DrayTek Vigor 3912s Multi-WAN Router 10Gb Enterprise
DrayTek Vigor 3912s Multi-WAN Router 10Gb Enterprise
Couldn't load pickup availability
DrayTek Vigor V3912S – High-Performance Multi-WAN VPN Router with 10GbE SFP+ Ports, Embedded SSD, and Advanced Network Security
The DrayTek Vigor V3912S high-throughput enterprise firewall router with 10GbE SFP+ and 2.5GbE ports is engineered for businesses that require robust performance and advanced network control. Delivering up to 12.5Gbps firewall throughput, this powerful router features 8 WAN/LAN switchable Gigabit Ethernet ports, 4 fixed LAN ports, 2 x 2.5GbE ports, and 2 x 10-Gigabit SFP+ fiber ports—ideal for ultra-fast fibre uplinks to switches, servers, or data centers.
Perfect for large-scale site-to-site VPN deployments, the V3912S supports up to 500 simultaneous VPN tunnels with IPSec VPN throughput up to 5Gbps. Its flexible WAN architecture allows bandwidth to be efficiently distributed across up to 8 WAN interfaces with load balancing, optimizing traffic for failover and performance in multi-ISP environments.
For segmented and secure network infrastructure, the V3912S supports up to 100 VLANs, which can be configured with NAT or routing policies to control traffic flow, enhance security, and improve performance across departments or services.
Expanding on the capabilities of the previous V3912 model, the V3912S introduces embedded SSD storage and 8GB of RAM, enabling the installation and operation of Docker-based Linux applications directly on the device. This supports services such as Suricata Intrusion Detection System (IDS) for real-time threat detection and VigorConnect for local network management, turning the router into a multi-purpose, secure network hub.
With its quad-core processor, the V3912S can run containerized applications, such as web servers, monitoring tools, or security software, simultaneously without performance degradation. The Suricata IDS, backed by over 60,000 detection rules, provides enterprise-grade threat visibility, protecting against malware, DDoS attacks, and data breaches in real time.
As with all DrayTek routers, the V3912S is fully integrated with DrayTek VigorACS centralized cloud management software, allowing administrators to provision, monitor, and manage devices remotely—ideal for MSPs and distributed enterprise networks. It can centrally manage up to 50 DrayTek VigorAP wireless access points and VigorSwitch managed switches, making it a cornerstone for full-network orchestration.
Powerful Enterprise Internet Gateway
Featuring a Quad-Core Processor, the Vigor 3912S readily meets the needs of demanding networks, with improved total maximum NAT throughput of over 12Gb/s delivered through its 10GbE & 2.5GbE ports.
Benefits: Full potential of the Internet, without limits, available across many different environments.
High-Performance VPN Concentrator
Protect inter-office communication with securely encrypted Virtual Private Network tunnels, maintaining 5Gb/s IPsec throughput and supporting 500 simultaneous VPN links.
Benefits: Affordably optimise remote working with no bottlenecks.
Suricata Intrusion Detection System
Optionally install Suricata service to enable IDS functionality to help protect your network from threats.
Benefits: Enhanced network security with IDS protection.
Manage Multiple Networks
Create up to 100 VLANs, port-based or tag-based. Each fully configurable for NAT or Routing, sharing resources between networks or isolated from each other.
Benefits: Ideal for separating departments or managed offices. Secure and segment your networks with ease.
Flexible WAN Architecture
Spread the load across up to 8 WAN links with Load Balancing. Policy-based Routing enables intelligent and flexible failover, for reliable and resilient connectivity.
Benefits: You decide your priorities, Load Balancing meets your needs with stable business continuity.
Host Docker Linux Applications
The built-in 256GB SSD and 8GB DDR4 RAM enable Linux applications to be installed via docker. Suricata, VigorConnect or any compatible docker based application can be installed.
Benefits: Install Linux applications to use on your network
Share




Explore Further
Highlights
Powerful Enterprise Internet Gateway
Featuring a Quad-Core Processor, the Vigor 3912S readily meets the needs of demanding networks, with improved total maximum NAT throughput of over 12Gb/s delivered through its 10GbE & 2.5GbE ports.
Benefits: Full potential of the Internet, without limits, available across many different environments.
High-Performance VPN Concentrator
Protect inter-office communication with securely encrypted Virtual Private Network tunnels, maintaining 5Gb/s IPsec throughput and supporting 500 simultaneous VPN links.
Benefits: Affordably optimise remote working with no bottlenecks.
Suricata Intrusion Detection System
Optionally install Suricata service to enable IDS functionality to help protect your network from threats.
Benefits: Enhanced network security with IDS protection.
Manage Multiple Networks
Create up to 100 VLANs, port-based or tag-based. Each fully configurable for NAT or Routing, sharing resources between networks or isolated from each other.
