Vigor2133 series is a VPN firewall router for small office and home with broadband connection. It provides business-grade performance and features for professionals to take control of the network. The series includes models with built-in 11ac Wi-Fi and VoIP gateway.
500 Mbps
NAT Throughput
2 VPN
IPsec throughput up to 70Mbps
2 SSL VPN
Throughput up to 40 Mbps
30k SessionsRecommended for a network of 30 hosts
Build a secure and private tunnel from the LAN of Vigor2133 Series to the remote offices and teleworkers over the Internet. Learn more
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more
Vigor2133 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Use the Vigor2133 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Vigor2133
Antenna x 2
RJ-45 Cat-5 Ethernet Cable
Power Adapter
Quick Start GuideThe throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| WAN Port | 1x 10/100/1000Base-TX, RJ-45 or 100/1000M Fiber SFP (FVac model) |
| LAN Port | 4x 10/100/1000Base-TX, RJ-45 |
| USB Port | 2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
| Wi-Fi Antenna | 2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (wireless model) |
| 2.4G WLAN | 802.11n 2x2 MIMO 300Mbps (n/ac/Vac model) |
| 5G WLAN | 802.11ac 2x2 MIMO 867Mbps (ac/Vac model) |
| FXS RJ-11 | 2 (Vac model) |
Performance | |
| NAT Throughput | 500 Mbps |
| NAT Throughput w/ Hardware Acceleration | 900 Mbps |
| IPsec VPN Performance | 70 Mbps (AES 256 bits) |
| SSL VPN Performance | 40 Mbps |
| Max. Number of NAT Sessions | 30,000 |
| Max. Concurrent VPN Tunnels | 2 |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| Multi-VLAN/PVC | |
| WAN Failover | |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 8 |
| Number of LAN Subnet | 4 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2 |
| Policy-based Routing | Protocol, IP Address, Port, Domain |
| DNS Security (DNSSEC) | |
| IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| SMB File Sharing | (Requires external storage) |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN(Host to LAN) |
| User Authentication | Local, RADIUS, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256, MD5 |
| Encryption | MPPE, DES, 3DES, AES128, AES192, AES256 |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
Wireless LAN (wireless model) | |
| Number of SSID | 4 per radio band |
| Security Mode | WEP, WPA, WPA2, Mixed(WPA+WPA2) |
| Authentication | Pre-Shared Key, 802.1X |
| WPS | PIN, PBC |
| WDS | Bridge, Repeater |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
| AirTime Fairness | |
| Band Steering | (dual-band model) |
| WMM | |
VoIP Gateway (V model) | |
| Protocol | SIP, RTP/RTCP, ZRTP |
| SIP Registrars | 12 |
| Dial Plan | Phone Book, Digit Map, Call Barring, Regional |
| Call Features | Call Waiting, Call Transfer, Scheduled DND, Hotline |
| Voice Codec | G.711 A/u law, G.726, G.729 A/B |
| Caller ID | FSK_ETSI, FSK_BELLCORE, DTMF |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Config File Export & Import | |
| Config File Compatibility | Vigor2132 Series |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central AP Management | 2 VigorAP |
Physical | |
| Power Supply | DC 12V @ 2A |
| Max. Power Consumption | 19.2 watts |
| Dimension | 207mm x 131mm x 42mm |
| Weight | 410g |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate | 
|
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
