireless LAN: WiFi 6, AX3000
  • Wi-Fi Antenna:
    2.8 dBi for 5GHz
    2.1 dBi for 2.4GHz
  • VoIP (2xFXS): n/a

Specifications

Interface (gDisplayOff)

Interface
Fixed WAN Port1 x Gigabit Ethernet
LAN/WAN Switchable Port1 x Gigabit Ethernet
Fixed LAN Port3 x Gigabit Ethernet
SIM Slot2 x nano SIM slots (SIM slot 2 for Failover)
4G/5G Antenna2 x External Dipole
2 x Internal PIFA
Peak Gain: 4 dBi
Wi-Fi Antenna
(ax model)
2 x External Dipole
1 x Internal PIFA
2.8 dBi gain for 5GHz
2.1 dBi gain for 2.4GHz
2.4G WLAN
(ax model)
802.11ax 2×2 MIMO
574Mbps max link rate
5G WLAN
(ax model)
802.11ax 3×3 MU-MIMO
2402Mbps max link rate

[DISPLAY OFF] —– MOBILE VIEW

Interface
Fixed WAN Port:
1 x Gigabit Ethernet
LAN/WAN Switchable Port:
1 x Gigabit Ethernet
Fixed LAN Port:
3 x Gigabit Ethernet
SIM Slot:
2 x nano SIM slots
(SIM slot 2 for Failover)
4G/5G Antenna:
2 x External Dipole
2 x Internal PIFA
Peak Gain: 4 dBi
Wi-Fi Antenna (ax model):
2 x External Dipole
1 x Internal PIFA
2.8 dBi gain for 5GHz
2.1 dBi gain for 2.4GHz
2.4G WLAN (ax model):
802.11ax 2×2 MIMO
574Mbps max link rate
5G WLAN (ax model):
802.11ax 3×3 MU-MIMO
2402Mbps max link rate

Performance (gDisplayOff)

Performance
NAT Session50K
NAT Throughput940 Mbps

[DISPLAY OFF] —– MOBILE VIEW

Performance
NAT Session:
50K
NAT Throughput:
940 Mbps

5G (gDisplayOff)

5G
5G Bandn1, n20, n28, n3, n38, n40, n7, n77, n78, n8
5G Antenna Peak Gain4 dBi
5G NSA Max. Rx Link Rate**3400 Mbps
5G NSA Max. Tx Link Rate**550 Mbps
5G SA Max. Rx Link Rate**2400 Mbps
5G SA Max. Tx Link Rate**900 Mbps
**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

[DISPLAY OFF] —– MOBILE VIEW

5G
5G Band :
n1, n20, n28, n3, n38, n40, n7,
n77, n78, n8
5G Antenna Peak Gain:
4 dBi
5G NSA Max. Rx Link Rate**:
3400 Mbps
5G NSA Max. Tx Link Rate**:
550 Mbps
5G SA Max. Rx Link Rate**:
2400 Mbps
5G SA Max. Tx Link Rate**:
900 Mbps

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

4G LTE (gDisplayOff)

4G
LTE CategoryCAT.19
Max. Rx Link Rate1600 Mbps
Max. Tx Link Rate200 Mbps
FDD Band1 (2100MHz), 20 (800MHz), 28 (700MHz), 3 (1800MHz), 5 (850MHz), 7 (2600MHz), 8 (900MHz)
TDD Band38 (2600MHz), 40 (2300MHz)
WCDMA (3G) Band1, 8

[DISPLAY OFF] —– MOBILE VIEW

4G
LTE Category :
CAT.19
Max. Rx Link Rate:
1600 Mbps
Max. Tx Link Rate:
200 Mbps
FDD Band :
1 (2100MHz), 20 (800MHz),
28 (700MHz), 3 (1800MHz),
5 (850MHz), 7 (2600MHz),
8 (900MHz)
TDD Band :
38 (2600MHz), 40 (2300MHz)
WCDMA (3G) Band :
1, 8

Internet Connection (gDisplayOff)

Internet Connection
IPv4PPPoE, DHCP, Static IP
IPv6PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
WAN Failover
Connection DetectionARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

[DISPLAY OFF] —– MOBILE VIEW

Internet Connection
IPv4:
PPPoE, DHCP, Static IP
IPv6:
PPP, DHCPv6, Static IPv6, TSPC,
6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN
Tagging
WAN Failover
Connection Detection:
ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

LAN Management (gDisplayOff)

LAN Management
VLAN802.1q Tag-based, Port-based
Max. Number of VLAN8
Number of LAN Subnet4
DHCP ServerMultiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
Wired 802.1x Authentication
Port Mirroringvia future firmware upgrade
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal (Profile No.)2
Hotspot AuthenticationClick-Through, External Portal Server

