DrayTek 2865ax Dual-WAN ADSL+/VDSL2 WiFi 6 Broadband Router
DrayTek 2865ax Dual-WAN ADSL+/VDSL2 WiFi 6 Broadband Router
DrayTek Vigor 2865ax Dual-WAN ADSL+/VDSL2 WiFi 6 Broadband Router for Superfast VDSL Broadband and Ethernet-based FTTP Fibre Broadband
The Ideal DSL Router with VPN for Small Business and Remote Working
The Vigor 2865ax is a VDSL and Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. Connect the Vigor 2865 to Superfast Fibre with its integrated VDSL modem. Or connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN.
Featuring high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit Internet connections. Offering up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.
With Wi-Fi 6 AX3000 wireless, it provides ultra fast and efficient wireless coverage, to your network's computers and devices.
Wi-Fi 6 - AX3000 Performance
The Vigor 2865ax features ultra-fast and highly efficient Wi-Fi 6, or 802.11ax. OFDMA allows the router to send to more than one device at a time, splitting up wireless frequency into blocks, assigning more to users that need more e.g. video data, less to users that need less e.g. VoIP calls, then sending all at once. Which ensures all users have less of a wait, greatly improving efficiency. It allows the router to effectively and responsively, serve more wireless clients.
5+1 Gigabit LAN Ports with VLANs
The Vigor 2865 series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage.
Robust & Comprehensive IPv4 / IPv6 Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.
DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN
The Vigor 2865 supports up to 16 active DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - the same encryption that you use for secure web sites such as your bank.
Key Specifications
- VDSL2 (Superfast Fibre) and Gigabit Ethernet WAN Router
- Multi-WAN Gigabit Performance Router with Load-Balancing & Failover
- Up to 950Mbps Firewall Throughput for Ethernet WAN
- 5+1 Gigabit RJ-45 LAN Ports
- Up to 800Mbps VPN Throughput with IPsec acceleration
- 32 LAN-to-LAN & Remote Teleworker VPN Tunnels
- 16 DrayTek SSL VPN or OpenVPN Tunnels
- AX3000 – Wi-Fi 6 Dual Band Wireless
- 8 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
- Optional VigorCare Available
- Can be centrally Managed by VigorACS
Share
Explore Further
Highlights
VDSL and Ethernet Load Balancer
High thoughput handles fast internet connections, with Load Balancing and Route Policy.
AX3000 Wireless
Featuring WiFi 6 performance.
5+1 Gigabit LAN Ports with VLANs
Extensive LAN management features, use VLANs to manage up to 8 networks.
Firewall & Content Filtering
Manage internet access with Firewall, App Enforcement & Category-based Web Filtering (requires GlobalView subscription, see accessories tab).
DrayDDNS with LetsEncrypt Certificates
Free DrayDDNS address for each router, with automated LetsEncrypt SSL/TLS Certificates.
Hotspot Web Portal
Provide internet access to guests and market your business with captive portal.
DrayTek SSL VPN
Access the Vigor 2865ax's network remotely with a TLS encrypted VPN tunnel.
Robust SMB VPN Router
Up to 32 active VPN tunnels, with up to 800Mbps IPsec Hardware Accelerated throughput.
VigorACS Central Management
Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.
High Availability
Connect a pair of Vigor 2865ax routers to provide a hardware backup solution.
Quality of Service with App QoS
Easily prioritise latency-sensitive applications on your network with App QoS.
Centralised LAN Management
Easily manage and provision DrayTek VigorAP access points and VigorSwitch switches.
