About
Vigor 2136 Series is a broadband router featuring a super-fast 2.5GbE WAN port that meets the demands of modern-day businesses. With a hardware accelerator, it delivers up to 2.3 Gbps performance with plenty of business-grade features, including Web Content Filtering, Route Policy, App-based QoS, Object-oriented SPI Firewall, Four VPN tunnels, Tag-based VLAN, traffic management, etc.
The Vigor2136ax WiFi model supports 802.11ax Wi-Fi with Multiple/Hidden SSIDs, WDS, AP Discovery, SSID VLAN grouping with LAN ports, Wireless Rate Control, and WMM (Wi-Fi Multimedia).
KEY FEATURES
- Ready to connect to NTD (Network Termination Device) of NBN (Aust) and UFB (NZ)
- 1 x 2.5 Gigabit WAN port with 2 x USB ports for 4G Mobile Fail-Over
- 1 x configurable 2.5 GbE WAN/LAN port (P1)
- 3 x Gigabit LAN ports with 50,000 NAT sessions
- NAT throughput with Hardware Acceleration over 2.3 Gbps
- IPsec VPN throughput up to 390 Mbps (AES 256 bits)
- Object-based SPI Firewall, Content Security Management (CSM), URL/IP Reputation and Port Knocking
- IAM (Identity and Access Management) to enhance security management and user experience
- IPv6 & IPv4
- 802.11ax (WiFi 6, AX3000) Wi-Fi up to 574 + 2402 Mbps speed (ax model)
- 16 x VPN tunnels, including IPsec, OpenVPN, and WireGuard, with EasyVPN features
- 2 x USB ports for 4G Backup, FTP server, network printer or thermometer
- Virtual AP Controller for the deployment of up to 20 wireless VigorAPs
- Wireless Mesh (ax model) up to 7 VigorAPs
- Virtual Switch Controller to manage up to 5 VigorSwitches
- Supports VigorACS 3 Central Management Software for remote management
- 2 years back to base warranty
MODEL
| Model | Vigor2136 | Vigor2136ax |
|---|---|---|
| Product | ![]() |
![]() |
| Gigabit WAN | 1 x 2.5 GbE | 1 x 2.5 GbE |
| Selectable Gigabit WAN/LAN | 1 x 2.5 GbE | 1 x 2.5 GbE |
| 4G LTE/3G | 2 x USB 2.0 | 2 x USB 2.0 |
| Wireless WAN |
|
|
| Gigabit LAN | 3 | 3 |
| VPN Tunnels | 16 | 16 |
| Wireless LAN |
|
WiFi 6, AX3000 |
| Wi-Fi Antenna |
|
2.7dBi for 5GHz 2.6dBi for 2.4GHz |
| VoIP (2xFXS) |
|
|
SPECIFICATION
| Interface | |
|---|---|
| WAN Port | 1 x 2.5 GbE |
| Selectable Gigabit WAN/LAN | 1 x 2.5 GbE |
| LAN Port | 3 x Gigabit Ethernet |
| USB Port | 2 x USB 2.0 for 4G/LTE USB modem, storage, printer or thermometer |
| Wi-Fi Antenna | 2x External Dipole, Gain: 2.7 dBi for 5GHz, 2.6 dBi for 2.4GHz (ax model) |
| 2.4G WLAN | 802.11ax 2×2 MIMO, up to 574Mbps Link Rate (ax model) |
| 5G WLAN | 802.11ax 2×2 MU-MIMO, up to 2402Mbps Link Rate (ax model) |
| Performance | |
|---|---|
| NAT Throughput w/ Hardware Acceleration | 2300 Mbps |
| IPsec VPN Performance | 390 Mbps (AES 256 bits) |
| Wireguard VPN Throughput | 90 Mbps |
| Max. Number of NAT Sessions | 50,000 |
| Max. Concurrent VPN Tunnels (including OpenVPN/ SSL-VPN/Wireguard) |
16 |
| Internet Connection | |
|---|---|
| IPv4 | PPPoE, DHCP, Static IP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| 4G/LTE WAN with USB modem | |
| WAN Failover | |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
| LAN Management | |
|---|---|
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 8 |
| Number of LAN Subnet | 4 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| Wired 802.1x Authentication | |
| Port Mirroring | * Future Support |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | 2 |
| Hotspot Authentication | Click-Through, External Portal Server |
| Networking | |
|---|---|
| Routing | IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Routing, RIP v1/v2, BGP, OSPF(V2/V3) |
| Policy-based Routing | Protocol, IP Address, Port |
| DNS Security (DNSSEC) | |
| Multicast | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | IPsec, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN, Wireguard |
| User Authentication | Local, RADIUS, TACACS+, mOTP, TOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA1, SHA256 |
| Encryption | DES, 3DES, AES128, AES192, AES256 |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| VPN Connection Status | |
| Backup & Restore | |
| Security | |
|---|---|
| URL/IP Reputation | |
| Firewall Filter | IP, Content, Traffic |
| Port Knocking | |
