We have launched the new version of the DrayTek website, and this content is no longer being maintained.
You will find more information on our new site; however, we will keep this page for a few months.

Vigor2120 Series Vigor2120 Series Vigor2120 Series Vigor2120 Series blank.jpg

Vigor2120 Series

High-Performance VPN Router for Home/SOHO
  • Broadband Gigabit Ethernet WAN 
  • 2 concurrent VPN tunnels, including up to 2 SSL VPN
  • IP-based Bandwidth Management & QoS
  • Firewall & Content Filtering by URL Keyword, Web Category, or Apps
  • 1 USB port for 3G/4G WAN backup, printer, or network storage
  • Dual-Band Wi-Fi built-in
  • Support DrayDDNS service since firmware v3.8.5 new


Vigor2120 Series has an Ethernet WAN port that can be used for any types of connection, it supports up to 30,000 concurrent sessions, and its all Gigabit ports and high performance can assure you a reliable connection on both WAN and LAN. Vigor2120n-plus support built-in Wi-Fi with simultaneous 2.4G and 5G radio, and offers business-class features such as firewall, content filtering, and VPN makes it a robust firewall router for both home and SOHO.


Robust Home Networking Solution

Except for delivering a reliable Internet access, Vigor2120 Series also supports various features which are useful when setting up a home network.

With Vigor2120 Series, you may set up content filtering rules to block the websites which are inappropriate for the children, with an annual subscription to CYREN Web Content Filtering service, you may also filter the websites by their categories, and set up restrictions to block the whole categories of websites (such as Porn & Sexually, Violence.. etc.) without the need to specify every site you would like to block.

UPnP (Universal Plug and Play) is also supported by Vigor2120 Series. You can enable UPnP and let the router automatically open the required ports by some network devices, such as the home video game consoles, and enjoy the network services without manual configuration.


Dual-Band Wi-Fi (n-plus model)

Vigor2120n-plus is also suitable for a wireless home network, it has built-in simultaneous 2.4GHz and 5GHz Wi-Fi, it is compliant with IEEE 802.11n standard and can offer speed up to 300Mbps. Band Steering is supported so Vigor2120n-plus may automatically direct the 5GHz-capable client devices to the less crowded 5 GHz band, so those devices can get better Wi-Fi experience without the need of checking 5GHz capability, and leaves more 2.4GHz channel resources for the legacy devices. You may also set up Wi-Fi schedule on Vigor2120n-plus, so it can turn off/on its Wi-Fi at a certain time each day, thus to block the late-night Internet use of the kids.


SOHO Solutions

Vigor2120 Series offers features which make it also a good networking solution for a small office. It is compliant with 802.1Q VLAN that allows you to partition your local network for guest access, and there is a second LAN Subnet configuration that allows you to use different IP settings on the guest VLAN. The built-in Wi-Fi of Vigor2120n-plus supports up to 4 SSID on each band, therefore you may also have an SSID set up for the guest network.

Bandwidth Management

On Vigor2120 Series, you can have flexible port forwarding settings to redirect Internet requests to an internal server; however, while making the local services available from the Internet, you may also set up firewall rules to control the incoming traffic, or enable DoS Defense to protect the network against various threats.

Vigor2120 Series supports flexible Bandwidth Management options, including bandwidth limit, session limit, and QoS (Quality of Service). You may set up bandwidth limit for each host, thus to make sure all the LAN hosts will have the equal amount of bandwidth usage, and the router's resources will not be occupied by a single host.

Moreover, Vigor2120 Series can be a VPN server which supports up to 2 concurrent VPN connections, which helps you access the internal resources or bypass the Internet censorship while traveling. Vigor2120 Series supports not only the industry standard VPN tunneling protocols but also SSL VPN - a type of VPN that can easily bypass firewall and NAT of public networks. DrayTek also offers free official SSL Client App for Windows, iOS, and Android.

