Cat.6 4G LTE and G.fast/VDSL2 35b/Ethernet Security Firewall Routers for SMB

Vigor2866Lac
The Vigor2866 LTE series are G.fast/VDSL2 35b/ADSL2 firewall routers with embedded 4G LTE connectivity, making them ideal for SMB where business continuity rely on xDSL or Ethernet Internet connectivity, or branch offices at new locations where xDSL or Ethernet connection is unavailable.
These routers have 1 x RJ-11 WAN port for VDSL2 (including profile VDSL2 35b Supervectoring)/G.fast/ADSL2+, 1 x GbE WAN/LAN switchable port, 2 x embedded SIM slots that support Cat.6 4G LTE (SIM slot 2 for Failover), and 1 x versatile USB port for an additional 4G LTE connection or other applications. These WANs provide robust Load Balancing and Failover functionality.
All models support professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and much more, and can act as controllers to manage VigorAPs and VigorSwitches on the LAN, or can register to VigorACS for cloud-based remote management. The Vigor2866Lac model supports built-in 802.11ac Wave 2 wireless LAN.
The Vigor2866 LTE series router has 2 LTE antennas. A 1 metre extension lead with a magnetic base allows the antennas to be placed in the best position for optimum 3G/4G reception.
LTE/4G Specification
- LTE/4G category 6
- 300 Mbps downstream and 50Mbps upstream
- 4G LTE FDD Band: 1, 3, 5, 7, 8, 20, 28, 32
- 4G LTE TDD Band: 38, 40
- 3G WCDMA Band: 1, 5, 8
The SMS feature allows status and alerts to be sent by the router, or an IT admin can reboot the router remotely. Learn more
For mission critical applications, the Vigor2866 LTE series routers can be used in High Availability mode to provide uninterrupted network connectivity in case the primary router fails.
The 4G LTE feature makes the Vigor2866 LTE series routers ideal solutions for applications such as:
- Remote locations with no fixed line or NBN coverage.
- Quick setup for new branches waiting for NBN connections.
- Load Balancing or Failover backup for an existing primary Internet connection which can be any of xDSL/Ethernet/LTE type.
- Temporary installations such as disaster recovery, emergency, exhibitions, sporting events, etc., where Internet access is required for a short period.
- Provision of Internet access on public transport such as coaches, buses, trains, freighters, ferries, etc.
The Vigor2866 LTE series routers can be rack mounted using a 1RU rack mount bracket on a standard 19” rack or cabinet.


Key Features
Performance Comparison: Vigor2866 vs. Vigor2862
NAT throughput (1.6 times faster)
Vigor2866 Series
Vigor2862 Series
IPsec throughput (3.5 times faster)
Vigor2866 Series
Vigor2862 Series
SSL-VPN throughput (3.3 times faster)
Vigor2866 Series
Vigor2862 Series
Hardware Acceleration
Without sacrificing traffic control features such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph and Data Flow Monitor, Hardware Acceleration enhances performance for:
- NAT & routing connections
- QoS
- IPsec VPN

Hardware NAT & Routing
With Hardware Acceleration and Hardware QoS enabled, the router supports up to 8k NAT and routing connections, and firewall performance reaching 940Mbps on single WAN and 1.8Gbps combined performance on multi-WANs.
Dual WAN (Ethernet + xDSL)
2.3x Faster NAT Performance
with Hardware NAT & Routing
without Hardware NAT & Routing
Single Ethernet WAN
1.2x Faster NAT Performance
with Hardware NAT & Routing
without Hardware NAT & Routing
Hardware QoS
Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

Dual WAN (Ethernet + xDSL)
2.6x Faster QoS Performance
with Hardware QoS
with Software QoS
Single Ethernet WAN
1.3x Faster QoS Performance
with Hardware QoS
with Software QoS
Hardware IPsec
While the Vigor2866 series already has improved IPsec performance over the previous Vigor2862 series, with Hardware Acceleration enabled, IPsec performance can now reach 800 Mbps. The first 16 tunnels are automatically accelerated on a first come first serve basis. If any drops out, a new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.
2.7x Faster IPsec Performance
with Hardware IPsec
with Software IPsec

