• Card slot for FDD & TDD 4G LTE SIM card supports band B1/B2/B3/B5/B7/B8/B28/B40

  • VDSL2/ADSL2+, 1 x configurable GbE WAN/LAN port,
    1 x USB port, and 1 x 4G LTE SIM card slot

  • 1 x USB 2.0 port for 3G/4G LTE Modem, FTP server, network printer or temperature sensor

  • Single WAN or Multi-WAN Load Balance and Failover

  • 4 x Gigabit LAN ports with multiple subnets and 50,000 NAT sessions

  • Integrated IEEE 802.11ac (AC2000) Wave 2 wireless Access Point; dual band; up to 1.7Gbps throughput (Lac model)
  • Object-based SPI Firewall and CSM (Content Security Management) for network security

  • Supports QoS functions

  • IPv6 & IPv4

  • Increased IP addresses (1022) and IP subnets (8)

  • 16 x VLANs for secure and efficient workgroup management

  • 32 x VPN tunnels (including 16 x SSL-VPN tunnels) with comprehensive secure protocols

  • Fast VPN throughput, VPN load-balancing and backup for site-to-site applications

  • High Availability mode

  • Central AP Management for deployment of multiple wireless VigorAPs

  • Central VPN Management for 8 remote Vigor routers

  • Supports VigorACS 2 Central Management System for remote management

  • 2 years back to base warranty


The Vigor2862 LTE series router has most of the functions of the Vigor2862 series routers, plus a slot for a 4G LTE mobile broadband SIM card. The supported SIM cards include those from the major broadband service providers in Australia (Telstra, Optus, Vodafone, etc.), as well as those in New Zealand (Spark, 2Degrees and Vodafone) with speeds up to 150Mbps downstream and 50Mbps upstream.

In addition to the 4G LTE mobile broadband, the Vigor2862L series router has other WAN interfaces including 1 x VDSL2/ADSL2+, 1 x Gigabit Ethernet WAN and 1 x USB port for a 3G/4G mobile dongle. With the latest Wi-Fi WAN feature, you can configure WAN2 to use the router Wi-Fi to connect to an external Wi-Fi hotspot.

The Vigor2862 LTE series router can connect to the Internet through any of these interfaces, or with a combination of interfaces for Load Balance and Failover functions. Like the Vigor2862 series, this router supports business features including an object-oriented SPI (Stateful Packet Inspection) firewall, IPv6, 32 x VPN tunnels (including 16 x SSL VPN tunnels), tag-based VLAN, multiple subnets, etc.

For mission critical applications, the Vigor2862 LTE series router can be used in High Availability mode to provide uninterrupted network connectivity, if there is a hardware failure occurrence in the primary router.

The LTE feature makes the Vigor2862 LTE series router an ideal solution for applications such as:

  • Remote locations with no fixed line or NBN coverage
  • Quick setup for new branches waiting for xDSL/Ethernet WAN (e.g. NBN)
  • Load Balancing or Failover backup for an existing primary Internet connection which can be any of ADSL/VDSL/Cable/Ethernet broadband
  • Temporary installations such as disaster recovery and emergency situations, exhibitions, sporting events, etc., where Internet access is required for a short period
  • Provision of Internet access on public transport such as coaches, buses, trains, freighters, etc.

The Vigor2862 LTE series router can be rack mounted using a 1RU rack mount bracket on a standard 19” rack or cabinet.

Advanced features

  1. Faster Wi-Fi speed 802.11ac Wave 2 dual-band wireless for speed up to 1.7Gbpsac for Vigor2862Lac
  2. Increased number of IP addresses supported IP Pool Count (up to 1022) for LAN1~3 subnet, compared to 253 for Vigor2860L series
  3. Increased number of IP subnets (8 in Vigor2862L series compared to 5 in Vigor2860L series)
  4. Increased number of VLANs (16 in Vigor2862L series compared to 8 in Vigor2860L series)
  5. Faster processor in Vigor2862L series
  6. Faster NAT/Firewall throughput in Vigor2862 series compared to Vigor2860 series (400Mbps for Vigor2862 series vs 300Mbps for Vigor2860 series)
  7. Faster VPN throughput in Vigor2862L series
  8. Additional LTE bands are now supported. Band 5 (850 MHz) and band 28 (700 MHz) ensuring greater coverage in Australia and New Zealand

LTE Function

The Vigor2862L series router has a SIM card slot for a FDD/TDD LTE/4G category 4 mobile broadband modem. The 4G/LTE SIM card slot allows you to insert a SIM card from your service provider and have Internet access without the need to use additional hardware. It is protected by a cover.

