The Draytek Vigor 2865 series are VDSL2 35b/ADSL2+ security Firewall routers integrating a DSL modem which is compatible with variants of ADSL and VDSL, including profile 35b supervectoring. There is also a configurable Gigabit Ethernet WAN/LAN port for broadband connections to share the traffic load or serve as a Failover connection. A 3G/4G/LTE USB modem can also be attached to the USB ports of the router.

Other models in the Vigor 2865 series include the 2865ax and 2865ac, featuring built-in 802.11ax (Wi-Fi 6, AX3000) and 802.11ac (Wi-Fi 5, AC1300) respectively; as well as the 2865Lax5G (Wi-Fi 6) and 2865L5G, both supporting 4G/5G LTE connectivity.

KEY FEATURES

• Multi-WAN with 1 x VDSL2 35b Supervectoring / ADSL2+ WAN port, 1 x configurable GbE WAN/LAN port, 2 x USB ports and 2 x Wi-Fi WANs (ac/Vac models)
• 1 x XDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
• 2 x USB 2.0 ports for 3G/4G LTE USB modems, FTP server, network printer or thermometer
• 5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
• 32 x VPN tunnels (including 16 x OpenVPN/ SSL-VPN tunnels) with most security protocols
• Fast VPN throughput, VPN Load Balancing and backup for site-to-site VPN applications
• Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.3Gbps (Multi-WAN) Firewall speed
• 16 x VLANs for secure and efficient workgroup management
• IPv6 & IPv4
• Up to 1022 IP addresses and 8 IP subnets
• Integrated IEEE 802.11ax (WiFi 6, AX3000) wireless Access Point; dual band; up to 2402 Mbps throughput (ax model)
• Integrated IEEE 802.11ac (AC1300) wireless Access Point; dual band; up to 867 Mbps throughput (ac/Vac models)
• High Availability mode
• Object-based SPI Firewall and CSM (Content Security Management) for network security
• VoIP (2 x FXS ports) for Vigor2865Vac
• Supports VigorACS 2 and VigorACS 3 Central Management Software for remote management
• SD WAN capability when used with VigorACS 3
• Central VPN Management for up to 8 remote Vigor routers Learn More
• Central AP Management for up to 20 Vigor Access Points Learn more
• Central Switch Management for up to 10 VigorSwitches Learn More
• 2 years back to base warranty

MODEL

Model	Vigor2865	Vigor2865ax	Vigor2865ac	Vigor2865Vac
Product
VDSL2 35b or ADSL2/2+
Selectable Gigabit WAN/LAN	1	1	1	1
4G LTE/3G	2 x USB 2.0	2 x USB 2.0	2 x USB 2.0	2 x USB 2.0
Wireless WAN			2	2
Gigabit LAN	5	5	5	5
VPN Tunnels	32	32	32	32
Wireless LAN		WiFi 6, AX3000	WiFi 5, AC1300	WiFi 5, AC1300
Wi-Fi Antenna		3.5dBi for 5GHz 2.3dBi for 2.4GHz	3.5dBi for 5GHz 2.3dBi for 2.4GHz	3.5dBi for 5GHz 2.3dBi for 2.4GHz
VoIP (2xFXS)

SPECIFICATION

Interface
Fixed WAN Port	1 x RJ-11 for VDSL2 35b or ADSL2/2+
LAN/WAN Switchable Port	1 x 10/100/1000Base-TX RJ-45
Fixed LAN Port	5 x 10/100/1000Base-TX RJ-45
USB Port	2 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
Wi-Fi Antenna	2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (ax/ac/Vac models)
2.4G WLAN	802.11n 2×2 MIMO 400Mbps (ac/Vac models) 802.11ax 2×2 MIMO 574Mbps (ax model)
5G WLAN	802.11ac Wave 2 2×2 MU-MIMO 867Mbps (ac/Vac models) 802.11ax 2×2 MU-MIMO 2402Mbps (ax model)
RJ-11 Port for Voice	2 x FXS (Vac model)

Performance
NAT Throughput	800 Mbps
NAT Throughput with Hardware Acceleration	940 Mbps (Ethernet WAN) 1.3 Gbps (Ethernet WAN + DSL WAN)
IPsec VPN Performance	300 Mbps (AES 256 bits)
SSL VPN Performance	130 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	32
Max. Concurrent OpenVPN / SSL-VPN	16

VDSL/ADSL
VDSL Standards	ITU-T G.993.2 Annex A/B/M/Q (up to Profile 35b but excluding 30a) T1.424 ITU-T G.993.5 (Vectoring)
VDSL2 Profile	8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b (not G.fast)
ADSL Standards	ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other Standards	ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan	998, 997

Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN	2 (ac/Vac models)
3G/4G/LTE WAN with USB modem
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP (IPv4)
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing	(Requires external storage)

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN)
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Redundancy	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher

Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (* subscription required)
DoS Attack Defence
Spoofing Defense

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritisation

Wireless LAN (ax/ac/Vac models)
Number of SSID	4 per radio band
Security	OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1x
WPS	PIN, PBC
WDS	Repeater (5GHz only)
Access Control	Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling
AirTime Fairness
Band Steering
MU-MIMO (5GHz Only)
WMM
WiFi 6	ax model only
OFDMA	ax model only
Mesh Root	5GHz Only

VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF

Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2862
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management	8 remote Vigor routers
Central AP Management	20 VigorAPs
Mesh Network	7 VigorAPs (compatibility)
Central Switch Management	10 VigorSwitches

Physical
Power Supply	DC 12V @ 2A
Max. Power Consumption	24 watts (ax/ac/Vac model)
Dimension	241mm x 166mm x 46mm
Weight	620g (ac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate