VDSL2 (Superfast Fibre) & Gigabit Ethernet WAN Router Multi-WAN Gigabit Performance Router with Load-Balancing & Failover Up to 950 Mbps Firewall Throughput for Ethernet WAN 5+1 Gigabit RJ-45 LAN Ports Up to 800 Mbps VPN Throughput with IPsec acceleration Dray Tek’s Vigor 2865 series Multi-WAN Firewall VPN routers are ideal for Superfast VDSL Broadband & Ethernet-based FTTP Fibre Broadb&. With Gigabit throughput, Quality of Service, VPN client/server, comprehensive Firewall & Content Filtering controls. Wi-Fi is available on ‘ac’ models & the integrated 4G+ LTE modem on ‘ Lac’ models takes full advantage of mobile broadb&. The Vigor 2865 series provides a reliable, flexible, & secure networking solution, that’s ideal for Home Offices, Small Business & Satellite Offices. ...

The Ideal DSL Router with VPN for Small Business & Remote Working Dray Tek’s Vigor 2865 series Multi-WAN Firewall VPN routers are ideal for Superfast VDSL Broadband & Ethernet-based FTTP Fibre Broadb&. With Gigabit throughput, Quality of Service, VPN client/server, comprehensive Firewall & Content Filtering controls. Wi-Fi is available on ‘ac’ models & the integrated 4G+ LTE modem on ‘ Lac’ models takes full advantage of mobile broadb&. The Vigor 2865 series provides a reliable, flexible, & secure networking solution, that’s ideal for Home Offices, Small Business & Satellite Offices. ...

G.fast, VDSL & Ethernet Load Balancer The Vigor 2866 is a G.fast, VDSL2/ADSL2+ & Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management & more. Connect the Vigor 2866 to Superfast Fibre with its integrated G.fast & VDSL modem. Or connect to Virgin Media Cable & Ultrafast FTTP with Ethernet WAN. Featuring high throughput with Load Balancing & Failover connectivity, suitable for handling Fibre to the Premises (FTTP) & Gigabit Internet connections. Offering up to 950 Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set. Route Policy
- Powerful Routing Management The Vigor 2866 series provides full policy-based control of where & how outbound traffic is routed with Route Policy: VPN Routing Send all or select traffic through VPN services. Hostname Routing Route access to individual websites, Internet domains & hostnames through a VPN tunnel or a specific WAN. Service Routing Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel. Failover & Failback Extensive control of Failover with multiple Failover rules & paths. Manage how connections are moved back to the primary connection, after a failover has occurred with Failback settings. Ideal VPN router for SMB A feature central to Dray Tek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices & branch offices back to HQ, or home-based/mobile teleworkers back to your office. The Vigor 2866 is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput & up to 50 concurrently active VPN tunnels. IPsec Hardware Acceleration boosts performance, up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed Internet connections. It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices & handle connections from all types of VPN clients. Supporting IPsec IKEv 1 & IKEv 2 protocols with EAP & XAuth authentication, Dray Tek's SSL VPN & L2TP for both LAN to LAN & Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with Open VPN. User management for Dial-In Teleworkers is managed through the router's web interface, with m OTP 2-factor authentication available for IPsec, L2TP & SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server. Connect VPNs from Behind NAT with Dray Tek's VPN Matcher Dray Tek's new VPN Matcher service helps Dray Tek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two Dray Tek VPN routers that are behind NAT & could not normally establish a VPN tunnel. Connecting Remote Sites with LAN to LAN VPN Supporting up to 32 concurrently active VPN tunnels, the Vigor 2866 series is ideal for connecting multiple sites or home offices together with fast & secure IPsec VPN tunnels. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing & seamless access to other resources & devices. Dray Tek SSL VPN for Dial-In Teleworkers & LAN to LAN The Vigor 2866 supports up to 16 active Dray Tek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote Dray Tek Vigor routers back to your main office using SSL/TLS technology
- the same encryption that you use for secure web sites such as your bank. Teleworkers can easily create a secure SSL VPN tunnel to the Dray Tek Vigor 2866 using the free Dray Tek Smart VPN Client app. Available for Windows, mac OS, Apple i OS (iPad, iPhone) & Android devices. You can download the Smart VPN client & learn more about Dray Tek SSL VPNs. 5+1 Gigabit LAN Ports with VLANs The Vigor 2866 series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers & Network Attached Storage. With 5 dedicated LAN ports & one flexible LAN/WAN port, the Vigor 2866 can connect up to 6 devices directly with a single Ethernet WAN configuration, or 5 devices with a dual Ethernet WAN configuration. With Multiple LAN subnets & VLANs, the Vigor 2866 can manage up to 8 separate networks. For instance, an internal network with a separate network for Guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service & Route Policy applied. The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the Dray Tek Vigor Switch G1080 8-port switch, for additional network ports. The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a Dray Tek Vigor AP wireless access point, such as the Vigor AP 903 to do the same, spanning the router's own wireless & any connected wireless APs. Designed for Central Management The Vigor 2866 series (along with most other Dray Tek routers, Access points & switches) can be centrally managed by our Vigor ACS central management platform. This scalable solution provides visibility, control & reporting of your entire Dray Tek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. Vigor ACS also provides features like automated/bulk firmware updates, VPN management & alarms for connectivity or other issues. Robust & Comprehensive IPv 4 / IPv 6 Firewall Security is always taken seriously with Dray Tek routers. The firewall protects against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems. The Dray Tek object-based firewall enables you to create combinations of Firewall rules & Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to. The Vigor 2866 supports both IPv 4 & IPv 6 with Dual-Stack IPv 4/IPv 6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering & VLANs support both IPv 4 & IPv 6 networks. Web Content Filtering with DNS Filter The content control features of the Vigor 2866 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal & according to time schedules. Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block). Using the Global View service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router. High Availability
- Hardware Failover For even greater resilience, the Vigor 2866 series provides High Availability (HA), with both a primary & secondary router able to provide connectivity to your network & subnets. In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume Internet, routing & VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time. Dray DDNS
- Dray Tek Dynamic DNS Address Dray Tek provides a free Dynamic DNS address to each Vigor 2866 router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "myrouter.drayddns.com". This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate & access your Vigor 2866 router. Just use the hostname to access the router's VPN services, management & any other services you have made accessible through the router. The Vigor 2866 can also authenticate your Dray DDNS hostname with free SSL/TLS certificates provided by Lets Encrypt, the router manages & automates the certificate process. Keeping the certificate up to date & ready for use with SSL VPN & other services.



