DrayTek Vigor2865L-5G Series 5G VDSL2 Router

DrayTek Vigor2865L-5G Series Overview

Vigor2865L-5G Series 5G/4G LTE Business VPN Router

5G/4G LTE modem with dual nano SIM slots (SIM slot 2 for Failover) for SA and NSA 5G WAN
Supports 5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78; great coverage in Australia and New Zealand
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
Multi-WAN with 1 x VDSL2 35b modem, 1 x configurable GbE WAN/LAN port, 1 x USB port, 2 x 5G/4G LTE nano SIM slots, and 2 x Wi-Fi WANs for Lax-5G model
1 x xDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
32 x VPN tunnels (including 16 x OpenVPN/ SSL-VPN tunnels) with comprehensive secure protocols
Fast VPN throughput, VPN Load Balancing and backup for site-to-site applications

Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.3 Gbps (Multi-WAN) Firewall speed
Integrated IEEE 802.11ax (WiFi 6, AX3000) wireless Access Point; dual band; up to 2402 Mbps throughput (Lax-5G model)
16 x VLANs for secure and efficient workgroup management
IPv6 & IPv4
Up to 1022 IP addresses and 8 IP subnets
High Availability mode
Object-based SPI Firewall and CSM (Content Security Management) for network security
Supports VigorACS 3 Central Management Software for remote management
SD-WAN capability when used with VigorACS 3
Central VPN Management for up to 8 remote Vigor routers Learn more
Central AP Management for up to 20 Vigor Access Points Learn more
Central Switch Management for up to 10 VigorSwitches Learn more
2 years back to base warranty

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

The Vigor2865L-5G series combines 4G LTE and 5G to provide excellent mobile coverage in Australia and New Zealand:

5G/LTE/WCDMA Specifications

5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78
5G NR Sub-6 NSA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
LTE FDD Band: B1, 3, 5, 7, 8, 20, 28
LTE TDD Band: B38, 40
LTE Category: Cat19 (DL) / Cat18 (UL)
WCDMA (3G) Band: B1, 8
WCDMA Max. Data Rate: 42Mbps (DL) / 5.76Mbps (UL)

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

5G & WiFi 6 for Next-Gen Connectivity

The Vigor2865L-5G series routers offer most of the features of the Vigor2865 series, with the addition of an integrated 5G/4G LTE mobile broadband Nano SIM module, supporting speeds up to 10 times faster than 4G. This enhanced LTE capability makes the Vigor2865L-5G series routers ideal for applications such as:

Remote location with no fixed line or NBN/UFB coverage
Quick setup for new branches waiting for xDSL/Ethernet WAN (e.g. NBN deployment)

Load Balancing or Failover backup for an existing primary internet connection such as Cable/NBN/ UFB Ethernet broadband
Temporary installations such as disaster recovery, emergency, exhibitions and sporting events where internet access is required for a short period
Providing internet access on public transport such as coaches, buses, trains and freighters

The Vigor2865L-5G series includes one VDSL2 35b modem, one Gigabit Ethernet WAN/LAN configurable port, five Gigabit Ethernet LAN ports, and a dual Nano SIM card slot for 5G/4G LTE broadband connectivity, allowing for a second Nano SIM to be installed for failover. The WAN ports support NBN technologies including FTTP/N/B/C, HFC, Satellite and Fixed Wireless. All WAN interfaces, including the 3G/4G USB WAN interfaces, can be configured to Load Balance mode or Failover mode.

5G

support SA and NSA mode

AX3000

(Lax Model)

Delivers link rates up to 3 Gbps

32 x VPN tunnels

IPsec VPN throughput up to 300 Mbps

60k NAT sessions

Recommended for a network of up to 50+ devices

Interface

2 x Wireless Antennas (Lax model)
1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
WLAN/WAN Switchable Port: 1 x GbE RJ-45 (Lax model)
Fixed LAN Port: 5x GbE RJ-45

Fixed WAN Port: 1x RJ-11 for 35b/VDSL2/ADSL2+
4 x LTE Antennas
2 x Nano-Sized SIM Slots (SIM slot 2 for Failover)

2 x Wireless Antenna (ax model)
1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
WLAN/WAN Switchable Port: 1x GbE RJ-45
Fixed LAN Port: 5x GbE RJ-45
Fixed WAN Port: 1x RJ-11 for 35b/VDSL2/ADSL2+
4 x LTE Antenna
2 x Nano-Sized SIM Slot

Key Features

Embedded SIM Slot

Provide 4G LTE/5G Internet access to where fixed lines are not available, without the need for a USB dongle.

