Vigor2860 LTE Series Vigor2860 LTE Series Vigor2860 LTE Series Vigor2860 LTE Series blank.jpg blank.jpg blank.jpg blank.jpg blank.jpg blank.jpg
View in 360°

Vigor2860 LTE SeriesDual WAN

VDSL2/ADSL2+ & LTE Firewall Routerectivity
  • Comprehensive VDSL2/ADSL2+ Connectivity
  • Built-in 3G/4G/LTE Cellular Connectivity
  • Ethernet WAN for Load Balancing or Failover
  • 32 Simultaneous VPN Tunnels
  • SPI Firewall with Content Filtering
  • Central Management for VigorAP & Vigor Switch

  • 2.4GHz
  • 802.11n
  • ACS SI
  • AP Management
  • LTE
  • Smart Monitor
  • SWM
  • VPN Management
  • WCF A Card


Vigor2860L series is a firewall router that features all the specification as Vigor2860 series, but in addition built in a 3G/4G/LTE modem that works with a standard size SIM card, this provides the router wireless Internet connectivity without the need of an external USB modem. Like Vigor2860, it has built-in a VDSL/ADSL modem that is compatible with variants of ADSL and VDSL, there is also a Gigabit Ethernet WAN port can be used with a cable modem to connect to a second line for load balancing or failover.

If you have another SIM card, the USB ports can be used with a 3G/4G/LTE USB modem to add extra Internet connectivity. Vigor2860L series offer features including VPN, Firewall, Content Filtering, and central management solution for Vigor access points and switches, which makes it the perfect solution for a small-medium business.



The VDSL/ADSL modem built-in Vigor2860L series offers comprehensive DSL connectivity which makes it compatible with various versions of xDSL, including ADSL, ADSL2, ADSL2+, VDSL, and VDSL2. The line type can be automatically detected by the router and fallback is supported.

Vigor2860L has built-in an LTE modem that accepts the standard size SIM cards. It works with worldwide cellular networks including 4G and 3G, thus can automatically fall back to 3G when 4G is not available. While using the data services of the SIM cards, the SMS service is also supported. Receiving and sending SMS messages can be done from the router's Web User Interface, you may also configure the router to send notifications via SMS, moreover, commands can be sent to the router via SMS to initiate a router reboot or status report.

Except for the DSL interface and the SIM card slot, there is also a Gigabit Ethernet WAN port that can be used for any types of connection and add an additional connectivity to share the traffic load. An additional 3G/4G/LTE USB modem can also be attached to the USB port of the router to add a backup wireless connectivity. In fact, all of the WAN interfaces can be configured to operate in either Load Balancing mode, which will be active all the time, or in Failover mode, which will be active only when detecting connection loss or heavy load on the primary connection.

On Vigor2860L, Load Balancing can be set in either IP-based mode, which means the packets destined to different IP address will be distributed across different WANs, or Session-based mode, which means the packets belong to different sessions can take different paths, this allows a multiple-session connection to be established across multiple WANs, and the maximum data rate will be all the WAN's bandwidth combined. Policy-based Load Balancing is also supported so that you may specify the path for some certain packets.

To increase network accessibility more, Vigor2860L also supports High Availability feature and allows one or more redundant Vigor2860L to be added to the network and operated in standby mode.

The 6-port Gigabit Ethernet switch on the LAN side provides high-speed connectivity for the servers and PCs on the local network, and the Virtual LAN (VLAN) features allow you to separate the LAN clients into different logical domains thus to increase the security and network efficiency. Vigor2860L supports 802.1Q standard and can build a Tag-based VLAN system with an 802.1Q-support switch, Port-based VLAN is also supported that each LAN port can be configured as a member of different VLAN and be isolated from each other without the use of VLAN tag. Moreover, up to 6 IP subnet can be set up on Vigor2860L, so each VLAN can use a different IP addressing space.

In the latest firmware version, Vigor2860L has implemented an integrated solution to work as a public Wi-Fi hotspot. While providing Internet access to the guest users, the Hotspot Web Portal can be used to collect the users' information, informing the terms and conditions, and presenting a landing page to them.

Vigor2860L supports Stateful Packet Inspection (SPI) Firewall and flexible filtering rules, it can accept or deny packets based on the information in the packet header (such as source IP, destination IP, protocol, and port number) or the packet's application. IP-based restrictions can be set to filter certain HTTP traffic as well as various application software and help you to prevent time and network resource wasting on inappropriate network activities.

