DrayTek Vigor2866 Series
G.fast Security Router
The Vigor2866 Series is a dual WAN firewall router featuring one G.fast supported DSL WAN, delivering fiber-like speeds up to 1 Gbps, and one configurable Ethernet WAN. The built-in DSL modem is backward compatible with VDSL2 profile 35b supervectoring and ADSL2+. The Vigor2866 Series provides load-balancing and failover for business continuity. It offers VPN, QoS, route policy, firewall, content filtering, bandwidth management, a captive hotspot portal, and many other features, making it a comprehensive DSL router for SMBs.
Key Features and Interfaces
| Interface | Description | Wireless Antenna | LTE Antenna | SIM Slot | Button |
| 1 Fixed WAN Port | 1 x RJ-11 for G.fast/VDSL2 35b/ADSL2+ | 2 x External (wireless model) | 2 x External (L model) | 2 x Standard-Sized (1 SIM online at a time) (L model) | 1 x Factory Reset 1 x Wireless On/OFF/WPS (wireless model) |
| 2 WAN/LAN Switchable Port | 1 x 10/100/1000Base-TX, RJ-45 (WAN 2 or LAN Port 6) | ||||
| 3 Fixed LAN Port | 5 x 10/100/1000Base-TX, RJ-45 | ||||
| 4 USB Port | 2 x USB 2.0 or 1 x USB 2.0 (L model) | ||||
| 5 VoIP | 2 x FXS, RJ-11 (V model) |
DSL Specifications
| DSL Standards | ITU-T G.993.2 Annex A/B/M/Q, ITU-T G.993.5 (Vectoring) |
| VDSL2 Profile | 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b |
| G.fast Profile | 106Mhz, 212Mhz |
| ADSL Standards | ITU-T G.992.3 (G.dmt.bis)*, ITU-T G.992.5 (ADSL2+) (G.adslplus) |
| Other Standards | ITU-T G.998.4 (Retransmission) |
| Band Plan | 998, 997 |
Networking Features
| Feature | Description |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | • |
| DNS Security (DNSSEC) | • |
| IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | • (Requires external storage) |
| SMB File Sharing | • |
Internet Connection
| Type | Protocols |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | • |
| Multi-VLAN/PVC | • |
| Wireless WAN | 2 (ac model) |
| 3G/4G/LTE WAN with USB modem | • |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | • |
| Dynamic DNS | DrayDDNS |
VPN Features
| Type | Protocols |
| LAN-to-LAN | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN, Wireguard |
| Teleworker-to-LAN | Local, RADIUS, LDAP, TACACS+, MOTP |
| IPsec Authentication | Pre-Shared Key, X.509 |
| Encryption | SHA-1, SHA-256, MPPE, AES, DES, 3DES |
| VPN Trunk (Redundancy) | Load Balancing, Failover |
| Single-Armed VPN | • |
| NAT-Traversal (NAT-T) | • |
| DrayTek VPN Matcher | • |
Firewall & Content Filtering
| Feature | Description |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | • |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | • |
| Spoofing Defense | • |
Bandwidth Management
| Feature | Description |
| IP-based Bandwidth Limit | • |
| IP-based Session Limit | • |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | • |
LAN Management
| Feature | Description |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 16 |
| Number of LAN Subnet | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | • |
| Wired 802.1x Authentication | • |
| Port Mirroring | • |
| Local DNS Server | • |
| Conditional DNS Forwarding | • |
| Hotspot Web Portal | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
| Hotspot Authentication | • |
Management
| Feature | Description |
| Local Service | HTTP, HTTPS, Telnet, SSH, FTP, TR-069 |
| Config File Export & Import | TFTP, HTTP, TR-069 |
| Firmware Upgrade | • |
| 2-Level Administration Privilege | • |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SNMP, Syslog, E-mail |
| Syslog | v1, v2c, v3 |
| Managed by VigorACS | • |
| Central VPN Management | 8 VPN |
| Central AP Management | 20 VigorAP |
| Mesh Network | 7 VigorAP (ac model) |
| Central Switch Management | 10 VigorSwitch |
LTE (L model)
| Category | 6 |
| Max. Data Rate | 300 Mbps downlink, 50 Mbps uplink |
| FDD Band | 8 (900MHz), 20 (800MHz), 28 (700MHz) |
| TDD Band | 38 (2600MHz), 40 (2300MHz), 41 (2540-2640MHz, for Saudi Arabia only) |
| WCDMA (3G) Band | 1, 8 |
| SMS Gateway | • |
VoIP (V model)
| Protocol | SIP, RTP/RTCP, ZRTP |
| SIP Registrars | 12 |
| Call Features | Phone Book, Digit Map, Call Barring, Regional Call Waiting, Call Transfer, Scheduled DND, Hotline |
| Voice Codec | G.711 A/u law, G.723.1, G.726, G.729 A/B |
| Caller ID | FSK_ETSI, FSK_BELLCORE, DTMF |
| Dial Plan | • |
Wireless LAN (Wireless model)
| Feature | Description |
| WiFi 6 | • (ax model) |
| Number of SSID | 4 per radio band |
| Security Mode | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
| Authentication | Pre-Shared Key, 802.1x |
| OFDMA | • (ax model) |
| WPS | PIN, PBC |
| WDS | Repeater (5GHz only)(ac model) |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
| AirTime Fairness | • |
| Band Steering | • |
| MU-MIMO | • |
| WMM | • |
Product Variants
| Model | WLAN | LTE | VoIP |
| Vigor2866 | • | ||
| Vigor2866 L | • | • | |
| Vigor2866ac/ax | • | ||
| Vigor2866 Lac | • | • | |
| Vigor2866 Vac | • | • | |
| Vigor2866 Vac | • | • | • |
