Vigor2135 Series is a broadband firewall and a VPN router. With hardware accelerator, it delivers up to 940 Mbps performance without sacrificing bandwidth control features. It’s also equipped with business-grade features, including web content filtering, Route Policy, App-based QoS and lots more, and is perfect for professional smart homes/SOHO users who would like to take full control of their own network. The series includes models with built-in 11ac Wave 2 WiFi, 802.11ax WiFi, and fiber WAN.
GbE RJ-45 or SFP Slot
IPsec throughput up to 150 Mbps
Throughput up to 600 Mbps
Delivers link rate up to 3 Gbps
(Vac model)
(ax model)
1Wireless Antenna (ac/ax model)
2WLAN/WPS Button (ac/ax model)
3Reset Button
42x USB 2.0
5LAN Port: 4x GbE RJ-45
6WAN Port: 1x GbE RJ-45 or 1 x 100/1000M SFP Slot (F model)
72x FXS for VoIP (V
model) or
LED Indicator (ax
model)
8Power On/Off Switch
9Power Input
Build a secure and private tunnel from the LAN of Vigor2135 Series to the remote offices and teleworkers over the Internet. Learn more
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Vigor2135 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Use the Vigor2135 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Easily link to other VigorAP to expand the wireless network. Learn more
The accelerator supports up to 4k NAT and routing connections. With acceleration enabled, Vigor2135’s firewall performance can reach 940Mbps, while still meeting high expectation of QoS quality. You may easily prioritized business critical apps, and always keep VoIP in 1st priority.
Disassociate the Wireless clients who are out of the effective transmission range defined by custom Basic Rate or/and RSSI threshold, and force them to pick up another access point with a stronger signal.
Proactively kick out the clients with a low basic rate or low RSSI can prevent the access points trying to do ineffective transmission but saving the airtime, which will results in better WLAN experience for all.
Assisted Roaming is a feature built in all Vigor Access Points and selected Wireless routers. They operate without a wireless controller, providing an ideal solution for simple network deployment.
By using the "Minimum RSSI with Adjacent AP" option, the AP/Router on the same local subnet will exchange client information with each other, providing the choice to disassociate the client only when other AP detecting a stronger signal. Thus to keep the client stayed when there is no other AP nearby.
Market your business while offering free WLAN
Redirect the hotspot guests to the company homepage, online surveys, or display promotion message.
Require the guest to leave contact info or social media accounts before they can use the Internet service.
A variety of login methods are supported to meet your business need, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.
Supports external captive portal authentication. You can keep using the WLAN marketing solution you like.
Bandwidth management is integrated into Hotspot to control the bandwidth and session usage of the Hotspot guests.
OFDMA has been used in LTE for many years, and is now available in 802.11ax for multi-user mode.
Traditionally with OFDM, each frame is transmitted across the entire channel width. With low-rate transmission still using the whole channel, it brings latency and jitter to others and lower the overall efficiency.
OFDMA splits a single transmission into groups of subcarriers, and each subcarrier can be used by different client. With multiple clients transmitting simultaneously in the same channel, it improves efficiency of every single transmission opportunity and thus increases the wireless experiences in high density environment.
An all-in-one management platform for Vigor devices on the LAN side.
All you need is connect the Vigor Switch/AP to the LAN side of the router, Vigor Router will then discover the devices to be managed.
Basic settings may be done on the Vigor Router, and provision to the managed VigorAP.
Vigor Router provides a centralized view of managing devices, you may always check if the managed VigorAP is online.
You may perform a factory reset, save/restore a configuration backup, or trigger a remote reboot directly on the Vigor Router. There’s no need to log in to each device’s management page.
Discovery, Provisioning, Monitoring, Centralized Hierarchy View
Auto-Discovery, Provisioning, Monitoring, Centralized View, Alarm, Reboot VigorAP Remotely, Wi-Fi Client Load Balancing
Note :The stated throughput performance figures are the maximum derived from DrayTek internal testing, conducted under optimal conditions, with Hardware Acceleration enabled where available. The actual performance may vary based on network conditions and activated applications.
