DrayTek 2136axx Multi Gigabit Ethernet Router Owner's Manual

The DrayTek Vigor 2136ax is a high-performance router with
2.5GbE WAN interfaces, ideal for connecting to FTTP modems. It
offers extensive Firewall, Content Filtering, VPN client/server,
and Quality of Service controls.

Key Features & Benefits

2.5 Gigabit WAN Interfaces: Make full use of
Fibre Broadband with over 2 Gigabit throughput.
High-Performance VPN Router: Securely connect
remote sites with up to 4 VPN tunnels.

Wi-Fi 6 – AX3000 Performance: Provides gigabit
Wi-Fi with reliable throughput for various applications.
3+1 Gigabit LAN Ports: Attach Computers,
Servers, and Network Attached Storage directly.

Identity and Access Management (IAM): Control
access to local resources based on policies and authentication
methods.
Virtual Controller: Easily manage local
APs/Switches with automatic discovery feature.

Product Usage Instructions

Setting Up the Vigor 2136ax Router

Connect the router to a power source and turn it on.
Connect your modem to the WAN port of the router using an
Ethernet cable.

Access the router’s web interface using a browser and configure
your network settings.

Configuring VPN Tunnels

Navigate to the VPN settings section.
Create VPN tunnels and configure the settings for secure
connectivity.

Managing Wi-Fi Settings

Login to the router’s web interface.
Access the Wi-Fi settings to configure SSID, password, and
security settings.

Create guest networks if needed for additional security.

FAQ

Q: Can I connect additional WAN options to the Vigor 2136ax
router?

A: Yes, the router supports additional Ethernet, Wireless, or
USB LTE WAN options for flexible connectivity.

Q: Does the Vigor 2136ax router support VLAN
configurations?

A: Yes, you can use VLANs to supply Broadband and VPN
connectivity to separate networks on the LAN ports.

Q: How can I manage connected APs/Switches with the Virtual
Controller feature?

A: The Virtual Controller feature allows automatic discovery of
connected devices for monitoring, maintenance, and provisioning
directly on the router.

“`

View Fullscreen

Vigor 2136axx
Multi-Gigabit Ethernet Router with Wi-Fi 6 AX3000 Wireless, VPN and Fast 2.5GbE Interfaces

Datasheet

Product Overview
High performance router with 2.5GbE WAN that’s ideal for connecting to FTTP modems.
The DrayTek Vigor 2136ax Firewall VPN routers allow you to make the most of FTTP Fibre Broadband with future-proof 2.5 Gigabit WAN interfaces, extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls.

Key Features & Benefits
2.5 Gigabit WAN Interfaces for Fibre Broadband
Make full use of Fibre Broadband with the Vigor 2136ax’s 2.3 Gigabit throughput. Additional Ethernet, Wireless or USB LTE WAN options are available.
Benefits: Unleash the full potential of fibre broadband: over 2 Gigabit CPE with flexible application.

High-Performance VPN Router for SMB
Securely connect remote sites at high speed, up to 4 VPN tunnels. Connect remote workers to network resources and secure connectivity, with OpenVPN and WireGuard support.
Benefits: Provide secure, encrypted network access for remote workers.

Wi-Fi 6 – AX3000 Performance
Wi-Fi 6 wireless provides gigabit Wi-Fi with reliable throughput. Ideal for time-sensitive video conferencing, low latency gaming and handling 4K Ultra-HD streaming without buffering.
Benefits: Improved wireless performance. Built with the latest technologies.

3+1 Gigabit LAN Ports
Attach Computers, Servers and Network Attached Storage directly, with up to 4 LAN ports. Use VLANs to supply Broadband and VPN connectivity to as many as 4 separate networks.
Benefits: Improve the quality of service for private and guest data traffic. Mix fixed and virtual configurations.

Identity and Access Management (IAM)
The new Identity and Access Management (IAM) feature enables the admin to control access to local resources (servers, NAS drives etc.) based on pre-defined policies, MFA, and external authentication methods.
Benefits: Policy-based access to the local network resources.

Easily Manage Local APs/Switches with the Virtual Controller
Manage devices locally thanks to the router’s Virtual Controller feature. Automatic discovery allows the router to add connected DrayTek switches and APs to the management pool.
Benefits: Monitor, maintain, and provision directly on the Vigor router.

