2.5G WAN Ultra-High Speed Router with Cellular 4G
Vigor2136ax-4G delivers reliable and high-speed connectivity with built-in 4G Cellular, and embedded dual SIM slots (one active at a time) provide enhanced redundancy to maintain continuous cellular network access. The equipped 2.5G WAN port delivers fast wired performance. With 802.11ax (Wi-Fi 6) capability, it ensures efficient and stable wireless connections even in high-dentisy environments. In addition to the primary 4G WAN, the router supports Ethernet WAN or Wi-Fi WAN as backup options to ensure uninterrupted internet connectivity.
Vigor2136ax-4G integrates advanced business features such as Route Policy, App-based QoS, and IP/URL Filtering, providing a secure and robust networking solution for offices, retail, and remote sites.
4G
LTE Download Speed up to 300 Mbps
2.5 GbE
1x 2.5G WAN, 1x 2.5G LAN/WAN Switchable
AX 3000
Delivers link rate up to 3 Gbps
50k Sessions
Recommended for a network of 30 hosts
Interface
1Wi-Fi Antenna
2Fixed WAN Port: 1x 2.5GbE RJ-45
3LAN/WAN Switchable Port: 1x 2.5GbE RJ-45
4Fixed LAN Port: 3x GbE RJ-45
51x USB 2.0
62x Nano-Sized SIM Slots
72x Cellular Antenna
Key Features
Embedded SIM Slot
Provide 4G LTE Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.
2.5GbE
Provides higher performance to Wi-Fi 6 AP and other Ethernet devices.
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2136ax-4G to the remote offices and teleworkers over the Internet. Learn more
EasyVPN
Secure VPN in Seconds: No Keys, No Configs, Just Login.
Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
URL/IP Reputation
Improve network security by classifying URLs and IPs to control web access and protect against online threats. Learn more
IAM
A solution that manages digital identities, authentication, and access control to ensure the right users or groups have appropriate access to critical resources. Learn more
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Wi-Fi 6 (ax model only)
Feature OFDMA and MU-MIMO technology to improve Wi-Fi efficiency and deliver higher wireless speed.
Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more
Virtual AP/Switch controller
All-in-one management platform for Vigor2136ax-4G to maintain and monitor the VigorAPs and VigorSwitches.
Multi-Gig Routers
Faster Wired Connections
- 4K video streaming
- online gaming
- large file transfers
- network-attached storage (NAS) devices etc
Beyond Gigabit
Up to 2.5Gbps internet speed enable the users to fully utilize the available bandwidth
4G Router with High Speed Mobile Connectivity
- Integrated 4G, and LTE modem (Category 6), the carrier aggregation method can get high-speed mobile broadband connectivity for Internet access and VPN.
- Dual-SIM Slot allows using two mobile network providers. So that in the event of one mobile network not providing Internet connectivity, the router can switch to a secondary SIM and cellular network connection.
- Two 4G Cellular antennas allow users to find the optimum position to regardless the environmental restrictions to install the router to get the best signal reception.
NAT & Routing Performance
The NAT throughput of the Vigor2136ax-4G can reach 2.3Gbps while meeting high QoS expectation. Business-critical applications can be easily prioritized, and always keep VoIP in 1st priority.
Effortless Secure Access with EasyVPN
Traditional VPN setup can be complex, with protocol choices and manual configuration. Vigor2136ax-4G supports IPsec, WireGuard, and OpenVPN, while EasyVPN streamlines Teleworker VPN, giving remote users secure access with a simple profile import.
With EasyVPN, users can establish secure connections without the hassle of:
- Generating WireGuard keys
- Importing OpenVPN configuration files
- Uploading certificates
By automating these steps, EasyVPN ensures a fast, secure, and user-friendly VPN experience for everyone.