The Vigor2862L series router has 2 LTE antennas. A 1 metre extension lead with a magnetic base allows the antennas to be placed in the best position for optimum 3G/4G reception.

LTE/4G Specification

  • LTE/4G category 4

  • 150Mbps downstream and 50Mbps upstream
  • 4G LTE FDD Band: 1, 3, 5, 7, 8, 28

  • 4G LTE TDD Band: 40
  • 3G WCDMA Band: 1, 5, 8

The SMS feature allows status and alerts to be sent by the router, or an IT admin can reboot or configure the router with a pre-configured host.

WAN Connectivity

The Vigor2862 LTE series router supports 4 types of WAN Interfaces, including an ADSL2+/VDSL2 WAN interface, a configurable GbE WAN/LAN port, a USB port for a supported USB 3G/4G USB modem, and a card slot for LTE 4G/LTE modem. Additionally the Wi-Fi WAN can be tethered to a Wi-Fi hotspot such as a 4G Wi-Fi modem for Internet access.

3G/4G mobile broadband access can be achieved through either a SIM card in the 4G LTE SIM card slot, or a USB dongle in the 3G/4G USB port.

With between 2 to 4 WAN interfaces connected, you can configure for Load Balancing or Failover. For example, you can use WAN 1 as your primary Internet connection and have a failover connection over a 4G LTE connection.


The Vigor2862 LTE series router has 4 x Gigabit LAN ports and supports with 50,000 NAT sessions.

The Vigor2862 LTE series router supports both port-based and 802.1q tagged VLANs. Port based VLANs allow the assignment of a VLAN and IP subnet to each router LAN port. On the other hand, 802.1q tagged VLANs can extend up to 8 VLANs and the IP subnets to an attached switch.

Wireless LAN

The Vigor2862Lac has a built-in IEEE802.11ac Wave 2 dual-band wireless for speeds up to 1.7Gbps providing good coverage and excellent Wi-Fi performance. The IEEE802.11ac Wave 2 allows up to 4 Wi-Fi clients to simultaneously have full speed over the wireless network.

The MIMO technology (4×4) with diversified antenna arrangement minimises interference effects and ensures good wireless performance.

To match the business level features of Vigor2862L series, Vigor2862Lac supports all major Wi-Fi encryption protocols: WEP, WPA, WPA2 and 802.11X, plus MAC Address access control, and DHCP Fixing to prevent unauthorized accessing.

The Hotspot Web-portal (log-in) provides four profiles to allow guest users to log in to the wireless network by using their social account (Facebook or Google) use a PIN code issued via SMS.

8 x SSID’s are available (4 for the 2.4GHz band and 4 for the 5GHz band). Each of the SSIDs can be created and assigned to a VLAN and IP subnet with separate security levels. The wireless VLAN function lets you isolate wireless clients from each other or from the “wired” LAN.

With WPS (Wi-Fi Protected Setup) feature, you can press the WPS button at the front of the router to pass on the security keys to a client PC in the LAN, allowing for easy and secured access to the Wireless LAN.

Quality of Service (QoS)

QoS functions allow the network administrator to set priorities for certain types of traffic to guarantee the required level of performance for data flow. For example, real-time traffic such as VoIP or Video over IP can be prioritised as these have less tolerance over delays caused by network congestion.

The traffic type can be assigned to each of the three QoS classes and reserved bandwidth allocated.


The Vigor2862 LTE series router has powerful firewall features including object-oriented SPI (Stateful Packet Inspection) firewall, DoS (Denial of Services), CSM (Content Security Management) and WCF (Web Content Filter).

Stateful Packet Inspection (SPI) Firewall monitors incoming and outgoing packets at layer 3 (OSI model) and passes or blocks the data packets based on the configuration.

The DoS feature protects the network for unwanted access requests from DoS attackers.