Model | WAN Port | 2.4GHz WLAN | 5GHz WLAN | Wireless Antenna | Wireless Mode | Max. Link Rate | Max. Bandwidth | WDS | Mesh | VoIP Gateway | FXS RJ11 |
Vigor2135 | GbE, RJ-45 | - | - | - | - | - | - | - | - | - | - |
Vigor2135ax | GbE, RJ-45 | 2x Dual-Band (2.5dBi for 5GHz, 2.7dBi for 2.4GHz) |
2.4 GHz: 802.11b/g/n/ax 5 GHz: 802.11 a/n/ac/ax |
2.4 GHz: 574 Mbps 5 GHz: 2.4 Gbps |
160 MHz |
5GHz Only |
- | - | - | ||
Vigor2135ac | GbE, RJ-45 | 2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz) |
2.4 GHz: 802.11b/g/n 5 GHz: 802.11 a/n/ac |
2.4 GHz: 400 Mbps 5 GHz: 867 Mbps |
80 MHz |
5GHz Only |
5GHz Only |
- | - | ||
Vigor2135Vac | GbE, RJ-45 | 2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz) |
2.4 GHz: 802.11b/g/n 5 GHz: 802.11 a/n/ac |
2.4 GHz: 400 Mbps 5 GHz: 867 Mbps |
80 MHz |
5GHz Only |
5GHz Only |
2 | |||
Vigor2135FVac | 100/1000M Fiber SFP | 2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz) |
2.4 GHz: 802.11b/g/n 5 GHz: 802.11 a/n/ac |
2.4 GHz: 400 Mbps 5 GHz: 867 Mbps |
80 MHz |
5GHz Only |
5GHz Only |
2 |
Model |
Performance |
NAT Session | Max. NAT (Mbps) | Max. NAT with Hardware Acceleration (Mbps) | Max. NAT with Hardware Acceleration : Single WAN (Mbps) | Max. NAT with Hardware Acceleration : Dual WAN (Mbps) | Max. NAT with Software Acceleration (Mbps) | Max. VDSL Link Rate (Mbps) | Max. ADSL Link Rate (Mbps) | WAN |
Ethernet (GbE) | Switchable WAN/LAN (GbE) | xDSL | VDSL Standards | VDSL2 Profile | G.fast Profile | ADSL Standards | Other Standards | Band Plan | SFP | SFP (WAN/LAN Switchable) | SFP/Ethernet(GbE) Combo (WAN/LAN Switchable) | 3G/4G/LTE (via USB) | 3G/4G/LTE (Built-in) | Wireless WAN (2.4GHz or 5GHz) | Wireless WAN (2.4GHz + 5GHz) | LTE |
LTE Category | LTE Antenna (External Dipole) | SIM Slot | Max. Rx Link Rate (Mbps) | Max. Tx Link Rate (Mbps) | FDD Band | TDD Band | WCDMA (3G) Band | SMS Gateway | Internet Connection |
IPv4 | IPv6 | LTE WAN Bridge | 802.1p/q Multi-VLAN Tagging | Multi-VLAN/PVC | Virtual WAN | PPPoE Pass-Through | MPoA Bridge | Failover | Load Balancing | WAN Active on Demand | Connection Detection | WAN Data Budget | Dynamic DNS | DrayDDNS | LAN |
Fixed LAN (RJ-45, GbE) | LAN Subnet | DMZ Port | VLAN | Max. Number of VLAN | Bind IP to MAC (IPv4 only) | DHCP Server | IPv6 Address Assignment | LAN IP Alias | IP Pool Count | PPPoE Server | Wired 802.1x Authentication | Port Mirroring | Local DNS Server | Conditional DNS Forwarding | Hotspot Web Portal (Profile No.) | Hotspot Authentication | Other Ports |
Console (RJ-45) | USB | USB Type | FXS (RJ-11) | Networking |
Routing | Policy-based Routing | High Availability | DNS Security (DNSSEC) | IGMP | Local RADIUS server | SMB File Sharing (Requires external storage) | VPN |
LAN-to-LAN | Teleworker-to-LAN | Protocols | Max. VPN | Max. OpenVPN + SSL VPN | IPsec VPN (AES 256 bits) (Mbps) | SSL VPN (Mbps) | User Authentication | IKE Authentication | IPsec Authentication | Encryption | VPN Trunk (Redundancy) | Single-Armed VPN | NAT-Traversal (NAT-T) | VPN Matcher | Firewall & Content Filtering |
NAT | ALG (Application Layer Gateway) | VPN Pass-Through | IP-based Firewall Policy | Content Filtering | DoS Attack Defense | Spoofing Defense | Bandwidth Management |
IP-based Bandwidth Limit | IP-based Session Limit | QoS (Quality of Service) | VoIP Prioritization | APP QoS | WLAN |