Bandwidth Management

Prevent devices from hogging all the bandwidth with bandwidth limit policy, session limit policy, and QoS settings.

35b Supervectoring Modem

Integrated VDSL modem, supporting VDSL2 profile 35b supervectoring.

Hotspot Web Portal

Market your business and communicate with guests while offering hospitality WLAN. Learn more

Load Balancing

Maximise throughput and reliability by using multiple Internet connections. Learn more

DrayDDNS

A free DDNS service to allow access to your router using a fixed hostname of your choice. Learn more

VPN (Virtual Private Network)

Build a secure and private tunnel from the LAN of Vigor2865L-5G series to the remote offices and teleworkers over the Internet. Learn more

Central AP Management

Use the Vigor2865L-5G Series router as a wireless controller to maintain and monitor VigorAPs. Learn more

SSL VPN

The VPN that works through firewalls, providing secure remote access to any network environment. Learn more

WiFi 6 (Lax model only)

Features OFDMA and MU-MIMO technology to improve Wi-Fi efficiency and deliver higher wireless speed.

VPN Matcher

Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more.

Mesh (Lax model only)

Easily link to other VigorAPs to expand the wireless network. Learn more.

Firewall & Content Filter

Filter webpages by URL keywords or web categories to block access to insecure or inappropriate content.

Central Switch Management

Easily set up VLANs from the router and get a centralised hierarchy view of the switches. Learn more

VoIP Friendly

Vigor2865L-5G Series can do port forwarding, and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide

[DISPLAY OFF] —– MOBILE VIEW

Embedded SIM Slot

Provide 4G LTE/5G Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.

Bandwidth Management

Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

35b Supervectoring Modem

Integrated VDSL modem, supporting VDSL2 profile 35b supervectoring.

Hotspot Web Portal

Market your business and communicate with the guests while offering hospitality WLAN. Learn more

Load Balancing

Maximize throughput and reliability by using multiple Internet connections. Learn more

DrayDDNS

The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more

VPN (Virtual Private Network)

Build a secure and private tunnel from the LAN of Vigor2865L-5G series to the remote offices and teleworkers over the Internet. Learn more

Central AP Management

Use the Vigor2865L-5G Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more

SSL VPN

The VPN works through firewalls providing secure remote access to any network environment. Learn more

WiFi 6 (ax model only)

Feature OFDMA and MU-MIMO technology to improve WiFi efficiency and deliver higher wireless speed.

VPN Matcher

Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more.

Mesh (ax model only)

Easily link to other VigorAP to expand the wireless network. Learn more.

Firewall & Content Filter

Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.

Central Switch Management

Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more

VoIP Friendly

Vigor2865L-5G Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide

Performance Comparison: Vigor2865 vs. Vigor2862

NAT throughput (1.6 times faster)

800 Mbps

Vigor2865 Series

500 Mbps

Vigor2862 Series

IPsec throughput (3.5 times faster)

300 Mbps

Vigor2865 Series

85 Mbps

Vigor2862 Series

SSL-VPN throughput (2.9 times faster)

130 Mbps

Vigor2865 Series

45 Mbps

Vigor2862 Series

5G Router with High Speed Mobile Connectivity

The integrated 5G/LTE modem with Category 19 supports carrier aggregation, providing high-speed mobile broadband connectivity for Internet access and VPN.
The dual SIM slot accepts two SIM cards from different mobile network providers. This ensures that the router can seamlessly switch to the secondary SIM and cellular network if the primary mobile connectivity is broken.
The four LTE antennas with 1-metre extension cables make it easy to place the router at locations that ensure the best possible signal coverage.

* Backwards compatible to 4G LTE

Multi-WAN 5G Gigabit Security Router with Load Balance

WAN Load Balancing

The Vigor2865L-5G Series supports high throughput from Gigabit Internet connectivity via Fibre to the Premises (FTTP) and 5G LTE mobile connections. All active WANs automatically join the WAN Load Balance pool to optimise bandwidth utilisation

Seamless Failover

If an Internet connection is lost, the router automatically switches to surviving WAN connections, seamlessly transferring traffic. This ensures reliable Internet connectivity and avoids the costs associated with network downtime.

