DrayTek Vigor2865ac-B User Manual

Vigor2865

Series

Super Vectoring Security Firewall Router

Integrated ADSL/VDSL modem, Super Vectoring (35b) support
USB port for 3G/4G modem or extra storage
32 Simultaneous VPN Tunnels for remote offices or teleworkers
SPI Firewall with Content Filtering
Central Management for VigorAP & VigorSwitch
SIM-base, 3G/4G LTE Router, CAT 6 up to 300Mpbs connection speed (L model)
Dual-band 4x4 MU-MIMO 802.11ac Wave 2 for speed up to 1733Mbps + 800Mbps (ac model)

Vigor2865 Series is a VDSL2/ADSL2+ Security
Firewall router integrating a DSL modem which is
compatible with variants of ADSL and VDSL,
including VDSL Super Vectoring. There is also a
Gigabit Ethernet WAN port for broadband
connections to share the traffic load or being used
as a failover connection. 3G/4G/LTE USB modem
can also be attached to the USB ports of the router,
and offer wireless Internet connectivity in case the
fixed lines are not available. Vigor2865Lac has a
built-in 3G/4G/LTE modem, cellular connectivity can
be added by simply inserting a SIM card.

Vigor2865 Series can also be a central management
portal for Vigor APs and Vigor Switches, providing
Network Administrator a simpler way to maintain all
the network devices.

Flexible LAN Management

Vigor2865 Series supports 802.1Q standard and can
build a Tag-based VLAN system with an 802.1Q­support switch, Port-based VLAN is also supported
that each LAN port can be configured as a member
of different VLAN and be isolated from each other
without the use of VLAN tag.

Secure Business Network

Vigor2865 Series has implemented Stateful Packet
Inspection (SPI) Firewall, flexible filtering rules can be
set up to accept or deny packets based on source IP,
destination IP, protocol, port number, or even the
packet's contents. Content Filtering by URL keyword or
application can help you to prevent time and network
resource wasting on inappropriate network activities.

Vigor2865 Series is also a robust VPN server which is
perfect for a company based on multiple locations or
has teleworkers. The VPN is compliant with all
common industry standard protocols, and its
compatible with third-party VPN devices.

WLAN

Vigor2865
Vigor2865
Vigor2865
Vigor2865

LTE

Lac
L
ac

2.4 GHz 5 GHz

Central Management

Vigor2865 Series can act as a Central Management
portal for the other Vigor devices on the network,
including VigorAPs, Vigor Switches, and even Vigor
Routers. With Central Management feature, device
maintenance (such as firmware upgrading,
configuration backup and restore) and monitoring
can all be done from a single portal, which is the
Web User Interface of Vigor2865 Series

Vigor2865

Series

Connectivity

VDSL2/ADSL2/2+

ITU-T G.993.2 (VDSL2)
ITU-T G.992.1/3/5 (ADSL1/2/2+)
Annex A & Annex B
DSL Forum Performance Specification:
ADSL TR-048/67, TR-100; VDSL: WT-114
Erasure Decoding, Increased Interleaver
Depth and Re-transmission
EFM (IEEE 802.3 ah)
VDSL Profile: up to 35b

Ethernet WAN
IPv4 - DHCP Client, Static IP, PPPoE, PPTP,
L2TP, 802.1q Multi-VLAN Tagging
IPv6 - Tunnel Mode: TSPC, AICCU, 6rd,
Static 6in4
Dual Stack: PPP, DHCPv6 Client,
Static IPv6
WAN Connection Fail-over
WAN Budgets
Load Balance/Route Policy

Ethernet LAN
IPv4/IPv6 DHCP Server
Static Routing/RIP
Multiple Subnet
Port/Tag-based VLAN

USB
3G/4G Modem as WAN
/Printer Server/File Sharing
/Themometer

LTE Modem (L model)

