Vigor2866 Series

G.fast Dual-WAN VPN Firewall Router

OVERVIEW

The Ultimate DSL Router for SMB

Vigor2866 Series is a dual WAN firewall router. It has one G.fast supported DSL WAN, delivering fiber-like speed up to 1 Gbps, and one configurable Ethernet WAN. The built-in DSL modem is backward compatible with VDSL2 profile 35b supervectoring and ADSL2+. Vigor2866 Series provides load-balancing and failover for your business continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal, and a lot more, this is the ultimate DSL router that does it all for SMB. The series includes built-in 802.11ax wireless models.

G.fast
Download speed up to 1 Gbps

32 VPN
IPsec VPN throughput up to 300 Mbps

60k Sessions
Recommended for 30 clients

AX 3000*
Delivers link rate up to 3 Gbps

Wireless Antenna (ac/ax model)
Reset Button
WLAN/WPS Button (ac/ax model)
LED Indicator

2x USB 2.0
LAN/WAN Switchable Port: 1x GbE RJ-45
Fixed LAN Port: 5x GbE RJ-45
2x FXS for VoIP (V model)

Fixed WAN Port: 1x RJ-11 for G.fast/VDSL2 35b/ADSL2+
Power On/Off Switch
Power Inpu

Key Features

Load Balancing
Maximize throughput and reliability by using multiple Internet connections. Learn more
G.fast Modem
Integrated VDSL modem, supporting G.fast to deliver fiber-like DSL speed.
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2866 Series to the remote offices and teleworkers over the Internet. Learn more
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Wireless WAN (Wireless model only)
Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more

Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality Wi-Fi. Learn more
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
VoIP Friendly
Vigor2866 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Central AP Management
Use the Vigor2135 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more
Central Switch Management
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more

MODELS

Model	WAN Port	2.4GHz WLAN	5GHz WLAN	Wireless Antenna	Wireless Mode	Max. Link Rate	Max. Bandwidth	WDS	Mesh	VoIP Gateway	FXS RJ11
Vigor2866	–	–	–	–	–	–	–	–	–	–	–	–
Vigor2866ax			2x Dual-Band (3.5dBi for 5GHz, 2.3dBi for 2.4GHz)	2.4 GHz: 802.11b/g/n/ax 5 GHz: 802.11 a/n/ac/ax	2.4 GHz: 574 Mbps 5 GHz: 2.4 Gbps	160 MHz	–	–	–		–	–
Vigor2866ac			2x Dual-Band (3.5dBi for 5GHz, 2.3dBi for 2.4GHz)	2.4 GHz: 802.11b/g/n 5 GHz: 802.11 a/n/ac	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	80 MHz		5GHz Only	5GHz Only	–	–	–
Vigor2866Vac			2x Dual-Band (3.5dBi for 5GHz, 2.3dBi for 2.4GHz)	2.4 GHz: 802.11b/g/n 5 GHz: 802.11 a/n/ac	2.4 GHz: 400 Mbps 5 GHz: 867 Mbps	80 MHz		5GHz Only	5GHz Only	–		2

SPECS

Interface
Fixed WAN Port	1x RJ-11 for G.fast/VDSL2 35b/ADSL2+
LAN/WAN Switchable Port	1x 10/100/1000Base-TX RJ-45
Fixed LAN Port	5x 10/100/1000Base-TX RJ-45
USB Port	2x USB 2.0
Wirelss Antenna	2x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (ac/ax model)
2.4G WLAN	802.11n 2×2 MIMO, up to 400Mbps Link Rate (ac model) 802.11ax 2×2 MIMO, up to 574Mbps Link Rate (ax model)
5G WLAN	802.11ac Wave 2 2×2 MU-MIMO, up to 867Mbps Link Rate (ac model) 802.11ax 2×2 MU-MIMO, up to 2402Mbps Link Rate (ax model)
FXS RJ-11	2 (V model)
Performance
NAT Throughput	800 Mbps
NAT Throughput w/ Hardware Acceleration	940 Mbps (Single Ethernet/DSL WAN) 1.8 Gbps (Ethernet WAN + DSL WAN)
IPsec VPN Performance	300 Mbps (AES 256 bits)
SSL VPN Performance	150 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	32
Max. Concurrent OpenVPN + SSL VPN	16
DSL
VDSL Standards	ITU-T G.993.2 Annex A/B/M/Q T1.424 ITU-T G.993.5 (Vectoring)
VDSL2 Profile	8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a, 35b
G.fast Profile	106Mhz, 212Mhz
ADSL Standards	ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other Standards	ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan	998, 997
Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN	2 (ac model)
3G/4G/LTE WAN with USB modem
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing	(Requires external storage)
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
Wireless LAN (ac/ax model)
WiFi 6	(ax model)
Number of SSID	4 per radio band
Security Mode	OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1X
OFDMA	(ax model)
WPS	PIN, PBC
WDS	Repeater (5GHz only)
Access Control	Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering
MU-MIMO	(5GHz Only)
WMM
VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF
Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2865, Vigor2862, Vigor2860
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management	8 VPN
Central AP Management	20 VigorAP
Mesh Network	7 VigorAP (ac model)
Central Switch Management	10 VigorSwitch
Physical
Power Supply	DC 12V @ 2A
Max. Power Consumption	26.4 watts (Vac model)
Dimension	241mm x 166mm x 46mm
Weight	680g (Vac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

All specifications are subject to change without notice.

Hardware Acceleration

Hardware NAT & Routing

Vigor2866 is fully capable of handling 2 high-speed WANs when enabling Hardware Acceleration. The accelerator supports up to 8k NAT and routing connections, providing firewall performance up to 940Mbps on single WAN and 1.8Gbps combined performance across both Ethernet and DSL WAN (G.fast), while still meeting high expectation of QoS quality.