2.4G WLAN | 5G WLAN | Antennas | Antenna Type | 2.4G Gain (dBi) | 5G Gain (dBi) | 2.4G Max. Link Rate (Mbps) | 5G Max. Link Rate (Mbps) | Number of SSID (per radio band) | Security Mode | Authentication | WiFi 6 | OFDMA | WPS | WDS | Access Control | AirTime Fairness | Band Steering | WMM | Mesh (5G Only) | VoIP |
Protocols | SIP Registrars | Dial Plan | Call Features | Voice Codec | Caller ID | Management |
Local Service | Config Backup/Restore | Config File Compatibility | Firmware Upgrade | 2-Level Administration Privilege | Access Control | Notification Alert | Netflow | SNMP | Syslog | Broadcast DSL Info to LAN | VPN Managment | AP Managment (APM) | Mesh (Number of manageable APs) | Switch Management (SWM) | VigorACS Management (Since f/w) | Physical |
Power Input | Max. Power Consumption (watts) | Dimension (mm) | Weight (g) | Operating Temperature | Storage Temperature | Operating Humidity (non-condensing) |
2135 |
50000 | 600 | 940 | - | - | - | - | - | 1 | - | - | 0 | - | - | 1 | F | F | F | - | - | - | - | - | F Learn More | PPPoE, DHCP, Static IP, PPTP/L2TP | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel | F | T | T | F | F | F | T | ARP, Strict ARP, Ping | T | T | T | 4 | 4 | - | 802.1q Tag-based, Port-based | 8 | F | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC | F | - | F | T | T | T | T | 4 | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server | - | 2 | 2.0 | - | IPv4 Static Route, IPv6 Static Route, Policy Route, Inter-VLAN Route, RIP v1/v2 | Protocol, IP Address, Port, Domain, Country | F | T | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave | F | T | T | T | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN | 2 | - | 150 | 100 | Local, RADIUS, mOTP | Pre-Shared Key, X.509 | SHA-1, SHA-256 | MPPE, DES, 3DES, AES | T | T | T | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP | SIP, RTSP, FTP, H.323 | PPTP, L2TP, IPsec | T | APP, URL Keyword, DNS Keyword, Web Features, Web Category*(*subscription required) | T | T | T | T | TOS, DSCP, 802.1p, IP Address, Port, Application | T | T | - | - | - | - | F | F | F | F | F | F | - | - | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 | T | Vigor2132 Series, Vigor2133 Series | TFTP, HTTP, TR-069 | T | Access List, Brute Force Protection | SMS, E-mail | v5, v9, IPFIX | v1, v2c, v3 | T | F | - | 2 | - | - | V4.2.1.2 | DC 12V @ 1A | 11.6 | 207 x 131 x 42 | - | 0 to 45°C | -25 to 70°C | 10 to 90% | |||||||||||||||||||||||||||||||||||||||||
2135ac |
50000 | 600 | 940 | - | - | - | - | - | 1 | - | - | 0 | - | - | 1 | F | F | F | - | - | - | - | - | F Learn More | PPPoE, DHCP, Static IP, PPTP/L2TP | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel | F | T | T | F | F | F | T | ARP, Strict ARP, Ping | T | T | T | 4 | 4 | - | 8 | F | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC | F | - | F | T | T | T | T | 4 | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server | - | 2 | 2.0 | - | IPv4 Static Route, IPv6 Static Route, Policy Route, Inter-VLAN Route, RIP v1/v2 | Protocol, IP Address, Port, Domain, Country | F | T | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave | F | T | T | T | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN | 2 | - | 150 | 100 | Local, RADIUS, mOTP | Pre-Shared Key, X.509 | SHA-1, SHA-256 | MPPE, DES, 3DES, AES | T | T | T | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP | SIP, RTSP, FTP, H.323 | PPTP, L2TP, IPsec | T | APP, URL Keyword, DNS Keyword, Web Features, Web Category*(*subscription required) | T | T | T | T | TOS, DSCP, 802.1p, IP Address, Port, Application | T | T | 802.11n 2x2 MIMO | 802.11ac Wave 2 2x2 MU-MIMO | 2 | External Dipole | 2 | 4 | 400 | 867 | 4 | OWE WEP WPA WPA2 Mixed(WPA+WPA2) WPA3 |