Dimensions and Weight
Width 241 mm, Depth 165 mm, Height 44 mm,Weight 1.5 kg
Specification
Physical Interfaces
WAN1: VDSL2 / VDSL2 35b / ADSL2+, RJ11
WAN2/LAN Switchable Port: 1 x Gigabit Ethernet (1G/100M/10M), RJ45
LAN Ports: 5 x Gigabit Ethernet (1G/100M/10M), RJ45
2 x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
2 x Removable Wireless antennas
Wireless On / Off / WPS button
Recessed Factory Reset button
Performance
NAT Performance:
100 Mb/s Max Sync Rate with VDSL2
300 Mb/s Max Sync Rate with VDSL2 35b
950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
1.3Gb/s Total Multi-WAN NAT Throughput
800 Mb/s NAT Throughput per WAN without Hardware Acceleration
60,000 NAT Sessions
8000 Hardware Accelerated NAT Sessions
VPN Performance:
300 Mb/s IPsec (AES256) VPN Performance
800 Mb/s Hardware Accelerated IPsec VPN Performance
130 Mb/s SSL VPN Performance
Max. 32 Concurrent VPN Tunnels
Max. 16 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
WAN1: VDSL2 / VDSL2 35b / ADSL2+
WAN2: Gigabit Ethernet
WAN3: 2.4GHz Wireless WAN
WAN4: 5GHz Wireless WAN
WAN5: 4G/LTE USB Modem (not included)
WAN6: 4G/LTE USB Modem (not included)
Internet Connection
Load Balancing: IP-based, Session-based
Hardware Acceleration
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
2.4GHz & 5GHz Simultaneous Wireless WAN
WAN Active on Demand: Link Failure, Traffic Threshold
Connection Detection: PPP, ARP Detect, Ping Detect
WAN Data Budget
Dynamic DNS
DrayDDNS – with automated LetsEncrypt Certificates
Full Feature-set Hardware Acceleration:
Hardware Accelerated Quality of Service
Multi-WAN Data Budget
Traffic Graph & Data Flow Monitor
Bandwidth Limit
IPv4 Connection Types: PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)
IPv6 Connection Types:
Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU
VDSL & ADSL Features
BT Infinity Option 1 & Option 2 Compatible
Compliant with Openreach SIN 498
Auto Detection of VDSL and ADSL line modes
Support for G.INP & Vectoring
VDSL Standards:
ITU-T G.993.1 VDSL
ITU-T G.993.2, G.997.1 VDSL2
Band Plan: G.998, G.997
Annex A, Annex B, Annex C
VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
OLR, UPBO, DPBO Supported
US0 Supported
Loop Diagnostic Mode
DSL Forum WT-114
ADSL Standards:
ANSI T1.413 Issue2
ITU-T G.992.1 G.dmt (ADSL)
ITU-T G.992.2 G.lite
ITU-T G.992.3 ADSL2
ITU-T G.992.5 ADSL2+
ATM Protocols:
RFC-2684/RFC-1483 Multiple Protocol over AAL5
RFC-2516 PPP over Ethernet
RFC-2364 PPP over AAL5
Support for RFC4638 for MTU up to 1500
Wireless Features
AX3000 WiFi 6 wireless:
802.11ax 2x2 wireless access point
Compatible with 802.11a/b/g/n/ac wireless
Dual-band (2.4/5Ghz) simultaneous wireless
Up to 2400Mbps PHY rate at 160MHz with 5GHz
Up to 574Mbps PHY rate at 40MHz with 2.4GHz
Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
OFDMA
MU-MIMO
Tx Beamforming
1024-QAM
Hardware Acceleration for Wirless Clients
Mesh Root support with DrayTek VigorAP Mesh Nodes (planned in future release)
Up to 4 SSIDs per radio band
Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
Bandwidth Management (Per Station / Per SSID)
WMM (Wireless MultiMedia)
WPS - WiFi Protected Setup
Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
Wireless Security:
WPA2
WPA3 (requires f/w 4.3.0)
Pre-Shared Key authentication
Enterprise 802.1x authentication
WEP/WPA for Legacy Clients
Access Control – Blacklist / Whitelist client MAC addresses per SSID
Antenna Specifications
2 x External Dipole
5GHz Gain: 4.5 dBi
2.4GHz Gain: 5 dBi
RP-SMA fitting antenna connectors
Firewall & Content Filtering
IP-based or User-based Firewall Policy
User-based Time Quota
DoS Attack Defence
Spoofing Defence
Content Filtering:
Application Content Filter
URL Content Filter
DNS Keyword Filter
Web Features
Web Category Filter (requires GlobalView subscription, sold separately)
NAT Features
NAT Port Redirection
Open Ports
Port Triggering
DMZ Host
UPnP
ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
802.1q Tag-based, Port-based VLAN
Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
Up to 16 VLANs
DMZ Port
DHCP Server:
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
DHCP Pool Count up to 1022 addresses for LANs 1-3
DHCP Pool Count up to 253 addresses for LANs 4-8
DHCP Relay per LAN
LAN IP Alias
Wired 802.1x Port Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking Features
Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
High Availability: Active-Standby, Hot-Standby
DNS Security (DNSSEC)
Local RADIUS server
SMB File Sharing (Requires external storage)
Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN
Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels
Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels (requires f/w 4.2.1)
LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
Teleworker-to-LAN – Dial-In VPN Server
User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
Encryption: MPPE, DES, 3DES, AES (128/192/256)
Authentication: SHA-256, SHA-1
VPN Trunk (Redundancy): Load Balancing, Failover
Dead Peer Detection (DPD)
IPsec NAT-Traversal (NAT-T)
Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
DHCP over IPsec
DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT
VPN Protocols:
IPsec IKEv1, IKEv2, IKEv2 EAP
IPsec-XAuth
DrayTek SSL VPN
OpenVPN (Remote Dial-In User only)
GRE over IPsec
PPTP
L2TP, L2TP over IPsec
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
User-based Data Quota
Quality of Service (QoS)
Classify via TOS, DSCP, 802.1p, IP Address, Service Type
4 Priority Queues
App QoS
VoIP Prioritisation
Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
Import Config from Vigor 2860 & 2862
Auto Backup Config to USB Storage
Firmware Upgrade via TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control Features: Access List, Brute Force Protection
Syslog
SMS, E-mail Notification Alert
SNMP: v1, v2c, v3
Managed by VigorACS
Router Central Management Features
AP Management: Up to 20 VigorAP access points
Switch Management: Up to 10 VigorSwitch network switches
VPN Management: Up to 8 Vigor routers
DrayTek Mesh: Up to 7 VigorAP access points (planned in future release)
Operating Requirements
Rack Mountable (Vigor RM1 or ES1 mounting bracket required, sold separately)
Wall or Shelf Mountable with included fittings
Operating Temperature: 0°C ~ 45°C
Storage Temperature: -25°C ~ 70°C
Humidity: 10% ~ 90% (non-condensing)
Power Consumption: 28.2 watts maximum
Operating Power: DC 12V (via external PSU, supplied)
Power Requirements : 100-240VAC
Weight: 780g
Dimensions:
241 mm Width
165 mm Depth
44 mm Height
Package Contents
1 x Vigor 2865ax router
1 x Quick Start Guide
1 x Set of screws & wall plugs for wall mounting
1 x 2m CAT5e RJ45 network cable
2 x Detachable wireless LAN antennas
1 x UK Power supply (DC 12V)
Warranty Information
Please check the Specification Section for Warranty Information
Extended Warranty
Care for your DrayTek with VigorCare Extended Warranty !
DrayTek Extended Warranty Matrix Support Model
VigorCare Enhanced Warranty Service
Advanced Replacement
If you suspect that your covered DrayTek product has developed a fault, our experienced support technicians will help you to diagnose the problem and determine whether the unit needs to be service or replaced. If it does, a replacement unit will be sent out the same day for delivery on the next working/business day (to most of the UK). If you wish to take the unit yourself to the service centre (currently North of London), replacement or diagnosis/repair can be carried out in person.
3 or 5 Year Warranty
With VigorCare, you also have the benefit of an extension to a full 3 or even 5 years of warranty so that if a fault does develop, you will have no bills for parts, labour or replacement in the event that a warranty fault develops. We're proud of the reliability that DrayTek products achieve but however unlikely a problem might be, if your business depends on your DrayTek product, VigorCare should give you the peace of mind and convenience that you need.
VigorCare membership is subject to the VigorCare Terms & Conditions (see terms tab, above) and should be taken out within 6 months of purchase of your new product
VigorCare Service Packs
VigorCare subscription is available for several categories of product. Determine the correct pack for your product below. NOTE: The subscription must be activated via the link below within 6 months of your router and service pack being purchased.
VigorCare Activation Link
https://www.draytek.co.uk/support/vigorcare-registration
Warranty Terms & Conditions Apply - please see here
https://www.draytek.co.uk/support/vigorcare#terms-and-conditions