Policy-Based Routing

Routing policies can be used to designate specific WAN interfaces for traffic from or to certain IP ranges, and for applications such as VoIP, thus enhancing network efficiency and performance.

Ideal VPN Router for SMB

Ideal VPN Router for SMB

Up to 800 Mbps hardware-accelerated IPsec VPN performance
Up to 32 active VPN tunnels concurrently

All common VPN standards are supported

WireGuard VPN (from firmware v4.4.3)
IKEv1/IKEv2 EAP/ SSL VPN/ L2TPoverIPsec/ PPTP/OpenVPN

Advanced Authentication for Teleworkers

Two-factor authentication for teleworker VPN connections
Authentication can be integrated with Active Directory (LDAP), RADIUS, or TACACS+ servers in the network as required
Network administrators can be notified via SMS/Email when a teleworker VPN is online, preventing VPN credential loss or misuse by others

Hotspot Web Portal

Market your business while offering free Wi-Fi

Wi-Fi Marketing

Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.

Grow Customer Mailing List

Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types

Various login methods are supported to meet business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.

3rd-Party Service Compliant

Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.

Data Quota Management

Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.

Comprehensive Firewall

Object-based Firewall

IP addresses and services can be grouped into objects before being applied to firewall rules. This feature simplifies the organisation of network activities.

Blocking Apps & DoH servers

APP Enforcement (APPE) allows the blocking of applications (IM, P2P, streaming, tunnelling, etc.) on a network quickly and easily. For example, by blocking DoH servers in browsers, LAN clients can only use standard DNS queries and filtering.

Manage Traffic Beyond LAN to WAN

The DrayTek Firewall manages not only traffic between LAN and WAN, but also between LAN subnets, remote VPN subnets, and from the WAN to the Vigor router itself. Internet IPs can be predefined for accessing the Vigor routers’ services, enhancing security and control.

Web Content Filtering with DNS Filter

The Web Content Filtering Service uses cloud-based technology to provide comprehensive and up-to-date protection for LAN clients for online activities, with 82 categories in total, 10 of which are security-focused.

Edge Router for SD-WAN

Latency, loss, and jitter measure the quality of every WAN/VPN interface. Based on these metrics, the Vigor2865L-5G can dynamically self-adjust to the best-quality interface for VoIP and business-critical applications.

* SD-WAN requires cooperation with VigorACS 3

Application Visibility and SD-WAN Policy

Application Visibility enables the network administrator to monitor data usage sorted by client, WAN interface, application, and time.

With data usage details, SD-WAN policies can be created to route business-critical applications through the best-quality interfaces to improve the user experience.

APP QoS

Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming. It also allow flexible bandwidth allocation to suit business requirements.

VoIP First

VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.

Improve Experience for Business-Critical Apps

Select your business critical apps, and easily put them into QoS classes.

Flexible Bandwidth Allocation

Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Learn More

All-in-One Management

Mesh Management

Mesh (Vigor2865Lax-5G only)
Up to 7 APs

DrayTek Wireless app-support
Discovery
Auto-Provisioning
Monitoring
Centralised Hierarchy View

Vigor Router SWM

Vigor Router SWM
Up to 10 switches

Auto-Discovery
Auto-Provisioning
Monitoring
Centralised Hierarchy View
Reboot PoE Devices Remotely
Quick VLAN Configuration

Vigor Router APM

Vigor Router APM
Up to 20 APs

Auto-Discovery
Auto-Provisioning
Monitoring
Centralised View
Alarm
Reboot VigorAP Remotely
Wi-Fi Client Load Balancing

[DISPLAY OFF] —– MOBILE VIEW

Mesh Management

Mesh (Vigor2927Lax-5G only)
Up to 7 APs

DrayTek Wireless app-support
Discovery
Auto-Provisioning
Monitoring
Centralized Hierarchy View

Vigor Router SWM

Vigor Router SWM
Up to 10 switches

Auto-Discovery
Auto-Provisioning
Monitoring
Centralized Hierarchy View
Reboot PoE Devices Remotely
Quick VLAN Configuration

Vigor Router APM

Vigor Router APM
Up to 20 APs

Auto-Discovery
Auto-Provisioning
Monitoring
Centralized View
Alarm
Reboot VigorAP Remotely
Wi-Fi Client Load Balancing

Software Management

VigorACS 3

Zero Touch Deployment & Provisioning
Auto VPN
Interface Quality & SLA
VoIP Optimisation & Monitoring
Application Visibility
Application Based SD-WAN Policy
Customized Hotspot Page with Multilingual
Hotspot Clients Analytics
ACS Server Load Balancing / Failover

