Hardware NAT Routers for Professionals
The Vigor2135 Series are broadband Firewall and VPN routers. The built-in hardware accelerator delivers up to 940 Mbps performance without sacrificing bandwidth control features. Business-grade features including web content filtering, Route Policy, App-based QoS and lots more, make these perfect for professional smart homes/SOHO users who would like to take full control of their own network. The series includes models with built-in 802.11ac Wave 2 Wi-Fi, 802.11ax Wi-Fi (ax model), and VoIP gateway (Vac model).
Vigor2135ax
802.11ax (WiFi 6, AX3000)
Interface
(Vac model)
(ax model)
Performance Comparison: Vigor2135 vs. Vigor2133
NAT throughput (1.2x times faster)
IPSec throughput (2.1 times faster)
SSL-VPN throughput (2 times faster)
Key Features
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2135 Series to the remote offices and teleworkers over the Internet. Learn more
DrayDDNS
Free DDNS service to access the router using a fixed hostname of your choice. Learn more
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Firewall & Content Filter
Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.
VPN Matcher
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more.
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Central AP Management
Use the Vigor2135 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
VoIP Friendly (Vac Model)
Vigor2135 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more.
[DISPLAY OFF] —– MOBILE VIEW
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2135 Series to the remote offices and teleworkers over the Internet. Learn more
DrayDDNS
Free DDNS service to access the router using a fixed hostname of your choice. Learn more
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Firewall & Content Filter
Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.
VPN Matcher
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more.
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Central AP Management
Use the Vigor2135 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
VoIP Friendly (Vac Model)
Vigor2135 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more.
Hardware NAT & Routing with Hardware QoS
The built-in hardware accelerator supports up to 4k NAT and routing connections. With acceleration enabled, the Vigor2135’s throughput can reach up to 940Mbps, ensuring that network functions such as Firewall and QoS perform well above the standards. Other business critical apps, such as VoIP, can be easily prioritized.
NAT Performance (1.6x times faster)
New OFDMA Feature for 802.11ax (WiFi 6) – Vigor2135ax only
Higher Transmission Efficiency with OFDMA
OFDMA has been used in LTE for many years, and is now available in 802.11ax for multi-user mode.
With legacy OFDM, each frame is transmitted across the entire channel width. When the transmission rate is low, this causes more latency and jitters and lower the overall efficiency.
OFDMA splits a single frame into groups of subcarriers, and each subcarrier can be sent simultaneously. With multiple access mode, it allows multiple users to transmit at the same time thus improving efficiency and enhancing user experiences in high density environments.
OFDM
OFDMA
AP-Assisted Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points
Extend Transmission Range
When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.
Improve Data Rates
When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.
Better User Experience
Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.
No Controller Required
Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.
Stronger Signal Guaranteed
By using the “Minimum RSSI with Adjacent AP” option, the AP/Routers on the same local subnet will exchange client information with each other, providing the choice to disassociate a client only when another AP with a stronger signal is detected. This keeps the client connected when there is no other AP nearby.
Hotspot Web Portal
Market your business while offering free Wi-Fi
Wi-Fi Marketing
Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.
Grow Customer Mailing List
Require guests to leave contact info or social media accounts before they can use the Internet services.
Various Authentication Types
Various login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, and RADIUS.
3rd-Party Service Compliant
Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.
Data Quota Management
Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.
LAN Management
A Network Management platform for Vigor devices to manage devices on the network
Automatic Device Discovery
Connect a Vigor AP to the LAN side, and the Vigor router will discover it automatically.
Provisioning
Basic settings of the managed Vigor AP will be configured by the router automatically.
Monitoring
The status of the connected devices, such as Vigor APs, will be monitored by the Vigor Router.
System Maintenance
Tasks such as factory reset, backup and restore of configuration settings, or remote reboot can be performed from the Vigor routers, without needing to log in to the devices’ management pages.