...

Dray Tek Vigor V2866AX-K Dual-WAN VDSL2/ADSL2+ Wi Fi 6 Router The Dray Tek Vigor 2866ax Dual-WAN VDSL2/ADSL2+ Wi Fi 6 Router is a G. Fast / VDSL & Ethernet Multi-WAN Firewall VPN router. This router is ideally suited to connect directly to Ultrafast G. Fast broadband & Superfast VDSL. The Vigor 2866ax provides advanced Firewall & Content Filtering, Quality of Service & VPN with Gigabit throughput. This model also provides 802.11ax (Wi Fi 6) simultaneous dual-band wireless. The Vigor 2866ax provides a reliable, flexible, & secure networking solution, ideal for Home Offices, Small Business & Satellite Offices. Key Features G. Fast & Ethernet Load Balancer High throughput handles fast internet connections, with Load Balancing & Route Policy. AX3000 Wireless with Mesh Supports dual-band 802.11ax Wi Fi 6. Use the router as the Mesh Root with Dray Tek Mesh. Robust SMB VPN Router Up to 32 active VPN tunnels, with up to 800 Mbps IPsec Hardware Accelerated throughput. 5+1 Gigabit LAN Ports with VLANs Extensive LAN management features, use VLANs to manage up to 8 networks. Vigor ACS Central Management Easily provision, monitor & manage remote sites without on-site IT or dedicated staff. Firewall & Content Filtering Manage internet access with Firewall, App Enforcement & Category-based Web Filtering. High Availability Connect a pair of Vigor 2866 series routers to provide a hardware backup solution. Dray DDNS with Lets Encrypt Certificates Free Dray DDNS address for each router, with automated Lets Encrypt SSL/TLS Certificates. Quality of Service with App Qo S Easily prioritise latency-sensitive applications on your network with App Qo S. Hotspot Web Portal Provide internet access to guests & market your business with captive portal. Centralised LAN Management Easily manage & provision Dray Tek Vigor AP access points & Vigor Switch switches (sold separately). G.fast & Ethernet Load Balancer The Vigor 2866ax is a G.fast, VDSL2/ADSL2+ & Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management & more. Connect the Vigor 2866ax to Superfast Fibre with its integrated G.fast & VDSL modem, or connect to Virgin Media Cable & Ultrafast FTTP with Ethernet WAN. Featuring high throughput with Load Balancing & Failover connectivity, it is suitable for handling Fibre to the Premises (FTTP) & Gigabit internet connections. The router offers up to 950 Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set. With 802.11ax (Wi Fi 6) wireless, it provides fast wireless coverage to your network's computers & devices. In addition, the router can connect to wireless networks for internet access, allowing it to make use of Mobile Hotspot wireless connections & nearby wireless networks, where for instance a neighbour's wireless network could provide an emergency backup connection. Route Policy
- Powerful Routing Management The Vigor 2866ax provides full policy-based control of where & how outbound traffic is routed with Route Policy: VPN Routing Send all or select traffic through VPN services. Hostname Routing Route access to individual websites, internet domains (i.e. www.bbc.co.uk) & hostnames through a VPN tunnel or a specific WAN. Service Routing Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel. Failover & Failback Extensive control of Failover with multiple Failover rules & paths. Manage how connections are moved back to the primary connection, after a Failover has occurred with Failback settings. AX3000 Wireless LAN with Mesh The Vigor 2866ax provides 802.11ax (Wi Fi 6) simultaneous dual-band wireless for fast & efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its antennas streaming data to different devices at once, improving efficiency over standard 802.11ax (Wi Fi 6) wireless & allowing the router to effectively serve more wireless clients. With firmware 4.3.0, the Vigor 2866ax wireless router can be used as part of Dray Tek's Mesh wireless system which allows the router to work as the Mesh Root, providing internet access & management of Mesh Vigor A Ps directly. Ideal VPN router for SMB A feature central to Dray Tek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices & branch offices back to HQ, or home-based/mobile teleworkers back to your office. The Vigor 2866ax is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput & up to 50 concurrently active VPN tunnels. IPsec Hardware Acceleration boosts performance, up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed internet connections. It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices & handle connections from all types of VPN clients. Supporting IPsec IKEv 1 & IKEv 2 protocols with EAP & XAuth authentication, Dray Tek's SSL VPN & L2TP for both LAN to LAN & Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with Open VPN. User management for Dial-In Teleworkers is managed through the router's web interface, with m OTP 2-factor authentication available for IPsec, L2TP & SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server. Connect VPNs from behind NAT with Dray Tek's VPN Matcher A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible. Dray Tek's VPN Matcher service helps Dray Tek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two Dray Tek VPN routers that are behind NAT & could not normally establish a VPN tunnel. Connecting Remote Sites with LAN to LAN VPN Supporting up to 32 concurrently active VPN tunnels, the Vigor 2866ax is ideal for connecting multiple sites or home offices together with fast & secure IPsec VPN tunnels. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing & seamless access to other resources & devices. Dray Tek SSL VPN for Dial-In Teleworkers & LAN to LAN The Vigor 2866ax supports up to 16 active Dray Tek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote Dray Tek Vigor routers back to your main office using SSL/TLS technology
- the same encryption that you use for secure web sites such as your bank. Teleworkers can easily create a secure SSL VPN tunnel to the Dray Tek Vigor 2866ax using the free Dray Tek Smart VPN Client app
- available for Windows, mac OS, Apple i OS (iPad, iPhone) & Android devices. 5+1 Gigabit LAN Ports with VLANs The Vigor 2866ax series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers & Network Attached Storage. With 5 dedicated LAN ports & one flexible LAN/WAN port, the Vigor 2866ax can connect up to 6 devices directly with a single Ethernet WAN configuration, or 5 devices with a dual Ethernet WAN configuration. With Multiple LAN subnets & VLANs, the Vigor 2866ax can manage up to 8 separate networks. For instance, an internal network with a separate network for guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service & Route Policy applied. The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the Dray Tek Vigor Switch G1080 8-port switch (sold separately), for additional network ports. The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a Dray Tek Vigor AP wireless access point, such as the Vigor AP 903 (sold separately, see accessories tab) to do the same, spanning the router's own wireless & any connected wireless APs. Designed for Central Management The Vigor 2866ax (along with most other Dray Tek routers, Access points & switches, sold separately) can be centrally managed by the Vigor ACS central management platform. This scalable solution provides visibility, control & reporting of your entire Dray Tek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. Vigor ACS also provides features like automated/bulk firmware updates, VPN management & alarms for connectivity or other issues. Robust & Comprehensive IPv 4 / IPv 6 Firewall Security is always taken seriously with Dray Tek routers. The firewall protects against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems. The Dray Tek object-based firewall enables you to create combinations of Firewall rules & Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to. The Vigor 2866ax supports both IPv 4 & IPv 6 with Dual-Stack IPv 4/IPv 6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering & VLANs support both IPv 4 & IPv 6 networks. Web Content Filtering with DNS Filter The content control features of the Vigor 2866ax allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal & according to time schedules. Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block). Using the Global View service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router, see accessories tab for compatible Global View licences. High Availability
- Hardware Failover For even greater resilience, the Vigor 2866ax provides High Availability (HA), with both a primary & secondary router (secondary router sold separately) able to provide connectivity to your network & subnets. In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume internet, routing & VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time. Dray DDNS
- Dray Tek Dynamic DNS Address Dray Tek provides a free Dynamic DNS address to each Vigor 2866ax router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "myrouter.drayddns.com". This address automatically updates whenever the internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate & access your Vigor 2866ax router. Just use the hostname to access the router's VPN services, management & any other services you have made accessible through the router. The Vigor 2866ax can also authenticate your Dray DDNS hostname with free SSL/TLS certificates provided by Lets Encrypt, the router manages & automates the certificate process, keeping the certificate up to date & ready for use with SSL VPN & other services. Manage Guest Wi Fi with Hotspot Web Portal Dray Tek routers make it easy to manage guest wireless with Hotspot Web Portal. The fully customisable captive portal can be applied to the router's LAN / VLAN interfaces, for use with wireless access points. Authentication can be handled by Google/ Facebook or an external web portal service such as violet Wi Fi with RADIUS. Upon connecting to the wireless network, users are presented with your company's branding & information. From there, depending on what you've set, they can simply click-through, provide their details or enter a PIN with a voucher generated by the router (voucher printer not included). Once connected, the router can allow access until a user reaches their"a limit of time connected or bandwidth used. Quality of Service & Bandwidth Control Prioritise latency-sensitive applications on your network with Quality of Service. App Qo S simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom & Skype. Use 4 separate queues to give priority to servers & PCs (IP address), services such as Vo IP or DNS, or packet tagging used by IP phones with 802.1p & DSCP support. Auto Voice VLAN allows the router to automatically prioritise Vo IP calls as they pass through the router without additional configuration. Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a guest network. Central AP & Switch Management The Vigor 2866ax manages Dray Tek Vigor AP access points & Vigor Switch switches connected locally to the router. This enables you to centrally control, manage & administer multiple AP & Switch devices installed around your building/campus from just the one router. Central AP Management The Dray Tek router operating as the wireless controller can provision up to 20 Dray Tek Vigor AP access points with Central AP Management profiles, with an option to Auto Provision
- auto configuring newly installed Vigor AP access points with the Auto Provisioning profile, upon initial connection to the Dray Tek Vigor router's network. Central Switch Management Dray Tek Vigor Switch switches can be provisioned & managed through the router with Dray Tek’s Central Switch Management system, which allows you to: Easily provision VLAN configuration & other port settings directly from the router. Set bandwidth rate limits & schedules for individual ports. Log switch events for alert notifications if network problems occur. At a glance see the devices connected on your network with a virtual topology.





