About
Learn what makes this product unique and why it’s right for you.
The DrayTek Vigor3912 is a next-generation, enterprise-grade multi-WAN VPN router built for high-performance business networks. With support for up to 9 WAN interfaces—including dual 10G SFP+ ports—and robust VPN, firewall, and traffic management capabilities, it delivers exceptional speed, scalability, and reliability. Designed for medium to large enterprises, it ensures secure connectivity, high throughput, and centralized control for complex, mission-critical deployments.
KEY FEATURES
- Memory:
4GB DDR4 (Vigor3912)
8GB DDR4 + 256GB SSD (Vigor3912S)
The Vigor3912S model comes equipped with a 256GB SSD pre-installed with Ubuntu OS and Docker applications such as Suricata IDS (Intrusion Detection System) and VigorConnect to enhance network security. - 2 x 10G/2.5G/1G SFP+ Fibre configurable WAN/LAN Slots
- 2 x 2.5G/1G/100M/10M Ethernet configurable WAN/LAN ports
- 4 x 1G/100M/10M Ethernet Configurable WAN/LAN ports
- 4 x 1G/100M/10M Ethernet LAN ports with 1 million NAT sessions
- Multi-WAN Load Balancing & Failover
- Quad-Core CPU with 15.6 Gbps NAT throughput**
- 500 x VPN tunnels (including 200 x OpenVPN/ SSL-VPN tunnels) with most security protocols. The built-in EasyVPN features simplify VPN setup, ensuring effortless and reliable connectivity.
- Fast VPN throughput, VPN Load Balancing, Failover, and backup for site-to-site applications
- 100 x VLANs for secure and efficient workgroup management
- 1 x RJ-45 console port
- 2 x USB 3.0 ports for external storage (one USB flash drive is supported at any one time)
- High-Availability (with CARP) ensuring 24/7 system uptime
- Object-based SPI Firewall, CSM (Content Security Management) and Port Knocking for network security
- Multi-subnet WAN/LAN through 802.1Q
- IPv6 & IPv4
- Bandwidth management
- Smart Action automates network responses with up to 64 customizable event-to-action profiles.
- Supports VigorACS 3 Central Management Software for remote management
- SD-WAN capability when used with VigorACS 3
- Supports Central AP Management (up to 50 Vigor Access Points)
- Supports Central Switch Management (up to 30 Vigor Switches)
- Rack-mountable
- 2 year back to base warranty
**bi-directional(TX+RX) performance
MODEL
| Model | Vigor3912S | Vigor3912 | Vigor3910 |
|---|---|---|---|
| Product |  |
|
 |
| Multi Gigabit WAN |
2 x 10Gb SFP+ WAN/LAN slots 2 x 2.5GbE WAN/LAN ports 4 x 1GbE WAN/LAN ports |
2 x 10Gb SFP+ WAN/LAN slots 2 x 2.5GbE WAN/LAN ports 4 x 1GbE WAN/LAN ports |
2 x 10Gb SFP+ WAN/LAN slots 2 x 2.5GbE WAN/LAN ports 4 x 1GbE WAN/LAN ports |
| Gigabit LAN | 4 | 4 | 4 |
| Quad-Core Processor | 2GHz | 2GHz | 1.2GHz |
| Max. Number of VLAN | 100 | 100 | 100 |
| VPN Tunnels | 500 | 500 |
500 |
| Memory | 8GB DDR4 + 256GB SSD | 4GB DDR4 |
|
| Wireless LAN |
|
|
|
SPECIFICATION
| Interface | |
|---|---|
| WAN/LAN Port | 2 x 10G/2.5G/1G SFP+ Fibre configurable WAN/LAN Slots 2 x 2.5G/1G/100M/10M Ethernet configurable WAN/LAN, RJ-45 4 x 1G/100M/10M Ethernet Configurable WAN/LAN ports, RJ-45 4 x 1G/100M/10M Ethernet LAN ports with 1 million NAT sessions |
| USB Port | 2 x USB 3.0 ports for external storage (one USB flash drive is supported at any one time) |
| Console Port | 1 x RJ-45 |
| Reset Button | 1 x Factory Reset |
| Performance | |
|---|---|
| NAT Throughput | 15.6 Gbps ( bi-directional(TX+RX) performance) |
| IPsec VPN Performance | 5.7 Gbps |
| SSL VPN Performance | 4.3 Gbps |
| NAT Sessions | 1,000,000 |
| Max. Concurrent VPN Tunnels | 500 |
| Max. Concurrent OpenVPN + SSL VPN | 200 |
| Internet Connection | |
|---|---|
| IPv4 | PPPoE, DHCP, Static IP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-LAN Tagging | |
| Multi-VLAN/PVC | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping, Strict ARP |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
| LAN Management | |
|---|---|
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 100 |
| Number of LAN Subnet | 100 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| IP Pool Count | Up to 4K per LAN Subnet |
| PPPoE Server | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal (Profile No.) | 4 |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server |
| Networking | |
|---|---|
| Routing | IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Routing, Fast Routing, RIP v1/v2, OSPFv2, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| Smart Action | |