CSM enables network administrators to control and manage IM (Instant Messenger) and P2P (Peer-to-Peer) applications, for instance, to keep network users from accessing inappropriate contents and ensure that network traffic flow efficiently.

WCF classifies all websites into 64 categories, and allows network administrators to select categories to protect the users from undesirable website content. DrayTek uses the CYREN WCF database for its Vigor routers, and each router includes a free 30-day trial license.

The object-based firewall provides flexibility by using Objects in the firewall settings. Objects can be created and placed in groups for IP, service type, keyword, file extension, etc. This allows a filter rule to be applied to many IP addresses, reducing number of firewall filters required. In addition, these objects and groups can be reused for other firewall settings resulting in reduced amount of work required to create multiple firewall rules.

Firewall rules can be applied according to a Time Schedule to control access to the Internet or network services according to predetermined time slots. Up to 4-time schedules can be applied to each firewall filter rule. For example, social media can be restricted during work hours and be allowed during off work hours in a company.


The Vigor2862 LTE series supports up to 32 simultaneous VPN tunnels, of major protocols such as IPSec/PPTP/L2TP, including 16 SSL VPN tunnels protocol. The dedicated VPN co-processor supports the hardware encryption of AES/DES/3DES, hardware key hash of SHA-1/MD5, and LDAP authentication, and ensures that VPN traffic is secure and performance is maximised.

The SSL technology allows secure Web encryption such as those used for on-line banking. With the Vigor2862 LTE series router, you can create SSL VPN in Full Tunnel mode or Proxy mode.

Furthermore, since the Vigor2862 LTE series router supports multiple WANS Ethernet and 3G/4G, you can create VPN Trunking for VPN Load Balance and VPN Backup. For instance, you can use a number of connections to a site to increase the bandwidth, or have a backup connection when the primary connection fails.

Central VPN Management

Instead of normal method for VPN connection through web browsers, Vigor2862 LTE series supports Central VPN Management (CVM) which utilises TR-069 protocol. You can create VPN tunnels with just a few mouse clicks on the icons representing your local network (e.g. public places such as a café) and remote locations (e.g. branch or home office), and the router will establish the connection automatically. This takes away the tedious process required for VPN tunnel creation.

As well as simplifying creation of VPN tunnels, CVM also provide a console to monitor multiple CPE devices and VPN tunnels. This includes displaying the CPE devices on a Google Map.

Other features include scheduling of CPE configuration backup/restore tasks as well as scheduled firmware upgrade of the CPE devices. Up to 8 DrayTek CPE devices are supported.

Central AP Management

Vigor2862 LTE series router supports Central AP Management (APM) with a console to auto configure and manage up to 20 directly connected (via LAN cables) Draytek wireless Access Points including VigorAP 800, VigorAP 810, VigorAP 900, VigorAP 910C, VigorAP903 and VigorAP 920R.

The Dashboard feature displays the status such as traffic and number of attached stations, of all the attached Access Points.

With Auto Provisioning enabled on the attached Access Points, WLAN profiles can be created and applied to the selected Access Points from the central console.

The AP Maintenance feature allows a number of actions to be programmed, including Configuration Backup and Restore, Firmware Upgrade, Remote Reboot and Factory Reset, for selected Access Points.

The connected Access Points can also be displayed on a map or floor plan showing their locations and basic descriptions. Other features include Traffic Graph, Rogue AP detection, Event Log, Total Traffic, Station number and Access Point load balancing.

Central Switch Management

Central Switch Management provides a convenient and easy way to manage and configure supported VigorSwitches.  Switched networks comprising VigorSwitches can be easily deployed from a single console. With a few mouse clicks in the graphical user interface, VLANs can be assigned to the switch ports and at the same time update the router configuration. This includes the creation of 802.1q trunk ports.

Another feature is the backup and restore of switch configurations. You can also reboot the switch or reset the switch to factory default settings

The Switch Status menu provides, at a glance, the status of all the attached switches. You can see the switch name, its IP address, the model number and system up time, how many ports are in use in each switch, port status, how many clients are connected, etc.

Central Switch Management simplifies VigorSwitch configuration tasks and reduces troubleshooting efforts.

