• Cat.6 4G LTE modem with dual SIM slots (SIM slot 2 for Failover) for FDD & TDD 4G LTE WAN

  • Support 4G LTE bands: B1/B3/B5/B7/B8/B20/B28/B32/B38/B40; great coverage in Australia and New Zealand, Cat.6 4G  LTE with 300Mbps download and 50Mbps upload speeds

  • Multi-WAN with 1 x G.fast/VDSL2 35b/ADSL2+ modem, 1 x configurable GbE WAN/LAN port, 1 x USB port, 2 x 4G LTE SIM slots, and 2 x Wi-Fi WANs (Lac model)
  • G.fast  download speed up to 1 Gbps

  • 1 x XDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode

  • 1 x USB 2.0 port for 3G/4G LTE USB modem, FTP server, network printer or thermometer

  • 5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions

  • 32 x VPN tunnels (including 16 x Open VPN/ SSL-VPN tunnels) with comprehensive secure protocols
  • Fast VPN throughput, VPN Load Balancing and backup for site-to-site VPN applications
  • Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.8Gbps (Multi-WAN) Firewall speed

  • 16 x VLANs for secure and efficient workgroup management

  • Up to 1022 IP addresses and 8 IP subnets

  • IPv6 & IPv4

  • Integrated IEEE 802.11ac (AC1300) wireless Access Point; dual band; up to 867 Mbps throughput (Lac models)

  • High Availability mode
  • Object-based SPI Firewall and CSM (Content Security Management) for network security

  • Supports VigorACS 2 and VigorACS 3 Central Management software for remote management
  • SD WAN capability when used with VigorACS 3

  • Central VPN Management for up to 8 remote Vigor routers Learn More

  • Central AP Management for up to 20 Vigor Access Points Learn more
  • Central Switch Management for up to 10 VigorSwitches Learn More
  • 2 years back to base warranty

Cat.6 4G LTE and G.fast/VDSL2 35b/Ethernet Security Firewall Routers for SMB

Vigor2866Lac

The Vigor2866 LTE series are G.fast/VDSL2 35b/ADSL2 firewall routers with embedded 4G LTE connectivity, making them ideal for SMB where business continuity rely on xDSL or Ethernet Internet connectivity, or branch offices at new locations where xDSL or Ethernet connection is unavailable.

These routers have 1 x RJ-11 WAN port for VDSL2 (including profile VDSL2 35b Supervectoring)/G.fast/ADSL2+, 1 x GbE WAN/LAN switchable port, 2 x embedded SIM slots that support Cat.6 4G LTE (SIM slot 2 for Failover), and 1 x versatile USB port for an additional 4G LTE connection or other applications. These WANs provide robust Load Balancing and Failover functionality.

All models support professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and much more, and can act as controllers to manage VigorAPs and VigorSwitches on the LAN, or can register to VigorACS for cloud-based remote management. The Vigor2866Lac model supports built-in 802.11ac Wave 2 wireless LAN.

The Vigor2866 LTE series router has 2 LTE antennas. A 1 metre extension lead with a magnetic base allows the antennas to be placed in the best position for optimum 3G/4G reception.

LTE/4G Specification

  • LTE/4G category 6
  • 300 Mbps downstream and 50Mbps upstream
  • 4G LTE FDD Band: 1, 3, 5, 7, 8, 20, 28, 32
  • 4G LTE TDD Band: 38, 40
  • 3G WCDMA Band: 1, 5, 8

The SMS feature allows status and alerts to be sent by the router, or an IT admin can reboot the router remotely. Learn more

For mission critical applications, the Vigor2866 LTE series routers can be used in High Availability mode to provide uninterrupted network connectivity in case the primary router fails.

The 4G LTE feature makes the Vigor2866 LTE series routers ideal solutions for applications such as:

  • Remote locations with no fixed line or NBN coverage.
  • Quick setup for new branches waiting for NBN connections.
  • Load Balancing or Failover backup for an existing primary Internet connection which can be any of xDSL/Ethernet/LTE type.
  • Temporary installations such as disaster recovery, emergency, exhibitions, sporting events, etc., where Internet access is required for a short period.
  • Provision of Internet access on public transport such as coaches, buses, trains, freighters, ferries, etc.

The Vigor2866 LTE series routers can be rack mounted using a 1RU rack mount bracket on a standard 19” rack or cabinet.

Key Features

Performance Comparison: Vigor2866 vs. Vigor2862

NAT throughput (1.6 times faster)

800 Mbps

Vigor2866 Series

500 Mbps

Vigor2862 Series

IPsec throughput (3.5 times faster)

300 Mbps

Vigor2866 Series

85 Mbps

Vigor2862 Series

SSL-VPN throughput (3.3 times faster)

150 Mbps

Vigor2866 Series

45 Mbps

Vigor2862 Series

Hardware Acceleration

Without sacrificing traffic control features such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph and Data Flow Monitor, Hardware Acceleration enhances performance for:

  • NAT & routing connections
  • QoS
  • IPsec VPN

Hardware NAT & Routing

With Hardware Acceleration and Hardware QoS enabled, the router supports up to 8k NAT and routing connections, and firewall performance reaching 940Mbps on single WAN and 1.8Gbps combined performance on multi-WANs.

Dual WAN (Ethernet + xDSL)

2.3x Faster NAT Performance

1.8 Gbps

with Hardware NAT & Routing

800 Mbps

without Hardware NAT & Routing

Single Ethernet WAN

1.2x Faster NAT Performance

940 Mbps

with Hardware NAT & Routing

800 Mbps

without Hardware NAT & Routing

Hardware QoS

Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

Dual WAN (Ethernet + xDSL)

2.6x Faster QoS Performance

1.8 Gbps

with Hardware QoS

700 Mbps

with Software QoS

Single Ethernet WAN

1.3x Faster QoS Performance

940 Mbps

with Hardware QoS

700 Mbps

with Software QoS

Hardware IPsec

While the Vigor2866 series already has improved IPsec performance over the previous Vigor2862 series, with Hardware Acceleration enabled, IPsec performance can now reach 800 Mbps. The first 16 tunnels are automatically accelerated on a first come first serve basis. If any drops out, a new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.

2.7x Faster IPsec Performance

800 Mbps

with Hardware IPsec

300 Mbps

with Software IPsec

APP QoS

Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

VoIP First

VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.

Improve Experience for Business-Critical Apps

Select your business critical apps, and easily put them into QoS classes.

Flexible Bandwidth Allocation

Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Hotspot Web Portal

Market your business while offering free Wi-Fi

Wi-Fi Marketing

Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.

Grow Customer Mailing List

Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types

A variety of login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.

3rd-Party Service Compliant

Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.

Data Quota Management

Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.

Assisted Wi-Fi Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

Extend Transmission Range

When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.

Improve Data Rates

When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.

Better User Experience

Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.

No Controller Required

Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.

Management Solution

All-in-One Management
Mesh (ac model)Central Switch ManagementCentral AP Management
  • Discovery
  • Provisioning
  • Monitoring
  • Centralised Hierarchy View
  • Auto-Discovery
  • Provisioning
  • Monitoring
  • Centralised Hierarchy View
  • Reboot PoE Devices Remotely
  • Quick VLAN Configuration
  • Auto-Discovery
  • Auto-Provisioning
  • Monitoring
  • Centralised View
  • Alarm
  • Reboot VigorAP Remotely
  • Wi-Fi Client Load Balancing
Software Management
VigorACS 2VigorACS 3
  • Provisioning
  • Monitoring
  • Centralised Hierarchy View
  • Alarm
  • Reboot Vigor Devices Remotely
  • Scheduled Maintenance
  • Report
  • Zero Touch Deployment & Provisioning
  • Auto VPN
  • Interface Quality & SLA
  • VoIP Optimization & Monitoring
  • Application Visibility
  • Application Based SD-WAN Policy
  • Customized Hotspot Page with Multilingual
  • Hotspot Clients Analytics
  • ACS Server Load Balancing / Failover

In-the-Box

Vigor2866L/Lac

2 x LTE Antennas + Socket

2 x Wireless Antennas
(Lac model)

RJ-45 Cable
(Ethernet)

RJ-11 to RJ-11 Cable
(Annex A)

Power Adaptor

Quick Start Guide

Note :

The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Models

ModelVigor2866LVigor2866Lac
Product
VDSL2 35b, G.fast or ADSL2/2+
Selectable Gigabit WAN/LAN11
4G LTE/3G2 x SIM slots (SIM slot 2 for Failover)
1 x USB 2.0
2 x SIM slots (SIM slot 2 for Failover)
1 x USB 2.0
Wireless WAN
2
Gigabit LAN55
VPN Tunnels3232
Wireless LAN
WiFi 5, AC1300
Wi-Fi Antenna
3.5 dBi for 5GHz
2.3 dBi for 2.4GHz
VoIP (2xFXS)

Specifications

Interface (gDisplayOff)

Interface
Fixed WAN Port1 x RJ-11 for VDSL2 35b, G.fast or ADSL2/2+
LAN/WAN Switchable Port1 x 10/100/1000Base-TX RJ-45
Fixed LAN Port5 x 10/100/1000Base-TX RJ-45
SIM Slot2 x Standard-sized SIM slots (SIM slot 2 for Failover)
USB Port1 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
LTE Antenna2 x External Dipole
Gain: 3 dBi
Wi-Fi Antenna2 x External Dipole
Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz
(Lac model)
2.4G WLAN802.11n 2×2 MIMO 400Mbps (Lac model)
5G WLAN802.11ac Wave 2 2×2 MU-MIMO 867Mbps (Lac model)

Performance (gDisplayOff)

Performance
NAT Throughput800 Mbps
NAT Throughput w/ Hardware Acceleration940 Mbps (Single Ethernet or xDSL WAN)
1.8 Gbps (Ethernet WAN + xDSL WAN)
IPsec VPN Performance300 Mbps (AES 256 bits)
SSL VPN Performance150 Mbps
Max. Number of NAT Sessions60,000
Max. Concurrent VPN Tunnels32
Max. Concurrent OpenVPN/ SSL VPN16

VDSL/ADSL (gDisplayOff)

xDSL
VDSL StandardsITU-T G.993.2 Annex A/B/M/Q
T1.424
ITU-T G.993.5 (Vectoring)
VDSL2 Profile8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
G.fast Profile106Mhz, 212Mhz
ADSL StandardsITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other StandardsITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan998, 997

LTE (gDisplayOff)

4G LTE
LTE Category6
Max. Data Rate300 Mbps downlink, 50 Mbps uplink
FDD BandB1/B3/B5/B7/B8/B20/B28/B32/B38/B40
TDD BandB38/B40
WCDMA (3G) Band1, 5, 8
SMS Gateway Learn More

Internet Connection (gDisplayOff)

Internet Connection
IPv4PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN2 (Lac model)
3G/4G/LTE WAN with USB modem
Load BalancingIP-based, Session-based
WAN Active on DemandLink Failure, Traffic Threshold
Connection DetectionARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

LAN Management (gDisplayOff)

LAN Management
VLAN802.1q Tag-based, Port-based
Max. Number of VLAN16
Number of LAN Subnet8
DHCP ServerMultiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot AuthenticationClick-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking (gDisplayOff)

Networking
RoutingIPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP (IPv4)
Policy-based RoutingProtocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMPIGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing (Requires external storage)

VPN (gDisplayOff)

VPN
LAN-to-LAN
Teleworker-to-LAN
ProtocolsPPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN)
User AuthenticationLocal, RADIUS, LDAP, TACACS+, mOTP
IKE AuthenticationPre-Shared Key, X.509
IPsec AuthenticationSHA-1, SHA-256
EncryptionMPPE, DES, 3DES, AES
VPN RedundancyLoad Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher

Firewall & Content Filtering (gDisplayOff)

Firewall & Content Filtering
NATPort Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)SIP, RTSP, FTP, H.323
VPN Pass-ThroughPPTP, L2TP, IPsec
IP-based Firewall Policy
Content FilteringApplication, URL, DNS Keyword, Web Features, Web Category* (* subscription required)
DoS Attack Defence
Spoofing Defense

Bandwidth Management (gDisplayOff)

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritisation

Wireless LAN (Lac model) (gDisplayOff)

Wireless LAN (Lac model)
Number of SSID4 per radio band
SecurityOWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
AuthenticationPre-Shared Key, 802.1x
WPSPIN, PBC
WDSRepeater (5GHz only)
Access ControlAccess List, Client Isolation, Hide SSID, Wi-Fi Scheduling
AirTime Fairness
Band Steering
MU-MIMO (5GHz only)
WMM

Management (gDisplayOff)

Management
Local ServiceHTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
Config File CompatibilityVigor2862 LTE
Firmware UpgradeTFTP, HTTP, TR-069
2-Level Administration Privilege
Access ControlAccess List, Brute Force Protection
Notification AlertSMS, E-mail
SNMPv1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management8 remote Vigor routers
Central AP Management20 VigorAPs
Mesh Network7 VigorAPs (Lac model)
Central Switch Management10 VigorSwitches

Physical (gDisplayOff)

Physical
Power SupplyDC 12V @ 2.5A
Max. Power Consumption28.8 watts (Lac model)
Dimension241mm x 166mm x 46mm
Weight960g (Lac model)
Operating Temperature0 to 45°C
Storage Temperature-25 to 70°C
Operating Humidity (non-condensing)10 to 90%
Certificate

Note :

  • All specifications are subject to change without notice.
  • The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

4G LTE Router Applications

DrayTek 4G LTE routers, including the Vigor2866 LTE series, Vigor2865 LTE series and Vigor2927 LTE series, have all the features you need for a network in a small to medium size business. Each of these routers has an integrated LTE modem and accepts one or two SIM cards from any of the major broadband service providers in Australia (Telstra, Optus, Vodafone, etc.), as well as those in New Zealand (Spark, 2Degrees and Vodafone). Speeds up to 300Mbps downstream and 50Mbps upstream are supported. What’s more, each of the wireless models, Vigor2866Lac, Vigor2865Lac and Vigor2927Lac, has a built-in 802.11ac wireless access point.

With the 4G LTE internet access and strong network features, the DrayTek 4G LTE routers support a wide range of application scenarios besides indoor offices, including internet access for mobile and PC devices on public transport, outdoor events and mobile offices.

Provision of Internet services for tourist bus or coach passengers

One ideal application of either  the Vigor2866Lac, Vigor2865Lac or Vigor2927Lac routers is to provide internet access for passengers on public transport such as tourist bus or coach. For the transport company to provide free Wi-Fi access for its passengers, the wireless router can be placed in a suitable location on the bus to provide good Wi-Fi coverage throughout the bus. On larger busses or double decked busses, you can install a Wi-Fi access point such as the VigorAP 903 to extend the Wi-Fi coverage.