APP QoS
Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.
VoIP First
VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Hotspot Web Portal
Market your business while offering free Wi-Fi
Wi-Fi Marketing
Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.
Grow Customer Mailing List
Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types
A variety of login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.
3rd-Party Service Compliant
Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.
Data Quota Management
Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.
Assisted Wi-Fi Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

Extend Transmission Range
When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.
Improve Data Rates
When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.
Better User Experience
Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.
No Controller Required
Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.
Management Solution
| All-in-One Management | ||
|---|---|---|
Mesh (ac model) | Central Switch Management | Central AP Management |
|
|
|
| Software Management | |
|---|---|
VigorACS 2 | VigorACS 3 |
|
|
In-the-Box

Vigor2866L/Lac

2 x LTE Antennas + Socket

2 x Wireless Antennas
(Lac model)

RJ-45 Cable
(Ethernet)

RJ-11 to RJ-11 Cable
(Annex A)

Power Adaptor

Quick Start Guide
Note :
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Models
| Model | Vigor2866L | Vigor2866Lac |
|---|---|---|
| Product | ![]() | ![]() |
| VDSL2 35b, G.fast or ADSL2/2+ | ||
| Selectable Gigabit WAN/LAN | 1 | 1 |
| 4G LTE/3G | 2 x SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 | 2 x SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 |
| Wireless WAN | 2 | |
| Gigabit LAN | 5 | 5 |
| VPN Tunnels | 32 | 32 |
| Wireless LAN | WiFi 5, AC1300 | |
| Wi-Fi Antenna | 3.5 dBi for 5GHz 2.3 dBi for 2.4GHz | |
| VoIP (2xFXS) |
Specifications
Interface (gDisplayOff)
| Interface | |
|---|---|
| Fixed WAN Port | 1 x RJ-11 for VDSL2 35b, G.fast or ADSL2/2+ |
| LAN/WAN Switchable Port | 1 x 10/100/1000Base-TX RJ-45 |
| Fixed LAN Port | 5 x 10/100/1000Base-TX RJ-45 |
| SIM Slot | 2 x Standard-sized SIM slots (SIM slot 2 for Failover) |
| USB Port | 1 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
| LTE Antenna | 2 x External Dipole Gain: 3 dBi |
| Wi-Fi Antenna | 2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (Lac model) |
| 2.4G WLAN | 802.11n 2×2 MIMO 400Mbps (Lac model) |
| 5G WLAN | 802.11ac Wave 2 2×2 MU-MIMO 867Mbps (Lac model) |
Performance (gDisplayOff)
| Performance | |
|---|---|
| NAT Throughput | 800 Mbps |
| NAT Throughput w/ Hardware Acceleration | 940 Mbps (Single Ethernet or xDSL WAN) 1.8 Gbps (Ethernet WAN + xDSL WAN) |
| IPsec VPN Performance | 300 Mbps (AES 256 bits) |
| SSL VPN Performance | 150 Mbps |
| Max. Number of NAT Sessions | 60,000 |
| Max. Concurrent VPN Tunnels | 32 |
| Max. Concurrent OpenVPN/ SSL VPN | 16 |
VDSL/ADSL (gDisplayOff)
| xDSL | |
|---|---|
| VDSL Standards | ITU-T G.993.2 Annex A/B/M/Q T1.424 ITU-T G.993.5 (Vectoring) |
| VDSL2 Profile | 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b |
| G.fast Profile | 106Mhz, 212Mhz |
| ADSL Standards | ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2 |
| Other Standards | ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission) |
| Band Plan | 998, 997 |
LTE (gDisplayOff)
| 4G LTE | |
|---|---|
| LTE Category | 6 |
| Max. Data Rate | 300 Mbps downlink, 50 Mbps uplink |
| FDD Band | B1/B3/B5/B7/B8/B20/B28/B32/B38/B40 |
| TDD Band | B38/B40 |
| WCDMA (3G) Band | 1, 5, 8 |
| SMS Gateway | Learn More |
Internet Connection (gDisplayOff)
| Internet Connection | |
|---|---|
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| Wireless WAN | 2 (Lac model) |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management (gDisplayOff)
| LAN Management | |
|---|---|
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 16 |
| Number of LAN Subnet | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking (gDisplayOff)
| Networking | |
|---|---|
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP (IPv4) |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
VPN (gDisplayOff)
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN) |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Redundancy | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering (gDisplayOff)
| Firewall & Content Filtering | |
|---|---|
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (* subscription required) |
| DoS Attack Defence | |
| Spoofing Defense | |
Bandwidth Management (gDisplayOff)
| Bandwidth Management | |
|---|---|
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritisation | |
Wireless LAN (Lac model) (gDisplayOff)
| Wireless LAN (Lac model) | |
|---|---|
| Number of SSID | 4 per radio band |
| Security | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
| Authentication | Pre-Shared Key, 802.1x |
| WPS | PIN, PBC |
| WDS | Repeater (5GHz only) |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
| AirTime Fairness | |
| Band Steering | |
| MU-MIMO | (5GHz only) |
| WMM | |
Management (gDisplayOff)
| Management | |
|---|---|
| Local Service | HTTP, HTTPS, Telnet, SSH, FTP, TR-069 |
| Config File Export & Import | |
| Config File Compatibility | Vigor2862 LTE |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central VPN Management | 8 remote Vigor routers |
| Central AP Management | 20 VigorAPs |
| Mesh Network | 7 VigorAPs (Lac model) |
| Central Switch Management | 10 VigorSwitches |
Physical (gDisplayOff)
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
4G LTE Router Applications
DrayTek 4G LTE routers, including the Vigor2866 LTE series, Vigor2865 LTE series and Vigor2927 LTE series, have all the features you need for a network in a small to medium size business. Each of these routers has an integrated LTE modem and accepts one or two SIM cards from any of the major broadband service providers in Australia (Telstra, Optus, Vodafone, etc.), as well as those in New Zealand (Spark, 2Degrees and Vodafone). Speeds up to 300Mbps downstream and 50Mbps upstream are supported. What’s more, each of the wireless models, Vigor2866Lac, Vigor2865Lac and Vigor2927Lac, has a built-in 802.11ac wireless access point.