Stealth Security Protection with Port Knocking
DrayTek’s Port Knocking technology provides an advanced stealth security layer by keeping critical network services invisible to unauthorized users. Instead of exposing management ports or VPN services to the public internet, Port Knocking requires a predefined “knock” sequence before granting access, ensuring that only trusted users can find and use these services.
By integrating three key functions, Port Knocking delivers unmatched protection against port scanning, brute-force attacks, and unauthorized access
Port Redirection
- Hide your real service ports from the public internet.
- Redirect unauthorized requests to non-existent services, preventing detection.
Router Management Access
- Allow router management only through a secure internal server or after successful knocking.
- Eliminate exposure of the management interface to the open internet.
VPN Service Control (WAN Binding)
- Keep VPN services invisible and inaccessible until the correct knock sequence is received.
- Bind VPN availability to specific WAN interfaces and authorized IP addresses.
How It Works
- In normal state, all targeted ports remain closed and undetectable.
- After the correct knock sequence, selected ports open temporarily for authorized access.
- Once the time window expires, services return to hidden mode automatically.
With DrayTek Port Knocking, your network operates in stealth mode, invisible to attackers, yet instantly accessible to authorized administrators and remote users. This makes it an ideal solution for organizations demanding high security without sacrificing accessibility.
Vigor2136ax-4G Router with Wi-Fi 6 capacity
Vigor2136ax-4G is a dual-band Wi-Fi router that provides 160MHz bandwidth and 1024-QAM to greatly increase the speed of wireless connection. The theoretically speed is up to 3000Mbps, of which 574Mbps is in the 2.4GHz band and 2402Mbps in the 5GHz band. Which is 2.5 times faster than an 802.11ac 2x2 dual-band router. In the household. It's also equipped with business-grade features, including URL Reputation, Route Policy, App-based QoS and lots more, and is perfect for professional smart homes/SOHO users who would like to take full control of their own network.
OFDMA (Orthogonal Frequency Division Multiple Access) is a key characteristic of the Wi-Fi 6 certification program. Included in the Wi-Fi 6 standard, OFDMA relies on efficient scheduling techniques to function effectively in congested and complex network environments. As Wi-Fi 6 gains traction among manufacturers and the broader industry, it becomes crucial to analyze and document the potential benefits of successful OFDMA implementation and the ability to measure its impact.
OFDM
OFDMA
MU-MIMO is similar to multiple trucks serving users simultaneously. It increases capacity and results in higher speed per users.
BSS Coloring is a technique used to improve co-existence of overlapping BSSs and to allow spatial reuse within one channel .Simply say BSS coloring helps in mitigating problem of co-channel interference found in legacy Wi-Fi networks.
TWT (Target wake time ) ensures that end devices spend more time in standby while sending and receiving data more economically. This reduces energy consumption and increases overall efficiency within the home network. It allows an AP to manage activity in the Wi-Fi network, in order to minimize medium contention between Stations (STAs), and to reduce the required amount of time that an STA in the power-save mode needs to be awake.
WPA3 (Wi-Fi Protected Access 3) enhances the security of Wi-Fi networks by addressing vulnerabilities in previous standards (like WPA2) and introducing new features to protect modern wireless communications better. WPA3 was introduced in 2018 to provide stronger authentication, better encryption, and improved defenses against attacks such as brute-force password guessing and man-in-the-middle exploits.
DrayTek's Wi-Fi 6 encryption:
- WEP (64 / 128-bit)
- WPA / WPA2 / WPA3 / OWE
And you may check below comparison table to see WPA3's strength is obviously an surplus development in WLAN security design.
| WEP | WPA | WPA2 | WPA3 | |
|---|---|---|---|---|
| Encryption | RC4 | TKIP / RC4 | AES-CCMP | AES-CCMP / AES-GCMP |
| Session Key | 64/128 bit | 128 bit | 128 bit | 128/256 bit |
| Authentication | Open system, shared key | Pre-shared key | Pre-shared key | AES-CCMP / AES-GCMP |
| Level of Security | Very low | Low | Moderate | High |
URL Reputation
URL Reputation is a cloud-based technology to provide Threat Intelligence Service. This service adds an extra layer of security protection to LAN client for their online activities.