[DISPLAY OFF] —– MOBILE VIEW

LAN Management
VLAN:
802.1q Tag-based, Port-based
Max. Number of VLAN:
8
Number of LAN Subnet:
4
DHCP Server:
Multiple IP Subnet,
Custom DHCP Options,
Bind-IP-to-MAC
Wired 802.1x
Authentication
Port Mirroring:
via future firmware upgrade
Local DNS Server
Conditional DNS
Forwarding
Hotspot Web Portal
(Profile No.)
2
Hotspot Authentication:
Click-Through
External Portal Server

Wireless LAN (Lax-5G model) (gDisplayOff)

Wireless LAN (ax model)
2.4G WLAN802.11ax 2×2 MIMO
5G WLAN802.11ax 3×3 MU-MIMO
WiFi Antennas2 x External Dipole
1 x Internal PIFA
2.4 GHz Gain2.1 dBi
5 GHz Gain2.8 dBi
2.4 GHz Max. Link Rate574 Mbps
5 GHz Max. Link Rate2402 Mbps
Max. Number of SSIDs (per band)8 (4)
Security ModeOWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3, WPA3/WPA2
AuthenticationPre-Shared Key
WiFi 6
OFDMA
RoamingAssisted Roaming
WPSWPS Button, PIN Code
WDSRepeater
Access ControlAccess List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering
WMM
Mesh (5GHz only)Root (See Mesh compatibility chart)

[DISPLAY OFF] —– MOBILE VIEW

2.4GHz Gain:
2.1 dBi

Wireless LAN (ax model)
2.4GHz WLAN:
802.11ax 2×2 MIMO
5GHz WLAN:
802.11ax 3×3 MU-MIMO
WiFi Antennas:
2 x External Dipole
1 x Internal PIFA
5GHz Gain:
2.8 dBi
2.4GHz Max. Link Rate:
574 Mbps
5GHz Max. Link Rate:
2402 Mbps
Max. Number of
SSIDs (per band):
8 (4)
Security Mode:
OWE, WEP, WPA, WPA2,
Mixed (WPA+WPA2),
WPA3, WPA3/WPA2
Authentication:
Pre-Shared Key
WiFi 6 (ax model)
OFDMA
WPS:
WPS Button,
PIN Code
WDS:
Repeater
Access Control:
Access List,
Client Isolation,
Hide SSID,
WLAN Scheduling
AirTime Fairness
Band Steering
WMM
Mesh (5GHz only):
Root
(the Mesh compatibility chart)
learn more

Networking (gDisplayOff)

Networking
RoutingIPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Route, OSPF (V2/V3), RIP v1/v2, BGP
Policy-based RoutingProtocol, IP Address, Port
DNS Security (DNSSEC)
IGMPIGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server

[DISPLAY OFF] —– MOBILE VIEW

Networking
Routing:
IPv4 Static Routing,
IPv6 Static Routing,
Policy Route,
Inter-VLAN Routing,
OSPF (V2/V3)
RIP v1/v2, BGP
Policy-based Routing:
Protocol, IP Address, Port
DNS Security
(DNSSEC)
IGMP:
IGMP v2/v3, IGMP Proxy,
IGMP Snooping &
Fast Leave
Local RADIUS server

Bandwidth Management (gDisplayOff)

Bandwidth Management
Traffic Shaping Policy
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)IP Address, Port, Application
APP Qos
Default Policy
VoIP Prioritization

[DISPLAY OFF] —– MOBILE VIEW

Bandwidth Management
Traffic Shaping
Policy
IP-based Bandwidth
Limit
IP-based Session
Limit
QoS (Quality of Service):
IP Address, Port,
Application
APP QoS
Default Policy
VoIP Prioritization

VPN (gDisplayOff)

VPN
LAN-to-LAN
Teleworker-to-LAN
EasyVPN
ProtocolsIPsec, IKEv1/IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN, WireGuard
Max. VPN Tunnels16
IPsec VPN Throughput (AES 256 bits) (single-directional)370 Mbps
WireGuard VPN Throughput (single-directional)50 Mbps
User AuthenticationLocal, RADIUS, TACACS+, mOTP, TOTP
IKE AuthenticationPre-Shared Key, X.509
IPsec AuthenticationSHA-1, SHA-256
EncryptionDES, 3DES, AES
Single-Armed VPN
NAT-Traversal (NAT-T)
VPN Connection Status
Backup & Restore

