DrayTek Vigor 2927ac Broadband Router VPN & 3G/4G LTE Support
DrayTek Vigor 2927ac Broadband Router VPN & 3G/4G LTE Support
Couldn't load pickup availability
DrayTek Vigor 2927ac (1266Mbps AC) Simultaneous Dual-WAN WiFi 5 Broadband Router with VPN & 3G/4G LTE Support
Dual Gigabit WAN Load Balancer
The Vigor 2927 is a Dual-Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. It offers high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit Internet connections. Offering up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.
With 802.11ac wireless on 'ac' models, it provides fast wireless coverage to your network's computers and devices. In addition, the router can connect to Wireless networks for Internet access, allowing it to make use of Mobile Hotspot wireless connections and nearby wireless networks, where for instance a neighbour's wireless network could provide an emergency backup connection.
The integrated 4G/LTE modem on 'L' models provides fast 4G+ Mobile Broadband with Carrier Aggregation to get the best performance out of 4G Broadband, for use as a backup connection or primary Internet connection.
Route Policy - Powerful Routing Management
The Vigor 2927 series provides full policy-based control of where and how outbound traffic is routed with Route Policy:
Integrated LTE 4G/3G Modem
The Vigor 2927 'L' model routers provide high speed mobile broadband connectivity for Internet access and VPN, with its built-in LTE-A 4G+ modem. LTE Category 6 uses carrier aggregation to improve 4G speeds, allowing you to get the best performance out of 4G Broadband.
DrayTek's LTE routers are not locked to any mobile network and is compatible with all major UK mobile networks, such as EE, Vodafone, O2 and Three, as well as any MVNOs on those networks.
The Vigor 2927 'L' router models can even be used as an LTE modem. With LTE Bridge mode, the Vigor 2927L provides 4G connectivity directly to a connected router or firewall, without any additional network translation (NAT).
The Vigor 2927L routers use two LTE aerials (antennae) which can rotate and tilt for optimum reception. The included extension bases provide a 1M extension cable to allow optimum positioning, avoiding obstructions, cabinets or equipment.
Constant Connectivity - Dual-SIM LTE
Where connectivity is mission critical, a single cellular network can become a single point of failure, in the event of a mobile network outage.
The Vigor 2927 'L' models have two SIM slots, so that in the event of one mobile network not providing Internet connectivity, the router will switch to a secondary SIM and cellular network connection.
It intelligently monitors for Internet connectivity and latency; If the primary 4G SIM's network can't access a required location, or is too slow, it switches over to the backup SIM to resume connectivity.
For resilience in the event of mobile network outages, each SIM should be on a different cellular network (e.g. Vodafone and EE) and not 'virtual' networks which piggyback on the first (e.g. not Virgin Mobile and EE, as the former uses the latter's network).
Wireless LAN
The 2927 series 'ac' models provide 802.11ac simultaneous Dual-Band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its Antennas streaming data to different devices at once, improving efficiency over standard 802.11ac wireless and allowing the router to effectively serve more wireless clients.
With firmware 4.3.0, the Vigor 2927 'ac' wireless routers can be used as part of DrayTek's Mesh wireless system, allowing the router to work as the Mesh Root, providing Internet access and management of Mesh VigorAPs directly.
Ideal VPN router for SMB
A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office.
The Vigor 2927 is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput and up to 50 concurrently active VPN tunnels.
With IPsec Hardware Acceleration available from firmware 4.2.2, performance increases up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed Internet connections.
It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients. Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, DrayTek's SSL VPN and L2TP for both LAN to LAN and Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with OpenVPN.
User management for Dial-In Teleworkers is managed through the router's web interface, with mOTP 2-factor authentication available for IPsec, L2TP and SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server.
Setup Guide - CLICK HERE
Share
![Draytek 2927ac Dual-WAN Security Router Front](http://admireit.co.uk/cdn/shop/products/Draytek_2927ac_Dual-WAN_Security_Router_Front_cfe89887-d764-467b-8532-73a89d0a9520.jpg?v=1659731496&width=1445)
![Draytek 2927ac Dual-WAN Security Router Top Down View](http://admireit.co.uk/cdn/shop/products/Draytek2927Dual-WANSecurityRouterFront3_19655633-e5f8-4453-8b1e-3fc0675fef98-314745.jpg?v=1674923263&width=1445)
![Draytek 2927ac Dual-WAN Security Router Front View](http://admireit.co.uk/cdn/shop/products/Draytek2927acDual-WANSecurityRouterFront_364387e4-a49d-4e48-90fd-e3c44eda0aaa.jpg?v=1659731496&width=1445)
![Draytek 2927ac Dual-WAN Security Router Right Side View](http://admireit.co.uk/cdn/shop/products/Draytek2927acDual-WANSecurityRouterFront2_d898a353-fb6b-4f15-840a-eec341c01287.jpg?v=1659731497&width=1445)
![Draytek 2927ac Dual-WAN Security Router Right Side View](http://admireit.co.uk/cdn/shop/products/Draytek2927acDual-WANSecurityRouterFront3_01e4358a-c5e5-47bc-834b-40fd72765b31.jpg?v=1659731497&width=1445)
![Draytek 2927ac Dual-WAN Security Router Left Side View](http://admireit.co.uk/cdn/shop/products/Draytek2927acDual-WANSecurityRouterFront4_c6d8e14e-4671-4ba2-8f0b-3da0091e92d3.jpg?v=1659731497&width=1445)
Explore Further
Highlights
Dual-WAN Gigabit Ethernet WAN Router with Load Balancing & Failover.
