Draytek Vigor 2927ax Multi WAN Router with 802.11ax WiFi6 (AX3000)

The Vigor2927 Series are dual-Ethernet WAN Firewall routers providing Load Balancing and Failover for reliable Internet accesses. Featuring VPN, QoS, Route Policy, Firewall, Content Filtering, Bandwidth Management, Captive Hotspot Portal and a lot more, these are the ultimate routers for SMBs. The series include models with built-in 802.11ax (WiFi 6, AX3000)/ 802.11ac Wi-Fi and a VoIP gateway (Vac model). 

Overview

Specifications  

Interface
Fixed WAN Port	1 x Gigabit Ethernet
LAN/WAN Switchable Port	1 x Gigabit Ethernet
Fixed LAN Port	5 x Gigabit Ethernet
USB Port	2 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
RJ-11 Port for Voice	2 x FXS (V model)
Wi-Fi Antenna	2 x External Dipole Gain: 3 dBi for 5GHz, 2.5 dBi for 2.4GHz (ax/ac/Vac models)
2.4G WLAN	802.11n 2×2 MIMO 400Mbps (ac/Vac models) 802.11ax 2×2 MIMO 574Mbps (ax model)
5G WLAN	802.11ac Wave 2 2×2 MU-MIMO 867Mbps (ac/Vac models) 802.11ax Wave 2 2×2 MU-MIMO 2402Mbps (ax model)

Performance
NAT Throughput	800 Mbps
NAT Throughput with Hardware Acceleration	940 Mbps (Ethernet WAN) 1.8 Gbps (Dual WAN)
IPsec VPN Performance	290 Mbps (AES 256 bits)
SSL VPN Performance	120 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	50
Max. Concurrent OpenVPN/ SSL-VPN	25

Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging	Y
Multi-VLAN/PVC	Y
Wireless WAN	2 (ac/Vac models)
3G/4G/LTE WAN with USB modem	Y
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget	Y
Dynamic DNS	Y
DrayDDNS	Y

LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias	Y
Wired 802.1x Authentication	Y
Port Mirroring	Y
Local DNS Server	Y
Conditional DNS Forwarding	Y
Hotspot Web Portal	Y
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP (IPv4)
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability	Y
DNS Security (DNSSEC)	Y
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server	Y
SMB File Sharing (Requires external storage)	Y

VPN
LAN-to-LAN	Y
Teleworker-to-LAN	Y
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN (Host to LAN)
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN	Y
NAT-Traversal (NAT-T)	Y
DrayTek VPN Matcher	Y

Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy	Y
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category (subscription required)
DoS Attack Defense	Y
Spoofing Defense	Y

Bandwidth Management
IP-based Bandwidth LimitY	Y
IP-based Session Limit	Y
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritisation	Y

Wireless LAN (ax/ac/Vac models)
Number of SSID	4 per radio band
Security	WEP, WPA, WPA2, Mixed (WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1x
WPS	PIN, PBC
WDS	Repeater (5GHz only)
Access Control	Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling
AirTime Fairness	Y
Band Steering	Y
MU-MIMO	(5GHz only)
WMM	Y

VoIP Gateway (Vac model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF

Management
Local Service	HTTP, HTTPS, Telnet, SSH, TR-069
Config File Export & Import	Y
Config File Compatibility	Vigor2926 Series
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege	Y
Access Control	Access List, Brute Force Protection
Syslog	Y
Notification Alert	SMS, E-mail
SNMP	v2, v2c, v3
Managed by VigorACS	Y
Central VPN Management	8 remote Vigor routers
Central AP Management	20 VigorAPs
Mesh Network	7 VigorAPs (ac/Vac models only)
Central Switch Management	10 VigorSwitches

Physical
Rack Mountable	Mouting Kit Excluded (DR101)
Power Supply	DC 12V @ 2A
Max. Power Consumption	24 watts (ac model)
Dimension	241mm x 165mm x 44mm
Weight	630g (ac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

 

Note :

• All specifications are subject to change without notice.
• The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.