Key Specification
· 2.5 Gigabit Ethernet Router · Up to 2.3Gbps Firewall Throughput · Up to 390Mbps IPsec VPN Throughput · 4x LAN-to-LAN & Remote Teleworker VPN Tunnels · 1x 2.5 Gigabit RJ-45 LAN Port · 3x Gigabit RJ-45 LAN Ports · AX3000 Wi-Fi 6 Dual Band Wireless · 4 LAN Subnets with VLANs (Port-based / 802.1q) · SPI Firewall and Content Filtering · Optional VigorCare Available · Compatible with VigorACS central management platform

Vigor 2135ax Router Models

UK Product Code
V2136AX-K

EAN

Product Name

4710484748409 Vigor 2136ax (UK/IE)

Product Description
Vigor 2136ax 2.5GbE Ethernet Router with Wi-Fi 6 AX3000 Wireless

Technical Specification (UK Hardware Spec.)

Physical Interfaces · WAN Ports: 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45 · WAN/LAN Switchable Port: 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45 · LAN Ports: 3x Gigabit Ethernet (1G/100M/10M), RJ-45 · 2x USB 2.0 Ports for LTE Modem, Thermometer or Printer · 2x Removable Wireless LAN antennas (wireless models) · Wireless On / Off / WPS button · Recessed Factory Reset button
Antenna Specifications · Wireless Antennas: 2x External Dipole 5GHz Gain: 2.7 dBi 2.4GHz Gain: 2.6 dBi RP-SMA fitting antenna connectors
Performance · NAT Performance: 2.3 Gb/s NAT Throughput for Single WAN 50,000 NAT Sessions · VPN Performance: 390 Mb/s IPsec (AES256) VPN Performance Max. 4 Concurrent VPN Tunnels
Internet Connection · Hardware Acceleration (Always On) · 802.1p/q Multi-VLAN Tagging · Multi-VLAN/PVC · 2.4GHz or 5GHz Wireless WAN · WAN Active on Demand: Link Failure, Traffic Threshold · Connection Detection: PPP, ARP Detect, Ping Detect · WAN Data Budget · Dynamic DNS · DrayDDNS with automated LetsEncrypt Certificates · Full Feature-set Hardware Acceleration: Hardware Accelerated Quality of Service WAN Data Budget Traffic Graph & Data Flow Monitor Bandwidth Limit · IPv4 Connection Types: PPPoE, DHCP, Static IP · IPv6 Connection Types: Ethernet: PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel

Wireless Features · AX3000 Wi-Fi 6 Wireless: 802.11ax 2×2 wireless access point Compatible with 802.11a/b/g/n/ac wireless Dual-band (2.4/5Ghz) simultaneous wireless Up to 2400Mbps PHY rate at 160MHz with 5GHz Up to 574Mbps PHY rate at 40MHz with 2.4GHz Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz OFDMA MU-MIMO Tx Beamforming 1024-QAM · Mesh Root support with DrayTek VigorAP Mesh Nodes^ · Up to 8 SSIDs per radio band · Extended 5Ghz Band – Channels 36-48, 52-64, 100-140 · Wireless Optimisation: AP-Assisted Mobility, Band Steering · Bandwidth Management (Per Station / Per SSID) · WMM (Wireless MultiMedia) · WPS – WiFi Protected Setup · Station Control – Time-limited wireless connectivity per Station (e.g. 1 hour) · EAPOL Key Retry – Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK · Wireless Security: WPA2 WPA3 Pre-Shared Key authentication Enterprise 802.1x authentication WEP/WPA for Legacy Clients Access Control Blacklist / Whitelist client MAC addresses per SSID
WAN Interfaces · WAN1: 2.5 Gigabit Ethernet · WAN2: 2.5 Gigabit Ethernet (LAN switchable) · WAN3: 2.4GHz Wireless WAN · WAN4: 5GHz Wireless WAN · WAN5: LTE USB Modem (not included) · WAN6: LTE USB Modem (not included)

Firewall & Content Filtering · IP-based Firewall Policy · User-based Time Quota · DoS Attack Defence · Spoofing Defence · Content Filtering: Application Content Filter URL Content Filter DNS Keyword Filter Web Features Web Category Filter*
NAT Features · NAT Port Redirection · Open Ports · Port Triggering · DMZ Host · UPnP · ALG (Application Layer Gateway): SIP, RTSP
LAN Management · 802.1q Tag-based, Port-based VLAN · Up to 4 LAN Subnets (NAT or Routing mode selectable per LAN interface) · Up to 8 VLANs · DMZ Port · DHCP Server: Multiple IP Subnet Custom DHCP Options Bind-IP-to-MAC DHCP Pool Count up to 253 addresses for LANs 1-4 DHCP Relay per LAN · LAN IP Alias · Wired 802.1x Port Authentication · Local DNS Server · Conditional DNS Forwarding · Hotspot Web Portal · Hotspot Authentication: Click-Through, External Portal Server