There are 82 categories in total, 10 of which are security-focused, providing comprehensive and up-to-date protection to your home network or office network.
The various categories cover network security, including malware, spyware, adware, parental control for child protection, business, social networking, and more to ensure a safe online environment while also boosting employee productivity and can reach efficient bandwidth management.
IP Reputation
Every communication over the internet involves IP addresses-source and destination. Cybercriminals often leverage known malicious IP addresses to carry out attacks using techniques like:
- Botnets
- TOR nodes and anonymous proxies
- Command-and-control (C2) servers
- Phishing servers
- DDoS attacks
Blocking communication with these harmful IPs is essential, but it requires dynamic, predictive intelligence-a challenge that static blocklists cannot meet. The IP Reputation Service solves this by providing real-time scoring and classification of IP addresses, enabling automatic blocking of:
- High-risk traffic
- Suspicious proxies
- Malware distributors
- IPs linked to recent malicious behavior
The system evaluates IPs across multiple criteria, including infection history, protocol usage, and attack frequency. Each IP is given a reputation score, which determines whether it should be trusted, monitored, or blocked outright.
IAM Identity and Access Management
Vigor2136ax-4G with the new DrayOS 5 is Zero Trust ready!
IAM (Identity and Access Management) is a framework of policies and processes that ensure the right users or groups have appropriate access to critical resources by managing digital identities, authentication, and access control.
It encompasses processes for identifying, authenticating, and authorizing users or groups to access systems, applications, and data. By assigning specific roles to users and ensuring they have the appropriate level of access to corporate resources and networks, IAM enhances both security management and the user experience.
IAM provides a set of security management tools for Vigor Routers, which is Zero Trust Ready. This solution allows you to grant and categorize user privileges, create and manage access policies, and define large-scale group policies that integrate multiple filtering rules and traffic shaping settings. DrayTek's IAM plays an important role in your cloud security strategy.
Users & Groups
- User account > user groups makes it easy to control and manage accounts in a group level
- Configure external authentication server
- Enable user and MFA protection
Access Policies
System administrators can create access policies on the local users in this tab The access policies can be created according to
- MAC address filter list
- The allowed /blocked user list
- The login sessions lifetime
Combine these access policies can create a robust security framework for your system.
Group Policies
Setup group policies with predefined local resources like employees, workstations, network printers ,and local servers. Customize firewall policies and traffic shaping policies to enhance network security and optimize traffic flow.
Conditional Access Policy
Conditional access policies can require users to provide multiple forms of authentication before they are granted access to a resource.
- Specify a time period for user to re-authenticate
- Restrict access to specific source IP address or ranges of IP addresses
- Specify VLAN-based access controls in your conditional policies
- Set up time schedules when user are allowed to log-in
Resources
Record local resources’ IP addresses and Mac addresses under Resources tab. For examples, Workstations, Net printers, PBX systems, NVR systems and servers.
Hotspot Web Portal
DrayTek’s Hotspot Web Portal is a customizable Wi-Fi login page with multiple login options like username/password, social media, and vouchers. It includes features like quotation management, Wi-Fi marketing for promotions, and branding options. Administrators can control access, set bandwidth limits, and monitor usage.
Account Status
The account status feature includes brute force protection, which logs the attacking IP address, the targeted username/profile, and the type of service under attack.
It also tracks the protection duration, recording the time from when the blocking begins to when it ends, along with the total number of hits. Additionally, it allows you to manually unblock access in case of an incorrect restriction.
Backup and Restore
You can backup or restore any of your settings such as Users and Groups, Access and Group Policies and so on. Of course, you can add in Password protection to well save them before you take action.
Seamless Wi-Fi Roaming
Fast & Smooth Handover
- Switch between access points seamlessly with intelligent roaming support.