| High Availability | |
| DNS Security (DNSSEC) | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| EasyVPN | |
| Port Knocking | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IPsec-XAuth, OpenVPN, Wireguard |
| IPsec VPN Throughput (AES 256 bits) (single-directional) |
3300 Mbps |
| IPsec VPN Throughput (AES 256 bits) (bi-directional) |
5700 Mbps |
| SSL VPN Throughput (single-directional) |
3300 Mbps |
| SSL VPN Throughput (bi-directional) |
4300 Mbps |
| Wireguard VPN Throughput (single-directional) |
900 Mbps |
| Wireguard VPN Throughput (bi-directional) |
1080 Mbps |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP, TOTP |
| IKE Authentication | EAP, Pre-Shared Key, X.509, XAuth |
| IPsec Authentication | MD5, SHA-1, SHA-256, SHA-512 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| VPN from LAN | |
| VPN Isolation | |
| VPN Packet Capture | |
| VPN 2FA Authentication for AD/LDAP | |
| DrayTek VPN Matcher | |
| Firewall & Content Filtering | |
|---|---|
| IP-based Firewall Policy | |
| Content Filtering | Application, URL Keyword, DNS Keyword, Web Features, Web Category (subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
| Linux Applications (Vigor3912S only) | |
|---|---|
| Suricata | |
| VigorConnect | |
| NAT | |
|---|---|
| NAT | Port Redirection, Open Ports, Port Triggering, Port Knocking, Fast NAT, DMZ Host, UPnP, Server Load Balance |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| Bandwidth Management | |
|---|---|
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Service Type |
| VoIP Prioritization | |
| APP QoS | |
| Management | |
|---|---|
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Port knocking for Local Service | |
| Config Backup/Restore | |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Central AP Management | 50 Vigor Access Points |
| Central Switch Management | 30 Vigor Switches |
| VigorACS Management (Since f/w) | V4.3.5.1 |
| Physical | |
|---|---|
| Power Input | AC 100~240V @ 0.6A |
| Max. Power Consumption | 35 watts |
| Memory | 8GB DDR4 (Vigor3912) 8GB DDR4 + 256GB SSD (Vigor3912S) |
| Dimension | 443 mm x 285 mm x 45 mm |
| Weight | 3.35 kg |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -10 to 55°C |
| Operating Humidity (non-condensing) | 10 to 90% |
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Learn what makes this product unique and why it’s right for you.
The DrayTek Vigor3912 is a next-generation, enterprise-grade multi-WAN VPN router built for high-performance business networks. With support for up to 9 WAN interfaces—including dual 10G SFP+ ports—and robust VPN, firewall, and traffic management capabilities, it delivers exceptional speed, scalability, and reliability. Designed for medium to large enterprises, it ensures secure connectivity, high throughput, and centralized control for complex, mission-critical deployments.
KEY FEATURES
- Memory:
4GB DDR4 (Vigor3912)
8GB DDR4 + 256GB SSD (Vigor3912S)
The Vigor3912S model comes equipped with a 256GB SSD pre-installed with Ubuntu OS and Docker applications such as Suricata IDS (Intrusion Detection System) and VigorConnect to enhance network security. - 2 x 10G/2.5G/1G SFP+ Fibre configurable WAN/LAN Slots
- 2 x 2.5G/1G/100M/10M Ethernet configurable WAN/LAN ports
- 4 x 1G/100M/10M Ethernet Configurable WAN/LAN ports
- 4 x 1G/100M/10M Ethernet LAN ports with 1 million NAT sessions
- Multi-WAN Load Balancing & Failover
- Quad-Core CPU with 15.6 Gbps NAT throughput**
- 500 x VPN tunnels (including 200 x OpenVPN/ SSL-VPN tunnels) with most security protocols. The built-in EasyVPN features simplify VPN setup, ensuring effortless and reliable connectivity.
- Fast VPN throughput, VPN Load Balancing, Failover, and backup for site-to-site applications
- 100 x VLANs for secure and efficient workgroup management
- 1 x RJ-45 console port
- 2 x USB 3.0 ports for external storage (one USB flash drive is supported at any one time)
- High-Availability (with CARP) ensuring 24/7 system uptime
- Object-based SPI Firewall, CSM (Content Security Management) and Port Knocking for network security
- Multi-subnet WAN/LAN through 802.1Q
- IPv6 & IPv4
- Bandwidth management
- Smart Action automates network responses with up to 64 customizable event-to-action profiles.