| Defense Setup | ARP Spoofing, IP Spoofing |
| MAC Filtering Profile | |
| IPv6 Address Security | |
| IAM | |
|---|---|
| Users & Groups | |
| Access Policies | |
| Group Policies | |
| Conditional Access Policy | |
| Resources | |
| Backup and Restore | |
| Bandwidth Management | |
|---|---|
| Traffic Shaping Policy | |
| IP-based Bandwidth Limit | |
| QoS (Quality of Service) | IP Address, Port, Application |
| APP QoS | |
| Default Policy | |
| VoIP Prioritization | |
| Wireless LAN (ax model) | |
|---|---|
| 2.4GHz WLAN | 802.11ax 2×2 MIMO |
| 5GHz WLAN | 802.11ax 3×3 MU-MIMO |
| Antennas | 3 |
| Antenna Spec | 2 x External Detachable + 1 x 5GHz Internal PIFA |
| 2.4GHz Antenna Gain | 2.6dBi |
| 5GHz Antenna Gain | 2.7dBi |
| 2.4GHz Max. Link Rate | 574Mbps |
| 5GHz Max. Link Rate | 2402Mbps |
| Max. Number of SSIDs per band | 8 |
| Security Mode | OWE, WEP, WPA, WPA2, Mixed (WPA+WPA2), WPA3, Mixed (WPA2+WPA3) |
| Authentication | Pre-Shared Key, 802.1x |
| WiFi 6 | |
| OFDMA | |
| Roaming | Assisted Roaming |
| WPS | PIN, PBC |
| WDS | Repeater |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
| AirTime Fairness | |
| Band Steering | |
| WMM | |
| Mesh (5GHz only) | Root |
| Management | |
|---|---|
| Local Service | HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069 |
| Port Knocking for Local Service | |
| Config File Export & Import | |
| Firmware Upgrade | WUI, TFTP, TR-069 |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Virtual AP Controller (Device up to) | 20 |
| Mesh (Number of manageable APs) | 7 |
| Virtual Switch Controller | 5 |
| Managed by VigorACS | Since f/w v5.3.0 |
| Physical | |
|---|---|
| Power Supply | DC 12V @ 0.9A (Vigor2136) DC 12V @ 1.5A (Vigor2136ax) |
| Max. Power Consumption | 10 watts (Vigor2136) 18 watts (Vigor2136ax) |
| Dimension | 207mm x 131mm x 42mm |
| Weight | 452g (Vigor2136) 508g (Vigor2136ax) |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Vigor 2136 Series is a broadband router featuring a super-fast 2.5GbE WAN port that meets the demands of modern-day businesses. With a hardware accelerator, it delivers up to 2.3 Gbps performance with plenty of business-grade features, including Web Content Filtering, Route Policy, App-based QoS, Object-oriented SPI Firewall, Four VPN tunnels, Tag-based VLAN, traffic management, etc.
The Vigor2136ax WiFi model supports 802.11ax Wi-Fi with Multiple/Hidden SSIDs, WDS, AP Discovery, SSID VLAN grouping with LAN ports, Wireless Rate Control, and WMM (Wi-Fi Multimedia).
KEY FEATURES
- Ready to connect to NTD (Network Termination Device) of NBN (Aust) and UFB (NZ)
- 1 x 2.5 Gigabit WAN port with 2 x USB ports for 4G Mobile Fail-Over
- 1 x configurable 2.5 GbE WAN/LAN port (P1)
- 3 x Gigabit LAN ports with 50,000 NAT sessions
- NAT throughput with Hardware Acceleration over 2.3 Gbps
- IPsec VPN throughput up to 390 Mbps (AES 256 bits)
- Object-based SPI Firewall, Content Security Management (CSM), URL/IP Reputation and Port Knocking
- IAM (Identity and Access Management) to enhance security management and user experience
- IPv6 & IPv4
- 802.11ax (WiFi 6, AX3000) Wi-Fi up to 574 + 2402 Mbps speed (ax model)
- 16 x VPN tunnels, including IPsec, OpenVPN, and WireGuard, with EasyVPN features
- 2 x USB ports for 4G Backup, FTP server, network printer or thermometer
- Virtual AP Controller for the deployment of up to 20 wireless VigorAPs
- Wireless Mesh (ax model) up to 7 VigorAPs
- Virtual Switch Controller to manage up to 5 VigorSwitches
- Supports VigorACS 3 Central Management Software for remote management
- 2 years back to base warranty
MODEL
| Model | Vigor2136 | Vigor2136ax |
|---|---|---|
| Product | ![]() |
![]() |
| Gigabit WAN | 1 x 2.5 GbE | 1 x 2.5 GbE |
| Selectable Gigabit WAN/LAN | 1 x 2.5 GbE | 1 x 2.5 GbE |
| 4G LTE/3G | 2 x USB 2.0 | 2 x USB 2.0 |
| Wireless WAN |
|
|
| Gigabit LAN | 3 | 3 |
| VPN Tunnels | 16 | 16 |
| Wireless LAN |
|
WiFi 6, AX3000 |
| Wi-Fi Antenna |
|
2.7dBi for 5GHz 2.6dBi for 2.4GHz |
| VoIP (2xFXS) |
|
|
SPECIFICATION
| Interface | |
|---|---|
| WAN Port | 1 x 2.5 GbE |
| Selectable Gigabit WAN/LAN | 1 x 2.5 GbE |
| LAN Port | 3 x Gigabit Ethernet |