The passengers can be given unrestricted access to the internet, or the User Management feature in the router can be used to issue usernames and passwords for the passengers to prevent unauthorised users outside the bus from getting free internet access. In addition, users can be directed to the company web portal for information on the services. Other security measures that can be implemented are the use of the firewall and Content Security Management (CSM) to protect the users from undesirable website contents (eg. for under aged passengers).

Provision of Internet services for outdoor events

A range of leisure and social activities such as sports events, weekend markets or special functions, require short term internet access. At most such outdoor locations, there is no fixed cabling to provide ADSL, VDSL or NBN services, and the only way to provide internet access is to use wireless broadband. The Vigor2866Lac, Vigor2865Lac and Vigor2927Lac routers can be set up quickly and provide internet access for these events.

The user management, web portal and firewall/CSM features can be used to enhance the operations. You can also use the Wi-Fi hotspot feature where users connect to your Wi-Fi network using the social login accounts such as Facebook or Google login, and monitor who is using your services.

Provision of Internet services for a mobile office

Mobile offices for businesses or projects may be at temporary sites without permanent internet access facilities. The Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers can provide internet access for these mobile offices.

For your inter-office communication needs, you can set up VPN connections over the 3G/4G network to share network resources such as files and servers. To protect your network, you can configure the Object-oriented SPI Firewall, DoS defense, CSM (Content Security Management) and WCF (Web Content Filter) as required. Additionally, the VLAN feature allows up to 16 workgroups to be set up to add further security and to provide different levels of network access based on the workgroup.

Technical Installation Requirements (Power Requirements when used in Mobile Applications)

Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers require a 12–15V DC power supply. Therefore when used in vehicles such as busses or trucks which have a 24V supply, you will need to use a DC to DC converter to produce 12VDC regulated output. These converters are available from electronic suppliers. They plug into the cigarette lighter socket in your bus or truck and have an output socket that plugs into the router.

The DC to DC converter shown here is available from Jaycar Electronics

It is recommended to also use the DC to DC converter when the router is used in a motor vehicle to ensure a constant voltage to the router. Although a 13.8 volt car battery output is still within the router’s power supply requirements, the voltage may fluctuate to outside the router’s requirements.

Application Notes and Video

Configuring the Vigor2866, Vigor2865L and Vigor2927L for LTE Internet access

This application note shows you how to configure the Vigor 2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers to enable 4G communication via the integrated LTE modem.

View the full application note: Click Here
Watch the video: Click Here

DrayTek Vigor2862Vac Review Published in APC Magazine Issue 455, June 2018

It’s been a while since DrayTek last updated its line of small business DSL modem routers, but the new Vigor is a worthy update, modernising many of the features of the Vigor2860 series without departing dramatically from that baseline.

Aesthetically, the router is consistent with DrayTek’s previous routers: no frills, with LAN, USB, WAN, DSL and phone ports up front for easy access. Only the power plugs into the back of the router. This isn’t pretty when it’s all plugged in – it’s more like a rack mount in miniature than what you might have come to expect from more consumer focused routers – but the DrayTek…

DrayTek Vigor2862Vac Review Published in PC & Tech Authority Magazine Issue Apr 2018

Overview of DrayTek Vigor2862 Series Routers

  • VDSL2/ADSL2+, 1 x configurable GbE WAN/LAN port, dual USB ports for failover and load-balancing
  • Two USB 2.0 ports for connection to two 3.5G/4G LTE USB mobiles, FTP server and network printer

  • 4 x Gigabit LAN ports with multiple subnets and 50,000 NAT sessions
  • Integrated 802.11ac (AC2000) wireless Access Point; dual band; up to 1.7Gbps throughput
  • IPv6 & IPv4
  • Increased IP addresses (1022) and IP subnets (8)
  • VoIP (2 x FXS and 1 x FXO Line Port) for Vigor2862Vac
  • Object-based SPI Firewall and CSM (Content Security Management) for network security
  • 16 x VLANs for secure and efficient workgroup management

  • 32 x VPN tunnels (including 16 x SSL-VPN tunnels) with Load Balance and Redundancy
  • Fast VPN throughput, VPN load-balancing and backup for site-to-site applications
  • High Availability mode
  • Embedded Central VPN Management for 8 remote Vigor routers
  • Central AP Management for deployment of multiple wireless VigorAPs
  • Works with Smart Monitor Network Traffic Analyzer (30-nodes)
  • Supports VigorACS 2 Central Management System for remote management
  • 2 years back to base warranty
  • Cat.6 4G LTE modem with dual SIM slots (SIM slot 2 for Failover) for FDD & TDD 4G LTE WAN

  • Support 4G LTE bands: B1/B3/B5/B7/B8/B20/B28/ B32/B38/B40; great coverage in Australia and New Zealand, Cat.6 4G  LTE with 300Mbps download and 50Mbps upload speeds