- Supports VigorACS 3 Central Management Software for remote management
- SD-WAN capability when used with VigorACS 3
- Supports Central AP Management (up to 50 Vigor Access Points)
- Supports Central Switch Management (up to 30 Vigor Switches)
- Rack-mountable
- 2 year back to base warranty
**bi-directional(TX+RX) performance
MODEL
| Model | Vigor3912S | Vigor3912 | Vigor3910 |
|---|---|---|---|
| Product | |
|
|
| Multi Gigabit WAN |
2 x 10Gb SFP+ WAN/LAN slots 2 x 2.5GbE WAN/LAN ports 4 x 1GbE WAN/LAN ports |
2 x 10Gb SFP+ WAN/LAN slots 2 x 2.5GbE WAN/LAN ports 4 x 1GbE WAN/LAN ports |
2 x 10Gb SFP+ WAN/LAN slots 2 x 2.5GbE WAN/LAN ports 4 x 1GbE WAN/LAN ports |
| Gigabit LAN | 4 | 4 | 4 |
| Quad-Core Processor | 2GHz | 2GHz | 1.2GHz |
| Max. Number of VLAN | 100 | 100 | 100 |
| VPN Tunnels | 500 | 500 |
500 |
| Memory | 8GB DDR4 + 256GB SSD | 4GB DDR4 |
|
| Wireless LAN |
|
|
|
SPECIFICATION
| Interface | |
|---|---|
| WAN/LAN Port | 2 x 10G/2.5G/1G SFP+ Fibre configurable WAN/LAN Slots 2 x 2.5G/1G/100M/10M Ethernet configurable WAN/LAN, RJ-45 4 x 1G/100M/10M Ethernet Configurable WAN/LAN ports, RJ-45 4 x 1G/100M/10M Ethernet LAN ports with 1 million NAT sessions |
| USB Port | 2 x USB 3.0 ports for external storage (one USB flash drive is supported at any one time) |
| Console Port | 1 x RJ-45 |
| Reset Button | 1 x Factory Reset |
| Performance | |
|---|---|
| NAT Throughput | 15.6 Gbps ( bi-directional(TX+RX) performance) |
| IPsec VPN Performance | 5.7 Gbps |
| SSL VPN Performance | 4.3 Gbps |
| NAT Sessions | 1,000,000 |
| Max. Concurrent VPN Tunnels | 500 |
| Max. Concurrent OpenVPN + SSL VPN | 200 |
| Internet Connection | |
|---|---|
| IPv4 | PPPoE, DHCP, Static IP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-LAN Tagging | |
| Multi-VLAN/PVC | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping, Strict ARP |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
| LAN Management | |
|---|---|
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 100 |
| Number of LAN Subnet | 100 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| IP Pool Count | Up to 4K per LAN Subnet |
| PPPoE Server | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal (Profile No.) | 4 |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server |
| Networking | |
|---|---|
| Routing | IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Routing, Fast Routing, RIP v1/v2, OSPFv2, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| Smart Action | |
| High Availability | |
| DNS Security (DNSSEC) | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| EasyVPN | |
| Port Knocking | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IPsec-XAuth, OpenVPN, Wireguard |
| IPsec VPN Throughput (AES 256 bits) (single-directional) |
3300 Mbps |
| IPsec VPN Throughput (AES 256 bits) (bi-directional) |
5700 Mbps |
| SSL VPN Throughput (single-directional) |
3300 Mbps |
| SSL VPN Throughput (bi-directional) |
4300 Mbps |
| Wireguard VPN Throughput (single-directional) |
900 Mbps |
| Wireguard VPN Throughput (bi-directional) |
1080 Mbps |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP, TOTP |
| IKE Authentication | EAP, Pre-Shared Key, X.509, XAuth |
| IPsec Authentication | MD5, SHA-1, SHA-256, SHA-512 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| VPN from LAN | |
| VPN Isolation | |
| VPN Packet Capture | |
| VPN 2FA Authentication for AD/LDAP | |
| DrayTek VPN Matcher | |
| Firewall & Content Filtering | |
|---|---|
| IP-based Firewall Policy | |
| Content Filtering | Application, URL Keyword, DNS Keyword, Web Features, Web Category (subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
| Linux Applications (Vigor3912S only) | |
|---|---|
| Suricata | |
| VigorConnect | |
| NAT | |
|---|---|
| NAT | Port Redirection, Open Ports, Port Triggering, Port Knocking, Fast NAT, DMZ Host, UPnP, Server Load Balance |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| Bandwidth Management | |
|---|---|
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Service Type |
| VoIP Prioritization | |
| APP QoS | |
| Management | |
|---|---|
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Port knocking for Local Service | |
| Config Backup/Restore | |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Central AP Management | 50 Vigor Access Points |
| Central Switch Management | 30 Vigor Switches |
| VigorACS Management (Since f/w) | V4.3.5.1 |
| Physical | |
|---|---|
| Power Input | AC 100~240V @ 0.6A |
| Max. Power Consumption | 35 watts |
| Memory | 8GB DDR4 (Vigor3912) 8GB DDR4 + 256GB SSD (Vigor3912S) |
| Dimension | 443 mm x 285 mm x 45 mm |
| Weight | 3.35 kg |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -10 to 55°C |
| Operating Humidity (non-condensing) | 10 to 90% |
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Draytek Vigor 3912 Quad-Core CPU, 2 x 10Gb SFP+ Fibre WAN/LAN slots, 2 x 2.5GbE WAN/LAN Ports, and 4 x fixed GbE LAN ports, SPI Firewall, 500 x VPN tunnels inc. 200 x SSL-VPN tunnels.
- Regular price
- $1,690.00
- Sale price
- $1,690.00
- Regular price
-
SKU: DV3912
Couldn't load pickup availability