With the 4G LTE internet access and strong network features, the DrayTek 4G LTE routers support a wide range of application scenarios besides indoor offices, including internet access for mobile and PC devices on public transport, outdoor events and mobile offices.
Provision of Internet services for tourist bus or coach passengers
One ideal application of either the Vigor2866Lac, Vigor2865Lac or Vigor2927Lac routers is to provide internet access for passengers on public transport such as tourist bus or coach. For the transport company to provide free Wi-Fi access for its passengers, the wireless router can be placed in a suitable location on the bus to provide good Wi-Fi coverage throughout the bus. On larger busses or double decked busses, you can install a Wi-Fi access point such as the VigorAP 903 to extend the Wi-Fi coverage.
The passengers can be given unrestricted access to the internet, or the User Management feature in the router can be used to issue usernames and passwords for the passengers to prevent unauthorised users outside the bus from getting free internet access. In addition, users can be directed to the company web portal for information on the services. Other security measures that can be implemented are the use of the firewall and Content Security Management (CSM) to protect the users from undesirable website contents (eg. for under aged passengers).

Provision of Internet services for outdoor events
A range of leisure and social activities such as sports events, weekend markets or special functions, require short term internet access. At most such outdoor locations, there is no fixed cabling to provide ADSL, VDSL or NBN services, and the only way to provide internet access is to use wireless broadband. The Vigor2866Lac, Vigor2865Lac and Vigor2927Lac routers can be set up quickly and provide internet access for these events.
The user management, web portal and firewall/CSM features can be used to enhance the operations. You can also use the Wi-Fi hotspot feature where users connect to your Wi-Fi network using the social login accounts such as Facebook or Google login, and monitor who is using your services.

Provision of Internet services for a mobile office
Mobile offices for businesses or projects may be at temporary sites without permanent internet access facilities. The Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers can provide internet access for these mobile offices.
For your inter-office communication needs, you can set up VPN connections over the 3G/4G network to share network resources such as files and servers. To protect your network, you can configure the Object-oriented SPI Firewall, DoS defense, CSM (Content Security Management) and WCF (Web Content Filter) as required. Additionally, the VLAN feature allows up to 16 workgroups to be set up to add further security and to provide different levels of network access based on the workgroup.

Technical Installation Requirements (Power Requirements when used in Mobile Applications)
Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers require a 12–15V DC power supply. Therefore when used in vehicles such as busses or trucks which have a 24V supply, you will need to use a DC to DC converter to produce 12VDC regulated output. These converters are available from electronic suppliers. They plug into the cigarette lighter socket in your bus or truck and have an output socket that plugs into the router.