All-in-One Management
Mesh Management
Up to 7 APs
- DrayTek Wireless app-support
- Discovery
- Auto-Provisioning
- Monitoring
- Centralized Hierarchy View
VigorAP-based APM
- Auto-Discovery
- Auto-Provisioning
- Monitoring
- Centralized View
- Alarm
- Reboot VigorAP Remotely
- Wi-Fi Client Load Balancing
[DISPLAY OFF] —– MOBILE VIEW
Mesh Management
Up to 7 APs
- DrayTek Wireless app-support
- Discovery
- Auto-Provisioning
- Monitoring
- Centralized Hierarchy View
VigorAP-based APM
- Auto-Discovery
- Auto-Provisioning
- Monitoring
- Centralized View
- Alarm
- Reboot VigorAP Remotely
- Wi-Fi Client Load Balancing
Software Management
VigorACS 2
- Provisioning
- Monitoring
- Centralised Hierarchy View
- Alarm
- Reboot Vigor Devices Remotely
- Scheduled Maintenance
- Report
VigorACS 3
- Zero Touch Deployment & Provisioning
- Auto VPN
- Interface Quality & SLA
- VoIP Optimization & Monitoring
- Application Visibility
- Application Based SD-WAN Policy
- Customized Hotspot Page with Multilingual
- Hotspot Clients Analytics
- ACS Server Load Balancing / Failover
[DISPLAY OFF] —– MOBILE VIEW
VigorACS 2
- Provisioning
- Monitoring
- Centralised Hierarchy View
- Alarm
- Reboot Vigor Devices Remotely
- Scheduled Maintenance
- Report
VigorACS 3
- Zero Touch Deployment & Provisioning
- Auto VPN
- Interface Quality & SLA
- VoIP Optimization & Monitoring
- Application Visibility
- Application Based SD-WAN Policy
- Customized Hotspot Page with Multilingual
- Hotspot Clients Analytics
- ACS Server Load Balancing / Failover
In-the-Box
Vigor2135ax/ac/Vac
Vigor2135ax
Antenna x 2
(ax/ac/Vac model)
RJ-45 Cable
(Ethernet)
Power Adaptor
Quick Start Guide
Note :
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Models
| Model | Vigor2135 | Vigor2135ax | Vigor2135ac |
|---|---|---|---|
| Product |  |  |  |
| Gigabit WAN | 1 | 1 | 1 |
| Selectable Gigabit WAN/LAN | |||
| 4G LTE/3G | 2 x USB 2.0 | 2 x USB 2.0 | 2 x USB 2.0 |
| Wireless WAN | |||
| Gigabit LAN | 4 | 4 | 4 |
| VPN Tunnels | 2 | 2 | 2 |
| Wireless LAN | WiFi 6, AX3000 | WiFi 5, AC1300 | |
| Wi-Fi Antenna | 2.5dBi for 5GHz 2.7dBi for 2.4GHz | 4dBi for 5GHz 2dBi for 2.4GHz | |
| VoIP (2xFXS) |
Specifications
Interface (gDisplayOff)
| Interface | |
|---|---|
| WAN Port | 1 x Gigabit Ethernet |
| LAN Port | 4 x Gigabit Ethernet |
| USB Port | 2 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
| Wi-Fi Antenna | 2 x External Dipole, Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (ac/Vac model) 2x External Dipole, Gain: 2.5 dBi for 5GHz, 2.7 dBi for 2.4GHz (ax model) |
| 2.4G WLAN | 802.11n 2×2 MIMO 400Mbps (ac/Vac model) 802.11ax 2×2 MIMO, up to 574Mbps Link Rate (ax model) |
| 5G WLAN | 802.11ac Wave 2 2×2 MU-MIMO 867Mbps (ac/Vac model) 802.11ax 2×2 MU-MIMO, up to 2402Mbps Link Rate (ax model) |
[DISPLAY OFF] —– MOBILE VIEW
| Interface |
|---|
| WAN Port: 1 x Gigabit Ethernet |
| LAN Port: 4 x Gigabit Ethernet |
| USB Port: 2x USB 2.0 for 3G/4G LTE USB modem, storage, printer or thermometer |
| Wi-Fi Antenna: 2 x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (ac/Vac model) 2 x External Dipole Gain: 2.5 dBi for 5GHz, 2.7 dBi for 2.4GHz (ax model) |
| 2.4G WLAN: 802.11n 2×2 MIMO, Up to 400Mbps Link Rate (ac/Vac model) 802.11ax 2×2 MIMO, up to 574Mbps Link Rate (ax model) |
| 5G WLAN: 802.11ac Wave 2 2×2 MU-MIMO, Up to 867Mbps Link Rate (ac/Vac model) 802.11ax 2×2 MU-MIMO, up to 2402Mbps Link Rate (ax model) |
Performance (gDisplayOff)
| Performance | |
|---|---|
| NAT Throughput | 600 Mbps |
| NAT Throughput w/ Hardware Acceleration | 940 Mbps |
| IPsec VPN Performance | 150 Mbps (AES 256 bits) |
| SSL VPN Performance | 100 Mbps |
| Max. Number of NAT Sessions | 50,000 |
| Max. Concurrent VPN Tunnels (including OpenVPN/ SSL-VPN) | 2 |
[DISPLAY OFF] —– MOBILE VIEW
| Performance |
