Vigor2860 Series is a firewall router which has built-in a VDSL/ADSL modem that is compatible with variants of ADSL and VDSL. The Gigabit Ethernet WAN port can be used with a cable modem to connect to a second line for load balancing or failover. There are also two USB ports can work with 3G/4G/LTE USB modems to add wireless connectivity. Vigor2860 Series offers features including VPN, Firewall, Content Filtering, and central management solution for Vigor access points and switches, which makes it the perfect solution for small-medium business.
The VDSL/ADSL modem built-in Vigor2860 Series offers comprehensive DSL connectivity which makes it compatible with various versions of xDSL, including ADSL, ADSL2, ADSL2+, VDSL, and VDSL2. Vigor2860 Series also supports automatically detecting your line type and will fallback to ADSL if VDSL is not available.
Except for the DSL interface, there is also a Gigabit Ethernet WAN port that can be used for any types of connection and add an additional connectivity to share the traffic load. 3G/4G/LTE USB modem can also be attached to the USB ports of the router, and offer wireless Internet connectivity in case the fixed lines are not available, In fact, all of the WAN interfaces can be configured to operate in either Load Balancing mode, which will be active all the time, or in Failover mode, which will be active only when detecting connection loss or heavy load on the primary connection.
On Vigor2860 Series, Load Balancing can be set in either IP-based mode, which means the packets destined to different IP address will be distributed across different WANs, or Session-based mode, which means the packets belong to different sessions can take different paths, this allows a multiple-session connection to be established across multiple WANs, and the maximum data rate will be all the WAN's bandwidth combination. Policy-based Load Balancing is also supported so that you may specify the path for some certain packets.
To increase network accessibility more, Vigor2860 Series also supports High Availability feature and allows one or more redundant Vigor2860 Series to be added to the network and operated in standby mode.
The 6-port Gigabit Ethernet switch on the LAN side provides high-speed connectivity for the servers and PCs on the local network, and the Virtual LAN (VLAN) features allow you to separate the LAN clients into different logical domains thus to increase the security and network efficiency. Vigor2860 Series supports 802.1Q standard and can build a Tag-based VLAN system with an 802.1Q-support switch, Port-based VLAN is also supported that each LAN port can be configured as a member of different VLAN and be isolated from each other without the use of VLAN tag. Moreover, up to 6 IP subnet can be set up on Vigor2860 Series, so each VLAN can use different IP addressing space.
Since firmware v3.8.4.3, Vigor2860 Series has implemented an integrated solution to work as a public Wi-Fi hotspot. While providing Internet access to the guest users, the Hotspot Web Portal can be used to collect the users' information, informing the terms and conditions, and presenting a landing page to them.
Vigor2860 Series supports Stateful Packet Inspection (SPI) Firewall and flexible filtering rules, it can accept or deny packets based on the information in the packet header (such as source IP, destination IP, protocol, and port number) or the packet's application. IP-based restrictions can be set to filter certain HTTP traffic as well as various application software and help you to prevent time and network resource wasting on inappropriate network activities.
With an annual subscription to CYREN Web Content Filtering service, you may also filter the websites by their categories, and set up restrictions to block the whole categories of websites (such as Social Networking, Gambling.. etc.) without the need to specify every site you would like to block. The CYREN service is constantly updating the categorization, and a free 30-day trial is included in each new router.
Vigor2860 Series supports both LAN-to-LAN VPN and Remote Dial-in VPN, up to 32 VPN tunnels can be set up simultaneously. All the industry standard tunneling protocols are supported, including PPTP, L2TP, IPsec, and GRE, and it's compatible with 3rd party VPN devices.
Vigor2860 Series also supports SSL VPN - a type of VPN based on the very common encryption method which is used by all the HTTPS websites. While the traditional VPN protocols might be filtered by the firewall and NAT of public networks, SSL VPN will be passed as long as the HTTPS is allowed. DrayTek also offers free official client App for Windows, iOS, and Android.