The DC to DC converter shown here is available from Jaycar Electronics
It is recommended to also use the DC to DC converter when the router is used in a motor vehicle to ensure a constant voltage to the router. Although a 13.8 volt car battery output is still within the router’s power supply requirements, the voltage may fluctuate to outside the router’s requirements.

Application Notes and Video
Configuring the Vigor2866, Vigor2865L and Vigor2927L for LTE Internet access
This application note shows you how to configure the Vigor 2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers to enable 4G communication via the integrated LTE modem.
View the full application note: Click Here
Watch the video: Click Here
DrayTek Vigor2862Vac Review Published in APC Magazine Issue 455, June 2018
It’s been a while since DrayTek last updated its line of small business DSL modem routers, but the new Vigor is a worthy update, modernising many of the features of the Vigor2860 series without departing dramatically from that baseline.
Aesthetically, the router is consistent with DrayTek’s previous routers: no frills, with LAN, USB, WAN, DSL and phone ports up front for easy access. Only the power plugs into the back of the router. This isn’t pretty when it’s all plugged in – it’s more like a rack mount in miniature than what you might have come to expect from more consumer focused routers – but the DrayTek…
DrayTek Vigor2862Vac Review Published in PC & Tech Authority Magazine Issue Apr 2018

Overview of DrayTek Vigor2862 Series Routers
Resources
Cat.6 4G LTE and G.fast/VDSL2 35b/Ethernet Security Firewall Routers for SMB

Vigor2866Lac
The Vigor2866 LTE series are G.fast/VDSL2 35b/ADSL2 firewall routers with embedded 4G LTE connectivity, making them ideal for SMB where business continuity rely on xDSL or Ethernet Internet connectivity, or branch offices at new locations where xDSL or Ethernet connection is unavailable.
These routers have 1 x RJ-11 WAN port for VDSL2 (including profile VDSL2 35b Supervectoring)/G.fast/ADSL2+, 1 x GbE WAN/LAN switchable port, 2 x embedded SIM slots that support Cat.6 4G LTE (SIM slot 2 for Failover), and 1 x versatile USB port for an additional 4G LTE connection or other applications. These WANs provide robust Load Balancing and Failover functionality.
All models support professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and much more, and can act as controllers to manage VigorAPs and VigorSwitches on the LAN, or can register to VigorACS for cloud-based remote management. The Vigor2866Lac model supports built-in 802.11ac Wave 2 wireless LAN.
The Vigor2866 LTE series router has 2 LTE antennas. A 1 metre extension lead with a magnetic base allows the antennas to be placed in the best position for optimum 3G/4G reception.
LTE/4G Specification
- LTE/4G category 6
- 300 Mbps downstream and 50Mbps upstream
- 4G LTE FDD Band: 1, 3, 5, 7, 8, 20, 28, 32
- 4G LTE TDD Band: 38, 40
- 3G WCDMA Band: 1, 5, 8
The SMS feature allows status and alerts to be sent by the router, or an IT admin can reboot the router remotely. Learn more
For mission critical applications, the Vigor2866 LTE series routers can be used in High Availability mode to provide uninterrupted network connectivity in case the primary router fails.
The 4G LTE feature makes the Vigor2866 LTE series routers ideal solutions for applications such as:
- Remote locations with no fixed line or NBN coverage.
- Quick setup for new branches waiting for NBN connections.
- Load Balancing or Failover backup for an existing primary Internet connection which can be any of xDSL/Ethernet/LTE type.
- Temporary installations such as disaster recovery, emergency, exhibitions, sporting events, etc., where Internet access is required for a short period.
- Provision of Internet access on public transport such as coaches, buses, trains, freighters, ferries, etc.
The Vigor2866 LTE series routers can be rack mounted using a 1RU rack mount bracket on a standard 19” rack or cabinet.


