DrayTek Firewall VPN Router AX300 WiFi 6 - Vigor 2865ax

DrayTek Firewall VPN Router AX300 Wi-Fi 6 - Vigor 2865ax

DrayTek’s Vigor 2865 series Multi-WAN Firewall VPN routers are ideal for Superfast VDSL Broadband and Ethernet-based FTTP Fibre Broadband. With Gigabit throughput, Quality of Service, VPN client/server, comprehensive Firewall and Content Filtering controls.

Options for Wi-Fi 6 on ‘ax’ models, like this model Vigor 2865ax, or Wi-Fi 5 ‘ac’ models provide fast & efficient wireless connectivity. The Vigor 2865 Series provides a reliable, flexible, and secure networking solution, that’s ideal for Home Offices, Small Business and Satellite Offices.

VDSL and Ethernet Load Balancer - High throughput handles fast Internet connections, with Load Balancing and Route Policy.

DrayTek SSL VPN - Access the Vigor 2865ax's network remotely with a TLS encrypted VPN tunnel.

Wi-Fi 6 AX3000 Wireless - Featuring Wi-Fi 6 with 2.4 Gigabits link rate for real Gigabit wireless.

Robust SMB VPN Router - Up to 32 active VPN tunnels, with up to 800Mbps IPsec Hardware Accelerated throughput.

5+1 Gigabit LAN Ports with VLANs - Extensive LAN management features, use VLANs to manage up to 8 networks.

VigorACS Central Management - Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.

Firewall & Content Filtering - Manage Internet access with Firewall, App Enforcement & Category-based Web Filtering.

High Availability - Connect a pair of Vigor 2865 series routers to provide a hardware backup solution.

DrayDDNS with LetsEncrypt Certificates - Free DrayDDNS address for each router, with automated LetsEncrypt SSL/TLS Certificates.

Quality of Service with App QoS - Easily prioritise latency-sensitive applications on your network with App QoS.

Hotspot Web Portal - Provide Internet access to guests and market your business with captive portal.

Centralised LAN Management - Easily manage and provision DrayTek VigorAP access points and VigorSwitch switches.

Technical Specification (UK Hardware Spec.)

Physical Interfaces

• WAN1: VDSL2 / VDSL2 35b / ADSL2+, RJ-11
• WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
• LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
• 2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
• 2x Removable Wireless antennas
• Wireless On / Off / WPS button
• Recessed Factory Reset button

Performance

• NAT Performance:
  • 100 Mb/s Max Sync Rate with VDSL2
  • 300 Mb/s Max Sync Rate with VDSL2 35b
  • 950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
  • 1.3Gb/s Total Multi-WAN NAT Throughput
  • 800 Mb/s NAT Throughput per WAN without Hardware Acceleration
  • 60,000 NAT Sessions
  • 8000 Hardware Accelerated NAT Sessions
• VPN Performance:
  • 300 Mb/s IPsec (AES256) VPN Performance
  • 800 Mb/s Hardware Accelerated IPsec VPN Performance - New!
  • 130 Mb/s SSL VPN Performance
  • Max. 32 Concurrent VPN Tunnels
  • Max. 16 Concurrent SSL VPN / OpenVPN Tunnels

WAN Interfaces

• WAN1: VDSL2 / VDSL2 35b / ADSL2+
• WAN2: Gigabit Ethernet
• WAN3: 2.4GHz Wireless WAN - Not supported on AX variant
• WAN4: 5GHz Wireless WAN - Not supported on AX variant
• WAN5: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
• WAN6: 4G/LTE USB Modem (not included)

Internet Connection

• Load Balancing: IP-based, Session-based
• Hardware Acceleration
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• WAN Active on Demand:  Link Failure, Traffic Threshold
• Connection Detection: PPP, ARP Detect, Ping Detect
• WAN Data Budget
• Dynamic DNS
• DrayDDNS – with automated LetsEncrypt Certificates
• Full Feature-set Hardware Acceleration:
  • Hardware Accelerated Quality of Service
  • Multi-WAN Data Budget
  • Traffic Graph & Data Flow Monitor
  • Bandwidth Limit
  • Hardware Acceleration for Wireless Clients – New!
• IPv4 Connection Types:  PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)
• IPv6 Connection Types: 
  • Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
  • 4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU

VDSL & ADSL Features

• BT Infinity Option 1 & Option 2 Compatible
• Compliant with Openreach SIN 498
• Auto Detection of VDSL and ADSL line modes
• Support for G.INP & Vectoring
• VDSL Standards:
  • ITU-T G.993.1 VDSL
  • ITU-T G.993.2, G.997.1 VDSL2
  • Band Plan: G.998, G.997
  • Annex A, Annex B, Annex C
  • VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
  • OLR, UPBO, DPBO Supported
  • US0 Supported
  • Loop Diagnostic Mode
  • DSL Forum WT-114
• ADSL Standards: 
  • ANSI T1.413 Issue2
  • ITU-T G.992.1 G.dmt (ADSL)
  • ITU-T G.992.2 G.lite
  • ITU-T G.992.3 ADSL2
  • ITU-T G.992.5 ADSL2+
• ATM Protocols:
  • RFC-2684/RFC-1483 Multiple Protocol over AAL5
  • RFC-2516 PPP over Ethernet
  • RFC-2364 PPP over AAL5
  • Support for RFC4638 for MTU up to 1500

Wireless Features (‘ax’ models)

• AX3000 Wi-Fi 6 wireless:

