DrayTek Firewall VPN Router AX300 WiFi 6 - Vigor 2865ax

DrayTek Vigor2865ax

DrayTek Firewall VPN Router AX300 WiFi 6 - Vigor 2865ax
DrayTek Firewall VPN Router AX300 WiFi 6 - Vigor 2865ax Main Image
DrayTek Firewall VPN Router AX300 WiFi 6 - Vigor 2865ax package contents
DrayTek Firewall VPN Router AX300 WiFi 6 - Vigor 2865ax product 
DrayTek Firewall VPN Router AX300 WiFi 6 - Vigor 2865ax inside view
In Stock

1 available Shipping today cut off.

0 customer reviews:


- +

Availability: Despatched next working day

Linitx Quick Code # 17003 You can use the quick code in the search box

Manufacturer SKU: Vigor2865ax

Manufacturer: DrayTek


Price£328.99 EXC VAT£325.70 EXC VAT£322.41 EXC VAT£317.48 EXC VAT£312.54 EXC VATCall Us 01449 888000
window dressing ||||

DrayTek Firewall VPN Router AX300 Wi-Fi 6 - Vigor 2865ax

DrayTek’s Vigor 2865 series Multi-WAN Firewall VPN routers are ideal for Superfast VDSL Broadband and Ethernet-based FTTP Fibre Broadband. With Gigabit throughput, Quality of Service, VPN client/server, comprehensive Firewall and Content Filtering controls.

Options for Wi-Fi 6 on ‘ax’ models, like this model Vigor 2865ax, or Wi-Fi 5 ‘ac’ models provide fast & efficient wireless connectivity. The Vigor 2865 Series provides a reliable, flexible, and secure networking solution, that’s ideal for Home Offices, Small Business and Satellite Offices.

VDSL and Ethernet Load Balancer - High throughput handles fast Internet connections, with Load Balancing and Route Policy.

DrayTek SSL VPN - Access the Vigor 2865ax's network remotely with a TLS encrypted VPN tunnel.

Wi-Fi 6 AX3000 Wireless - Featuring Wi-Fi 6 with 2.4 Gigabits link rate for real Gigabit wireless.

Robust SMB VPN Router - Up to 32 active VPN tunnels, with up to 800Mbps IPsec Hardware Accelerated throughput.

5+1 Gigabit LAN Ports with VLANs - Extensive LAN management features, use VLANs to manage up to 8 networks.

VigorACS Central Management - Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.

Firewall & Content Filtering - Manage Internet access with Firewall, App Enforcement & Category-based Web Filtering.

High Availability - Connect a pair of Vigor 2865 series routers to provide a hardware backup solution.

DrayDDNS with LetsEncrypt Certificates - Free DrayDDNS address for each router, with automated LetsEncrypt SSL/TLS Certificates.

Quality of Service with App QoS - Easily prioritise latency-sensitive applications on your network with App QoS.

Hotspot Web Portal - Provide Internet access to guests and market your business with captive portal.

Centralised LAN Management - Easily manage and provision DrayTek VigorAP access points and VigorSwitch switches.

Technical Specification (UK Hardware Spec.)

Physical Interfaces

  • WAN1: VDSL2 / VDSL2 35b / ADSL2+, RJ-11
  • WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
  • LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
  • 2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
  • 2x Removable Wireless antennas
  • Wireless On / Off / WPS button
  • Recessed Factory Reset button


  • NAT Performance:
    • 100 Mb/s Max Sync Rate with VDSL2
    • 300 Mb/s Max Sync Rate with VDSL2 35b
    • 950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
    • 1.3Gb/s Total Multi-WAN NAT Throughput
    • 800 Mb/s NAT Throughput per WAN without Hardware Acceleration
    • 60,000 NAT Sessions
    • 8000 Hardware Accelerated NAT Sessions
  • VPN Performance:
    • 300 Mb/s IPsec (AES256) VPN Performance
    • 800 Mb/s Hardware Accelerated IPsec VPN Performance - New!
    • 130 Mb/s SSL VPN Performance
    • Max. 32 Concurrent VPN Tunnels
    • Max. 16 Concurrent SSL VPN / OpenVPN Tunnels