- Wireless Antenna (Lac model)
- Reset Button
- WLAN/WPS Button (Lac model)
- LED Indicator
- 1 x USB 2.0 ports for connection to 3G/4G LTE USB modems, FTP server, network printer and thermometer
- LAN/WAN Switchable Port: 1 x GbE RJ-45
- Fixed LAN Port: 5 x GbE RJ-45
- Fixed WAN Port: 1 x RJ-11 for VDSL2 35b/G.fast/ADSL2+
- LTE Antenna
- Power Input
- Power On/Off Switch
- 2 x Standard-sized SIM Slots (SIM slot 2 for Failover)
Key Features
Performance Comparison: Vigor2866 vs. Vigor2862
NAT throughput (1.6 times faster)
Vigor2866 Series
Vigor2862 Series
IPsec throughput (3.5 times faster)
Vigor2866 Series
Vigor2862 Series
SSL-VPN throughput (3.3 times faster)
Vigor2866 Series
Vigor2862 Series
Hardware Acceleration
Without sacrificing traffic control features such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph and Data Flow Monitor, Hardware Acceleration enhances performance for:
- NAT & routing connections
- QoS
- IPsec VPN

Hardware NAT & Routing
With Hardware Acceleration and Hardware QoS enabled, the router supports up to 8k NAT and routing connections, and firewall performance reaching 940Mbps on single WAN and 1.8Gbps combined performance on multi-WANs.
Dual WAN (Ethernet + xDSL)
2.3x Faster NAT Performance
with Hardware NAT & Routing
without Hardware NAT & Routing
Single Ethernet WAN
1.2x Faster NAT Performance
with Hardware NAT & Routing
without Hardware NAT & Routing
Hardware QoS
Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

Dual WAN (Ethernet + xDSL)
2.6x Faster QoS Performance
with Hardware QoS
with Software QoS
Single Ethernet WAN
1.3x Faster QoS Performance
with Hardware QoS
with Software QoS
Hardware IPsec
While the Vigor2866 series already has improved IPsec performance over the previous Vigor2862 series, with Hardware Acceleration enabled, IPsec performance can now reach 800 Mbps. The first 16 tunnels are automatically accelerated on a first come first serve basis. If any drops out, a new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.
2.7x Faster IPsec Performance
with Hardware IPsec
with Software IPsec

APP QoS
Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.
VoIP First
VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Management Solution
| All-in-One Management |
|---|
Mesh (ac model) |
|
Central SwitchManagement |
|
Central AP Management |
|
| Software Management |
|---|
VigorACS 2 |
|
VigorACS 3 |
|
In-the-Box

Vigor2866L/Lac

2 x LTE Antennas + Socket

2 x Wireless Antennas
(Lac model)

RJ-45 Cable
(Ethernet)

RJ-11 to RJ-11 Cable
(Annex A)