Vigor2865Lax-5G Review

Click here to read the full review

In-the-Box

Vigor2865L-5G series

5G Antenna + Socket

ax Antenna x 2
(Vigor2865Lax-5G)

RJ-45 Cable
(Ethernet)

RJ-11 to RJ-11 Cable (Annex A)

Power Adaptor

Quick Start Guide

Note: The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Models

Model	Vigor2865L-5G	Vigor2865Lax-5G
Product
VDSL2 35b or ADSL2/2+
Selectable Gigabit WAN/LAN	1	1
5G/4G LTE/3G	2 x nano SIM slots (SIM slot 2 for Failover) 1 x USB 2.0	2 x nano SIM slots (SIM slot 2 for Failover) 1 x USB 2.0
Wireless WAN		2
Gigabit LAN	5	5
VPN Tunnels	32	32
Wireless LAN		WiFi 6, AX3000
Wi-Fi Antenna		3.5 dBi for 5GHz 2.3 dBi for 2.4GHz
VoIP (2xFXS)

Vigor2865L-5G

Vigor2865L-5G

Features VDSL2 35b or ADSL2/2+: 1 Selectable Gigabit WAN/LAN: 1 5G/4G LTE/3G: 2 x nano SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 Wireless WAN: n/a Gigabit LAN: 5 VPN Tunnels: 32 Wireless LAN: n/a Wi-Fi Antenna: n/a VoIP (2xFXS): n/a

Vigor2865Lax-5G

Vigor2865Lax-5G

Features VDSL2 35b or ADSL2/2+: 1 Selectable Gigabit WAN/LAN: 1 5G/4G LTE/3G: 2 x nano SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 Wireless WAN: n/a Gigabit LAN: 5 VPN Tunnels: 32 Wireless LAN: WiFi 6, AX3000 Wi-Fi Antenna: 3 dBi for 5GHz 2.5 dBi for 2.4GHz VoIP (2xFXS): n/a

Specifications

Interface (gDisplayOff)

Interface
Fixed WAN Port	1 x RJ-11 for VDSL2 35b or ADSL2/2+
LAN/WAN Switchable Port	1 x Gigabit Ethernet
Fixed LAN Port	5 x Gigabit Ethernet
SIM Slot	2 x nano SIM slots (SIM slot 2 for Failover)
USB Port	1 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
LTE Antenna	4 x External Dipole Peak Gain: 4.37dBi
Wi-Fi Antenna	2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3dBi for 2.4GHz (Lax model)
2.4G WLAN	802.11x 2×2 MIMO 574Mbps (Lax model)
5G WLAN	802.11ax 2×2 MU-MIMO 2402Mbps (Lax model)

[DISPLAY OFF] —– MOBILE VIEW

Interface
Fixed WAN Port: 1 x RJ-11 for VDSL2 35b or ADSL2/2+
LAN/WAN Switchable Port: 1 x Gigabit Ethernet
Fixed LAN Port: 5 x Gigabit Ethernet
SIM Slot: 2 x nano SIM slots (SIM slot 2 for Failover)
USB Port: 1 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
LTE Antenna: 2x External Dipole Peak Gain: 4.37dBi
Wi-Fi Antenna: 2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3dBi for 2.4GHz (Lax model)
2.4G WLAN: 802.11ax 2×2 MIMO 574Mbps (Lax model)
5G WLAN: 802.11ax 2×2 MU-MIMO 2402Mbps (Lax model)

Performance (gDisplayOff)

Performance
NAT Session	60K
NAT Throughput	700 Mbps
NAT Throughput w/ Hardware Acceleration: Single WAN	940 Mbps
NAT Throughput w/ Hardware Acceleration: Dual WAN	1800 Mbps

[DISPLAY OFF] —– MOBILE VIEW

Performance
NAT Session: 60K
NAT Throughput: 700 Mbps
NAT Throughput w/ Hardware Acceleration: Single WAN: 940 Mbps Dual WAN: 1800 Mbps

5G (gDisplayOff)

5G
5G Band	n1, n20, n28, n3, n38, n40, n5, n7, n77, n78, n8
5G Antenna Peak Gain	4.37 dBi
5G NSA Max. Rx Link Rate**	3400 Mbps
5G NSA Max. Tx Link Rate**	550 Mbps
5G SA Max. Rx Link Rate**	2400 Mbps
5G SA Max. Tx Link Rate**	900 Mbps
**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