WAN Interfaces

  • WAN1: VDSL2 / VDSL2 35b / ADSL2+
  • WAN2: Gigabit Ethernet
  • WAN3: 2.4GHz Wireless WAN - Not supported on AX variant
  • WAN4: 5GHz Wireless WAN - Not supported on AX variant
  • WAN5: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
  • WAN6: 4G/LTE USB Modem (not included)

Internet Connection

  • Load Balancing: IP-based, Session-based
  • Hardware Acceleration
  • 802.1p/q Multi-VLAN Tagging
  • Multi-VLAN/PVC
  • WAN Active on Demand:  Link Failure, Traffic Threshold
  • Connection Detection: PPP, ARP Detect, Ping Detect
  • WAN Data Budget
  • Dynamic DNS
  • DrayDDNS – with automated LetsEncrypt Certificates
  • Full Feature-set Hardware Acceleration:
    • Hardware Accelerated Quality of Service
    • Multi-WAN Data Budget
    • Traffic Graph & Data Flow Monitor
    • Bandwidth Limit
    • Hardware Acceleration for Wireless Clients – New!
  • IPv4 Connection Types:  PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)
  • IPv6 Connection Types: 
    • Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
    • 4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU

VDSL & ADSL Features

  • BT Infinity Option 1 & Option 2 Compatible
  • Compliant with Openreach SIN 498
  • Auto Detection of VDSL and ADSL line modes
  • Support for G.INP & Vectoring
  • VDSL Standards:
    • ITU-T G.993.1 VDSL
    • ITU-T G.993.2, G.997.1 VDSL2
    • Band Plan: G.998, G.997
    • Annex A, Annex B, Annex C
    • VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
    • OLR, UPBO, DPBO Supported
    • US0 Supported
    • Loop Diagnostic Mode
    • DSL Forum WT-114
  • ADSL Standards: 
    • ANSI T1.413 Issue2
    • ITU-T G.992.1 G.dmt (ADSL)
    • ITU-T G.992.2 G.lite
    • ITU-T G.992.3 ADSL2
    • ITU-T G.992.5 ADSL2+
  • ATM Protocols:
    • RFC-2684/RFC-1483 Multiple Protocol over AAL5
    • RFC-2516 PPP over Ethernet
    • RFC-2364 PPP over AAL5
    • Support for RFC4638 for MTU up to 1500

Wireless Features (‘ax’ models)

  • AX3000 Wi-Fi 6 wireless:

    • 802.11ax 2x2 wireless access point
    • Compatible with 802.11a/b/g/n/ac wireless
    • Dual-band (2.4/5Ghz) simultaneous wireless
    • Up to 2400Mbps PHY rate at 160MHz with 5GHz
    • Up to 574Mbps PHY rate at 40MHz with 2.4GHz
    • Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
    • OFDMA
    • MU-MIMO
    • Tx Beamforming
    • 1024-QAM
    • Hardware Acceleration for Wireless Clients – New!
  • Mesh Root support with DrayTek VigorAP Mesh Nodes – *Planned in future firmware release
  • Up to 4 SSIDs per radio band
  • Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
  • Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
  • Bandwidth Management (Per Station / Per SSID)
  • WMM (Wireless MultiMedia)
  • WPS - WiFi Protected Setup
  • Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
  • EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
  • Wireless Security:
    • WPA2
    • WPA3 – New! (requires f/w 4.3.0)
    • Pre-Shared Key authentication
    • Enterprise 802.1x authentication
    • WEP/WPA for Legacy Clients
    • Access Control – Blacklist / Whitelist client MAC addresses per SSID

Antenna Specifications

  • 2x External Dipole
  • 5GHz Gain: 4.5 dBi
  • 2.4GHz Gain: 5 dBi
  • RP-SMA fitting antenna connectors

Firewall & Content Filtering

  • IP-based or User-based Firewall Policy
  • User-based Time Quota
  • DoS Attack Defence
  • Spoofing Defence
  • Content Filtering:
    • Application Content Filter
    • URL Content Filter
    • DNS Keyword Filter
    • Web Features
    • Web Category Filter (requires GlobalView subscription)