With an annual subscription to CYREN Web Content Filtering service, you may also filter the websites by their categories, and set up restrictions to block the whole categories of websites (such as Social Networking, Gambling.. etc.) without the need to specify every site you would like to block. The CYREN service is constantly updating the categorization, and a free 30-day trial is included in every new router.

The Vigor2860L firewall also includes DoS (Denial of Service) Defense to protect the network against variants of attacks.

Vigor2860L supports both LAN-to-LAN VPN and Remote Dial-in VPN, up to 32 VPN tunnels can be set up simultaneously. All the industry standard tunneling protocols are supported, including PPTP, L2TP, IPsec, and GRE, and it's compatible with 3rd party VPN devices.

Vigor2860L also supports SSL VPN - a type of VPN based on the very common encryption method which is used by all the HTTPS websites. While the traditional VPN protocols might be filtered by the firewall and NAT of public networks, SSL VPN will be passed as long as the HTTPS is allowed. DrayTek also offers free official client App for Windows, iOS, and Android.

VPN Trunking is also supported by Vigor2860L, this allows you establish two VPN tunnels to the same remote site but through different WAN interfaces. The two trunking tunnels can be set up in load balancing or failover mode.

Vigor2860L can act as a Central Management portal for all the Vigor devices on the network, including VigorAP, Vigor Switch, and even Vigor Routers. With Central Management feature, device maintenance (such as firmware upgrading, configuration backup and restore) and monitoring can all be done from a single portal, which is the Web User Interface of Vigor2860L.

Vigor2860L can manage up to 20 VigorAP on its LAN and works as an AP controller. Automatic Provisioning can be triggered when a VigorAP newly join the network and this makes AP deployment much faster. You may also get the client or traffic history of all the AP from Vigor2860L, and set up load balancing rules for the AP.

Central Switch Management allows you to manage up to 10 Vigor Switches from Vigor2860L, the status of every port can be directly viewed from the router. Vigor2860L also supports VLAN configuration for the switches, setting that matches the router's VLAN settings and the switch hierarchy is automatically provided which makes the VLAN configuration much simplified.



Models & Connectors

Vigor2860L draytek Vigor2860L copy




Vigor2860Ln draytek Vigor2860L copy





 draytek Vigor2860L multi wan




Hardware Interface
  • 1 x VDSL2/ADSL2/2+ WAN Port (WAN1), RJ-11 for Annex A/RJ-45 for Annex B
  • 1 x 10/100/1000Base-Tx, RJ-45 (WAN2)
  • 6 x 10/100/1000Base-Tx LAN Switch, RJ-45
  • 2 x Detachable LTE Antennas with magnetic base and 1m extension cable
  • 2 x SMA Female LTE Antenna Connection
  • 2 x Detachable Antennas (For Vigor2860Ln)
  • 1 x Standard-Size SIM Card Slot
  • 1 x USB Host 2.0
  • 1 x Factory Reset Button
  • 1 x Wireless On/ Off/ WPS Button (For Vigor2860Ln)
Wi-Fi Frequency

11b/g/n : 

  • 2.412 ~ 2.462GHz (USA)
  • 2.412 ~ 2.472GHz (Europe ETSI)
LTE FDD Frequency


  • Band 3 - 1800 MHz
  • Band 7 - 2600 MHz
  • Band 8 - 900 MHz
  • Band 20 - 800 MHz


  • Band 1 - 2100 MHz
  • Band 8 - 900 MHz


  • 850 / 900 / 1800 / 1900 MHz
Wireless Transmit Power 2.4GHz Max : 19 dBm
Temperature Operating : 0°C ~ 45°C
Storage : -25°C ~ 70°C
Humidity 10% ~ 90% ( non-condensing )
Power Adapter DC12V @1.5A~2A
Power Consumption 24 watt
Dimension W165 * L241 * H44 ( mm )



  • ANSI T1.413 (ADSL)
  • ITU G.992.1 G.dmt (ADSL)
  • ITU G.992.2 G.lite (ADSL)
  • ITU G.992.3 (ADSL2)
  • ITU G.992.3 Annex M/J (ADSL2)
  • ITU G.992.5 (ADSL2+)
  • AITU G.992.5 Annex M/J (ADSL2+)
  • DSL Forum: TR-048/67 & TR-100



  • ITU G.993.1 (VDSL), ITU-T G997.1
  • ITU G.993.2 (VDSL2)
  • DSL Forum: TR-114
  • VDSL Band Plan: 997, 998
  • VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a