  • Multi-WAN with 1 x G.fast/VDSL2 35b/ADSL2+ modem, 1 x configurable GbE WAN/LAN port, 1 x USB port, 2 x 4G LTE SIM slots, and 2 x Wi-Fi WANs (Lac model)
  • G.fast  download speed up to 1 Gbps

  • 1 x XDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode

  • 1 x USB 2.0 port for 3G/4G LTE USB modem, FTP server, network printer or thermometer

  • 5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions

  • 32 x VPN tunnels (including 16 x Open VPN/ SSL-VPN tunnels) with comprehensive secure protocols
  • Fast VPN throughput, VPN Load Balancing and backup for site-to-site VPN applications
  • Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.8Gbps (Multi-WAN) Firewall speed

  • 16 x VLANs for secure and efficient workgroup management

  • Up to 1022 IP addresses and 8 IP subnets

  • IPv6 & IPv4

  • Integrated IEEE 802.11ac (AC1300) wireless Access Point; dual band; up to 867 Mbps throughput (Lac models)

  • High Availability mode
  • Object-based SPI Firewall and CSM (Content Security Management) for network security

  • Supports VigorACS 2 and VigorACS 3 Central Management software for remote management
  • SD WAN capability when used with VigorACS 3

  • Central VPN Management for up to 8 remote Vigor routers Learn More

  • Central AP Management for up to 20 Vigor Access Points Learn more
  • Central Switch Management for up to 10 VigorSwitches Learn More
  • 2 years back to base warranty

Cat.6 4G LTE and G.fast/VDSL2 35b/Ethernet Security Firewall Routers for SMB

Vigor2866Lac

The Vigor2866 LTE series are G.fast/VDSL2 35b/ADSL2 firewall routers with embedded 4G LTE connectivity, making them ideal for SMB where business continuity rely on xDSL or Ethernet Internet connectivity, or branch offices at new locations where xDSL or Ethernet connection is unavailable.

These routers have 1 x RJ-11 WAN port for VDSL2 (including profile VDSL2 35b Supervectoring)/G.fast/ADSL2+, 1 x GbE WAN/LAN switchable port, 2 x embedded SIM slots that support Cat.6 4G LTE (SIM slot 2 for Failover), and 1 x versatile USB port for an additional 4G LTE connection or other applications. These WANs provide robust Load Balancing and Failover functionality.

All models support professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and much more, and can act as controllers to manage VigorAPs and VigorSwitches on the LAN, or can register to VigorACS for cloud-based remote management. The Vigor2866Lac model supports built-in 802.11ac Wave 2 wireless LAN.

The Vigor2866 LTE series router has 2 LTE antennas. A 1 metre extension lead with a magnetic base allows the antennas to be placed in the best position for optimum 3G/4G reception.

LTE/4G Specification

  • LTE/4G category 6
  • 300 Mbps downstream and 50Mbps upstream
  • 4G LTE FDD Band: 1, 3, 5, 7, 8, 20, 28, 32
  • 4G LTE TDD Band: 38, 40
  • 3G WCDMA Band: 1, 5, 8

The SMS feature allows status and alerts to be sent by the router, or an IT admin can reboot the router remotely. Learn more

For mission critical applications, the Vigor2866 LTE series routers can be used in High Availability mode to provide uninterrupted network connectivity in case the primary router fails.

The 4G LTE feature makes the Vigor2866 LTE series routers ideal solutions for applications such as:

  • Remote locations with no fixed line or NBN coverage.
  • Quick setup for new branches waiting for NBN connections.
  • Load Balancing or Failover backup for an existing primary Internet connection which can be any of xDSL/Ethernet/LTE type.
  • Temporary installations such as disaster recovery, emergency, exhibitions, sporting events, etc., where Internet access is required for a short period.
  • Provision of Internet access on public transport such as coaches, buses, trains, freighters, ferries, etc.

The Vigor2866 LTE series routers can be rack mounted using a 1RU rack mount bracket on a standard 19” rack or cabinet.

Key Features

Performance Comparison: Vigor2866 vs. Vigor2862

NAT throughput (1.6 times faster)

800 Mbps

Vigor2866 Series

500 Mbps

Vigor2862 Series

IPsec throughput (3.5 times faster)

300 Mbps

Vigor2866 Series

85 Mbps

Vigor2862 Series

SSL-VPN throughput (3.3 times faster)

150 Mbps

Vigor2866 Series

45 Mbps

Vigor2862 Series

Hardware Acceleration

Without sacrificing traffic control features such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph and Data Flow Monitor, Hardware Acceleration enhances performance for:

  • NAT & routing connections
  • QoS
  • IPsec VPN

Hardware NAT & Routing

With Hardware Acceleration and Hardware QoS enabled, the router supports up to 8k NAT and routing connections, and firewall performance reaching 940Mbps on single WAN and 1.8Gbps combined performance on multi-WANs.