Power Adaptor

Quick Start Guide
Note :
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Specifications
Interface (gDisplayOff)
| Interface | |
|---|---|
| Fixed WAN Port: 1 x RJ-11 for VDSL2 35b, G.fast or ADSL2/2+ | |
| LAN/WAN Switchable Port: 1 x 10/100/1000Base-TX RJ-45 | |
| Fixed LAN Port: 5 x 10/100/1000Base-TX RJ-45 | |
| SIM Slot: 2 x Standard-sized SIM slots (SIM slot 2 for Failover) | |
| USB Port: 1 x USB 2.0 for 3G/4G LTE USB modem, storage, printer or thermometer | |
| LTE Antenna: 2 x External Dipole Gain: 3 dBi | |
| Wi-Fi Antenna: 2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (Lac model) | |
| 2.4G WLAN: 802.11n 2×2 MIMO 400Mbps (Lac model) | |
| 5G WLAN: 802.11ac Wave 2 2×2 MU-MIMO 867Mbps (Lac model) |
Performance (gDisplayOff)
| Performance | |
|---|---|
| NAT Throughput: 800 Mbps | |
| NAT Throughput w/ Hardware Acceleration: 940 Mbps (Single Ethernet or xDSL WAN) 1.8 Gbps (Ethernet WAN + xDSL WAN) | |
| IPsec VPN Performance: 300 Mbps (AES 256 bits) | |
| SSL VPN Performance: 150 Mbps | |
| Max. Number of NAT Sessions: 60,000 | |
| Max. Concurrent VPN Tunnels: 32 | |
| Max. Concurrent OpenVPN / SSL VPN: 16 |
VDSL/ADSL (gDisplayOff)
| xDSL | |
|---|---|
| VDSL Standards: ITU-T G.993.2 Annex A/B/M/Q T1.424 ITU-T G.993.5 (Vectoring) | |
| VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b | |
| G.fast Profile: 106Mhz, 212Mhz | |
| ADSL Standards: ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2 | |
| Other Standards: ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission) | |
| Band Plan: 998, 997 |
LTE (gDisplayOff)
| 4G LTE | |
|---|---|
| LTE Category: 6 | |
| Max. Data Rate: 300 Mbps downlink, 50 Mbps uplink | |
| FDD Band: B1/B3/B5/B7/B8/B20/ B28/B32/B38/B40 | |
| TDD Band: B38/B40 | |
| WCDMA (3G) Band: 1, 5, 8 | |
| SMS Gateway: Learn More |
Internet Connection (gDisplayOff)
| Internet Connection | |
|---|---|
| IPv4: PPPoE, DHCP, Static IP, PPTP/L2TP | |
| IPv6: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel | |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| Wireless WAN (Lac model) | 2 |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing: IP-based, Session-based | |
| WAN Active on Demand: Link Failure, Traffic Threshold | |
| Connection Detection: ARP, Ping | |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management (gDisplayOff)
| LAN Management | |
|---|---|
| VLAN: 802.1q Tag-based, Port-based | |
| Max. Number of VLAN: 16 | |
| Number of LAN Subnet: 8 | |
| DHCP Server: Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC | |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server | |
Networking (gDisplayOff)
| Networking | |
|---|---|
| Routing: IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP (IPv4) | |
| Policy-based Routing: Protocol, IP Address, Port, Domain, Country | |
| High Availability | |
| DNS Security (DNSSEC) | |
| IGMP: IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave | |
| Local RADIUS server | |
| SMB File Sharing (Requires external storage) | |
VPN (gDisplayOff)
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols: PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN (Host to LAN) | |
| User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP | |
| IKE Authentication: Pre-Shared Key, X.509 | |
| IPsec Authentication: SHA-1, SHA-256 | |
| Encryption: MPPE, DES, 3DES, AES | |
| VPN Redundancy: Load Balancing, Failover | |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering (gDisplayOff)
| Firewall & Content Filtering | |
|---|---|
| NAT: Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP | |
| ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323 | |
| VPN Pass-Through: PPTP, L2TP, IPsec | |
| IP-based Firewall Policy | |
| Content Filtering: Application, URL, DNS Keyword, Web Features, Web Category* (* subscription required) | |
| DoS Attack Defence | |
| Spoofing Defense | |
Bandwidth Management (gDisplayOff)
| Bandwidth Management | |
|---|---|
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service): TOS, DSCP, 802.1p, IP Address, Port, Application | |
| VoIP Prioritisation | |
Wireless LAN (Lac model) (gDisplayOff)
| Wireless LAN (Lac model) | |
|---|---|
| Number of SSID: 4 per radio band | |
| Security: OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 | |
| Authentication: Pre-Shared Key, 802.1x | |
| WPS: PIN, PBC | |
| WDS: Repeater (5GHz Only) | |
| Access Control: Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling | |
| AirTime Fairness | |
| Band Steering | |
| MU-MIMO (5GHz Only) | |
| WMM | |
Management (gDisplayOff)
| Management | |
|---|---|
| Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069 | |
| Config File Export & Import | |
| Config File Compatibility: Vigor2862 LTE | |
| Firmware Upgrade: TFTP, HTTP, TR-069 | |
| 2-Level Administration Privilege | |
| Access Control: Access List, Brute Force Protection | |
| Notification Alert: SMS, E-mail | |
| SNMP: v1, v2c, v3 | |
| Syslog | |
| Managed by VigorACS | |
| Central VPN Management: 8 remote Vigor routers | |
| Central AP Management: 20 VigorAPs | |
| Mesh Network: 7 VigorAPs (Lac model) | |
| Central Switch Management: 10 VigorSwitches | |
Physical (gDisplayOff)
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
4G LTE Router Applications
DrayTek 4G LTE routers, including the Vigor2866 LTE series, Vigor2865 LTE series and Vigor2927 LTE series, have all the features you need for a network in a small to medium size business. Each of these routers has an integrated LTE modem and accepts one or two SIM cards from any of the major broadband service providers in Australia (Telstra, Optus, Vodafone, etc.), as well as those in New Zealand (Spark, 2Degrees and Vodafone). Speeds up to 300Mbps downstream and 50Mbps upstream are supported. What’s more, each of the wireless models, Vigor2866Lac, Vigor2865Lac and Vigor2927Lac, has a built-in 802.11ac wireless access point.