Benefits: Ideal for separating departments or managed offices. Secure and segment your networks with ease.
Flexible WAN Architecture
Spread the load across up to 8 WAN links with Load Balancing. Policy-based Routing enables intelligent and flexible failover, for reliable and resilient connectivity.
Benefits: You decide your priorities, Load Balancing meets your needs with stable business continuity.
Host Docker Linux Applications
The built-in 256GB SSD and 8GB DDR4 RAM enable Linux applications to be installed via docker. Suricata, VigorConnect or any compatible docker based application can be installed.
Benefits: Install Linux applications to use on your network
Dimensions and Weight
Width 443 mm, Depth 285 mm, Height 45 mm,Weight 4.82 kg
Specification
Technical Specification (UK Hardware Spec.)
Key Specifications
Multi-WAN Router with over 12Gbps NAT Throughput
Suricata-based Intrusion Detection System – New!
8x WAN/LAN Switchable Ports & 4x fixed Ethernet LAN Ports
2x 10GbE SFP+ and 2x 2.5GbE for WAN/LAN
Up to 5Gbps Total IPSec VPN Throughput
Up to 3.5Gbps Total SSL VPN Throughput
500 LAN-to-LAN & Remote Teleworker VPN Tunnels
200 DrayTek SSL VPN or OpenVPN Tunnels
Up to 100 LAN Subnets with VLANs (Port-based / 802.1q)
256GB SSD and 8GB DDR4 for hosting Docker Linux applications
SPI Firewall and Content Filtering
Optional VigorCare Available
Compatible with VigorACS Central Management Platform
Physical Interfaces
WAN/LAN Switchable Port 2x 10G/1G SFP+ Fiber Slot (P1-2)
2x 2.5G/1G/100M/10M Ethernet, RJ-45 (P3-4)
4x 1G/100M/10M Ethernet, RJ-45 (P5-8)
Fixed LAN Port 4x 1G/100M/10M Ethernet, RJ-45 (P9-12)
USB Port 2x USB 3.0
Console Port 1x RJ-45 (RS-232)
Button 1x Factory Reset
Storage
Storage Capacity 256GB SSD Drive (built-in)
Please note that some space might be occupied by pre-installed applications
Virtual Machine Server
Install Applications via Docker VigorConnect
Suricata
Other Docker-compatible applications compatible with ARMV architecture
Performance
NAT Throughput 12.5Gb/s
IPSec VPN Performance 5000Mb/s
SSL VPN Performance 3500Mb/s
WireGuard VPN Performance 900Mb/s
NAT Sessions 1000K
Max. Concurrent VPN Tunnels 500
Max. Concurrent SSL VPN 200
Internet Connection Features
IPv4 PPPoE, DHCP, Static IP
IPv6 PPP, DHCPv6, Static IPv6, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging Supported
Multi-VLAN/PVC Supported
Load Balancing IP-based, Session-based
WAN Active on Demand Link Failure, Traffic Threshold
Connection Detection PPP, Ping
Dynamic DNS Supported
DrayDDNS Supportedwith LetsEncrypt Certificate support
LAN Management Features
VLAN 802.1q Tag-based, Port-based
Max. Number of VLAN 100 (NAT or Routing mode selectable per LAN interface)
DHCP Server Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
IP Pool Count Up to 4093 per LAN Subnet
LAN IP Alias Supported
Wired 802.1x Port Authentication Supported
PPPoE Server Supported
Local DNS Server Supported
Conditional DNS Forwarding Supported
Port Mirroring / Packet Capturing Supported
Hotspot Web Portal Supported
Hotspot Authentication Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server
Networking Features
Routing IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, OSPFv2, BGP
Policy-based Routing Match via: Protocol, IP Address, Port, Domain Name, Country
Direct Traffic via: WAN Interface, LAN Interface, NAT/Routing, LAN Gateway, VPN Tunnel
Failover with optional Failback to: WAN/LAN, VPN, Route Policy, LAN Gateway
High Availability Active-Standby, Hot-Standby
DNS Security (DNSSEC) Supported
Multicast IGMP Proxy, Bonjour
Local RADIUS server Supported
SMB File Sharing Supported(Requires external storage)
VPN Features
LAN-to-LAN Supported
Teleworker-to-LAN Supported
Protocols PPTP, L2TP, L2TP over IPsec, IPsec IKEv1, IKEv2, IPsec-XAuth, IKEv2 EAP, GRE, DrayTek SSL, OpenVPN, WireGuard
User Authentication Local, RADIUS, LDAP, TACACS+, mOTP, TOTP
IKE Authentication Pre-Shared Key, X.509, XAuth, EAP
IPsec Authentication SHA-512, SHA-256, SHA-1, MD5
Encryption MPPE, DES, 3DES, AES
VPN Trunk (Redundancy) Load Balancing, Failover
Single-Armed VPN Supported
NAT-Traversal (NAT-T) Supported
Firewall & Content Filtering Features
NAT Port Redirection (520 rules)
Open Ports (260 rules, 10 port ranges per rule)
Port Triggering, DMZ Host, UPnP
Server Load Balance, Fast NAT, Port Knocking - NEW!