Dual WAN (Ethernet + xDSL)

2.3x Faster NAT Performance

1.8 Gbps

with Hardware NAT & Routing

800 Mbps

without Hardware NAT & Routing

Single Ethernet WAN

1.2x Faster NAT Performance

940 Mbps

with Hardware NAT & Routing

800 Mbps

without Hardware NAT & Routing

Hardware QoS

Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

Dual WAN (Ethernet + xDSL)

2.6x Faster QoS Performance

1.8 Gbps

with Hardware QoS

700 Mbps

with Software QoS

Single Ethernet WAN

1.3x Faster QoS Performance

940 Mbps

with Hardware QoS

700 Mbps

with Software QoS

Hardware IPsec

While the Vigor2866 series already has improved IPsec performance over the previous Vigor2862 series, with Hardware Acceleration enabled, IPsec performance can now reach 800 Mbps. The first 16 tunnels are automatically accelerated on a first come first serve basis. If any drops out, a new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.

2.7x Faster IPsec Performance

800 Mbps

with Hardware IPsec

300 Mbps

with Software IPsec

APP QoS

Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

VoIP First

VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.

Improve Experience for Business-Critical Apps

Select your business critical apps, and easily put them into QoS classes.

Flexible Bandwidth Allocation

Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Management Solution

All-in-One Management
Mesh (ac model)
  • Discovery
  • Provisioning
  • Monitoring
  • Centralised Hierarchy
    View
Central Switch
Management
  • Auto-Discovery
  • Provisioning
  • Monitoring
  • Centralised Hierarchy
    View
  • Reboot PoE Devices
    Remotely
  • Quick VLAN
    Configuration
Central AP Management
  • Auto-Discovery
  • Auto-Provisioning
  • Monitoring
  • Centralised View
  • Alarm
  • Reboot VigorAP
    Remotely
  • Wi-Fi Client Load
    Balancing
Software Management
VigorACS 2
  • Provisioning
  • Monitoring
  • Centralised Hierarchy
    View
  • Alarm
  • Reboot Vigor Devices
    Remotely
  • Scheduled Maintenance
  • Report
VigorACS 3
  • Zero Touch Deployment
    & Provisioning
  • Auto VPN
  • Interface Quality & SLA
  • VoIP Optimization
    & Monitoring
  • Application Visibility
  • Application Based
    SD-WAN Policy
  • Customized Hotspot
    Page with Multilingual
  • Hotspot Clients
    Analytics
  • ACS Server Load
    Balancing / Failover

In-the-Box

Vigor2866L/Lac

2 x LTE Antennas + Socket

2 x Wireless Antennas
(Lac model)

RJ-45 Cable
(Ethernet)

RJ-11 to RJ-11 Cable
(Annex A)

Power Adaptor

Quick Start Guide

Note :

The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Models

Vigor2866L

Vigor2866L
  • G.fast or VDSL2 35b: 1
  • Selectable Gigabit WAN/LAN: 1
  • 4G LTE/3G:
    • 2 x SIM slots
      (SIM slot 2 for Failover)
    • 1 x USB 2.0
  • Wireless WAN: n/a
  • Gigabit LAN: 5
  • VPN Tunnels: 32
  • Wireless LAN: n/a
  • Wi-Fi Antenna: n/a
  • VoIP (2xFXS): n/a

Vigor2866Lac

Vigor2866Lac
  • G.fast or VDSL2 35b: 1
  • Selectable Gigabit WAN/LAN: 1
  • 4G LTE/3G:
    • 2 x SIM slots
      (SIM slot 2 for Failover)
    • 1 x USB 2.0
  • Wireless WAN: 2
  • Gigabit LAN: 5
  • VPN Tunnels: 32
  • Wireless LAN:
    WiFi 5, AC1300
  • Wi-Fi Antenna:
    3.5 dBi for 5GHz
    2.3 dBi for 2.4GHz
  • VoIP (2xFXS): n/a

Specifications

Interface (gDisplayOff)

Interface
Fixed WAN Port:
1 x RJ-11 for VDSL2 35b,
G.fast or ADSL2/2+
LAN/WAN Switchable Port:
1 x 10/100/1000Base-TX RJ-45
Fixed LAN Port:
5 x 10/100/1000Base-TX RJ-45
SIM Slot:
2 x Standard-sized SIM slots
(SIM slot 2 for Failover)
USB Port:
1 x USB 2.0 for
3G/4G LTE USB modem, storage,
printer or thermometer
LTE Antenna:
2 x External Dipole
Gain: 3 dBi
Wi-Fi Antenna:
2 x External Dipole
Gain: 3.5 dBi for 5GHz,
2.3 dBi for 2.4GHz (Lac model)
2.4G WLAN:
802.11n 2×2 MIMO
400Mbps (Lac model)
5G WLAN:
802.11ac Wave 2 2×2 MU-MIMO
867Mbps (Lac model)

Performance (gDisplayOff)

Performance
NAT Throughput:
800 Mbps
NAT Throughput
w/ Hardware Acceleration:
940 Mbps
(Single Ethernet or xDSL WAN)
1.8 Gbps
(Ethernet WAN + xDSL WAN)
IPsec VPN Performance:
300 Mbps (AES 256 bits)
SSL VPN Performance:
150 Mbps
Max. Number of NAT
Sessions:
60,000
Max. Concurrent VPN
Tunnels:
32
Max. Concurrent
OpenVPN / SSL VPN:
16