...

Dray Tek Vigor 2866 Lac Dual-WAN VDSL2/ADSL2+ Wi Fi 5 3G/4G Wi Fi Router The Dray Tek Vigor 2866 Lac Dual-WAN G. Fast/VDSL2/ADSL2+ Wi Fi 5 3G/4G LTE Cat 6 Router is a G. Fast / VDSL & Ethernet Multi-WAN Firewall VPN router. This router is ideally suited to connect directly to Ultrafast G. Fast broadband & Superfast VDSL. The Vigor 2866 Lac provides advanced Firewall & Content Filtering, Quality of Service & VPN with Gigabit throughput. This model also provides 802.11ac (Wi Fi 5) simultaneous dual-band wireless, & the integrated 4G+ LTE modem takes full advantage of mobile broadb&. The Vigor 2866 Lac provides a reliable, flexible, & secure networking solution, that’s ideal for Home Offices, Small Business & Satellite Offices. Key Features G. Fast & Ethernet Load Balancer High throughput handles fast internet connections, with Load Balancing & Route Policy. 4G+ LTE Modem with Dual-SIM slots Fast mobile broadband connectivity with Dual-SIM failover (SIM cards not included). AC1300 Wireless with Mesh Supports dual-band 802.11ac Wi Fi 5. Use the router as the Mesh Root with Dray Tek Mesh. Robust SMB VPN Router Up to 32 active VPN tunnels, with up to 800 Mbps IPsec Hardware Accelerated throughput. 5+1 Gigabit LAN Ports with VLANs Extensive LAN management features, use VLANs to manage up to 8 networks. Vigor ACS Central Management Easily provision, monitor & manage remote sites without on-site IT or dedicated staff. Firewall & Content Filtering Manage internet access with Firewall, App Enforcement & Category-based Web Filtering. High Availability Connect a pair of Vigor 2866 series routers to provide a hardware backup solution. Dray DDNS with Lets Encrypt Certificates Free Dray DDNS address for each router, with automated Lets Encrypt SSL/TLS Certificates. Quality of Service with App Qo S Easily prioritise latency-sensitive applications on your network with App Qo S. Hotspot Web Portal Provide internet access to guests & market your business with captive portal. Centralised LAN Management Easily manage & provision Dray Tek Vigor AP access points & Vigor Switch switches (sold separately). G.fast & Ethernet Load Balancer The Vigor 2866 Lac is a G.fast, VDSL2/ADSL2+ & Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management & more. Connect the Vigor 2866 Lac to Superfast Fibre with its integrated G.fast & VDSL modem, or connect to Virgin Media Cable & Ultrafast FTTP with Ethernet WAN. Featuring high throughput with Load Balancing & Failover connectivity, it is suitable for handling Fibre to the Premises (FTTP) & Gigabit internet connections. The router offers up to 950 Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set. With 802.11ac (Wi Fi 5) wireless, it provides fast wireless coverage to your network's computers & devices. In addition, the router can connect to wireless networks for internet access, allowing it to make use of Mobile Hotspot wireless connections & nearby wireless networks, where for instance a neighbour's wireless network could provide an emergency backup connection. The integrated 4G/LTE modem provides fast 4G+ mobile broadband with Carrier Aggregation to get the best performance out of 4G broadb&, for use as a backup connection or primary internet connection. Route Policy
- Powerful Routing Management The Vigor 2866 Lac provides full policy-based control of where & how outbound traffic is routed with Route Policy: VPN Routing Send all or select traffic through VPN services. Hostname Routing Route access to individual websites, internet domains (i.e. www.bbc.co.uk) & hostnames through a VPN tunnel or a specific WAN. Service Routing Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel. Failover & Failback Extensive control of Failover with multiple Failover rules & paths. Manage how connections are moved back to the primary connection, after a Failover has occurred with Failback settings. Integrated LTE 4G/3G Modem The Vigor 2866 Lac router provides high speed mobile broadband connectivity for internet access & VPN, with its built-in LTE-A 4G+ modem. LTE Category 6 uses carrier aggregation to improve 4G speeds, allowing you to get the best performance out of 4G Broadb&. This router is not locked to any mobile network & is compatible with all major UK mobile networks, such as EE, Vodafone, O2 & Three, as well as any MVNOs on those networks. The Vigor 2866 Lac router can even be used as an LTE modem. With LTE Bridge mode, the Vigor 2866 Lac provides 4G connectivity directly to a connected router or firewall, without any additional network translation (NAT). The Vigor 2866 Lac router uses two (2) LTE aerials which can rotate & tilt for optimum reception. The included extension bases provide a 1M extension cable to allow optimum positioning, avoiding obstructions, cabinets or equipment. Constant Connectivity
- Dual-SIM LTE Where connectivity is mission critical, a single cellular network can become a single point of failure in the event of a mobile network outage. The Vigor 2866 Lac has two (2) SIM slots (SIM cards not included), so that in the event of one mobile network not providing internet connectivity, the router will switch to a secondary SIM & cellular network connection. It intelligently monitors for internet connectivity & latency
- if the primary 4G SIM's network can't access a required location, or is too slow, it switches over to the backup SIM to resume connectivity. For resilience in the event of mobile network outages, each SIM should be on a different cellular network (e.g. Vodafone & EE) & not 'virtual' networks which piggyback on the first (e.g. not Virgin Mobile & EE, as the former uses the latter's network). AC1300 Wireless LAN with Mesh The Vigor 2866 Lac provides 802.11ac (Wi Fi 5) simultaneous dual-band wireless for fast & efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its antennas streaming data to different devices at once, improving efficiency over standard 802.11ac (Wi Fi 5) wireless & allowing the router to effectively serve more wireless clients. With firmware 4.3.0, the Vigor 2866 Lac wireless router can be used as part of Dray Tek's Mesh wireless system which allows the router to work as the Mesh Root, providing internet access & management of Mesh Vigor A Ps directly. Ideal VPN router for SMB A feature central to Dray Tek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices & branch offices back to HQ, or home-based/mobile teleworkers back to your office. The Vigor 2866 Lac is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput & up to 50 concurrently active VPN tunnels. IPsec Hardware Acceleration boosts performance, up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed internet connections. It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices & handle connections from all types of VPN clients. Supporting IPsec IKEv 1 & IKEv 2 protocols with EAP & XAuth authentication, Dray Tek's SSL VPN & L2TP for both LAN to LAN & Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with Open VPN. User management for Dial-In Teleworkers is managed through the router's web interface, with m OTP 2-factor authentication available for IPsec, L2TP & SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server. Connect VPNs from behind NAT with Dray Tek's VPN Matcher A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible. Dray Tek's VPN Matcher service helps Dray Tek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two Dray Tek VPN routers that are behind NAT & could not normally establish a VPN tunnel. Connecting Remote Sites with LAN to LAN VPN Supporting up to 32 concurrently active VPN tunnels, the Vigor 2866 is ideal for connecting multiple sites or home offices together with fast & secure IPsec VPN tunnels. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing & seamless access to other resources & devices. Dray Tek SSL VPN for Dial-In Teleworkers & LAN to LAN The Vigor 2866 supports up to 16 active Dray Tek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote Dray Tek Vigor routers back to your main office using SSL/TLS technology
- the same encryption that you use for secure web sites such as your bank. Teleworkers can easily create a secure SSL VPN tunnel to the Dray Tek Vigor 2866 using the free Dray Tek Smart VPN Client app
- available for Windows, mac OS, Apple i OS (iPad, iPhone) & Android devices. 5+1 Gigabit LAN Ports with VLANs The Vigor 2866 series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers & Network Attached Storage. With 5 dedicated LAN ports & one flexible LAN/WAN port, the Vigor 2866 can connect up to 6 devices directly with a single Ethernet WAN configuration, or 5 devices with a dual Ethernet WAN configuration. With Multiple LAN subnets & VLANs, the Vigor 2866 can manage up to 8 separate networks. For instance, an internal network with a separate network for guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service & Route Policy applied. The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the Dray Tek Vigor Switch G1080 8-port switch (sold separately), for additional network ports. The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a Dray Tek Vigor AP wireless access point, such as the Vigor AP 903 (sold separately, see accessories tab) to do the same, spanning the router's own wireless & any connected wireless APs. Designed for Central Management The Vigor 2866 Lac (along with most other Dray Tek routers, Access points & switches, sold separately) can be centrally managed by the Vigor ACS central management platform. This scalable