  • 1 x GbE WAN port
  • 4 x GbE LAN port
  • 1 x USB 2.0 port
  • Factory Reset Button
  • Power On/Off Switch
  • DC 12V
  • Max. Power Consumption: 12 watts
  • Operating: 0°C ~ 45°C
  • Storage: -25°C ~ 70°C
  • Operating: 10% ~ 90%
Dimension (mm)
  • 167.8(L) x 107.7(W) x 45.1(D)
  • PPPoE Client
  • DHCP Client
  • Static IP
  • 802.1Q VLAN Tagging
  • Triple-Play Applications
  • 3G/4G Backup
  • PPP
  • DHCPv6 Client
  • Static IPv6
  • TSPC
  • AICCU (AYIYA/Heartbeat)
  • 6rd
  • 6in4 Static Tunnel
Connectivity Detection
  • ARP
  • Ping Probe
LAN Managment
  • Up to 8 VLAN
  • 802.1Q Tag-based VLAN
  • Port-based VLAN
DHCP Server
  • Up to 2 IP Subnet
  • Bind-IP-to-MAC
  • Custom DHCP Option
DNS Control
  • Local Name Server
Static Route
  • 10 IPv4 Static Routing Rules
  • 10 IPv6 Static Routing Rules
  • Inter-VLAN Routing
Dynamic Routing
  • RIPv2
  • Up to 2 concurrent tunnels
  • Max. 2 concurrent SSL VPN
  • PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2
  • LAN-to-LAN VPN
  • Teleworker-to-LAN VPN
  • MPPE 40/128 bit
  • Hardware-based AES/DES/3DES
  • MD5, SHA-1
  • Pre-Shared Key, Digital Signature (X.509)
  • mOTP
  • Hub-and-Spoke Topology support
  • DHCP over IPsec
  • One-to-One Port Redirection
  • Range-to-Range Port Redirection
  • Open Ports
  • Port Triggering
  • DMZ Host
  • ALG: SIP, RTSP, FTP, TFTP, H.323
  • VPN Pass-Through: PPTP, L2TP, IPsec
  • UPnP
Firewall Filter
  • IP-based Firewall Policy
  • User-based Firewall Policy
  • Object-based Configuration
  • Schedule Enable/Disable
Content Filtering
  • URL Keyword Filtering
  • Category Filtering (subscription required)
  • DNS Keyword Filtering
  • Web Features Filtering
Attack Protection
  • DoS Defense
Bandwidth Management
Bandwidth Management
  • Session Limit
  • Bandwidth Limit
  • IP-Based Policy
  • Scheduled Enable/Disable
Quality of Servic
  • Layer 3 QoS (TOS/DSCP)
  • Layer 2 QoS (802.1p)
  • 4-Level Priority with user-defined classification
  • Bandwidth Borrowing
  • Guaranteed bandwidth for VoIP traffic
  • APP QoS
Network Features
  • Dynamic DNS
  • DNS Security
  • RADIUS Client
  • Bonjour
  • IGMP Proxy
  • IGMP Snooping
  • SMB File Sharing
Wireless LAN  (n-plus model)
  • 802.11 b/g/n (2.4G)
  • 802.11 a/n (5G) 
  • Up to 4 per radio
  • SSID-based 802.1Q VLAN
Radio Management
  • Auto Channel Selection
  • Auto Channel Width (2.4G)
  • Wi-Fi Scheduling
  • WEP, WEP-802.1x, WPA-PSK, WPA-802.1x, WPA2-PSK, WPA2-802.1x
  • Hidden SSID
  • Client Isolation
  • Access Control per SSID
  • WPS
  • Rate Control per SSID
  • WMM
  • Bridge
  • Repeater
  • Web Interface: HTTP, HTTPS
  • Command-Line Interface: Telnet, SSH
  • TR-069 via VigorACS
  • Configuration File Export & Import
  • Compliant with the configuration file exported from Vigor2110
F/W Upgrade
  •  TFTP, HTTP, TR-069
Admin Access Control
  • 2-level Administration Privilege
  • Access from the Internet
  • Access List
  • Brute Force Protection
  • Dashboard
  • Syslog
  • SMS/E-mail Alert
  • TR-069 via VigorACS
  • SNMP V2, V2c, V3


2.4G WLAN -




Wi-Fi Antenna - 2