AC1300 (11ac ‘Wave 2’ WiFi 5) Dual Band Wireless.
Up to 950Mbps Throughput per WAN interface, 1800Mbps in total.
Up to 300Mbps IPsec VPN Throughput.
50 x LAN-to-LAN & Remote Teleworker VPN Tunnels.
25 x DrayTek SSL VPN or OpenVPN Tunnels.
5+1 x Gigabit RJ45 LAN Ports.
8 x LAN Subnets with VLANs (Port-based / 802.1q).
SPI Firewall and Content Filtering (see accessories tab for compatible Content Filtering licence).
Optional VigorCare available (sold separately).
Compatible with VigorACS central management platform.
Dimensions and Weight
Width 241 mm, Depth 165 mm, Height 44 mm,Weight 2 kg
Specification
Technical Specification (UK Hardware Spec.)
Physical Interfaces
WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
WAN/LAN Switchable Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
2x Removable Wireless antennas
2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
Wireless On / Off / WPS button
Recessed Factory Reset button
Antenna Specifications
Wireless LAN:
2x External Dipole
5GHz Gain: 4 dBi
2.4GHz Gain: 2 dBi
Performance
NAT Performance:
950 Mb/s NAT Throughput for Single WAN with Hardware Acceleration
1.8Gb/s Total NAT Throughput for Dual WAN with Hardware Acceleration
800 Mb/s NAT Throughput per WAN
60,000 NAT Sessions
8000 Hardware Accelerated NAT Sessions
VPN Performance:
300 Mb/s IPsec (AES256) VPN Performance
800 Mb/s Hardware Accelerated IPsec VPN Performance - New! (requires f/w 4.2.1)
120 Mb/s SSL VPN Performance
Max. 50 Concurrent VPN Tunnels
Max. 25 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
WAN1: Gigabit Ethernet
WAN2: Gigabit Ethernet
WAN3: 2.4GHz Wireless WAN
WAN4: 5GHz Wireless WAN
WAN5: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
WAN6: 4G/LTE USB Modem (not included)
Internet Connection
Load Balancing: IP-based, Session-based
Hardware Acceleration
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
2.4GHz & 5GHz Simultaneous Wireless WAN
WAN Active on Demand: Link Failure, Traffic Threshold
Connection Detection: PPP, ARP Detect, Ping Detect
WAN Data Budget
Dynamic DNS
DrayDDNS – with automated LetsEncrypt Certificates
Full Feature-set Hardware Acceleration (requires f/w 4.2.1):
Hardware Accelerated Quality of Service
Multi-WAN Data Budget
Traffic Graph & Data Flow Monitor
Bandwidth Limit
IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6 Connection Types:
Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCU
Wireless Features
AC1300 - 11ac 'Wave 2' Dual Band Wireless:
802.11ac 2x2 wireless access point
Compatible with 802.11a/b/g/n wireless
Dual-band (2.4/5Ghz) simultaneous wireless
Up to 866Mbps PHY rate at 80MHz with 5GHz
Up to 400Mbps PHY rate at 40MHz with 2.4GHz (256-QAM)
Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80MHz for 5GHz
MU-MIMO
Tx Beamforming
Mesh Root support with DrayTek VigorAP Mesh Nodes – New! (requires f/w 4.3.0, available in Q4 2020)
Up to 4 SSIDs per radio band
Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
Bandwidth Management (Per Station / Per SSID)
WMM (Wireless MultiMedia)
WPS - WiFi Protected Setup
Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
Wireless Security:
WPA2
WPA3 – New! (requires f/w 4.2.2)
Pre-Shared Key authentication
Enterprise 802.1x authentication
WEP/WPA for Legacy Clients
Access Control – Blacklist / Whitelist client MAC addresses per SSID
Firewall & Content Filtering
IP-based or User-based Firewall Policy
User-based Time Quota
DoS Attack Defence
Spoofing Defence
Content Filtering:
Application Content Filter
URL Content Filter
DNS Keyword Filter
Web Features
Web Category Filter (requires GlobalView subscription)
NAT Features
NAT Port Redirection
Open Ports
Port Triggering
DMZ Host
UPnP
ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
802.1q Tag-based, Port-based VLAN
Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
Up to 16 VLANs
DMZ Port
DHCP Server:
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
DHCP Pool Count up to 1022 addresses for LANs 1-3
DHCP Pool Count up to 253 addresses for LANs 4-8
DHCP Relay per LAN
LAN IP Alias
Wired 802.1x Port Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking Features
Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
High Availability: Active-Standby, Hot-Standby
DNS Security (DNSSEC)
Local RADIUS server
