Vigor2866 LTE Series

4G LTE & G.fast VPN Firewall Router

    4G LTE & G.fast Router for SMB

    Vigor2866 LTE Series is a G.fast firewall router with embedded 4G/LTE connectivity, making it ideal for SMB/Branch office where Internet connection is the core of business continuity, or new business locations that wired connection is yet to be available.

    It has one G.fast supported DSL WAN, delivering fiber-like speed up to 1 Gbps, one configurable Ethernet WAN, 2 x embedded SIM slots supporting LTE Cat. 6 (1 SIM online at a time), and 1 x versatile USB port for additional 4G/LTE connection or other applications. All these WANs together provide robust load-balancing/failover functionality.

    The series includes models without wireless LAN and with built-in 802.11ac Wave2 wireless LAN. It also offers other professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and more. It can act as the controller to manage other VigorAP and VigorSwitch in LAN, or register to VigorACS for cloud-based management.

    • G.fast

      Download speed up to 1 Gbps

    • 300 Mbps

      Maximum LTE Speed

    • 32 VPN

      IPsec VPN throughput up to 300 Mbps

    • Dual-SIM

      Insert 2x SIM cards for Failover

    1. Wireless Antenna (ac model)
    2. Reset Button
    3. WLAN/WPS Button (ac model)
    4. LED Indicator
    1. 1x USB 2.0
    2. LAN/WAN Switchable Port: 1x GbE RJ-45
    3. Fixed LAN Port: 5x GbE RJ-45
    4. Fixed WAN Port: 1x RJ-11 for G.fastVDSL2 35b/ADSL2+
    1. LTE Antenna
    2. Power Input
    3. Power On/Off Switch
    4. 2x Standard-Sized SIM Slots

    Key Features

    • null

      Embedded SIM Slot

      Provide 4G/LTE Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.

    • null

      Load Balancing

      Maximize throughput and reliability by using multiple Internet connections. Learn more

    • null

      G.fast Modem

      Integrated VDSL modem, supporting G.fast to deliver fiber-like DSL speed.

    • null

      VPN (Virtual Private Network)

      Build a secure and private tunnel from the LAN of Vigor2866 Series to the remote offices and teleworkers over the Internet. Learn more

    • null

      SSL VPN

      The VPN works through firewalls providing secure remote access to any network environment. Learn more

    • null

      Firewall & Content Filter

      Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.

    • null

      DrayDDNS

      The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more

    • null

      Wireless WAN (Wireless model only)

      Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more

    • null

      Hotspot Web Portal

      Market your business and communicate with the guests while offering hospitality Wi-Fi. Learn more

    • null

      Bandwidth Management

      Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

    • null

      VoIP Friendly

      Vigor2866 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide

    • null

      Central AP Management

      Use the Vigor2135 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more

    • null

      Mesh (Wireless model only)

      Easily link to other VigorAP to expand the wireless network. Learn more

    • null

      Central Switch Management

      Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more

    Model 2.4GHz WLAN 5GHz WLAN Wireless Antenna Wireless Mode Max. Link Rate Max. Bandwidth Wireless WAN WDS Mesh Hardware Acceleration
    for WLAN Client
    Vigor2866L
    Vigor2866Lac 2x Dual-Band
    (3.5dBi for 5GHz, 2.3dBi for 2.4GHz)
    2.4 GHz: 802.11b/g/n
    5 GHz: 802.11 a/n/ac
    2.4 GHz: 400 Mbps
    5 GHz: 867 Mbps
    80 MHz
    5GHz Only