[DISPLAY OFF] —– MOBILE VIEW

VPN
LAN-to-LAN
Teleworker-to-LAN
EasyVPN
Protocols:
IPsec, IKEv1/IKEv2,
IKEv2-EAP, IPsec-XAuth,
OpenVPN, WireGuard
Max. VPN Tunnels:
16
IPsec VPN Throughput
(AES 256 bits) (single-directional):
370 Mbps
Wireguard VPN Throughput
(single-directional):
50 Mbps
User Authentication:
Local, RADIUS, TACACS+,
mOTP, TOTP
IKE Authentication:
Pre-Shared Key, X.509
IPsec Authentication:
SHA-1, SHA-256
Encryption:
DES, 3DES, AES
Single-Armed VPN
NAT-Traversal (NAT-T)
VPN Connection
Status
Backup & Restore

Security (gDisplayOff)

Security
URL/IP Reputation
Firewall FilterIP, Content, Traffic
Defense SetupARP Spoofing, IP Spoofing
MAC Filtering Profile
IPv6 Address Security

[DISPLAY OFF] —– MOBILE VIEW

Security
URL/IP Reputation
Firewall Filter:
IP, Content,
Traffic
Defense Setup:
ARP Spoofing,
IP Spoofing
MAC Filtering Profile
IPv6 Address Security

IAM (gDisplayOff)

IAM
Users & Groups
Access Policies
Group Policies
Conditional Access Policy
Resources
Account Status
Backup and Restore

[DISPLAY OFF] —– MOBILE VIEW

IAM
Users & Groups
Access Policies
Group Policies
Conditional Access
Policy
Resources
Account Status
Backup and Restore

Monitoring (gDisplayOff)

Monitoring
Clients List
Log Center
Wireless Information
WAN
ARP Table
Route Table
DHCP Table
IPv6 TSPC Status
IPv6 Neighbor Table
LLDP Neighbors
information
DNS Cache Table
PPPoE Pass-Through
Session Table

[DISPLAY OFF] —– MOBILE VIEW

Monitoring
Clients List
Log Center
Wireless Information
WAN
ARP Table
Route Table
DHCP Table
IPv6 TSPC Status
IPv6 Neighbor Table
LLDP Neighbors
information
DNS Cache Table
PPPoE Pass-Through
Session Table

Management (gDisplayOff)

Management
Local ServiceHTTP, HTTPS, Telnet, SSHv2, FTP, TR-069
Port Knocking for Local Service
Config Backup/Restore
Firmware UpgradeWUI, TFTP, TR-069
Role-based Privilege
Access ControlAccess List, Brute Force Protection
Notification AlertSMS, E-mail
SNMPv1, v2c, v3
Syslog
Virtual AP Controller (Device up to)20
Mesh (Number of manageable APs)7
Virtual Switch Controller5
VigorACS Management (Since f/w)v5.3.1

[DISPLAY OFF] —– MOBILE VIEW

Management
Local Service:
HTTP, HTTPS,
Telnet, SSH v2,
FTP, TR-069
Port Knocking
for Local Service
Config Backup/
Restore
Config File Compatibility:
Vigor2865 LTE
Firmware Upgrade:
TFTP, HTTP, TR-069
2-Level
Administration
Privilege
Access Control:
Access List,
Brute Force Protection
Notification Alert:
SMS, E-mail
Netflow:
IPFIX, v5, v9
SNMP:
v1, v2c, v3
Syslog
VPN Managment:
8
AP Managment (APM):
20
Mesh
(Number of manageable APs):
7
Switch Management (SWM):
10
VigorACS Management
(Since f/w):
v4.4.5

Physical (gDisplayOff)

Physical
Power SupplyVigor C510: DC 12V @ 0.7A
Vigor C510ax: DC 12V @ 1.4A
Max. Power ConsumptionVigor C510: 8.1 watts
Vigor C510ax: 16 watts
Dimensions207mm x 131mm x 42mm
Operating Temperature0 to 45°C
Storage Temperature-25 to 70°C
Operating Humidity (non-condensing)10 to 90%

[DISPLAY OFF] —– MOBILE VIEW

Physical
Vigor C510
Power Supply: DC 12V @ 0.7A
Max. Power Consumption: 8.1 watts
Vigor C510ax
Power Supply: DC 12V @ 1.4A
Max. Power Consumption: 16 watts
Dimension:
207mm x 131mm x 42mm
Operating Temperature:
0 to 45°C
Storage Temperature:
-25 to 70°C
Operating Humidity
(non-condensing):
10 to 90%

Note :

  • All specifications are subject to change without notice.
  • The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.