Vigor 2866ax Router
Key Specifications
G.fast (Ultrafast Fibre), VDSL2 (Superfast Fibre), ADSL and Ethernet Router
Multi-WAN Gigabit Performance Router with Load-Balancing & Failover
Up to 950Mbps Firewall Throughput for Ethernet WAN
5+1 Gigabit RJ-45 LAN Ports
Up to 800Mbps VPN Throughput with IPsec acceleration
32 LAN-to-LAN & Remote Teleworker VPN Tunnels
16 DrayTek SSL VPN or OpenVPN Tunnels
AX3000 – Wi-Fi 6 Dual Band Wireless
8 LAN Subnets with VLANs (Port-based / 802.1q)
SPI Firewall and Content Filtering
Optional VigorCare Available
Can be centrally Managed by VigorACS
The Vigor 2866 series comes in several different models depending on the features required. Please double check when ordering that you have selected the correct product and a product intended for the correct region/network.
This model:
UK Product Code EAN Product Name Product Description
V2866AX-K 4710484743565 Vigor 2866ax (UK/IE) Vigor 2866ax G.fast/DSL & Ethernet router with Wi-Fi 6 AX3000 wireless
Other models in the Vigor 2866 router series:
UK Product Code EAN Product Name Product Description
V2866-K 4712909128308 Vigor 2866 (UK/IE) Vigor 2866 wired G.fast/DSL & Ethernet router
V2866AC-K 4710484743244 Vigor 2866ac (UK/IE) Vigor 2866ac G.fast/DSL & Ethernet router with AC1300 wireless
V2866LAC-K 4710484740434 Vigor 2866Lac (UK/IE) Vigor 2866Lac G.fast/DSL & Ethernet router with AC1300 wireless and integrated 4G/LTE modem
V2866VAC-K 4710484743343 Vigor 2866Vac (UK/IE) Vigor 2866Vac G.fast/DSL & Ethernet router with AC1300 wireless and VoIP
The EAN is a barcode number which identifies the unique specific product type. It is separate to the product serial number which is unique to each product. The EAN will also appear on your product box when you receive it so you can double check that you have been sent the right product.
These product codes are for UK/Irish products only. Please check with your local DrayTek office for the correct part nos. for your region if you are not in the UK/IE to ensure that you get the correct hardware and local support/warranty.
Technical Specification (UK Hardware Spec.)
Physical Interfaces
WAN1: G.fast / VDSL2 / VDSL2 35b / ADSL2+, RJ-11
WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
2x Removable Wireless antennas
Wireless On / Off / WPS button
Recessed Factory Reset button
Performance
NAT Performance:
1.3Gb/s Max Sync Rate with G.fast (dependant on ISP & Exchange equipment)
300 Mb/s Max Sync Rate with VDSL2 35b
950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
1.3Gb/s Total Multi-WAN NAT Throughput
800 Mb/s NAT Throughput per WAN without Hardware Acceleration
60,000 NAT Sessions
8000 Hardware Accelerated NAT Sessions
VPN Performance:
300 Mb/s IPsec (AES256) VPN Performance
800 Mb/s Hardware Accelerated IPsec VPN Performance - New!
130 Mb/s SSL VPN Performance
Max. 32 Concurrent VPN Tunnels
Max. 16 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
WAN1: G.fast / VDSL2 / VDSL2 35b / ADSL2+
WAN2: Gigabit Ethernet
WAN3: 2.4GHz Wireless WAN - Not supported on AX variant
WAN4: 5GHz Wireless WAN - Not supported on AX variant
WAN5: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
WAN6: 4G/LTE USB Modem (not included)
Internet Connection
Load Balancing: IP-based, Session-based
Hardware Acceleration
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
WAN Active on Demand: Link Failure, Traffic Threshold
Connection Detection: PPP, ARP Detect, Ping Detect
WAN Data Budget
Dynamic DNS
DrayDDNS – with automated LetsEncrypt Certificates
Full Feature-set Hardware Acceleration:
Hardware Accelerated Quality of Service
Multi-WAN Data Budget
Traffic Graph & Data Flow Monitor
Bandwidth Limit
Hardware Acceleration for Wireless Clients - New!
IPv4 Connection Types: PPPoA, PPPoE, MPoA, DHCP, Static IP, PPTP/L2TP (Ethernet WAN only)
IPv6 Connection Types:
Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU, Static IPv6, DHCPv6 Client
G.fast, VDSL & ADSL Features
BT Infinity Option 1 & Option 2 Compatible
Compliant with Openreach SIN 527 & SIN 498
Auto Detection of G.fast, VDSL and ADSL line modes
Support for G.INP & Vectoring
G.fast Standards:
ITU-T G.9700, G.9701 G.fast
Profile: 212MHz & 106MHz
VDSL Standards:
ITU-T G.993.1 VDSL
ITU-T G.993.2, G.997.1 VDSL2
Band Plan: G.998, G.997
Annex A, Annex B, Annex C
VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
OLR, UPBO, DPBO Supported
US0 Supported
Loop Diagnostic Mode
DSL Forum WT-114
ADSL Standards:
ANSI T1.413 Issue2
ITU-T G.992.1 G.dmt (ADSL)
ITU-T G.992.2 G.lite
ITU-T G.992.3 ADSL2
ITU-T G.992.5 ADSL2+
ATM Protocols:
RFC-2684/RFC-1483 Multiple Protocol over AAL5
RFC-2516 PPP over Ethernet
RFC-2364 PPP over AAL5
Support for RFC4638 for MTU up to 1500
Wireless Features (‘ax’ models)
AX3000 Wi-Fi 6 wireless:
802.11ax 2x2 wireless access point
Compatible with 802.11a/b/g/n/ac wireless
Dual-band (2.4/5Ghz) simultaneous wireless
Up to 2400Mbps PHY rate at 160MHz with 5GHz
Up to 574Mbps PHY rate at 40MHz with 2.4GHz
Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
OFDMA
MU-MIMO
Tx Beamforming
1024-QAM
Hardware Acceleration for Wireless Clients – New!