VDSL/ADSL (gDisplayOff)

xDSL
VDSL Standards:
ITU-T G.993.2 Annex A/B/M/Q
T1.424
ITU-T G.993.5 (Vectoring)
VDSL2 Profile:
8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
G.fast Profile:
106Mhz, 212Mhz
ADSL Standards:
ITU-T G.992.1 (G.dmt),
ITU-T G.992.3 (G.dmt.bis),
ITU-T G.992.5 (ADSL2+) (G.adslplus),
T1.413 Issue 2
Other Standards:
ITU-T G.994.1 (G.hs),
ITU-T G.997.1 (G.ploam),
ITU-T G.998.4 (Retransmission)
Band Plan:
998, 997

LTE (gDisplayOff)

4G LTE
LTE Category:
6
Max. Data Rate:
300 Mbps downlink, 50 Mbps uplink
FDD Band:
B1/B3/B5/B7/B8/B20/
B28/B32/B38/B40
TDD Band:
B38/B40
WCDMA (3G) Band:
1, 5, 8
SMS Gateway:
Learn More

Internet Connection (gDisplayOff)

Internet Connection
IPv4:
PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6:
PPP, DHCPv6, Static IPv6, TSPC,
AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN
Tagging
Multi-VLAN/PVC
Wireless WAN
(Lac model)
2
3G/4G/LTE WAN with
USB modem
Load Balancing:
IP-based, Session-based
WAN Active on Demand:
Link Failure, Traffic Threshold
Connection Detection:
ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

LAN Management (gDisplayOff)

LAN Management
VLAN:
802.1q Tag-based, Port-based
Max. Number of VLAN:
16
Number of LAN Subnet:
8
DHCP Server:
Multiple IP Subnet,
Custom DHCP Options,
Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x
Authentication
Port Mirroring
Local DNS Server
Conditional DNS
Forwarding
Hotspot Web Portal
Hotspot Authentication:
Click-Through, Social Login, SMS PIN,
Voucher PIN, RADIUS,
External Portal Server

Networking (gDisplayOff)

Networking
Routing:
IPv4 Static Routing,
IPv6 Static Routing,
Inter-VLAN Routing, RIP, BGP (IPv4)
Policy-based Routing:
Protocol, IP Address, Port,
Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP:
IGMP v2/v3, IGMP Proxy, IGMP
Snooping & Fast Leave
Local RADIUS server
SMB File Sharing
(Requires external storage)

VPN (gDisplayOff)

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols:
PPTP, L2TP, IPsec, L2TP over IPsec,
SSL, GRE, IKEv2, IKEv2-EAP,
IPsec-XAuth, OpenVPN (Host to LAN)
User Authentication:
Local, RADIUS, LDAP, TACACS+,
mOTP
IKE Authentication:
Pre-Shared Key, X.509
IPsec Authentication:
SHA-1, SHA-256
Encryption:
MPPE, DES, 3DES, AES
VPN Redundancy:
Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN
Matcher

Firewall & Content Filtering (gDisplayOff)

Firewall & Content Filtering
NAT:
Port Redirection, Open Ports,
Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway):
SIP, RTSP, FTP, H.323
VPN Pass-Through:
PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering:
Application, URL, DNS Keyword,
Web Features, Web Category*
(* subscription required)
DoS Attack Defence
Spoofing Defense

Bandwidth Management (gDisplayOff)

Bandwidth Management
IP-based Bandwidth
Limit
IP-based Session
Limit
QoS (Quality of Service):
TOS, DSCP, 802.1p, IP Address,
Port, Application
VoIP Prioritisation

Wireless LAN (Lac model) (gDisplayOff)

Wireless LAN (Lac model)
Number of SSID:
4 per radio band
Security:
OWE, WEP, WPA, WPA2,
Mixed(WPA+WPA2), WPA3
Authentication:
Pre-Shared Key, 802.1x
WPS:
PIN, PBC
WDS:
Repeater (5GHz Only)
Access Control:
Access List, Client Isolation,
Hide SSID, Wi-Fi Scheduling
AirTime Fairness
Band Steering
MU-MIMO (5GHz Only)
WMM

Management (gDisplayOff)

Management
Local Service:
HTTP, HTTPS, Telnet, SSH, FTP,
TR-069
Config File Export &
Import
Config File Compatibility:
Vigor2862 LTE
Firmware Upgrade:
TFTP, HTTP, TR-069
2-Level
Administration
Privilege
Access Control:
Access List, Brute Force Protection
Notification Alert:
SMS, E-mail
SNMP:
v1, v2c, v3
Syslog
Managed by
VigorACS
Central VPN Management:
8 remote Vigor routers
Central AP Management:
20 VigorAPs
Mesh Network:
7 VigorAPs (Lac model)
Central Switch
Management:
10 VigorSwitches

Physical (gDisplayOff)