[DISPLAY OFF] —– MOBILE VIEW

5G
5G Band : n1, n20, n28, n3, n38, n40, n5, n7, n77, n78, n8
5G Antenna Peak Gain: 4.37 dBi
5G NSA Max. Rx Link Rate**: 3400 Mbps
5G NSA Max. Tx Link Rate**: 550 Mbps
5G SA Max. Rx Link Rate**: 2400 Mbps
5G SA Max. Tx Link Rate**: 900 Mbps

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

4G LTE (gDisplayOff)

4G
LTE Category	CAT.19
LTE Antenna (External Dipole)	4
Max. Rx Link Rate	1600 Mbps
Max. Tx Link Rate	200 Mbps
FDD Band	1 (2100MHz), 20 (800MHz), 28 (700MHz), 3 (1800MHz), 5 (850MHz), 7 (2600MHz), 8 (900MHz)
TDD Band	38 (2600MHz), 40 (2300MHz)
WCDMA (3G) Band	1, 8
SMS Gateway	Learn More

[DISPLAY OFF] —– MOBILE VIEW

4G
LTE Category : CAT.19
LTE Antenna (External Dipole) : 4
Max. Rx Link Rate: 1600 Mbps
Max. Tx Link Rate: 200 Mbps
FDD Band : 1 (2100MHz), 20 (800MHz), 28 (700MHz), 3 (1800MHz), 5 (850MHz), 7 (2600MHz), 8 (900MHz)
TDD Band : 38 (2600MHz), 40 (2300MHz)
WCDMA (3G) Band : 1, 8
SMS Gateway : Learn More

Internet Connection (gDisplayOff)

Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
LTE WAN Bridge
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
4G LTE/3G WAN with USB modem
WAN Failover
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Strict ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

[DISPLAY OFF] —– MOBILE VIEW

Internet Connection
IPv4: PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
LTE WAN Bridge
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
4G LTE/3G WAN with USB modem
WAN Failover
Load Balancing: IP-based, Session-based
WAN Active on Demand: Link Failure, Traffic Threshold
Connection Detection: ARP, Strict ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

LAN Management (gDisplayOff)

LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DMZ Port	1
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal (Profile No.)	4
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

[DISPLAY OFF] —– MOBILE VIEW

LAN Management
VLAN: 802.1q Tag-based, Port-based
Max. Number of VLAN: 16
Number of LAN Subnet: 8
DMZ Port: 1
DHCP Server: Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal (Profile No.)	4
Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking (gDisplayOff)

Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Route, RIP v1/v2, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing	(Requires external storage)

[DISPLAY OFF] —– MOBILE VIEW

Networking
Routing: IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Routing, RIP v1/v2, BGP
Policy-based Routing: Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP: IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing: (Requires external storage)

VPN (gDisplayOff)

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN, Wireguard
Max. VPN Tunnels	32
Max. OpenVPN + SSL VPN Tunnels	16
IPsec VPN Throughput (AES 256 bits) (single-directional)	300 Mbps
SSL VPN Throughput (single-directional)	130 Mbps
Wireguard VPN Throughput (single-directional)	75 Mbps
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Failover, Load Balancing
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher

[DISPLAY OFF] —– MOBILE VIEW

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols: PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN, Wireguard
Max. VPN Tunnels: 32
Max. OpenVPN + SSL VPN Tunnels: 16
IPsec VPN Throughput (AES 256 bits) (single-directional): 300 Mbps
SSL VPN Throughput (single-directional): 130 Mbps
Wireguard VPN Throughput (single-directional): 75 Mbps
User Authentication: Local, RADIUS, LDAP TACACS+, mOTP
IKE Authentication: Pre-Shared Key, X.509
IPsec Authentication: SHA-1, SHA-256
Encryption: MPPE, DES, 3DES, AES
VPN Trunk (Redundancy): Failover, Load Balancing
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher

Firewall & Content Filtering (gDisplayOff)

Firewall & Content Filtering
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category (subscription required)
DoS Attack Defence
Spoofing Defense

[DISPLAY OFF] —– MOBILE VIEW

Firewall & Content Filtering
IP-based Firewall Policy
Content Filtering: Application, URL, DNS Keyword, Web Features, Web Category (subscription required)
DoS Attack Defence
Spoofing Defense