Mesh Root support with DrayTek VigorAP Mesh Nodes – *Planned in future firmware release
Up to 4 SSIDs per radio band
Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
Bandwidth Management (Per Station / Per SSID)
WMM (Wireless MultiMedia)
WPS - WiFi Protected Setup
Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
Wireless Security:
WPA2
WPA3 – New! (requires f/w 4.3.0)
Pre-Shared Key authentication
Enterprise 802.1x authentication
WEP/WPA for Legacy Clients
Access Control – Blacklist / Whitelist client MAC addresses per SSID
Antenna Specifications
2x External Dipole
5GHz Gain: 4.5 dBi
2.4GHz Gain: 5 dBi
RP-SMA fitting antenna connectors
Firewall & Content Filtering
IP-based or User-based Firewall Policy
User-based Time Quota
DoS Attack Defence
Spoofing Defence
Content Filtering:
Application Content Filter
URL Content Filter
DNS Keyword Filter
Web Features
Web Category Filter (requires GlobalView subscription)
NAT Features
NAT Port Redirection
Open Ports
Port Triggering
DMZ Host
UPnP
ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
802.1q Tag-based, Port-based VLAN
Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
Up to 16 VLANs
DMZ Port
DHCP Server:
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
DHCP Pool Count up to 1022 addresses for LANs 1-3
DHCP Pool Count up to 253 addresses for LANs 4-8
DHCP Relay per LAN
LAN IP Alias
Wired 802.1x Port Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking Features
Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
High Availability: Active-Standby, Hot-Standby
DNS Security (DNSSEC)
Local RADIUS server
SMB File Sharing (Requires external storage)
Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN
Up to 32 active VPN tunnels - including up to 16 SSL VPN or OpenVPN Tunnels
Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New!
LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
Teleworker-to-LAN – Dial-In VPN Server
User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
Encryption: MPPE, DES, 3DES, AES (128/192/256)
Authentication: SHA-256, SHA-1
VPN Trunk (Redundancy): Load Balancing, Failover
Dead Peer Detection (DPD)
IPsec NAT-Traversal (NAT-T)
Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
DHCP over IPsec
DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
VPN Protocols:
IPsec IKEv1, IKEv2, IKEv2 EAP
IPsec-XAuth
DrayTek SSL VPN
OpenVPN (Remote Dial-In User only)
GRE over IPsec
PPTP
L2TP, L2TP over IPsec
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
User-based Data Quota
Quality of Service (QoS)
Classify via TOS, DSCP, 802.1p, IP Address, Service Type
4 Priority Queues
App QoS
VoIP Prioritization
Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
Import Config from:
Vigor 2860 series
Vigor 2862 series
Vigor 2865 series* (planned for f/w 4.4.0)
Auto Backup Config to USB Storage – New!
Firmware Upgrade via TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control Features: Access List, Brute Force Protection
Syslog
SMS, E-mail Notification Alert
SNMP: v1, v2c, v3
Managed by VigorACS
Router Central Management Features
AP Management: Up to 20 VigorAP access points
Switch Management: Up to 10 VigorSwitch network switches
VPN Management: Up to 8 Vigor routers
DrayTek Mesh: Up to 7 VigorAP access points – *Planned in future firmware release
Operating Requirements
Rack Mountable (Optional Vigor RM1 mounting bracket required)
Wall or Shelf Mountable with included fittings
Temperature Operating: 0 °C ~ 45 °C
Storage: -25 °C ~ 70 °C
Humidity 10% ~ 90% (non-condensing)
Power Consumption: 28.2 watts maximum ('ax' model)
Operating Power: DC 12V (via external PSU, supplied)
Power Requirements: 100-240VAC
Weight: 780g ('ax' model)
Dimensions:
241mm Width
165mm Depth
44mm Height
Warranty
Two (2) Year Manufacturer's RTB
Optional VigorCare Enhanced Warranty Available
VigorCare B3 3 Year Subscription: VCARE-B3
VigorCare B5 5 Year Subscription: VCARE-B5
Box Contents
Vigor 2866ax router
Quick Start Guide
Screws & wall plugs for wall mounting
2m Cat-5e RJ-45 Network Cable
2x Detachable Wireless LAN Antennas
DC 12V Power Supply with UK Plug