Networking Features · Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country · High Availability: Active-Standby, Hot-Standby · DNS Security (DNSSEC) · Local RADIUS server · SMB File Sharing (Requires external storage) · Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour · Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN Features · Up to 4 active VPN tunnels · Up to 4 Hardware Accelerated 390Mb/s IPsec tunnels · LAN-to-LAN – Dial-In VPN Server & Dial-Out VPN Client · Teleworker-to-LAN Dial-In VPN Server · User Authentication: Local, RADIUS, TACACS+, mOTP, TOTP · IKE Authentication: Pre-Shared Key and Digital Signature (X.509) · Encryption: MPPE, DES, 3DES, AES (128/192/256) · Authentication: SHA-256, SHA-1 · VPN Trunk (Redundancy): Load Balancing, Failover · Dead Peer Detection (DPD) · IPsec NAT-Traversal (NAT-T) · Virtual IP Mapping Resolve VPN IP subnet/range conflicts · DHCP over IPsec · DrayTek VPN Matcher Connect to a VPN router behind NAT/ CG-NAT · VPN Protocols: IPsec IKEv1, IKEv2, IKEv2 EAP IPsec-XAuth OpenVPN WireGuard – New!

Bandwidth Management · IP-based Bandwidth Limit · IP-based Session Limit · User-based Data Quota · QoS (Quality of Service): Classify via TOS, DSCP, 802.1p, IP Address, Service Type 4 Priority Queues App QoS VoIP Prioritization
Management · Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069 · Config File Export & Import · Firmware Upgrade via TFTP, HTTP, TR-069 · 2-Level Administration Privilege · Access Control Features: Access List, Brute Force Protection · Syslog · SMS, E-mail Notification Alert · SNMP: v1, v2c, v3 · Managed by VigorACS
Router Central Management Features · AP Management: Up to 20 VigorAP access points · Switch Management: Up to 5 VigorSwitch network switches · DrayTek Mesh: Up to 7 VigorAP access points^
Operating Requirements · Power Requirements: 100-240VAC · Power Consumption (Watts, maximum): 18W · Temperature Operating: 0 °C ~ 45 °C · Storage: -25 °C ~ 70 °C · Humidity 10% ~ 90% (non-condensing) · Operating Power: DC 12V @ 1.5A (via external PSU, supplied) · Wall Mountable

Box Contents · Vigor 2136ax series router · Quick Start Guide · Screws & wall plugs for wall mounting · 2m Cat-5e RJ-45 Network Cable · 2x Detachable Wireless LAN Antennas · DC 12V Power Supply with UK Plug
ROHS, UKCA & CE Compliant Warranty
· Standard: Two (2) Year, RTB · Software security updates: 5 years after the EOL notification. Please note that this only
applies to products sold in the UK · VigorCare Extended Warranty VigorCare A3 3 Year Subscription: VCARE-A3 VigorCare A5 5 Year Subscription: VCARE-A5
* – subscription required: Group B, URLR-B (includes free 30-day trial)
^ – visit the DrayTek Mesh Model Compatibility page for mesh compatibility details

Email: info@draytek.co.uk Telephone: +44 (0) 345 5570 007 Email: info@draytek.ie Telephone: +353 (0) 818 000 939 Specifications, content and product availability are subject to change and may differ from country to country. Actual Performance may vary depending on applications, usage, environment and other factors. Full specifications are available at https://www.draytek.co.uk and https://www.draytek.ie

Documents / Resources

DrayTek 2136axx Multi Gigabit Ethernet Router [pdf] Owner's Manual
2136axx, 2136axx Multi Gigabit Ethernet Router, 2136axx, Multi Gigabit Ethernet Router, Gigabit Ethernet Router, Ethernet Router, Router

References

User Manual

DrayTek 2136axx Multi Gigabit Ethernet Router Owner’s Manual

2136axx Multi Gigabit Ethernet Router

Specifications

Product Overview