|---|
| NAT Throughput: 600 Mbps |
| NAT Throughput w/ Hardware Acceleration: 940 Mbps |
| IPsec VPN Performance: 150 Mbps (AES 256 bits) |
| SSL VPN Performance: 100 Mbps |
| Max. Number of NAT Sessions: 50,000 |
| Max. Concurrent VPN Tunnels (including SSL VPN): 2 |
Internet Connection (gDisplayOff)
| Internet Connection | |
|---|---|
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| 3G/4G/LTE WAN with USB modem | |
| WAN Failover | |
| Connection Detection | ARP, Strict ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
[DISPLAY OFF] —– MOBILE VIEW
| Internet Connection | |
|---|---|
| IPv4: PPPoE, DHCP, Static IP, PPTP/L2TP | |
| IPv6: PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel | |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| 3G/4G/LTE WAN with USB modem | |
| WAN Failover | |
| Connection Detection: ARP, Strict ARP, Ping | |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management (gDisplayOff)
| LAN Management | |
|---|---|
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 8 |
| Number of LAN Subnet | 4 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Mail PIN, RADIUS, External Portal Server |
[DISPLAY OFF] —– MOBILE VIEW
| LAN Management | |
|---|---|
| VLAN: 802.1q Tag-based, Port-based | |
| Max. Number of VLAN: 8 | |
| Number of LAN Subnet: 4 | |
| DHCP Server: Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication: Click-Through, Social Login, SMS PIN, Mail PIN, RADIUS, External Portal Server | |
Networking (gDisplayOff)
| Networking | |
|---|---|
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2 |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| DNS Security (DNSSEC) | |
| Multicast | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour |
| SMB File Sharing | (Requires external storage) |
[DISPLAY OFF] —– MOBILE VIEW
| Networking | |
|---|---|
| Routing: IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2 | |
| Policy-based Routing: Protocol, IP Address, Port, Domain, Country | |
| DNS Security (DNSSEC) | |
| IGMP: IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour | |
| SMB File Sharing: (Requires external storage) | |
VPN (gDisplayOff)
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN |
| User Authentication | Local, RADIUS, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA1, SHA256, MD5 |
| Encryption | MPPE, DES, 3DES, AES128, AES192, AES256 |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
[DISPLAY OFF] —– MOBILE VIEW
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols: PPTP, L2TP, IPsec, L2TP over IPsec, SSL, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN | |
| User Authentication: Local, RADIUS, mOTP | |
| IKE Authentication: Pre-Shared Key, X.509 | |
| IPsec Authentication: SHA1, SHA256, MD5 | |
| Encryption: MPPE, DES, 3DES, AES128, AES192, AES256 | |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering (gDisplayOff)
| Firewall & Content Filtering | |
|---|---|
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category (subscription required) |
| DoS Attack Defence | |
| Spoofing Defense | |
[DISPLAY OFF] —– MOBILE VIEW
| Firewall & Content Filtering | |
|---|---|
| NAT: Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP | |
| ALG: (Application Layer Gateway) SIP, RTSP, FTP, H.323 | |
| VPN Pass-Through: PPTP, L2TP, IPsec | |
| IP-based Firewall Policy | |
| Content Filtering: Application, URL, DNS Keyword, Web Features, Web Category (subscription required) | |
| DoS Attack Defence | |
| Spoofing Defense | |
Bandwidth Management (gDisplayOff)
| Bandwidth Management | |
|---|---|
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
| APP Qos | |
[DISPLAY OFF] —– MOBILE VIEW
| Bandwidth Management | |
|---|---|
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service): TOS, DSCP, 802.1p, IP Address, Port, Application | |