Remote Access Management

The Vigor2862 LTE series router includes a number of management options to provide both local and remote access to monitor and manage the router.

The TR-069 feature integrates with the VigorACS 2 centralised management system. This can be used to allow system integrators or network administrators to configure, monitor and manage the Vigor2862L remotely from the comfort of their offices or homes. It can also be used to Auto-Provision the Vigor2862L remotely by sending configuration data to the router. There are 3 wizards: Configuration Wizard, VPN Wizard and Firmware Upgrade Wizard. These allow network administrators to quickly and easily carry out complex tasks.

Alarm & Log Management features ensure real time notifications and alerts to specified phone numbers or email accounts in relation to any faults or issues of the connected CPEs.

A number of diagnostic functions are also available for the network administrator to monitor and troubleshoot any network issues. These include Data Flow Monitor, Traffic Graph and Syslog Explorer, etc.

Like all Vigor routers, Vigor2862 LTE series router supports management options include HTTP, HTTPS, FTP, SSH, Telnet and SNMP.

High Availability Mode

High Availability mode in the Vigor2862 LTE series router provides hardware redundancy in the network by the use of one or more Vigor2862 LTE series routers in a group that can be configured for Hot-Standby or Active-Standby. High Availability is essential in mission critical applications where the network as well as Internet connectivity needs to be available 100% of the time. Should a hardware failure occur in the primary router, the standby router will immediately come on line to provide uninterrupted network connectivity.

Key features of High Availability mode are:

  • WCF License share (Hot-Standby only): Network administrators can create a High Availability group on MyVigor website and include at most 8 routers to join the group and share the same WCF license. Only 1 router (the primary) can use the license at a time, and when the primary router goes down, the secondary router will come up and register to MyVigor server and continuously provide firewall protection to LAN clients. It means only one WCF license is required per High Availability group.
  • Configuration Sync (Hot-Standby only): Every configuration/modification made on the primary router will be synchronized to the other group member(s) ensuring that network functionality is identical should the primary router fail.
  • DDNS Update:For dynamic WAN IP users, High Availability group members can share the same DDNS account, that when secondary router become primary, it will update the DDNS profile so the network can still be accessible via the same DDNS domain.


VDSL2 or ADSL2/2+
Configurable GbE WAN/LAN11
3G/4G LTE1 x SIM slot
1 x USB port
1 x SIM slot
1 x USB port
Gigabit LAN44
VPN Tunnels3232
Wireless LAN


Interface (hide)

Fixed WAN Port1x RJ-11
LAN/WAN Switchable Port1x Gigabit Ethernet
Fixed LAN Port4x Gigabit Ethernet
SIM Slot1x Standard-Sized
USB Port1x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
2.4G WLAN300Mbps 802.11n (Lac model)
5G WLAN1.7Gbps 802.11ac Wave 2 (Lac model)

Performance (hide)

NAT Throughput500 Mbps
NAT Throughput w/ Hardware Acceleration900 Mbps
IPsec VPN Performance90 Mbps (AES 256 bits)
SSL VPN Performance45 Mbps
Max. Number of NAT Sessions50,000
Max. Concurrent VPN Tunnels32
Max. Concurrent OpenVPN + SSL VPN16

VDSL/ADSL (hide)

VDSL StandardsITU-T G.993.1 (VDSL), G.997.1, G.993.2 (VDSL2)
VDSL2 Profile8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a
VDSL Band Plan997, 998
ADSL StandardsANSI T1.413, ITU-T G.992.1(G.dmt), G.992.2 (G.lite)
ADSL2 StandardsITU-T G.992.3, G.992.3 Annex J
ADSL2+ StandardsITU-T G.992.5, G.992.5 Annex M
DSL ForumTR-114, TR-048/67, TR-100

LTE (hide)

LTE Category4
Max. Data Rate150 Mbps downlink, 50 Mbps uplink
FDD Band1 (2100MHz), 3 (1800MHz), 5 (850MHz), 7 (2600MHz), 8 (900MHz), 28(700MHz)
TDD Band40 (2300MHz)
WCDMA (3G) Band1, 5, 8
GSM/GPRS/EDGE Band900, 1800 MHz

Internet Connection (hide)