  • FDD LTE Category 4
  • Maximum Data Rate: 150 Mbps Download, 50 Mbps Upload
  • LTE FDD Band: 3 (1800MHz), 7 (2600MHz), 8 (900MHz), 20 (800MHz)
  • WCDMA (3G) Band: 1, 8
  • GPRS/EDGE Band: 850, 900, 1800, 1900 MHz
  • Sending and Receiving SMS messages
  • SMS-initiated router reboot and status report



  • DHCP Client
  • Static IP
  • PPPoE
  • PPTP/L2TP (Ethernet WAN Only)
  • PPPoA (ADSL2 Only)
  • 802.1q Multi-VLAN Tagging
  • Triple-Play Application
  • IPv6 Tunnel Mode: TTSPC, AICCU, 6rd, Static 6in4
  • IPv6 Dual Stack: PPP, DHCPv6 Client, Static IPv6
  • IP-based and Session-based Load Balancing
  • WAN Failover by Connection Failure or Traffic Threshold
  • WAN Budget



  • 32 Simultaneous VPN
  • Protocol: PPTP, IPsec, L2TP, L2TP over IPsec, GRE
  • Encryption: MPPE and Hardware-based AES/DES/3DES
  • Authentication: MDS, SHA-1
  • IKE Authentication: Pre-shared Key and Digital Signature (X.509)
  • LAN-to-LAN, Remote Dial-in
  • VPN Trunk for Load Balancing & Failover
  • NAT-Traversal (NAT-T)
  • Dead Peer Detection (DPD)
  • VPN Passthrough



  • Static Route
  • RIPv2
  • Policy-based Routing
  • Inter-VLAN Routing


Bandwidth Management

  • Bandwidth Limitation
  • Session Limitation
  • QoS (Quality of Service)
  • Guaranteed bandwidth for VoIP
  • Class-based Bandwidth Guaranteed by user-defined classes or DiffServ Code Point Classifying
  • Layer-2 (802.1p) and Layer-3 (TOS/DSCP) QoS Mapping
  • Bandwidth Borrowing
  • APP QoS


Network Features

  • Port-based/Tag-based VLAN (802.1q)
  • Multiple Subnets
  • DHCP Client/Relay/Server
  • IGMP Snooping/Proxy V2 and V3
  • Dynamic DNS
  • NTP Client
  • RADIUS Client
  • DNS Cache/Proxy 
  • LAN DNS and DNS Forwarding
  • UPnP 30 sessions
  • Packet Forwarding Acceleration*


Firewall & Content Security Management

  • Policy-based Firewall
  • Software Application Filtering
  • URL Content Filtering
  • Web Content Filter (powered by CYREN)
  • DNS Filter
  • DoS Defense
  • Time Scheduling
  • User Management
  • Up to 200 local user accounts
  • support authentication by external LDAP or RADIUS server
  • 40 Port Redirection rules
  • 40 Open Ports rules
  • DMZ host


Network Management

  • Web-based User Interface (HTTP/HTTPS)
  • Command Line Interface (Telnet/SSH)
  • Administration Access Control
  • Configuration Backup & Restore
  • Built-in Diagnostic Tools
  • Firmware Upgrade via TFTP, FTP, HTTP, or TR-069
  • Syslog
  • SNMP Management with MIB-II
  • 2-level Management (Admin/User Mode)
  • TR-069
  • TR-104
  • LAN Port Monitoring
  • Support Smart Monitor (Up to 30 IP)
  • Central AP Management (Up to 20 VigorAP)
  • Central VPN Management (Up to 8 Remote Vigor Routers)



  • 3G (HSDPA) WAN
  • Printer Sharing
  • File Sharing: FTP, Samba



  • (for Vigor2860Ln)
  • 802.11b/g/n
  • Up to 4 SSID
  • Hidden SSID
  • Encryption: WEP 64, WEP 128, WPA, WPA2
  • 802.1X Authentication
  • Access Control List
  • Wireless Rate Control
  • WDS (Wireless Distribution System)
  • AirTime Fairness
  • Band Steering
  • WMM
  • Station Control
  • AP Discovery





The USB Temperature

draytek Vigor2860L USB Temperature


 The CVM (Central VPN Management) of Vigor2860L/Ln draytek Vigor2860L CVM


The AP Management of Vigor2860L/Ln 

draytek Vigor2860L APM 

 Support Smart Monitor up to 30 PC Users

draytek Vigor2860L smart monitor


Vigor2860L/Ln with rackmount bracket

draytek Vigor2860L rackmount