DrayTek Vigor 2866ax G Fast DSL WiFi 6 Router

Technical Specifications

Physical Interfaces

• WAN1: G.fast / VDSL2 / VDSL2 35b / ADSL2+, RJ11
• WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ45
• LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ45
• 2 x USB 2.0 Port for 3G/4G Modem, thermometer or printer (sold separately)
• 2 x Removable Wireless antennas
• Wireless On / Off / WPS button
• Recessed Factory Reset button

Performance

• NAT Performance:
  • 1.3Gb/s Max Sync Rate with G.fast (dependant on ISP & Exchange equipment)
  • 100 Mb/s Max Sync Rate with VDSL2
  • 300 Mb/s Max Sync Rate with VDSL2 35b
  • 950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
  • 1.8Gb/s Total Multi-WAN NAT Throughput
  • 700 Mb/s NAT Throughput per WAN without Hardware Acceleration
  • 60,000 NAT Sessions
  • 8000 Hardware Accelerated NAT Sessions
• VPN Performance:
  • 300 Mb/s IPsec (AES256) VPN Performance
  • 800 Mb/s Hardware Accelerated IPsec VPN Performance
  • 130 Mb/s SSL VPN Performance
  • Max. 32 Concurrent VPN Tunnels
  • Max. 16 Concurrent SSL VPN / OpenVPN Tunnels

WAN Interfaces

• WAN1: G.fast / VDSL2 / VDSL2 35b / ADSL2+
• WAN2: Gigabit Ethernet
• WAN5: 4G/LTE USB Modem (not included)
• WAN6: 4G/LTE USB Modem (not included)

Internet Connection

• Load Balancing: IP-based, Session-based
• Hardware Acceleration
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• WAN Active on Demand: Link Failure, Traffic Threshold
• Connection Detection: PPP, ARP Detect, Ping Detect
• WAN Data Budget
• Dynamic DNS
• DrayDDNS – with automated LetsEncrypt Certificates
• Full Feature-set Hardware Acceleration:
  • Hardware Accelerated Quality of Service
  • Multi-WAN Data Budget
  • Traffic Graph & Data Flow Monitor
  • Bandwidth Limit
• IPv4 Connection Types: PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)
• IPv6 Connection Types:
  • Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
  • 4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU

G.fast, VDSL & ADSL Features

• BT Infinity Option 1 & Option 2 Compatible
• Compliant with Openreach SIN 527 & SIN 498
• Auto Detection of G.fast, VDSL and ADSL line modes
• Support for G.INP & Vectoring
  • G.fast Standards:
    • ITU-T G.9700, G.9701 G.fast
    • Profile: 212MHz & 106MHz
  • VDSL Standards:
    • ITU-T G.993.1 VDSL
    • ITU-T G.993.2, G.997.1 VDSL2
    • Band Plan: G.998, G.997
    • Annex A, Annex B, Annex C
    • VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
    • OLR, UPBO, DPBO Supported
    • US0 Supported
    • Loop Diagnostic Mode
    • DSL Forum WT-114
  • ADSL Standards:
    • Annex A
    • ANSI T1.413 Issue2
    • ITU-T G.992.1 G.dmt (ADSL)
    • ITU-T G.992.2 G.lite
    • ITU-T G.992.3 ADSL2
    • ITU-T G.992.5 ADSL2+
  • ATM Protocols:
    • RFC-2684/RFC-1483 Multiple Protocol over AAL5
    • RFC-2516 PPP over Ethernet
    • RFC-2364 PPP over AAL5
    • Support for RFC4638 for MTU up to 1500
  LAN Management
  • 802.1q Tag-based, Port-based VLAN
  • Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
  • Up to 16 VLANs
  • DMZ Port
  • DHCP Server:
    • Multiple IP Subnet
    • Custom DHCP Options
    • Bind-IP-to-MAC
    • DHCP Pool Count up to 1022 addresses for LANs 1-3
    • DHCP Pool Count up to 253 addresses for LANs 4-8
    • DHCP Relay per LAN
  • LAN IP Alias
  • Wired 802.1x Port Authentication
  • Port Mirroring
  • Local DNS Server
  • Conditional DNS Forwarding
  • Hotspot Web Portal
  • Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

  Networking Features

  • Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
  • High Availability: Active-Standby, Hot-Standby
  • DNS Security (DNSSEC)
  • Local RADIUS server
  • SMB File Sharing (Requires external storage)
  • Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
  • Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP

  VPN

  • Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels
  • Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels
  • LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
  • Teleworker-to-LAN – Dial-In VPN Server
  • User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
  • IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
  • Encryption: MPPE, DES, 3DES, AES (128/192/256)
  • Authentication: SHA-256, SHA-1
  • VPN Trunk (Redundancy): Load Balancing, Failover
  • Dead Peer Detection (DPD)
  • IPsec NAT-Traversal (NAT-T)
  • Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
  • DHCP over IPsec
  • DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT
  • VPN Protocols:
    • IPsec IKEv1, IKEv2, IKEv2 EAP
    • IPsec-XAuth
    • DrayTek SSL VPN
    • OpenVPN (Remote Dial-In User only)
    • GRE over IPsec
    • PPTP
    • L2TP, L2TP over IPsec

  Bandwidth Management

  • IP-based Bandwidth Limit
  • IP-based Session Limit
  • User-based Data Quota

  Quality of Service (QoS)

  • Classify via TOS, DSCP, 802.1p, IP Address, Service Type
  • 4 Priority Queues
  • App QoS
  • VoIP Prioritisation
  • Class-based Outbound Traffic Tagging: DSCP & IP Precedence

  Management

  • Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
  • Config File Export & Import
  • Import Config from Vigor 2862 and Vigor 2860
  • Auto Backup Config to USB Storage
  • Firmware Upgrade via TFTP, HTTP, TR-069
  • 2-Level Administration Privilege
  • Access Control Features: Access List, Brute Force Protection
  • Syslog
  • SMS, E-mail Notification Alert
  • SNMP: v1, v2c, v3
  • Managed by VigorACS

  Router Central Management Features

  • AP Management: Up to 20 VigorAP access points
  • Switch Management: Up to 10 VigorSwitch network switches
  • VPN Management: Up to 8 Vigor routers
  • DrayTek Mesh: Up to 7 VigorAP access points (planned in future release)

  Operating Requirements

  • Rack Mountable (Vigor RM1 mounting bracket requir

Product Features

• G.Fast and Ethernet Load Balancer
  High throughput handles fast internet connections, with Load Balancing and Route Policy.
• AX3000 Wireless
  Supports dual-band 802.11ax WiFi 6.
• Robust SMB VPN Router
  Up to 32 active VPN tunnels, with up to 800Mbps IPsec Hardware Accelerated throughput.
• 5+1 Gigabit LAN Ports with VLANs
  Extensive LAN management features, use VLANs to manage up to 8 networks.
• VigorACS Central Management
  Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.
• Firewall & Content Filtering
  Manage internet access with Firewall, App Enforcement & Category-based Web Filtering.
• High Availability
  Connect a pair of Vigor 2866 series routers to provide a hardware backup solution.
• DrayDDNS with LetsEncrypt Certificates
  Free DrayDDNS address for each router, with automated LetsEncrypt SSL/TLS Certificates.
• Quality of Service with App QoS
  Easily prioritise latency-sensitive applications on your network with App QoS.
• Hotspot Web Portal
  Provide internet access to guests and market your business with captive portal.
• Centralised LAN Management
  Easily manage and provision DrayTek VigorAP access points and VigorSwitch switches (sold separately).