We have launched the new version of the DrayTek website, and this content is no longer being maintained.
You will find more information on our new site; however, we will keep this page for a few months.

Vigor2912 Series Vigor2912 Series Vigor2912 Series blank.jpg blank.jpg blank.jpg blank.jpg blank.jpg blank.jpg blank.jpg

Vigor2912 Series

5-Port Fast Ethernet Load Balancing VPN Router
  • Dual WAN for load-balancing or redundancy
  • 1 USB port for 3G/4G WAN, printer, or network storage
  • 16 concurrent VPN tunnels, including up to 8 SSL VPN
  • Bandwidth management & QoS for the best VoIP quality
  • SPI Firewall with Content Filtering by Apps, URL keyword, and web category
  • IPv6 Support
  • Built-in 802.11n Wi-Fi (Vigor2912n)
  • Support DrayDDNS since firmware v3.8.5 new


The Vigor2912 Series is an integrated network management solution designed for a small business. The Dual-WAN provides load balancing or link redundancy to ensure a reliable Internet access, and it is also a robust VPN server for up to 16 concurrent tunnels. The firewall and content filtering features can control the incoming and outgoing network traffic, and it also offers bandwidth management functions that optimize the bandwidth allocation and make the best use of the subscribed bandwidth.


Dual-WAN Load-balance and Redundancy

Vigor2912 Series has 1 fixed WAN port and a LAN/WAN switchable port which can be set up as a secondary WAN. A 3G/4G USB modem can be attached to the USB port to add a cellular connectivity as WAN 3. All 3 WANs can be active simultaneously to share the traffic load, or some of them can be set up in "failover", which means the WAN interface will be standby normally, but the router will automatically activate it in the scene of link failure or heavy traffic.

Dual WAN Load-balance and Redundancy


VPN for Secure Remote Access

Vigor2912 Series is also a robust VPN server. It allows LAN-to-LAN VPN for connecting between branches, and also Host-to-LAN VPN for a secure remote access for the teleworkers. The Dual-WAN also allows a redundant VPN tunnel to be built on the alternative WAN, so that if the main VPN fails due to the disconnection of the main WAN interface, a backup VPN can be built over the alternative WAN.

VPN for Secure Inter-Office / Remote Access


Firewall & Security

bject-based Firewall with Web Content Filtering

Vigor2912 Series supports Stateful Packet Inspection (SPI) Firewall and flexible filtering rules, it can accept or deny packets based on the source IP, destination IP, protocol, and port number, or the packet's application. IP-based restrictions can be set to filter certain HTTP traffic as well as various software, this can help you protect the network clients from the insecure website, and also improve productivity by preventing time and network resource wasting on inappropriate network activities.

With an annual subscription to CYREN Web Content Filtering service (a free 30-day trial is included in each new router.), you may also filter the websites by their categories, and set up restrictions to block the whole categories of websites (such as Social Networking, Gambling.. etc.) without the need to specify every site you would like to block.


Bandwidth Management

Vigor2912 Series features Bandwidth Limit and Session Limit to restrict the maximum bandwidth or session number that a host can use, thus to prevent the bandwidth and the router's resources being occupied by a single host. Quality of Service (QoS) allows you to reserve a certain amount of bandwidth for the critical clients or time-sensitive applications, such as audio and video. Vigor2912 Series also offers a simple option to prioritize the VoIP traffic and optimize the call quality.