Pre-Shared Key, 802.1X | F | F | PIN, PBC | Repeater (5GHz only) | Access List, Client Isolation, Hide SSID, WLAN Scheduling | T | T | T | Root | - | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 | T | Vigor2132 Series, Vigor2133 Series | TFTP, HTTP, TR-069 | T | Access List, Brute Force Protection | SMS, E-mail | v5, v9, IPFIX | v1, v2c, v3 | T | F | - | 2 | 7 | - | V4.2.1.2 | DC 12V @ 1.5A | 16 | 207 x 131 x 42 | - | 0 to 45°C | -25 to 70°C | 10 to 90% | |||||||||||||||||||||||||||||||||
2135ax |
50000 | 600 | 940 | - | - | - | - | - | 1 | - | - | 0 | - | - | 1 | F | F | F | - | - | - | - | - | F Learn More | PPPoE, DHCP, Static IP, PPTP/L2TP | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel | F | T | T | F | F | F | T | ARP, Strict ARP, Ping | T | T | T | 4 | 4 | - | 802.1q Tag-based, Port-based | 8 | F | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC | F | - | F | T | T | T | T | 4 | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server | - | 2 | 2.0 | - | IPv4 Static Route, IPv6 Static Route, Policy Route, Inter-VLAN Route, RIP v1/v2 | Protocol, IP Address, Port, Domain, Country | F | T | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave | F | T | T | T | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN | 2 | - | 150 | 100 | Local, RADIUS, mOTP | Pre-Shared Key, X.509 | SHA-1, SHA-256 | MPPE, DES, 3DES, AES | T | T | T | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP | SIP, RTSP, FTP, H.323 | PPTP, L2TP, IPsec | T | APP, URL Keyword, DNS Keyword, Web Features, Web Category*(*subscription required) | T | T | T | T | TOS, DSCP, 802.1p, IP Address, Port, Application | T | T | 802.11ax 2x2 MIMO | 802.11ax 2x2 MU-MIMO | 2 | External Dipole | 2.7 | 2.5 | 574 | 2402 | 4 | OWE WEP WPA WPA2 Mixed(WPA+WPA2) WPA3 |
Pre-Shared Key, 802.1X | T | T | PIN, PBC | Repeater (5GHz only) | Access List, Client Isolation, Hide SSID, WLAN Scheduling | T | T | T | - | - | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 | T | Vigor2132 Series, Vigor2133 Series | TFTP, HTTP, TR-069 | T | Access List, Brute Force Protection | SMS, E-mail | v5, v9, IPFIX | v1, v2c, v3 | T | F | - | 2 | - | - | V4.2.1.2 | DC 12V @ 2A | 23.6 | 194 x 155 x 50 | - | 0 to 45°C | -25 to 70°C | 10 to 90% | ||||||||||||||||||||||||||||||||
2135FVac |
50000 | 600 | 940 | - | - | - | - | - | - | - | - | 1 | - | - | 1 | F | F | F | - | - | - | - | - | F Learn More | PPPoE, DHCP, Static IP, PPTP/L2TP | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel | F | T | T | F | F | F | T | ARP, Strict ARP, Ping | T | T | T | 4 | 4 | - | 8 | F | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC | F | - | F | T | T | T | T | 4 | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server | - | 2 | 2.0 | 2 | IPv4 Static Route, IPv6 Static Route, Policy Route, Inter-VLAN Route, RIP v1/v2 | Protocol, IP Address, Port, Domain, Country | F | T | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave | F | T | T | T | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN | 2 | - | 150 | 100 | Local, RADIUS, mOTP | Pre-Shared Key, X.509 | SHA-1, SHA-256 | MPPE, DES, 3DES, AES | T | T | T | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP | SIP, RTSP, FTP, H.323 | PPTP, L2TP, IPsec | T | APP, URL Keyword, DNS Keyword, Web Features, Web Category*(*subscription required) | T | T | T | T | TOS, DSCP, 802.1p, IP Address, Port, Application | T | T | 802.11n 2x2 MIMO | 802.11ac Wave 2 2x2 MU-MIMO | 2 | External Dipole | 2 | 4 | 400 | 867 | 4 | OWE WEP WPA WPA2 Mixed(WPA+WPA2) WPA3 |