solution provides visibility, control & reporting of your entire Dray Tek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. Vigor ACS also provides features like automated/bulk firmware updates, VPN management & alarms for connectivity or other issues. Robust & Comprehensive IPv 4 / IPv 6 Firewall Security is always taken seriously with Dray Tek routers. The firewall protects against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems. The Dray Tek object-based firewall enables you to create combinations of Firewall rules & Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to. The Vigor 2866 Lac supports both IPv 4 & IPv 6 with Dual-Stack IPv 4/IPv 6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering & VLANs support both IPv 4 & IPv 6 networks. Web Content Filtering with DNS Filter The content control features of the Vigor 2866 Lac allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal & according to time schedules. Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block). Using the Global View service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router, see accessories tab for compatible Global View licences. High Availability
- Hardware Failover For even greater resilience, the Vigor 2866 Lac provides High Availability (HA), with both a primary & secondary router (secondary router sold separately) able to provide connectivity to your network & subnets. In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume internet, routing & VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time. Dray DDNS
- Dray Tek Dynamic DNS Address Dray Tek provides a free Dynamic DNS address to each Vigor 2866 Lac router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "myrouter.drayddns.com". This address automatically updates whenever the internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate & access your Vigor 2866 Lac router. Just use the hostname to access the router's VPN services, management & any other services you have made accessible through the router. The Vigor 2866 Lac can also authenticate your Dray DDNS hostname with free SSL/TLS certificates provided by Lets Encrypt, the router manages & automates the certificate process, keeping the certificate up to date & ready for use with SSL VPN & other services. Manage Guest Wi Fi with Hotspot Web Portal Dray Tek routers make it easy to manage guest wireless with Hotspot Web Portal. The fully customisable captive portal can be applied to the router's LAN / VLAN interfaces, for use with wireless access points. Authentication can be handled by Google/ Facebook or an external web portal service such as violet Wi Fi with RADIUS. Upon connecting to the wireless network, users are presented with your company's branding & information. From there, depending on what you've set, they can simply click-through, provide their details or enter a PIN with a voucher generated by the router (voucher printer not included). Once connected, the router can allow access until a user reaches their"a limit of time connected or bandwidth used. Quality of Service & Bandwidth Control Prioritise latency-sensitive applications on your network with Quality of Service. App Qo S simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom & Skype. Use 4 separate queues to give priority to servers & PCs (IP address), services such as Vo IP or DNS, or packet tagging used by IP phones with 802.1p & DSCP support. Auto Voice VLAN allows the router to automatically prioritise Vo IP calls as they pass through the router without additional configuration. Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a guest network. Central AP & Switch Management The Vigor 2866 Lac manages Dray Tek Vigor AP access points & Vigor Switch switches connected locally to the router. This enables you to centrally control, manage & administer multiple AP & Switch devices installed around your building/campus from just the one router. Central AP Management The Dray Tek router operating as the wireless controller can provision up to 20 Dray Tek Vigor AP access points with Central AP Management profiles, with an option to Auto Provision
- auto configuring newly installed Vigor AP access points with the Auto Provisioning profile, upon initial connection to the Dray Tek Vigor router's network. Central Switch Management Dray Tek Vigor Switch switches can be provisioned & managed through the router with Dray Tek’s Central Switch Management system, which allows you to: Easily provision VLAN configuration & other port settings directly from the router. Set bandwidth rate limits & schedules for individual ports. Log switch events for alert notifications if network problems occur. At a glance see the devices connected on your network with a virtual topology.