Bandwidth management with intelligent VoIP QoS
  • 1 x FE WAN port
  • 1 x FE WAN/LAN switchable port
  • 3 x FE Fixed LAN ports
  • 1 x USB 2.0 port
  • Factory Reset Button
  • Power On/Off Switch
  • DC 12V @1.5A – 2.0A
  • Max. Power Consumption: 24 watts
  • Operating: 0°C ~ 45°C
  • Storage: -25°C ~ 70°C
  • Operating: 10% ~ 90%
Dimension (mm)
  • 220(L) x 160(W) x 36(H)
Ethernet Connection (IPv4)
  • PPPoE Client
  • DHCP Client
  • Static IP
  • 802.1Q VLAN Tagging
  • Triple-Play Applications
Ethernet Connection (IPv6)
  • PPP
  • DHCPv6 Client
  • Static IPv6
  • TSPC
  • AICCU (AYIYA/Heartbeat)
  • 6rd
  • 6in4 Static Tunnel
Load Balance
  • IP-based Load Balancing
  • Session-based Load Balancing
  • Failover by Link Failure
  • Failover by Traffic Threshold
Connectivity Detection
  • ARP
  • Ping Probe
LAN Managment
  • Up to 8 VLAN
  • 802.1Q Tag-based VLAN
  • Port-based VLAN
DHCP Server
  • Up to 2 IP Subnet
  • Bind-IP-to-MAC
  • Custom DHCP Option
DNS Control
  • Local Name Server
Static Route
  • 10 IPv4 Static Routing 
  • 40 IPv6 Static Routing 
  • Inter-VLAN Routing
Dynamic Routing
  • RIPv2
Policy Routing
  • 10 Route Policy
  • Criteria: Protocol, Source IP, Destination IP, Destination Domain Name, Destination Country, Destination Port
  • Failover options
  • Up to 16 concurrent tunnels
  • Max. 8 concurrent SSL VPN
  • PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2
  • LAN-to-LAN VPN
  • Teleworker-to-LAN VPN
  • MPPE 40/128 bit
  • Hardware-based AES/DES/3DES
  • MD5, SHA-1
  • Pre-Shared Key, Digital Signature (X.509)
  • mOTP
  • Hub-and-Spoke Topology support
  • DHCP over IPsec
  • VPN Redundancy for Failover
  • One-to-One Port Redirection
  • Range-to-Range Port Redirection
  • Open Ports
  • Port Triggering
  • DMZ Host
  • ALG: SIP, RTSP, FTP, TFTP, H.323
  • VPN Pass-Through: PPTP, L2TP, IPsec
  • UPnP
Firewall Filter
  • IP-based Firewall Policy
  • User-based Firewall Policy
  • Object-based Configuration
  • Schedule Enable/Disable
Content Filtering
  • URL Keyword Filtering
  • Category Filtering (subscription required)
  • DNS Keyword Filtering
  • Web Features Filtering
Attack Protection
  • DoS Defense
Bandwidth Management
Bandwidth Policy
  • Session Limit
  • Bandwidth Limit
  • IP-Based Policy
  • Scheduled Enable/Disable
Quality of Service
  • Layer 3 QoS (TOS/DSCP)
  • Layer 2 QoS (802.1p)
  • 4-Level Priority with user-defined classification
  • Bandwidth Borrowing
  • Guaranteed bandwidth for VoIP traffic
  • APP QoS
Network Features
  • Dynamic DNS
  • Bonjour
  • IGMP Proxy
  • IGMP Snooping
  • SMB File Sharing
User Authentication
  • Local User Database
  • RADIUS Server
  • Active Directory/LDAP
Wireless LAN (n model)
  • IEEE 802.11 b/g/n (2.4G)
  • Up to 4 per radio
  • SSID-based 802.1Q VLAN
Radio Management
  • Auto Channel Selection
  • Auto Channel Width (2.4G)
  • Wi-Fi Scheduling
  • WEP, WEP-802.1x, WPA-PSK, WPA-802.1x, WPA2-PSK, WPA2-802.1x
  • Hidden SSID
  • Client Isolation
  • Access Control per SSID
  • WPS
  • Rate Control per SSID
  • AirTime Fairness
  • WMM
  • Bridge
  • Repeater
  • Web Interface: HTTP, HTTPS
  • Command-Line Interface: Telnet, SSH
  • TR-069 via VigorACS
  • Configuration File Export & Import
  • Compliant with the configuration file exported from Vigor2910
F/W Upgrade
  •  TFTP, HTTP, TR-069
Admin Access Control
  • 2-level Administration Privilege
  • Access from the Internet
  • Access List
  • Brute Force Protection
  • Dashboard
  • Syslog
  • SMS/E-mail Alert
  • TR-069 via VigorACS
  • SNMP V2, V2c, V3


2.4G WLAN -


Wi-Fi Antenna - 2