- Supports Over-the-DS (via wired backbone) and Over-the-Air handoffs for reliable connectivity during video calls, voice chats, and real-time applications.
Smarter Assisted Roaming
- Signal thresholds and AP steering help devices move to stronger APs and balance network loads.
- Enjoy stable performance across all devices, everywhere.
Always Optimized for Business
- From offices to campuses, seamless roaming ensures uninterrupted mobility.
- Reliable coverage built for the demands of modern workplaces.
WiFi Roaming
WiFi roaming is essential in environments with multiple APs to ensure consistent and reliable wireless connectivity. It enhances the wireless experience by addressing the sticky client issue and ensuring smooth WiFi roaming.
Roaming Protocol
The Vigor2136ax-4G supports advanced roaming protocols, including 802.11r, 802.11v, and 802.11k. These protocols allow WiFi clients to seamlessly switch to an AP or router with a stronger signal as they move within a network with multiple APs or routers. Clients compatible with these roaming protocols benefit from proactive and uninterrupted roaming.
Assisted Roaming
The "Minimum RSSI with Adjacent AP" feature in the VigorAP ensures clients are disconnected only when a nearby AP or router offers a stronger signal. This prevents unnecessary disconnections and keeps clients connected to the most optimal access point.
Mesh
You can connect 7 APs, and form the wireless Group within the same network which creates MESH links automatically based on the optimum algorism among the root and node APs.
s_ok.gif)
Management Solution
Virtual Controller
On-Device Network Management with DrayTek Virtual Controller
DrayTek's Virtual Controller is an on-device management platform built into supported routers and firewalls. It enables centralized control without cloud dependency - reducing data exposure risks and enhancing network privacy.
Wireless Management
- Mesh Controller: Easily build and manage wireless mesh networks, with auto-routing and self-healing capabilities.
- AP Management (APM): Automatically discover, configure, and monitor connected VigorAPs - ideal for deploying multiple APs with unified settings.
Switch Management
- Central Switch Manager (SWM): Detect and manage supported VigorSwitches, push configurations, monitor status, and apply VLAN or QoS settings - all from one local interface.
Unified Mesh & AP Management
Virtual Controller supports two modes for flexible deployment.
Mesh Mode
Automatically creates a self-healing wireless mesh with the Vigor2136ax-4G as the Root AP and up to 7 Node APs for easy, scalable Wi-Fi coverage.
AP Management Mode
For networks with more than 8 APs, Virtual Controller switches to AP Management mode, enabling centralized control of up to 20 APs via the router's interface.
Seamless Mesh Role Assignment
Devices power on and automatically discover each other, assigning roles as Root or Node APs without manual setup. This auto device role assignment enables quick mesh network formation with optimized coverage and self-healing capabilities.
SWM
Vigor2136ax-4G can act as master to manage and monitor up to 5 switches. It also provides visibility into PD devices behind the switch, such as IP cameras and access points.
Device Management
Monitor switch status, current firmware version, and uptime across all managed devices.
Port Profile
Create multiple port profiles to provision the PoE, VLAN, QoS, and other settings to selected switches.
Maintenance
Perform configuration backup and restore, remote reboot, or factory reset.
Software Management
VigorACS 3
- Zero Touch Deployment & Provisioning
- Auto VPN
- Interface Quality & SLA
- VoIP Optimization & Monitoring
- Application Visibility
- Application Based SD-WAN Policy
*Click here to check the support model list. - Customized Hotspot Page with Multilingual
- Hotspot Clients Analytics
- ACS Server Load Balancing / Failover
In the Box
Cellular Antenna x 2
Wi-Fi Antenna x 2
RJ-45 Cable (Ethernet)
Power Adapter
Quick Start Guide
Note: The stated throughput performance figures are the maximum derived from DrayTek internal testing, conducted under optimal conditions, with Hardware Acceleration enabled where available. The actual performance may vary based on network conditions and activated applications.