Integration into the LTE broadband network
with LTE-SIM card (mini SIM)
LTE (4G) at speeds of up to 300 Mbit/s
Multi-band support: 5 LTE and 2 UMTS
frequencies (LTE: bands 3, 7, 8, 20 and 28;
UMTS: bands 1 and 8)
Carrier aggregation is supported to increase
the bandwidth ( Inter-band : 3+7,8,20,28,
or 7+20,28; Intra-band : 3, 7)
LTE Connection Status on Dashboard
Support Sending Short Message Service
(SMS) Feature
Support SMS Quota Limitation
Show the SMS Information in SMS Inbox

Management

System Maintenance
HTTP/HTTPS with 2-level Management
(Admin/User)
Logging via Syslog
SNMP Management MIB-II (v2/v3)
CLI (Command Line Interface, Telnet/SSH)
Administration Access Control
Web-based Diagnostic Functionality
Firmware Upgrade via HTTP/TR-069
CWMP Support (TR-069/TR-104)
LAN Port Monitoring

Network Management
Bandwidth Management by session
/bandwidth
User Management by Time/Data Quota
LAN DNS and DNS Proxy/Cache
Dynamic DNS
IGMP Snooping/Proxy v2 and v3
QoS (DSCP/Class-based/4-level priority)
Guarantee Bandwidth for VoIP
Support Smart Monitor
Central AP Management
Central VPN Management
Support Switch Management

WLAN (ac model)

Wireless AC + N with Multi-User MIMO
Wireless N with up to 800 Mbit/s
(2.4 GHz @4x4 model)
Wireless AC with up to 1733 Mbit/s
(5 GHz @4x4 model)
Multiple SSID
Security (Open, 64/128-bit WEP,
WPA/WPA2, 802.1x)
Hidden SSID
Wireless Rate Control by SSID
Wireless VLAN
Wireless LAN Isolation
MAC Address Access Control
Access Point Discovery
Wireless Client List
WDS (Wireless Distribution System)
WMM (Wi-Fi Multimedia)

Security

Multi-NAT, DMZ Host, Port-redirection and
Open Port
Object-based Firewall, Object IPv6,
Group IPv6
MAC Address Filter
SPI (Stateful Packet Inspection) (Flow Track)
DoS/DDoS Prevention
IP Address Anti-spoofing
E-mail Alert and Logging via Syslog
Bind IP to MAC Address
Time Schedule Control
Content Security ( IM/P2P, URL, Keywords,
Cookies,...)

VPN

Up to 32 VPN Tunnels
Protocol : PPTP, IPsec, L2TP, L2TP over IPsec
Encryption : MPPE and Hardware-based
AES/DES/3DES
Authentication : MD5, SHA-1
IKE Authentication : Pre-shared Key and
Digital Signature (X.509)
LAN-to-LAN, Teleworker-to-LAN
DHCP over IPsec
IPsec NAT-traversal (NAT-T)
Dead Peer Detection (DPD)
VPN Pass-through
VPN Wizard
mOTP
Supports 16 SSL VPN Tunnels
VPN Trunk: VPN Backup and Load Balance

Hardware Interface

1 x VDSL2/ADSL2/2+ WAN Port (WAN1),
RJ-11 for Annex A/RJ-45 for Annex B
1 x 10/100/1000Base-Tx, RJ-45 (WAN2)
6 x 10/100/1000Base-Tx LAN Switch, RJ-45
(P6 is shared by WAN2)
4 x Detachable Antennas (ac Model)
2 x Detachable LTE Antennas (L model)
LTE SIM Card Slot (L model)
2 x USB Host 2.0
1 x USB Host 2.0 (L model)
1 x Factory Reset Button
1 x Wireless On/Off/WPS Button (ac model)

Seamless Connectivity

991-28 620 00-0 1G

3G/4G USB
mobile

3G

4G

3G/4G

WAN

4

USB

Modem

Specifications subject to change at any time without notice, for more information please visit www.draytek.com or contact your local representative.

File Sharing

WAN2 / P6

WAN

2

LAN

P1 P2

Themometer

Vigor2865Lac

VDSL2 Security Firewall

P3

P4

P5

WAN

WAN

3

Mobile

Internet

Built-in
4G LTE

DSL

1