VPN Trunking is also supported by Vigor2860 Series, this allows you to establish two VPN tunnels to the same remote site through different WAN interfaces. The two trunking tunnels can be set up in load balancing or failover mode.
Vigor2860 Series can act as a Central Management portal for all the Vigor devices on the network, including VigorAPs, Vigor Switches, and even Vigor Routers. With Central Management feature, device maintenance (such as firmware upgrading, configuration backup and restore) and monitoring can all be done from a single portal, which is the Web User Interface of Vigor2860 Series.
Vigor2860 can manage up to 20 VigorAPs on its LAN. Automatic Provisioning can be triggered when a VigorAP newly join the network and this makes AP deployment much faster. You may also get the client or traffic history of all the AP from Vigor2860, and set up load balancing rules for the AP.
Central Switch Management allows you to manage up to 10 Vigor Switches from Vigor2860, the status of every port can be directly viewed from the router. Vigor2860 also supports VLAN configuration for the switches, setting that matches the router's VLAN settings and the switch hierarchy is automatically provided which makes the VLAN configuration much simplified.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| WAN Port | 1x RJ-11 for VDSL2/ADSL2+
1x 1000Base-TX, RJ-45 |
| LAN Port | 6x 10/100/1000Base-TX LAN, RJ-45 |
| USB Port | 2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
| RJ-11 Port for Voice | 2x FXS + 1x Life Line (Vn-plus, Vac model) |
| 2.4G WLAN | 802.11b/g/n (n/n-plus/ac/Vac model) |
| 5G WLAN | 802.11a/n (n-plus/ac/Vac model)
802.11ac (ac/Vac model) |
Capacity | |
| Max. Number of NAT Sessions | 50,000 |
| Max. Concurrent VPN Tunnels | 32 |
| Max. Concurrent SSL VPN | 16 |
VDSL/ADSL | |
| VDSL Standards | ITU-T G.993.1 (VDSL), G.997.1, G.993.2 (VDSL2) |
| VDSL2 Profile | 8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a |
| VDSL Band Plan | 997 |
| ADSL Standards | ANSI T1.413, ITU-T G.992.1(G.dmt), G.992.2 (G.lite) |
| ADSL2 Standards | ITU-T G.992.3, G.992.3 Annex J |
| ADSL2+ Standards | ITU-T G.992.5, G.992.5 Annex M |
| DSL Forum | WT-114, TR-048/67, TR-100 |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| Multi-VLAN/PVC | |
| Wireless WAN | (n/n-plus/Vn-plus/ac/Vac model) |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP, Policy-based Routing |
| High Availability | |
| DNS Security (DNSSEC) | |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
| Multicast | IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA1, MD5 |
| VPN Redundancy | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
Wireless LAN (n/n-plus/Vn-plus/ac/Vac model) | |
| Number of SSID | 4 per radio band |
| Security | WEP, WPA, WPA2, WPS |
| Authentication | Pre-Shared Key, 802.1x |
| AirTime Fairness | |
| Band Steering | (n-plus/Vn-plus/ac/Vac model) |
| WMM | |
| WDS | Bridge, Repeater |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
VoIP Gateway (Vn-plus/Vac model) | |
| Protocol | SIP, RTP/RTCP, ZRTP |
| SIP Registrars | 12 |
| Dial Plan | Phone Book, Digit Map, Call Barring, Regional |
| Call Features | Call Waiting, Call Transfer, Scheduled DND, Hotline |
| Voice Codec | G.711 A/u law, G.723.1, G.726, G.729 A/B |
| Caller ID | FSK_ETSI, FSK_BELLCORE, DTMF |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH, TR-069 |
| Config File Export & Import | |
| Config File Compatibility | Vigor2820, Vigor2830, Vigor2850 |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v2, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central AP Management | 20 VigorAP |
| Central Switch Management | 10 VigorSwitch |
Physical | |
| Power Supply | DC 12V @ 2A |
| Dimension | 241mm x 166mm x 46mm |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate | 
 |
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