SMB File Sharing (Requires external storage)
Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN
Up to 50 active VPN tunnels - including up to 25 SSL VPN or OpenVPN Tunnels
Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New! (requires f/w 4.2.1)
LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
Teleworker-to-LAN – Dial-In VPN Server
User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
Encryption: MPPE, DES, 3DES, AES (128/192/256)
Authentication: SHA-256, SHA-1
VPN Trunk (Redundancy): Load Balancing, Failover
Dead Peer Detection (DPD)
IPsec NAT-Traversal (NAT-T)
Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
DHCP over IPsec
DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
VPN Protocols:
IPsec IKEv1, IKEv2, IKEv2 EAP
IPsec-XAuth
DrayTek SSL VPN
OpenVPN (Remote Dial-In User only)
GRE over IPsec
PPTP
L2TP, L2TP over IPsec
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
User-based Data Quota
Quality of Service (QoS)
Classify via TOS, DSCP, 802.1p, IP Address, Service Type
4 Priority Queues
App QoS
VoIP Prioritization
Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
Import Config from Vigor 2926
Auto Backup Config to USB Storage – New!
Firmware Upgrade via TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control Features: Access List, Brute Force Protection
Syslog
SMS, E-mail Notification Alert
SNMP: v1, v2c, v3
Managed by VigorACS
Router Central Management Features
AP Management: Up to 20 VigorAP access points
Switch Management: Up to 10 VigorSwitch network switches
VPN Management: Up to 8 Vigor routers
DrayTek Mesh: Up to 7 VigorAP access points – New! (requires f/w 4.3.0, available in Q4 2020)
Operating Requirements
Rack Mountable (Optional Vigor RM1 mounting bracket required)
Wall Mountable
Temperature Operating: 0 °C ~ 45 °C
Storage: -25 °C ~ 70 °C
Humidity 10% ~ 90% (non-condensing)
Power Consumption: 24 Watt Max.
Operating Power: DC 12V (via external PSU, supplied)
Power Requirements : 220-240VAC
Dimensions:
241mm Width
165mm Depth
44mm Height
Warranty
Two (2) Year Manufacturer's RTB
Optional VigorCare Enhanced Warranty Available
VigorCare B3 3 Year Subscription: VCARE-B3
VigorCare B5 5 Year Subscription: VCARE-B5
Box Contents
Vigor 2927ac router
Quick Start Guide
Screws & wall plugs for wall mounting
2m Cat-5e RJ-45 Network Cable
2x Detachable Wireless LAN Antennas
DC 12V Power Supply with UK Plug
Warranty Information
Please check the Specification Section for Warranty Information
Extended Warranty
Care for your DrayTek with VigorCare Extended Warranty !
DrayTek Extended Warranty Matrix Support Model
VigorCare Enhanced Warranty Service
Advanced Replacement
If you suspect that your covered DrayTek product has developed a fault, our experienced support technicians will help you to diagnose the problem and determine whether the unit needs to be service or replaced. If it does, a replacement unit will be sent out the same day for delivery on the next working/business day (to most of the UK). If you wish to take the unit yourself to the service centre (currently North of London), replacement or diagnosis/repair can be carried out in person.
3 or 5 Year Warranty
With VigorCare, you also have the benefit of an extension to a full 3 or even 5 years of warranty so that if a fault does develop, you will have no bills for parts, labour or replacement in the event that a warranty fault develops. We're proud of the reliability that DrayTek products achieve but however unlikely a problem might be, if your business depends on your DrayTek product, VigorCare should give you the peace of mind and convenience that you need.
VigorCare membership is subject to the VigorCare Terms & Conditions (see terms tab, above) and should be taken out within 6 months of purchase of your new product
VigorCare Service Packs
VigorCare subscription is available for several categories of product. Determine the correct pack for your product below. NOTE: The subscription must be activated via the link below within 6 months of your router and service pack being purchased.
VigorCare Activation Link
https://www.draytek.co.uk/support/vigorcare-registration
Warranty Terms & Conditions Apply - please see here
https://www.draytek.co.uk/support/vigorcare#terms-and-conditions