Pre-Shared Key, 802.1X | F | F | PIN, PBC | Repeater (5GHz only) | Access List, Client Isolation, Hide SSID, WLAN Scheduling | T | T | T | Root | SIP, RTP/RTCP, ZRTP | 6 | Phone Book, Digit Map, Call Barring, Regional | Call Waiting, Call Transfer, Scheduled DND, Hotline | G.711 A/u law, G.726, G.729 A/B | FSK_ETSI ,FSK_BELLCORE ,DTMF | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 | T | Vigor2132 Series, Vigor2133 Series | TFTP, HTTP, TR-069 | T | Access List, Brute Force Protection | SMS, E-mail | v5, v9, IPFIX | v1, v2c, v3 | T | F | - | 2 | 7 | - | V4.2.1.2 | DC 12V @ 1.6A | 19 | 207 x 131 x 42 | - | 0 to 45°C | -25 to 70°C | 10 to 90% | ||||||||||||||||||||||||||||
2135Vac |
50000 | 600 | 940 | - | - | - | - | - | 1 | - | - | 0 | - | - | 1 | F | F | F | - | - | - | - | - | F Learn More | PPPoE, DHCP, Static IP, PPTP/L2TP | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel | F | T | T | F | F | F | T | ARP, Strict ARP, Ping | T | T | T | 4 | 4 | - | 8 | F | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC | F | - | F | T | T | T | T | 4 | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server | - | 2 | 2.0 | 2 | IPv4 Static Route, IPv6 Static Route, Policy Route, Inter-VLAN Route, RIP v1/v2 | Protocol, IP Address, Port, Domain, Country | F | T | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave | F | T | T | T | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN | 2 | - | 150 | 100 | Local, RADIUS, mOTP | Pre-Shared Key, X.509 | SHA-1, SHA-256 | MPPE, DES, 3DES, AES | T | T | T | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP | SIP, RTSP, FTP, H.323 | PPTP, L2TP, IPsec | T | APP, URL Keyword, DNS Keyword, Web Features, Web Category*(*subscription required) | T | T | T | T | TOS, DSCP, 802.1p, IP Address, Port, Application | T | T | 802.11n 2x2 MIMO | 802.11ac Wave 2 2x2 MU-MIMO | 2 | External Dipole | 2 | 4 | 400 | 867 | 4 | OWE WEP WPA WPA2 Mixed(WPA+WPA2) WPA3 |
Pre-Shared Key, 802.1X | F | F | PIN, PBC | Repeater (5GHz only) | Access List, Client Isolation, Hide SSID, WLAN Scheduling | T | T | T | Root | SIP, RTP/RTCP, ZRTP | 6 | Phone Book, Digit Map, Call Barring, Regional | Call Waiting, Call Transfer, Scheduled DND, Hotline | G.711 A/u law, G.726, G.729 A/B | FSK_ETSI ,FSK_BELLCORE ,DTMF | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 | T | Vigor2132 Series, Vigor2133 Series | TFTP, HTTP, TR-069 | T | Access List, Brute Force Protection | SMS, E-mail | v5, v9, IPFIX | v1, v2c, v3 | T | F | - | 2 | 7 | - | V4.2.1.2 | DC 12V @ 1.5A | 18 | 207 x 131 x 42 | - | 0 to 45°C | -25 to 70°C | 10 to 90% |
Note :The stated throughput performance figures are the maximum derived from DrayTek internal testing, conducted under optimal conditions, with Hardware Acceleration enabled where available. The actual performance may vary based on network conditions and activated applications.