NAT (gDisplayOff)

NAT
NAT	Port Redirection, Open Ports, Port Triggering, Port Knocking Fast NAT, DMZ Host, UPnP, Server Load Balance
ALG (Application Layer Gateway)	FTP, H.323, RTSP, SIP
VPN Pass-Through	PPTP, L2TP, IPsec

[DISPLAY OFF] —– MOBILE VIEW

NAT
NAT: Port Redirection, Open Ports, Port Triggering, Port Knocking Fast NAT, DMZ Host, UPnP, Server Load Balance
ALG: (Application Layer Gateway) FTP, H.323, RTSP, SIP
VPN Pass-Through: PPTP, L2TP, IPsec

Bandwidth Management (gDisplayOff)

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
APP Qos

[DISPLAY OFF] —– MOBILE VIEW

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service): TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
APP QoS

Wireless LAN (Lax-5G model) (gDisplayOff)

Wireless LAN (Lax-5G model)
2.4G WLAN	802.11ax 2×2 MIMO
5G WLAN	802.11ax 2×2 MU-MIMO
Antennas	2
Antenna Type	External Dipole
2.4 GHz Gain	2.3 dBi
5 GHz Gain	3.5 dBi
2.4 GHz Max. Link Rate	574 Mbps
5 GHz Max. Link Rate	2402 Mbps
Max. Number of SSIDs per band	4
Security Mode	OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1x
WiFi 6
OFDMA
WPS	PIN, PBC
WDS	Repeater (5GHz only)
Access Control	Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering
WMM
Mesh (Lax model only)	Root (See Mesh compatibility chart)

[DISPLAY OFF] —– MOBILE VIEW

Wireless LAN (Lax-5G model)
2.4GHz WLAN: 802.11ax 2×2 MIMO
5GHz WLAN: 802.11ax 2×2 MU-MIMO
Antennas: 2
Antenna Type: External Dipole
2.4GHz Gain: 2.3 dBi
5GHz Gain: 3.5 dBi
2.4GHz Max. Link Rate: 574 Mbps
5GHz Max. Link Rate: 2402 Mbps
Max. Number of SSIDs per band: 4
Security Mode: OWE, WEP, WPA, WPA2, Mixed (WPA+WPA2), WPA3
Authentication: Pre-Shared Key, 802.1x
WiFi 6 (ax model)
OFDMA
WPS: PIN, PBC
WDS: Repeater (5GHz only)
Access Control: Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering
WMM
Mesh(Lax model only): Root (the Mesh compatibility chart) learn more

Management (gDisplayOff)

Management
Local Service	HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069
Config Backup/Restore
Config File Compatibility	Vigor2865 LTE
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
Netflow	IPFIX, v5, v9
SNMP	v1, v2c, v3
Syslog
VPN Managment	8
AP Managment (APM)	20
Mesh (Number of manageable APs)	7
Switch Management (SWM)	10
VigorACS Management (Since f/w)	v4.4.5

[DISPLAY OFF] —– MOBILE VIEW

Management
Local Service: HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config Backup/ Restore
Config File Compatibility: Vigor2865 LTE
Firmware Upgrade: TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control: Access List, Brute Force Protection
Notification Alert: SMS, E-mail
Netflow: IPFIX, v5, v9
SNMP: v1, v2c, v3
Syslog
VPN Managment: 8
AP Managment (APM): 20
Mesh (Number of manageable APs): 7
Switch Management (SWM): 10
VigorACS Management (Since f/w): v4.4.5

Physical (gDisplayOff)

Physical
Power Supply	Vigor2865L-5G: DC 12V @ 2.1A Vigor2865Lax-5G: DC 12V @ 2.6A
Max. Power Consumption	Vigor2865L-5G: 25.2 watts Vigor2865Lax-5G: 31.2 watts
Dimensions	241mm x 165mm x 44mm
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%

[DISPLAY OFF] —– MOBILE VIEW

Physical
Vigor2865L-5G Power Supply: DC 12V @ 2.1A Max. Power Consumption: 25.2 watts
Vigor2865Lax-5G Power Supply: DC 12V @ 2.6A Max. Power Consumption: 31.2 watts
Dimension: 241mm x 165mm x 44mm
Operating Temperature: 0 to 45°C
Storage Temperature: -25 to 70°C
Operating Humidity (non-condensing): 10 to 90%

Note :

All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.