With the 4G LTE internet access and strong network features, the DrayTek 4G LTE routers support a wide range of application scenarios besides indoor offices, including internet access for mobile and PC devices on public transport, outdoor events and mobile offices.
Provision of Internet services for tourist bus or coach passengers
One ideal application of either the Vigor2866Lac, Vigor2865Lac or Vigor2927Lac routers is to provide internet access for passengers on public transport such as tourist bus or coach. For the transport company to provide free Wi-Fi access for its passengers, the wireless router can be placed in a suitable location on the bus to provide good Wi-Fi coverage throughout the bus. On larger busses or double decked busses, you can install a Wi-Fi access point such as the VigorAP 903 to extend the Wi-Fi coverage.
The passengers can be given unrestricted access to the internet, or the User Management feature in the router can be used to issue usernames and passwords for the passengers to prevent unauthorised users outside the bus from getting free internet access. In addition, users can be directed to the company web portal for information on the services. Other security measures that can be implemented are the use of the firewall and Content Security Management (CSM) to protect the users from undesirable website contents (eg. for under aged passengers).

Provision of Internet services for outdoor events
A range of leisure and social activities such as sports events, weekend markets or special functions, require short term internet access. At most such outdoor locations, there is no fixed cabling to provide ADSL, VDSL or NBN services, and the only way to provide internet access is to use wireless broadband. The Vigor2866Lac, Vigor2865Lac and Vigor2927Lac routers can be set up quickly and provide internet access for these events.
The user management, web portal and firewall/CSM features can be used to enhance the operations. You can also use the Wi-Fi hotspot feature where users connect to your Wi-Fi network using the social login accounts such as Facebook or Google login, and monitor who is using your services.

Provision of Internet services for a mobile office
Mobile offices for businesses or projects may be at temporary sites without permanent internet access facilities. The Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers can provide internet access for these mobile offices.
For your inter-office communication needs, you can set up VPN connections over the 3G/4G network to share network resources such as files and servers. To protect your network, you can configure the Object-oriented SPI Firewall, DoS defense, CSM (Content Security Management) and WCF (Web Content Filter) as required. Additionally, the VLAN feature allows up to 16 workgroups to be set up to add further security and to provide different levels of network access based on the workgroup.

Technical Installation Requirements (Power Requirements when used in Mobile Applications)
Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers require a 12–15V DC power supply. Therefore when used in vehicles such as busses or trucks which have a 24V supply, you will need to use a DC to DC converter to produce 12VDC regulated output. These converters are available from electronic suppliers. They plug into the cigarette lighter socket in your bus or truck and have an output socket that plugs into the router.

The DC to DC converter shown here is available from Jaycar Electronics
It is recommended to also use the DC to DC converter when the router is used in a motor vehicle to ensure a constant voltage to the router. Although a 13.8 volt car battery output is still within the router’s power supply requirements, the voltage may fluctuate to outside the router’s requirements.

Application Notes and Video
Configuring the Vigor2866, Vigor2865L and Vigor2927L for LTE Internet access
This application note shows you how to configure the Vigor 2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers to enable 4G communication via the integrated LTE modem.
View the full application note: Click Here
Watch the video: Click Here
DrayTek Vigor2862Vac Review Published in APC Magazine Issue 455, June 2018
It’s been a while since DrayTek last updated its line of small business DSL modem routers, but the new Vigor is a worthy update, modernising many of the features of the Vigor2860 series without departing dramatically from that baseline.
Aesthetically, the router is consistent with DrayTek’s previous routers: no frills, with LAN, USB, WAN, DSL and phone ports up front for easy access. Only the power plugs into the back of the router. This isn’t pretty when it’s all plugged in – it’s more like a rack mount in miniature than what you might have come to expect from more consumer focused routers – but the DrayTek…
DrayTek Vigor2862Vac Review Published in PC & Tech Authority Magazine Issue Apr 2018

Mesh 