ALG (Application Layer Gateway) SIP, RTSP, FTP, H.323
VPN Pass-Through PPTP, L2TP, IPsec
IP-based Firewall Policy Supported
User-based Firewall Policy Supportedwith Data and Time Quota Management
Content Filtering App Enforcement - application based
URL Content Filtering
DNS Keyword - URL or Category
Web Category Filtering - Includes free 30-day trial (subscription required: Group S, URLR-S, 4.3.2.5 or later firmware)
DoS Attack Defense Supported
Spoofing Defense Supported
Bandwidth Management Features
IP-based Bandwidth Limit Supported
IP-based Session Limit Supported
QoS (Quality of Service) TOS, DSCP, 802.1p, IP Address, Service Type, App QoS
VoIP Prioritization Supported
Router Management Features
Local Service HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import Supported
VigorACS Central Management Supported
Pre-installed VigorConnect Management Up to 100 DrayTek Nodes
Access Point Management Up to 50 DrayTek VigorAPs
Switch Management Up to 30 DrayTek VigorSwitches
Firmware Upgrade TFTP, HTTP, TR-069
2-Level Administration Privilege Supported
Access Control Access List, Brute Force Protection
Syslog Supported
Notification Alert SMS, E-mail
SNMP v1, v2c, v3
Operating Requirements
Power AC 100~240V, 50/60Hz directly to unit
Max.Power Consumption 35 Watts
Operating Temperature 0 to 45 °C
Storage Temperature -10 to 55 °C
Operating Humidity (non-condensing) 10 to 90%
Physical Specifications
Dimensions Depth: 285mm
Width: 443mm
Height: 45mm
Weight 3.82 kg
Rack Mountable Mounting Kit Included, 1U Rack Height
Box Contents
Vigor 3912 Series Router Supported
Quick Start Guide Supported
Cat-5e RJ-45 Network Cable Supported
Rackmount Kit Supported
RJ-45 to RS-232 Adapter Supported
Silver RJ-45 Serial Cable Supported
IEC C13 Power Cord Supported
Warranty
Standard Warranty Two (2) Years, RTB
Software security updates
Five (5) years after the EOL notification. Please note that this only applies to products sold in the UK
VigorCare Extended Warranty
VigorCare D3 3 Year Subscription: VCARE-D3
VigorCare D5 5 Year Subscription: VCARE-D5
ROHS, UKCA & CE Compliant
All specifications are subject to change without notice.
Warranty Information
Please check the Specification Section for Warranty Information
Extended Warranty
Care for your DrayTek with VigorCare Extended Warranty !
DrayTek Extended Warranty Matrix Support Model
VigorCare Enhanced Warranty Service
Advanced Replacement
If you suspect that your covered DrayTek product has developed a fault, our experienced support technicians will help you to diagnose the problem and determine whether the unit needs to be service or replaced. If it does, a replacement unit will be sent out the same day for delivery on the next working/business day (to most of the UK). If you wish to take the unit yourself to the service centre (currently North of London), replacement or diagnosis/repair can be carried out in person.
3 or 5 Year Warranty
Enhanced Warranty Service3 or 5 year warranty upgrades availableAdvanced-Replacement of faulty unitNext working day* replacement unitCover for 3 or 5 years warranty with single paymentAvailable for all DrayTek Vigor routersWarranty upgrades available to purchase for up to 6 months after product purchase
With VigorCare, you also have the benefit of an extension to a full 3 or even 5 years of warranty so that if a fault does develop, you will have no bills for parts, labour or replacement in the event that a warranty fault develops. We're proud of the reliability that DrayTek products achieve but however unlikely a problem might be, if your business depends on your DrayTek product, VigorCare should give you the peace of mind and convenience that you need.
VigorCare membership is subject to the VigorCare Terms & Conditions (see terms tab, above) and should be taken out within 6 months of purchase of your new product
VigorCare Service Packs
VigorCare subscription is available for several categories of product. Determine the correct pack for your product below. NOTE: The subscription must be activated via the link below within 6 months of your router and service pack being purchased.
VigorCare Activation Link
https://www.draytek.co.uk/support/vigorcare-registration
Warranty Terms & Conditions Apply - please see here
https://www.draytek.co.uk/support/vigorcare#terms-and-conditions