Physical
Power Supply:
DC 12V @ 2.5A
Max. Power Consumption:
28.8 watts
Dimension:
241mm x 166mm x 46mm
Weight:
960g (Lac model)
Operating Temperature:
0 to 45°C
Storage Temperature:
-25 to 70°C
Operating Humidity
(non-condensing):
10 to 90%
Certificate:

Note :

  • All specifications are subject to change without notice.
  • The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

4G LTE Router Applications

DrayTek 4G LTE routers, including the Vigor2866 LTE series, Vigor2865 LTE series and Vigor2927 LTE series, have all the features you need for a network in a small to medium size business. Each of these routers has an integrated LTE modem and accepts one or two SIM cards from any of the major broadband service providers in Australia (Telstra, Optus, Vodafone, etc.), as well as those in New Zealand (Spark, 2Degrees and Vodafone). Speeds up to 300Mbps downstream and 50Mbps upstream are supported. What’s more, each of the wireless models, Vigor2866Lac, Vigor2865Lac and Vigor2927Lac, has a built-in 802.11ac wireless access point.

With the 4G LTE internet access and strong network features, the DrayTek 4G LTE routers support a wide range of application scenarios besides indoor offices, including internet access for mobile and PC devices on public transport, outdoor events and mobile offices.

Provision of Internet services for tourist bus or coach passengers

One ideal application of either  the Vigor2866Lac, Vigor2865Lac or Vigor2927Lac routers is to provide internet access for passengers on public transport such as tourist bus or coach. For the transport company to provide free Wi-Fi access for its passengers, the wireless router can be placed in a suitable location on the bus to provide good Wi-Fi coverage throughout the bus. On larger busses or double decked busses, you can install a Wi-Fi access point such as the VigorAP 903 to extend the Wi-Fi coverage.

The passengers can be given unrestricted access to the internet, or the User Management feature in the router can be used to issue usernames and passwords for the passengers to prevent unauthorised users outside the bus from getting free internet access. In addition, users can be directed to the company web portal for information on the services. Other security measures that can be implemented are the use of the firewall and Content Security Management (CSM) to protect the users from undesirable website contents (eg. for under aged passengers).

Provision of Internet services for outdoor events

A range of leisure and social activities such as sports events, weekend markets or special functions, require short term internet access. At most such outdoor locations, there is no fixed cabling to provide ADSL, VDSL or NBN services, and the only way to provide internet access is to use wireless broadband. The Vigor2866Lac, Vigor2865Lac and Vigor2927Lac routers can be set up quickly and provide internet access for these events.

The user management, web portal and firewall/CSM features can be used to enhance the operations. You can also use the Wi-Fi hotspot feature where users connect to your Wi-Fi network using the social login accounts such as Facebook or Google login, and monitor who is using your services.

Provision of Internet services for a mobile office

Mobile offices for businesses or projects may be at temporary sites without permanent internet access facilities. The Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers can provide internet access for these mobile offices.

For your inter-office communication needs, you can set up VPN connections over the 3G/4G network to share network resources such as files and servers. To protect your network, you can configure the Object-oriented SPI Firewall, DoS defense, CSM (Content Security Management) and WCF (Web Content Filter) as required. Additionally, the VLAN feature allows up to 16 workgroups to be set up to add further security and to provide different levels of network access based on the workgroup.

Technical Installation Requirements (Power Requirements when used in Mobile Applications)

Vigor2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers require a 12–15V DC power supply. Therefore when used in vehicles such as busses or trucks which have a 24V supply, you will need to use a DC to DC converter to produce 12VDC regulated output. These converters are available from electronic suppliers. They plug into the cigarette lighter socket in your bus or truck and have an output socket that plugs into the router.

The DC to DC converter shown here is available from Jaycar Electronics

It is recommended to also use the DC to DC converter when the router is used in a motor vehicle to ensure a constant voltage to the router. Although a 13.8 volt car battery output is still within the router’s power supply requirements, the voltage may fluctuate to outside the router’s requirements.

Application Notes and Video

Configuring the Vigor2866, Vigor2865L and Vigor2927L for LTE Internet access

This application note shows you how to configure the Vigor 2866 LTE, Vigor2865 LTE and Vigor2927 LTE series routers to enable 4G communication via the integrated LTE modem.

View the full application note: Click Here
Watch the video: Click Here

DrayTek Vigor2862Vac Review Published in APC Magazine Issue 455, June 2018

It’s been a while since DrayTek last updated its line of small business DSL modem routers, but the new Vigor is a worthy update, modernising many of the features of the Vigor2860 series without departing dramatically from that baseline.

Aesthetically, the router is consistent with DrayTek’s previous routers: no frills, with LAN, USB, WAN, DSL and phone ports up front for easy access. Only the power plugs into the back of the router. This isn’t pretty when it’s all plugged in – it’s more like a rack mount in miniature than what you might have come to expect from more consumer focused routers – but the DrayTek…

DrayTek Vigor2862Vac Review Published in PC & Tech Authority Magazine Issue Apr 2018

Overview of DrayTek Vigor2862 Series Routers