| USB Port | 2 x USB 2.0 for 4G/LTE USB modem, storage, printer or thermometer |
| Wi-Fi Antenna | 2x External Dipole, Gain: 2.7 dBi for 5GHz, 2.6 dBi for 2.4GHz (ax model) |
| 2.4G WLAN | 802.11ax 2×2 MIMO, up to 574Mbps Link Rate (ax model) |
| 5G WLAN | 802.11ax 2×2 MU-MIMO, up to 2402Mbps Link Rate (ax model) |
| Performance | |
|---|---|
| NAT Throughput w/ Hardware Acceleration | 2300 Mbps |
| IPsec VPN Performance | 390 Mbps (AES 256 bits) |
| Wireguard VPN Throughput | 90 Mbps |
| Max. Number of NAT Sessions | 50,000 |
| Max. Concurrent VPN Tunnels (including OpenVPN/ SSL-VPN/Wireguard) |
16 |
| Internet Connection | |
|---|---|
| IPv4 | PPPoE, DHCP, Static IP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| 4G/LTE WAN with USB modem | |
| WAN Failover | |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
| LAN Management | |
|---|---|
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 8 |
| Number of LAN Subnet | 4 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| Wired 802.1x Authentication | |
| Port Mirroring | * Future Support |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | 2 |
| Hotspot Authentication | Click-Through, External Portal Server |
| Networking | |
|---|---|
| Routing | IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Routing, RIP v1/v2, BGP, OSPF(V2/V3) |
| Policy-based Routing | Protocol, IP Address, Port |
| DNS Security (DNSSEC) | |
| Multicast | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | IPsec, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN, Wireguard |
| User Authentication | Local, RADIUS, TACACS+, mOTP, TOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA1, SHA256 |
| Encryption | DES, 3DES, AES128, AES192, AES256 |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| VPN Connection Status | |
| Backup & Restore | |
| Security | |
|---|---|
| URL/IP Reputation | |
| Firewall Filter | IP, Content, Traffic |
| Port Knocking | |
| Defense Setup | ARP Spoofing, IP Spoofing |
| MAC Filtering Profile | |
| IPv6 Address Security | |
| IAM | |
|---|---|
| Users & Groups | |
| Access Policies | |
| Group Policies | |
| Conditional Access Policy | |
| Resources | |
| Backup and Restore | |
| Bandwidth Management | |
|---|---|
| Traffic Shaping Policy | |
| IP-based Bandwidth Limit | |
| QoS (Quality of Service) | IP Address, Port, Application |
| APP QoS | |
| Default Policy | |
| VoIP Prioritization | |
| Wireless LAN (ax model) | |
|---|---|
| 2.4GHz WLAN | 802.11ax 2×2 MIMO |
| 5GHz WLAN | 802.11ax 3×3 MU-MIMO |
| Antennas | 3 |
| Antenna Spec | 2 x External Detachable + 1 x 5GHz Internal PIFA |
| 2.4GHz Antenna Gain | 2.6dBi |
| 5GHz Antenna Gain | 2.7dBi |
| 2.4GHz Max. Link Rate | 574Mbps |
| 5GHz Max. Link Rate | 2402Mbps |
| Max. Number of SSIDs per band | 8 |
| Security Mode | OWE, WEP, WPA, WPA2, Mixed (WPA+WPA2), WPA3, Mixed (WPA2+WPA3) |
| Authentication | Pre-Shared Key, 802.1x |
| WiFi 6 | |
| OFDMA | |
| Roaming | Assisted Roaming |
| WPS | PIN, PBC |
| WDS | Repeater |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
| AirTime Fairness | |
| Band Steering | |
| WMM | |
| Mesh (5GHz only) | Root |
| Management | |
|---|---|
| Local Service | HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069 |
| Port Knocking for Local Service | |
| Config File Export & Import | |
| Firmware Upgrade | WUI, TFTP, TR-069 |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Virtual AP Controller (Device up to) | 20 |
| Mesh (Number of manageable APs) | 7 |
| Virtual Switch Controller | 5 |
| Managed by VigorACS | Since f/w v5.3.0 |
| Physical | |
|---|---|
| Power Supply | DC 12V @ 0.9A (Vigor2136) DC 12V @ 1.5A (Vigor2136ax) |
| Max. Power Consumption | 10 watts (Vigor2136) 18 watts (Vigor2136ax) |
| Dimension | 207mm x 131mm x 42mm |
| Weight | 452g (Vigor2136) 508g (Vigor2136ax) |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Draytek Vigor 2136ax Broadband Router with 1 x 2.5GbE WAN port, 1 x Configurable 2.5GbE WAN/LAN port, 3 x GbE LAN ports, SPI Firewall, 802.11ax Wi-Fi, 16 x VPN tunnels including IPsec, OpenVPN and WireGuard
- Regular price
- $415.00
- Sale price
- $415.00
- Regular price
-
$449.95
Couldn't load pickup availability

