G.fast, VDSL & Ethernet Load Balancer The Vigor 2866 is a G.fast, VDSL2/ADSL2+ & Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management & more. Connect the Vigor 2866 to Superfast Fibre with its integrated G.fast & VDSL modem. Or connect to Virgin Media Cable & Ultrafast FTTP with Ethernet WAN. Featuring high throughput with Load Balancing & Failover connectivity, suitable for handling Fibre to the Premises (FTTP) & Gigabit Internet connections. Offering up to 950 Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set. Route Policy
- Powerful Routing Management The Vigor 2866 series provides full policy-based control of where & how outbound traffic is routed with Route Policy: VPN Routing Send all or select traffic through VPN services. Hostname Routing Route access to individual websites, Internet domains & hostnames through a VPN tunnel or a specific WAN. Service Routing Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel. Failover & Failback Extensive control of Failover with multiple Failover rules & paths. Manage how connections are moved back to the primary connection, after a failover has occurred with Failback settings. Ideal VPN router for SMB A feature central to Dray Tek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices & branch offices back to HQ, or home-based/mobile teleworkers back to your office. The Vigor 2866 is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput & up to 50 concurrently active VPN tunnels. IPsec Hardware Acceleration boosts performance, up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed Internet connections. It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices & handle connections from all types of VPN clients. Supporting IPsec IKEv 1 & IKEv 2 protocols with EAP & XAuth authentication, Dray Tek's SSL VPN & L2TP for both LAN to LAN & Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with Open VPN. User management for Dial-In Teleworkers is managed through the router's web interface, with m OTP 2-factor authentication available for IPsec, L2TP & SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server. Connect VPNs from Behind NAT with Dray Tek's VPN Matcher Dray Tek's new VPN Matcher service helps Dray Tek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two Dray Tek VPN routers that are behind NAT & could not normally establish a VPN tunnel. Connecting Remote Sites with LAN to LAN VPN Supporting up to 32 concurrently active VPN tunnels, the Vigor 2866 series is ideal for connecting multiple sites or home offices together with fast & secure IPsec VPN tunnels. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing & seamless access to other resources & devices. Dray Tek SSL VPN for Dial-In Teleworkers & LAN to LAN The Vigor 2866 supports up to 16 active Dray Tek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote Dray Tek Vigor routers back to your main office using SSL/TLS technology
- the same encryption that you use for secure web sites such as your bank. Teleworkers can easily create a secure SSL VPN tunnel to the Dray Tek Vigor 2866 using the free Dray Tek Smart VPN Client app. Available for Windows, mac OS, Apple i OS (iPad, iPhone) & Android devices. You can download the Smart VPN client & learn more about Dray Tek SSL VPNs. 5+1 Gigabit LAN Ports with VLANs The Vigor 2866 series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers & Network Attached Storage. With 5 dedicated LAN ports & one flexible LAN/WAN port, the Vigor 2866 can connect up to 6 devices directly with a single Ethernet WAN configuration, or 5 devices with a dual Ethernet WAN configuration. With Multiple LAN subnets & VLANs, the Vigor 2866 can manage up to 8 separate networks. For instance, an internal network with a separate network for Guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service & Route Policy applied. The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the Dray Tek Vigor Switch G1080 8-port switch, for additional network ports. The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a Dray Tek Vigor AP wireless access point, such as the Vigor AP 903 to do the same, spanning the router's own wireless & any connected wireless APs. Designed for Central Management The Vigor 2866 series (along with most other Dray Tek routers, Access points & switches) can be centrally managed by our Vigor ACS central management platform. This scalable solution provides visibility, control & reporting of your entire Dray Tek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. Vigor ACS also provides features like automated/bulk firmware updates, VPN management & alarms for connectivity or other issues. Robust & Comprehensive IPv 4 / IPv 6 Firewall Security is always taken seriously with Dray Tek routers. The firewall protects against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems. The Dray Tek object-based firewall enables you to create combinations of Firewall rules & Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to. The Vigor 2866 supports both IPv 4 & IPv 6 with Dual-Stack IPv 4/IPv 6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering & VLANs support both IPv 4 & IPv 6 networks. Web Content Filtering with DNS Filter The content control features of the Vigor 2866 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal & according to time schedules. Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block). Using the Global View service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router. High Availability
- Hardware Failover For even greater resilience, the Vigor 2866 series provides High Availability (HA), with both a primary & secondary router able to provide connectivity to your network & subnets. In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume Internet, routing & VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time. Dray DDNS
- Dray Tek Dynamic DNS Address Dray Tek provides a free Dynamic DNS address to each Vigor 2866 router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "myrouter.drayddns.com". This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate & access your Vigor 2866 router. Just use the hostname to access the router's VPN services, management & any other services you have made accessible through the router. The Vigor 2866 can also authenticate your Dray DDNS hostname with free SSL/TLS certificates provided by Lets Encrypt, the router manages & automates the certificate process. Keeping the certificate up to date & ready for use with SSL VPN & other services.