...

Vigor 2920 Series Router Firewall The Vigor 2920 series is a dual-WAN port Firewall Router with excellent performance to run both WAN interfacess simultaneously. It also now supports IPv 6
- the next generation Internet system (click IPv 6 tab below for moe information). Robust & Comprehensive Firewall Security is a major feature Vigor 2920 Series. The firewall features measures for protection against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems (see later). The Dray Tek object-based firewall allows vast flexibility, enabling you to create combinations of users, rules & restrictions to suit multi-departmental organisations. Content control features of the firewall allow you to set restrictions on web site access, blocking download of certain file types, blocking specific web sites, blocking IM/P2P applications or other potentially harmful or wasteful content. Filtering using web site categorisations enable you to block whole categories of web sites (e.g. gambling, adult sites etc.), subject to subscription. Dual-WAN Load Balancing & Backup Either (or both) Ethernet WAN ports on the Vigor 2920 can be connected to an ADSL modem, cable modem or any other Ethernet-based Internet feed. When you are using both ports, the secondary interface can be used either for WAN-Backup or load balancing. WAN-Backup provides contingenry (redundancy) in cases of your primary feed or ISP suffering temporary outage. Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switch back to that. In load-balancing mode, the Vigor 2920 will make use of both of your WAN feeds together, spreading your Internet traffic across both either as equally as possible or according to user-configurable rules. For example, you might want all of your Vo IP traffic to be routed only through one ISP connection. The Vigor 2920s USB (Universal Serial Bus) port provides an alternative connection method for Internet backup by connecting to a compatible USB (Universal Serial Bus) modem (or cellphone) for access to the high speed 3G cellular networks from UK providers such as Vodafone, O2, Orange, 3 & T-Mobile. The 3G access method can be used as your primary/only Internet connection, ideal for temporary locations, mobile applications or where broadband access is not available. Note: For WAN failover you can use only one method at a time, e.g. Ethernet, 3G. Dual-WAN ports for load-balancing & failover/redundancy WAN1: 10/100 Base T Ethernet WAN2: Gigabit Ethernet All-Gigabit 4-port Ethernet LAN Ports 3G (Cellular) USB (Universal Serial Bus) Modem support IPv 6
- See below for feature support - New! Comprehensive & Robust Firewall Content Filtering (by matched keyword or data type) Web Site Category Filtering (subject to subscription) Ethernet & Wi Fi Virtual LAN segmentation (common/distinct) Qo S (Layer 2&3, 802.1p & TOS/DCSP) VPN Dial-in/dial-out with VPN hardware co-processor Mobile One-Time Passwords (MOTP) 802.11n Wireless LAN (n models only) USB (Universal Serial Bus) Port for Printer or 3G Modem

...

The Vigor 2926 series is our dual-Ethernet WAN firewall for load-balancing or failover. Its also a fully featured firewall, VPN concentrator & content filtering device. This latest router series

Includes:: support for professional features such as VLAN tagging, Gigabit Ethernet, built-in wireless LAN (Vigor 2926n or Vigor 2926ac). An alternative WAN connectivity is by a USB (Universal Serial Bus) 3G/4G/LTE cellular modem which can be your primary WAN feed, backup or load-balanced with your fixed line. This latest router series

Includes:: support for other professional features such as VLAN tagging, Qo S (Quality of Service Assurance), High Availability, DNS Filter, Policy Based Routing, & User Access Control. Wired & Wireless models also include our new Hotspot features. If you deploy Dray Tek Wireless Access Points, the Vigor 2926 can act as the Central Management Controller. A 5-port Gigabit Ethernet switch on the LAN side provides high speed connectivity for your server, other local PCs or for uplink to a larger Ethernet switch. Comprehensive security features include content filtering, web application controls & an object based firewall management system. Port 5 is switchable with WAN2 to use it as an Ethernet WAN port instead of a LAN port*. *requires f/w 3.8.8 or later, otherwise 5th Ethernet port is for WAN2 only. Robust & Comprehensive Firewall Security is always taken seriously with Dray Tek routers. The firewall protects against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems. The Dray Tek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules & restrictions to suit multi-departmental organisations. The Vigor 2926 also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to LAN/VPN. Central Management with Vigor ACS The Vigor 2926 series (along with most other Dray Tek routers, Access points & switches) can be centrally managed by our Vigor ACS central management platform. This scalable solution provides visibility, control & reporting of your entire Dray Tek product estate, ideal for dealers/SIs manageing customers devices or any user who wants to know whats going on with their devices. Vigor ACS also provides features like automated/bulk firmware updates, VPN management & alarms for connectivity or other issues.



