Key Specifications
VDSL2 (Superfast Fibre) and Gigabit Ethernet WAN Router
Multi-WAN Gigabit Performance Router with Load-Balancing & Failover
Up to 950Mbps Firewall Throughput for Ethernet WAN
5+1 Gigabit RJ-45 LAN Ports
Up to 800Mbps VPN Throughput with IPsec acceleration
32 LAN-to-LAN & Remote Teleworker VPN Tunnels
16 DrayTek SSL VPN or OpenVPN Tunnels
8 LAN Subnets with VLANs (Port-based / 802.1q)
SPI Firewall and Content Filtering
Physical Interfaces
WAN1: VDSL2 / VDSL2 35b / ADSL2+, RJ-11
WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
Recessed Factory Reset button
Performance
NAT Performance:
100 Mb/s Max Sync Rate with VDSL2
300 Mb/s Max Sync Rate with VDSL2 35b
950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
1.3Gb/s Total Multi-WAN NAT Throughput
800 Mb/s NAT Throughput per WAN without Hardware Acceleration
60,000 NAT Sessions
8000 Hardware Accelerated NAT Sessions
VPN Performance:
300 Mb/s IPsec (AES256) VPN Performance
800 Mb/s Hardware Accelerated IPsec VPN Performance - New!
130 Mb/s SSL VPN Performance
Max. 32 Concurrent VPN Tunnels
Max. 16 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
WAN1: VDSL2 / VDSL2 35b / ADSL2+
WAN2: Gigabit Ethernet
WAN5: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
WAN6: 4G/LTE USB Modem (not included)
Internet Connection
Load Balancing: IP-based, Session-based
Hardware Acceleration
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
2.4GHz & 5GHz Simultaneous Wireless WAN (with ‘ac’ models)
WAN Active on Demand: Link Failure, Traffic Threshold
Connection Detection: PPP, ARP Detect, Ping Detect
WAN Data Budget
Dynamic DNS
DrayDDNS – with automated LetsEncrypt Certificates
Full Feature-set Hardware Acceleration:
Hardware Accelerated Quality of Service
Multi-WAN Data Budget
Traffic Graph & Data Flow Monitor
Bandwidth Limit
IPv4 Connection Types: PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)
IPv6 Connection Types:
Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU
VDSL & ADSL Features
BT Infinity Option 1 & Option 2 Compatible
Compliant with Openreach SIN 498
Auto Detection of VDSL and ADSL line modes
Support for G.INP & Vectoring
VDSL Standards:
ITU-T G.993.1 VDSL
ITU-T G.993.2, G.997.1 VDSL2
Band Plan: G.998, G.997
Annex A, Annex B, Annex C
VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
OLR, UPBO, DPBO Supported
US0 Supported
Loop Diagnostic Mode
DSL Forum WT-114
ADSL Standards:
ANSI T1.413 Issue2
ITU-T G.992.1 G.dmt (ADSL)
ITU-T G.992.2 G.lite
ITU-T G.992.3 ADSL2
ITU-T G.992.5 ADSL2+
ATM Protocols:
RFC-2684/RFC-1483 Multiple Protocol over AAL5
RFC-2516 PPP over Ethernet
RFC-2364 PPP over AAL5
Support for RFC4638 for MTU up to 1500
Firewall & Content Filtering
IP-based or User-based Firewall Policy
User-based Time Quota
DoS Attack Defence
Spoofing Defence
Content Filtering:
Application Content Filter
URL Content Filter
DNS Keyword Filter
Web Features
Web Category Filter (requires GlobalView subscription)
NAT Features
NAT Port Redirection
Open Ports
Port Triggering
DMZ Host
UPnP
ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
802.1q Tag-based, Port-based VLAN
Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
Up to 16 VLANs
DMZ Port
DHCP Server:
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
DHCP Pool Count up to 1022 addresses for LANs 1-3
DHCP Pool Count up to 253 addresses for LANs 4-8
DHCP Relay per LAN
LAN IP Alias
Wired 802.1x Port Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS,
External Portal Server
Networking Features
Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
High Availability: Active-Standby, Hot-Standby
DNS Security (DNSSEC)
Local RADIUS server
SMB File Sharing (Requires external storage)
Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN
Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels
Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New! (requires f/w 4.2.1)
LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
Teleworker-to-LAN – Dial-In VPN Server
User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
Encryption: MPPE, DES, 3DES, AES (128/192/256)
Authentication: SHA-256, SHA-1
VPN Trunk (Redundancy): Load Balancing, Failover
Dead Peer Detection (DPD)
IPsec NAT-Traversal (NAT-T)
Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
DHCP over IPsec
DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
VPN Protocols:
IPsec IKEv1, IKEv2, IKEv2 EAP
IPsec-XAuth
DrayTek SSL VPN
OpenVPN (Remote Dial-In User only)
GRE over IPsec
PPTP
L2TP, L2TP over IPsec
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
User-based Data Quota
Quality of Service (QoS)
Classify via TOS, DSCP, 802.1p, IP Address, Service Type
4 Priority Queues
App QoS
VoIP Prioritization
Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
Import Config from:
Vigor 2860 series
Vigor 2862 series
Vigor 2866 series* (planned for f/w 4.4.0)
Auto Backup Config to USB Storage – New!
Firmware Upgrade via TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control Features: Access List, Brute Force Protection
Syslog
SMS, E-mail Notification Alert
SNMP: v1, v2c, v3
Managed by VigorACS
Router Central Management Features
AP Management: Up to 20 VigorAP access points
Switch Management: Up to 10 VigorSwitch network switches
VPN Management: Up to 8 Vigor routers
Operating Requirements
Rack Mountable (Optional Vigor RM1 mounting bracket required)
Wall or Shelf Mountable with included fittings
Temperature Operating: 0 °C ~ 45 °C
Storage: -25 °C ~ 70 °C
Humidity 10% ~ 90% (non-condensing)
Power Consumption: 24 watts maximum ('ac' model)
Operating Power: DC 12V (via external PSU, supplied)
Power Requirements : 220-240VAC
Weight: 620g ('ac' model)
Dimensions:
241mm Width
165mm Depth
44mm Height
Warranty
Two (2) Year Manufacturer's RTB
Box Contents
Vigor 2865 router
Quick Start Guide
Screws & wall plugs for wall mounting
2m Cat-5e RJ-45 Network Cable
DC 12V Power Supply with UK Plug