    5GHz Only
    Interface
    Fixed WAN Port 1x RJ-11 for G.fast/VDSL2 35b/ADSL2+
    LAN/WAN Switchable Port 1x 10/100/1000Base-TX RJ-45
    Fixed LAN Port 5x 10/100/1000Base-TX RJ-45
    SIM Slot 2x Standard-Sized (1 SIM online at a time)
    USB Port 1x USB 2.0
    LTE Antenna 2x External Dipole
    Gain: 3 dBi
    Wirelss Antenna 2x External Dipole
    Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz
    (Lac model)
    2.4G WLAN 802.11n 2×2 MIMO
    Up to 400Mbps Link Rate
    (ac model)
    5G WLAN 802.11ac Wave 2 2×2 MU-MIMO
    Up to 867Mbps Link Rate
    (ac model)
    Performance
    NAT Throughput 800 Mbps
    NAT Throughput w/ Hardware Acceleration 940 Mbps (Single Ethernet/DSL WAN)
    1.8 Gbps (Ethernet WAN + DSL WAN)
    IPsec VPN Performance 300 Mbps (AES 256 bits)
    SSL VPN Performance 150 Mbps
    Max. Number of NAT Sessions 60,000
    Max. Concurrent VPN Tunnels 32
    Max. Concurrent OpenVPN + SSL VPN 16
    DSL
    VDSL Standards ITU-T G.993.2 Annex A/B/M/Q
    T1.424
    ITU-T G.993.5 (Vectoring)
    VDSL2 Profile 8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a, 35b
    G.fast Profile 106Mhz, 212Mhz
    ADSL Standards ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
    Other Standards ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
    Band Plan 998, 997
    LTE
    LTE Category 6
    Max. Data Rate 300 Mbps downlink, 50 Mbps uplink
    FDD Band 1 (2100MHz), 3 (1800MHz), 7 (2600MHz), 8 (900MHz), 20 (800MHz), 28 (700MHz)
    TDD Band 38 (2600MHz), 40 (2300MHz), 41(2540-2640MHz, for Saudi Arabia only)
    WCDMA (3G) Band 1, 8
    SMS Gateway   Learn More
    For other band availability, please contact your local DrayTek distributor or us
    Internet Connection
    IPv4 PPPoE, DHCP, Static IP, PPTP/L2TP
    IPv6 PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
    802.1p/q Multi-VLAN Tagging
    Multi-VLAN/PVC
    Wireless WAN 2 (ac model)
    3G/4G/LTE WAN with USB modem
    Load Balancing IP-based, Session-based
    WAN Active on Demand Link Failure, Traffic Threshold
    Connection Detection ARP, Ping
    WAN Data Budget
    Dynamic DNS
    DrayDDNS
    LAN Management
    VLAN 802.1q Tag-based, Port-based
    Max. Number of VLAN 16
    Number of LAN Subnet 8
    DHCP Server Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
    LAN IP Alias
    Wired 802.1x Authentication
    Port Mirroring
    Local DNS Server
    Conditional DNS Forwarding
    Hotspot Web Portal
    Hotspot Authentication Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
    Networking
    Routing IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2, BGP
    Policy-based Routing Protocol, IP Address, Port, Domain, Country
    High Availability
    DNS Security (DNSSEC)
    IGMP IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
    Local RADIUS server
    SMB File Sharing (Requires external storage)
    VPN
    LAN-to-LAN
    Teleworker-to-LAN
    Protocols PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
    User Authentication Local, RADIUS, LDAP, TACACS+, mOTP
    IKE Authentication Pre-Shared Key, X.509
    IPsec Authentication SHA-1, SHA-256
    Encryption MPPE, DES, 3DES, AES
    VPN Trunk (Redundancy) Load Balancing, Failover
    Single-Armed VPN
    NAT-Traversal (NAT-T)
    DrayTek VPN Matcher
    Firewall & Content Filtering
    NAT Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
    ALG (Application Layer Gateway) SIP, RTSP, FTP, H.323
    VPN Pass-Through PPTP, L2TP, IPsec
    IP-based Firewall Policy
    Content Filtering Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
    DoS Attack Defense
    Spoofing Defense
    Bandwidth Management
    IP-based Bandwidth Limit
    IP-based Session Limit
    QoS (Quality of Service) TOS, DSCP, 802.1p, IP Address, Port, Application
    VoIP Prioritization
    Wireless LAN (ac model)
    Number of SSID 4 per radio band
    Security Mode OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
    Authentication Pre-Shared Key, 802.1X
    WPS PIN, PBC
    WDS Repeater (5GHz only)
    Access Control Access List, Client Isolation, Hide SSID, WLAN Scheduling
    AirTime Fairness
    Band Steering
    MU-MIMO (5GHz Only)
    WMM
    Management
    Local Service HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
    Config File Export & Import
    Config File Compatibility Vigor2865 LTE
    Firmware Upgrade TFTP, HTTP, TR-069
    2-Level Administration Privilege
    Access Control Access List, Brute Force Protection
    Notification Alert SMS, E-mail
    SNMP v1, v2c, v3
    Syslog
    Managed by VigorACS
    Central VPN Management 8 VPN
    Central AP Management 20 VigorAP
    Mesh Network 7 VigorAP (ac model)
    Central Switch Management 10 VigorSwitch
    Physical
    Power Supply DC 12V @ 2.5A
    Max. Power Consumption 28.8 watts (Lac model)
    Dimension 241mm x 166mm x 46mm
    Weight 960g (Lac model)
    Operating Temperature 0 to 45°C
    Storage Temperature -25 to 70°C
    Operating Humidity (non-condensing) 10 to 90%
    Certificate CE

    All specifications are subject to change without notice.

    Hardware Acceleration

    Without sacrificing traffic control features, such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph, Data Flow Monitor, the accelerator brings great performance.

    Hardware NAT & Routing

    Vigor2866 is fully capable of handling 2 high-speed WANs when enabling Hardware Acceleration. The accelerator supports up to 8k NAT and routing connections, providing firewall performance up to 940Mbps on single WAN and 1.8Gbps combined performance across both Ethernet and DSL WAN (G.fast), while still meeting high expectation of QoS quality.

    APP QoS

    VoIP First

    VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.

    Improve Experience for Business-Critical Apps

    Select your business critical apps, and easily put them into QoS classes.

    Flexible Bandwidth Allocation

    Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

    Management Solution

    All-in-One Management

    Mesh

      • Discovery
      • Provisioning
      • Monitoring
      • Centralized Hierarchy View

    Vigor Router SWM

      • Auto-Discovery
      • Provisioning
      • Monitoring
      • Centralized Hierarchy View
      • Reboot PoE Devices Remotely
      • Quick VLAN Configuration

    Vigor Router APM

      • Auto-Discovery
      • Auto-Provisioning
      • Monitoring
      • Centralized View
      • Alarm
      • Reboot VigorAP Remotely
      • Wi-Fi Client Load Balancing

    Software Management

    VigorACS 2

    • Provisioning
    • Monitoring
    • Centralized Hierarchy View
    • Alarm
    • Reboot Vigor Devices Remotely
    • Scheduled Maintenance
    • Report

    VigorACS 3

    • Zero Touch Deployment & Provisioning
    • Auto VPN
    • Interface Quality & SLA
    • VoIP Optimization & Monitoring
    • Application Visibility
    • Customized Hotspot Page with Multilingual
    • Hotspot Clients Analytics
    • ACS Server Load Balancing / Failover

    In-the-Box

    Vigor2866 LTE

    Antenna x 2
    (ac model)

    RJ-11 to RJ-11 Cable
    (Annex A)

    RJ-45 Cable
    (Ethernet)

    Power Adapter

    Quick Start Guide

    Antenna + Socket