Internet Connection
IPv6PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel
Wireless WAN (Lac model)
3G/4G/LTE WAN with USB modem1
Load BalancingIP-based, Session-based
WAN Active on DemandLink Failure, Traffic Threshold
Connection DetectionARP, Ping
WAN Data Budget
Dynamic DNS

LAN Management (hide)

LAN Management
VLAN802.1q Tag-based, Port-based
Max. Number of VLAN16
DHCP ServerMultiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot AuthenticationClick-Through, Social Login, SMS PIN, RADIUS

Networking (hide)

RoutingIPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP
Policy-based RoutingProtocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
MulticastIGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Local RADIUS server
SMB File Sharing (Requires external storage)

VPN (hide)

ProtocolsPPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, OpenVPN
User AuthenticationLocal, RADIUS, LDAP, TACACS+, mOTP
IKE AuthenticationPre-Shared Key, X.509
IPsec AuthenticationSHA1, SHA256, MD5
VPN RedundancyLoad Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)

Firewall & Content Filtering (hide)

Firewall & Content Filtering
NATPort Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)SIP, RTSP, FTP, H.323
VPN Pass-ThroughPPTP, L2TP, IPsec
IP-based Firewall Policy
Content FilteringApplication, URL, DNS Keyword, Web Features, Web Category (subscription required)
DoS Attack Defense

Bandwidth Management (hide)

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization

Wireless LAN (n/ac model) (hide)

Wireless LAN (ac model)
Number of SSID4 per radio band
SecurityWEP, WPA, WPA2, WPS
AuthenticationPre-Shared Key, 802.1x
AirTime Fairness
Band Steering(ac model)
WDSBridge, Repeater
Access ControlAccess List, Client Isolation, Hide SSID, Wi-Fi Scheduling

Management (hide)

Local ServiceHTTP, HTTPS, Telnet, SSH, TR-069, SMS Sending & Recieving
Config File Export & Import
Config File CompatibilityVigor2862 Series
Firmware UpgradeTFTP, HTTP, TR-069
2-Level Administration Privilege
Access ControlAccess List, Brute Force Protection
Notification AlertSMS, E-mail
SNMPv2, v2c, v3
Managed by VigorACS
Central AP Management20 VigorAP
Central Switch Management10 VigorSwitch

Physical (hide)

Power SupplyDC 12V @ 1.5-2A
Dimension241mm x 166mm x 46mm
Operating Temperature0 to 45°C
Storage Temperature-25 to 70°C
Operating Humidity (non-condensing)10 to 90%

DrayTek Vigor2862Lac review published on techradar.com


4G LTE Router Applications

DrayTek 4G LTE routers, including the Vigor2862 LTE series and Vigor2926 LTE series, have all the features you need for a network in a small to medium size business. Each of these routers has an integrated LTE modem and accepts a SIM card from any of the major broadband service providers in Australia (Telstra, Optus, Vodafone, etc.), as well as those in New Zealand (Spark, 2Degrees and Vodafone). Speeds up to 150Mbps downstream and 50Mbps upstream are supported. What’s more, each of the wireless models, Vigor2862Lac and Vigor2926Lac, has a built-in 802.11ac wireless access point.

With the 4G LTE internet access and strong network features, the DrayTek 4G LTE routers support a wide range of application scenarios besides indoor offices, including internet access for mobile and PC devices on public transport, outdoor events and mobile offices.

Provision of Internet services for tourist bus or coach passengers

One ideal application of either the Vigor2862Lac or Vigor2926Lac routers is to provide internet access for passen-gers on public transport such as tourist bus or coach. For the transport company to provide free Wi-Fi access for its passengers, the wireless router can be placed in a suitable location on the bus to provide good Wi-Fi coverage throughout the bus. On larger busses or double decked busses, you can install a Wi-Fi access point such as the VigorAP 902 to extend the Wi-Fi coverage.

The passengers can be given unrestricted access to the internet, or the User Management feature in the router can be used to issue usernames and passwords for the passengers to prevent unauthorised users outside the bus from getting free internet access. In addition, users can be directed to the company web portal for information on the services. Other security measures that can be implemented are the use of the firewall and Content Security Man-agement (CSM) to protect the users from undesirable website contents (eg. for under ag