...

The Vigor 2926 series is our dual-Ethernet WAN firewall for load-balancing or failover. Its also a fully featured firewall, VPN concentrator & content filtering device. A 5-port Gigabit Ethernet switch on the LAN side provides high speed connectivity for your server, other local PCs or for uplink to a larger Ethernet switch. Comprehensive security features include content filtering, web application controls & an object based firewall management system. Port 5 is switchable with WAN2 to use it as an Ethernet WAN port instead of a LAN port*. *requires f/w 3.8.8 or later, otherwise 5th Ethernet port is for WAN2 only. Robust & Comprehensive Firewall Security is always taken seriously with Dray Tek routers. The firewall protects against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems. The Dray Tek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules & restrictions to suit multi-departmental organisations. The Vigor 2926 also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to LAN/VPN. Central Management with Vigor ACS The Vigor 2926 series (along with most other Dray Tek routers, Access points & switches) can be centrally managed by our Vigor ACS central management platform. This scalable solution provides visibility, control & reporting of your entire Dray Tek product estate, ideal for dealers/SIs manageing customers devices or any user who wants to know whats going on with their devices. Vigor ACS also provides features like automated/bulk firmware updates, VPN management & alarms for connectivity or other issues. Web Content Filtering The content control features of the Vigor 2926 series means that you can set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal & according to time schedules. Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block). Using the Global View service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router ...

Key Features Supports dual Ethernet-based Broadband & USB (Universal Serial Bus) 3G/4G LTE 4-WAN Simultaneous: Dual Gigabit Ethernet & dual optional USB (Universal Serial Bus) 3G/4G Wireless Management of compatible Dray Tek APs Switch Management of compatible Dray Tek Switches IPv 4/IPv 6 Dual-Stack The Vigor 2926 series is our dual-Ethernet WAN firewall for load-balancing or failover. Its also a fully featured firewall, VPN concentrator & content filtering device. This latest router series

Includes:: support for professional features such as VLAN tagging, Gigabit Ethernet, built-in wireless LAN (Vigor 2926n or Vigor 2926ac). An alternative WAN connectivity is by a USB (Universal Serial Bus) 3G/4G/LTE cellular modem which can be your primary WAN feed, backup or load-balanced with your fixed line. This latest router series

Includes:: support for other professional features such as VLAN tagging, Qo S (Quality of Service Assurance), High Availability, DNS Filter, Policy Based Routing, & User Access Control. Wired & Wireless models also include our new Hotspot features. If you deploy Dray Tek Wireless Access Points, the Vigor 2926 can act as the Central Management Controller. A 5-port Gigabit Ethernet switch on the LAN side provides high speed connectivity for your server, other local PCs or for uplink to a larger Ethernet switch. Comprehensive security features include content filtering, web application controls & an object based firewall management system. Port 5 is switchable with WAN2 to use it as an Ethernet WAN port instead of a LAN port*. *requires f/w 3.8.8 or later, otherwise 5th Ethernet port is for WAN2 only. Robust & Comprehensive Firewall Security is always taken seriously with Dray Tek routers. The firewall protects against attacks including Do S (Denial of Service) attacks, IP-based attacks & access by unauthorised remote systems. Wireless, Ethernet & VPN are also protected by various protection systems. The Dray Tek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules & restrictions to suit multi-departmental organisations. The Vigor 2926 also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to LAN/VPN. Central Management with Vigor ACS The Vigor 2926 series (along with most other Dray Tek routers, Access points & switches) can be centrally managed by our Vigor ACS central management platform. This scalable solution provides visibility, control & reporting of your entire Dray Tek product estate, ideal for dealers/SIs manageing customers devices or any user who wants to know whats going on with their devices. Vigor ACS also provides features like automated/bulk firmware updates, VPN management & alarms for connectivity or other issues.



...

The Ideal VPN Router for Small Business & Remote Working The Dray Tek Vigor 2927
- Dual-WAN Load Balancing Firewall VPN router
...