| VoIP Prioritization | |
| APP QoS | |
Wireless LAN (n/ac model) (gDisplayOff)
| Wireless LAN (ac/ax model) | |
|---|---|
| 2.4GHz WLAN | 802.11n 2×2 MIMO (ac model) 802.11ax 2×2 MIMO (ax model) |
| 5GHz WLAN | 802.11ac Wave 2 2×2 MU-MIMO (ac model) 802.11ax 2×2 MU-MIMO (ax model) |
| Antennas | 2 |
| Antenna Type | External Dipole |
| 2.4GHz Gain | 2dBi (ac model) 2.7dBi (ax model) |
| 5GHz Gain | 4dBi (ac model) 2.5dBi (ax model) |
| 2.4GHz Max. Link Rate | 400Mbps (ac model) 574Mbps (ax model) |
| 5GHz Max. Link Rate | 867Mbps (ac model) 2402Mbps (ax model) |
| Max. Number of SSIDs per band | 4 |
| Security Mode | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
| Authentication | Pre-Shared Key, 802.1x |
| WiFi 6 | (ax model) |
| OFDMA | (ax model) |
| WPS | PIN, PBC |
| WDS | Repeater (5GHz only) |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
| AirTime Fairness | |
| Band Steering | |
| WMM | |
| Mesh (5GHz only) | Root |
[DISPLAY OFF] —– MOBILE VIEW
| Wireless LAN (ac/ax model) | |
|---|---|
| 2.4GHz WLAN: 802.11n 2×2 MIMO (ac model) 802.11ax 2×2 MIMO (ax model) | |
| 5GHz WLAN: 802.11ac Wave 2 2×2 MU-MIMO (ac model) 802.11ax 2×2 MU-MIMO (ax model) | |
| Antennas | 2 |
| Antenna Type: External Dipole | |
| 2.4GHz Gain: 2dBi (ac model) 2.7dBi (ax model) | |
| 5GHz Gain: 4dBi (ac model) 2.5dBi (ax model) | |
| 2.4GHz Max. Link Rate: 400Mbps (ac model) 574Mbps (ax model) | |
| 5GHz Max. Link Rate: 867Mbps (ac model) 2402Mbps (ax model) | |
| Max. Number of SSIDs per band | 4 |
| Security Mode: OWE, WEP, WPA, WPA2, Mixed (WPA+WPA2), WPA3 | |
| Authentication: Pre-Shared Key, 802.1x | |
| WiFi 6: (ax model) | |
| OFDMA: (ax model) | |
| WPS: PIN, PBC | |
| WDS: Repeater (5GHz only) | |
| Access Control: Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling | |
| AirTime Fairness | |
| Band Steering | |
| WMM | |
| Mesh (5GHz only): Root | |
Management (gDisplayOff)
| Management | |
|---|---|
| Local Service | HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069 |
| Config File Export & Import | |
| Config File Compatibility | Vigor2132 Series, Vigor2133 Series |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| Netflow | (v5, v9, IPFIX) |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central AP Management | 2 VigorAPs |
| Mesh Network | 7 VigorAPs (ac/Vac model) |
[DISPLAY OFF] —– MOBILE VIEW
| Management | |
|---|---|
| Local Service: HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 | |
| Config File Export & Import | |
| Config File Compatibility: Vigor2132 Series, Vigor2133 Series, | |
| Firmware Upgrade: TFTP, HTTP, TR-069 | |
| 2-Level Administration Privilege | |
| Access Control: Access List, Brute Force Protection | |
| Notification Alert: SMS, E-mail | |
| Netflow (v5, v9, IPFIX) | |
| SNMP: v1, v2c, v3 | |
| Syslog | |
| Managed by VigorACS | |
| Central AP Management: 2 VigorAPs | |
| Mesh Network: 7 VigorAPs (ac/Vac model) | |
Physical (gDisplayOff)
| Physical | |
|---|---|
| Power Supply | DC 12V @ 1.5A-2A |
| Max. Power Consumption | 18 watts (Vac model) |
| Dimension | 207mm x 131mm x 42mm 194mm x 155mm x 50mm (ax model) |
| Weight | 440g (Vac model) |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate |    |
[DISPLAY OFF] —– MOBILE VIEW
| Physical | |
|---|---|
| Power Supply: DC 12V @ 1.5A-2A | |
| Max. Power Consumption: 18 watts (Vac model) | |
| Dimension: 207mm x 131mm x 42mm 194mm x 155mm x 50mm (ax model) | |
| Weight: 440g (Vac model) | |
| Operating Temperature: 0 to 45°C | |
| Storage Temperature: -25 to 70°C | |
| Operating Humidity (non-condensing): 10 to 90% | |
| Certificate: | |
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Reviews
DrayTek Vigor2135ax Review Published in APC Magazine Issue 523 – Sep 2023