  • 802.11ax 2x2 wireless access point
  • Compatible with 802.11a/b/g/n/ac wireless
  • Dual-band (2.4/5Ghz) simultaneous wireless
  • Up to 2400Mbps PHY rate at 160MHz with 5GHz
  • Up to 574Mbps PHY rate at 40MHz with 2.4GHz
  • Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
  • OFDMA
  • MU-MIMO
  • Tx Beamforming
  • 1024-QAM
  • Hardware Acceleration for Wireless Clients – New!
• Mesh Root support with DrayTek VigorAP Mesh Nodes – *Planned in future firmware release
  
• Up to 4 SSIDs per radio band
• Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
• Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
• Bandwidth Management (Per Station / Per SSID)
• WMM (Wireless MultiMedia)
• WPS - WiFi Protected Setup
• Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
• EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
• Wireless Security:
  • WPA2
  • WPA3 – New! (requires f/w 4.3.0)
  • Pre-Shared Key authentication
  • Enterprise 802.1x authentication
  • WEP/WPA for Legacy Clients
  • Access Control – Blacklist / Whitelist client MAC addresses per SSID

Antenna Specifications

• 2x External Dipole
• 5GHz Gain: 4.5 dBi
• 2.4GHz Gain: 5 dBi
• RP-SMA fitting antenna connectors

Firewall & Content Filtering

• IP-based or User-based Firewall Policy
• User-based Time Quota
• DoS Attack Defence
• Spoofing Defence
• Content Filtering:
  • Application Content Filter
  • URL Content Filter
  • DNS Keyword Filter
  • Web Features
  • Web Category Filter (requires GlobalView subscription)

NAT Features

• NAT Port Redirection
• Open Ports
• Port Triggering
• DMZ Host
• UPnP
• ALG (Application Layer Gateway):  SIP, RTSP, FTP, H.323
• VPN Pass-Through:  PPTP, L2TP, IPsec

LAN Management

• 802.1q Tag-based, Port-based VLAN
• Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
• Up to 16 VLANs
• DMZ Port
• DHCP Server:
  • Multiple IP Subnet
  • Custom DHCP Options
  • Bind-IP-to-MAC
  • DHCP Pool Count up to 1022 addresses for LANs 1-3
  • DHCP Pool Count up to 253 addresses for LANs 4-8
  • DHCP Relay per LAN
• LAN IP Alias
• Wired 802.1x Port Authentication
• Port Mirroring
• Local DNS Server
• Conditional DNS Forwarding
• Hotspot Web Portal
• Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking Features

• Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
• High Availability: Active-Standby, Hot-Standby
• DNS Security (DNSSEC)
• Local RADIUS server
• SMB File Sharing (Requires external storage)
• Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
• Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP

VPN

• Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels
• Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New! (requires f/w 4.2.1)
• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
• Teleworker-to-LAN – Dial-In VPN Server
• User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
• Encryption: MPPE, DES, 3DES, AES (128/192/256)
• Authentication: SHA-256, SHA-1
• VPN Trunk (Redundancy): Load Balancing, Failover
• Dead Peer Detection (DPD)
• IPsec NAT-Traversal (NAT-T)
• Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
• DHCP over IPsec
• DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
• VPN Protocols:
  • IPsec IKEv1, IKEv2, IKEv2 EAP
  • IPsec-XAuth
  • DrayTek SSL VPN
  • OpenVPN (Remote Dial-In User only)
  • GRE over IPsec
  • PPTP
  • L2TP, L2TP over IPsec

• Bandwidth Management

  • IP-based Bandwidth Limit
  • IP-based Session Limit
  • User-based Data Quota

  Quality of Service (QoS)

  • Classify via TOS, DSCP, 802.1p, IP Address, Service Type
  • 4 Priority Queues
  • App QoS
  • VoIP Prioritization
  • Class-based Outbound Traffic Tagging: DSCP & IP Precedence

  Management

  • Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
  • Config File Export & Import
  • Import Config from:
    • Vigor 2860 series
    • Vigor 2862 series
    • Vigor 2866 series* (planned for f/w 4.4.0)
  • Auto Backup Config to USB Storage – New!
  • Firmware Upgrade via TFTP, HTTP, TR-069
  • 2-Level Administration Privilege
  • Access Control Features: Access List, Brute Force Protection
  • Syslog
  • SMS, E-mail Notification Alert
  • SNMP: v1, v2c, v3
  • Managed by VigorACS

  Router Central Management Features

  • AP Management: Up to 20 VigorAP access points
  • Switch Management: Up to 10 VigorSwitch network switches
  • VPN Management: Up to 8 Vigor routers
  • DrayTek Mesh: Up to 7 VigorAP access points – *Planned in future firmware release
    

  Operating Requirements

  • Rack Mountable (Optional Vigor RM1 mounting bracket required)
  • Wall or Shelf Mountable with included fittings
  • Temperature Operating: 0 °C ~ 45 °C
  • Storage: -25 °C ~ 70 °C
  • Humidity 10% ~ 90% (non-condensing)
  • Power Consumption: 28.2 watts maximum ('ax' model)
  • Operating Power: DC 12V (via external PSU, supplied)
  • Power Requirements : 100-240VAC
  • Weight: 780g ('ax' model)
  • Dimensions:
    • 241mm Width
    • 165mm Depth
    • 44mm Height

• 1x Vigor2865ax Router
• 1x Quick Start Guide
• 1x UK PSU
• 1x RJ-11 to RJ-11 Cable
• 1x RJ-45 Cable
• 2x AX Antenna