NAT Features

  • NAT Port Redirection
  • Open Ports
  • Port Triggering
  • DMZ Host
  • UPnP
  • ALG (Application Layer Gateway):  SIP, RTSP, FTP, H.323
  • VPN Pass-Through:  PPTP, L2TP, IPsec

LAN Management

  • 802.1q Tag-based, Port-based VLAN
  • Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
  • Up to 16 VLANs
  • DMZ Port
  • DHCP Server:
    • Multiple IP Subnet
    • Custom DHCP Options
    • Bind-IP-to-MAC
    • DHCP Pool Count up to 1022 addresses for LANs 1-3
    • DHCP Pool Count up to 253 addresses for LANs 4-8
    • DHCP Relay per LAN
  • LAN IP Alias
  • Wired 802.1x Port Authentication
  • Port Mirroring
  • Local DNS Server
  • Conditional DNS Forwarding
  • Hotspot Web Portal
  • Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking Features

  • Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
  • High Availability: Active-Standby, Hot-Standby
  • DNS Security (DNSSEC)
  • Local RADIUS server
  • SMB File Sharing (Requires external storage)
  • Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
  • Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP


  • Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels
  • Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New! (requires f/w 4.2.1)
  • LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
  • Teleworker-to-LAN – Dial-In VPN Server
  • User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
  • IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
  • Encryption: MPPE, DES, 3DES, AES (128/192/256)
  • Authentication: SHA-256, SHA-1
  • VPN Trunk (Redundancy): Load Balancing, Failover
  • Dead Peer Detection (DPD)
  • IPsec NAT-Traversal (NAT-T)
  • Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
  • DHCP over IPsec
  • DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
  • VPN Protocols:
    • IPsec IKEv1, IKEv2, IKEv2 EAP
    • IPsec-XAuth
    • DrayTek SSL VPN
    • OpenVPN (Remote Dial-In User only)
    • GRE over IPsec
    • PPTP
    • L2TP, L2TP over IPsec
  • Bandwidth Management

    • IP-based Bandwidth Limit
    • IP-based Session Limit
    • User-based Data Quota

    Quality of Service (QoS)

    • Classify via TOS, DSCP, 802.1p, IP Address, Service Type
    • 4 Priority Queues
    • App QoS
    • VoIP Prioritization
    • Class-based Outbound Traffic Tagging: DSCP & IP Precedence


    • Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
    • Config File Export & Import
    • Import Config from:
      • Vigor 2860 series
      • Vigor 2862 series
      • Vigor 2866 series* (planned for f/w 4.4.0)
    • Auto Backup Config to USB Storage – New!
    • Firmware Upgrade via TFTP, HTTP, TR-069
    • 2-Level Administration Privilege
    • Access Control Features: Access List, Brute Force Protection
    • Syslog
    • SMS, E-mail Notification Alert
    • SNMP: v1, v2c, v3
    • Managed by VigorACS

    Router Central Management Features

    • AP Management: Up to 20 VigorAP access points
    • Switch Management: Up to 10 VigorSwitch network switches
    • VPN Management: Up to 8 Vigor routers
    • DrayTek Mesh: Up to 7 VigorAP access points – *Planned in future firmware release

    Operating Requirements

    • Rack Mountable (Optional Vigor RM1 mounting bracket required)
    • Wall or Shelf Mountable with included fittings
    • Temperature Operating: 0 °C ~ 45 °C
    • Storage: -25 °C ~ 70 °C
    • Humidity 10% ~ 90% (non-condensing)
    • Power Consumption: 28.2 watts maximum ('ax' model)
    • Operating Power: DC 12V (via external PSU, supplied)
    • Power Requirements : 100-240VAC
    • Weight: 780g ('ax' model)
    • Dimensions:
      • 241mm Width
      • 165mm Depth
      • 44mm Height
  • 1x Vigor2865ax Router
  • 1x Quick Start Guide
  • 1x UK PSU
  • 1x RJ-11 to RJ-11 Cable
  • 1x RJ-45 Cable
  • 2x AX Antenna
There are no reviews for this product yet.

Please note that links to other websites are beyond our control. We link in good faith and are not be responsible for their content.

DrayTek Vigor 2865 series Datasheet

LinITX Blog

Copyright © 2002-2024 Multithread Consultants Ltd.