Vigor2865 LTE Series is an VDSL2 35b/ADSL2+ firewall router with embedded 4G/LTE connectivity, making it ideal for SMB/Branch office where Internet connection is the core of business continuity, or new business locations that wired connection is yet to be available.
It has 1 x RJ-11 WAN port for VDSL2/ADSL2+ (including profile 35b Super Vectoring), 1 x GbE WAN/LAN switchable port, 2 x embedded SIM slots supporting LTE Cat 6 (1 SIM online at a time), and 1 x versatile USB port for additional 4G/LTE connection or other applications. All these WANs together provides robust load-balancing/failover functionality.
The series includes models without wireless LAN and with built-in 802.11ac Wave 2 wireless LAN. It also offers other professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and more. It can act as the controller to manage other VigorAP and VigorSwitch in LAN, or register to VigorACS for cloud-based management.
VDSL2 35b
Download speed up to 300 Mbps
Up to 6 WAN
Load balancing, NAT throughput up to 800 Mbps
300 Mbps
Maximum LTE Speed
32 VPN
IPsec VPN throughput up to 300 Mbps
1Wireless Antenna (wireless model)
2Reset Button
3WLAN/WPS Button (wireless model)
4LED Indicator
51x USB 2.0
6LAN/WAN Switchable Port: 1x GbE RJ-45
7Fixed LAN Port: 5x GbE RJ-45
8Fixed WAN Port: 1x RJ-11 for 35b/VDSL2/ADSL2+
9LTE Antenna
10Power Input
11Power On/Off Switch
122x Standard-Sized SIM Slot
Provide 4G/LTE Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.
Maximize throughput and reliability by using multiple Internet connections. Learn more
Integrated VDSL modem, supporting VDSL2 profile 35b supervectoring.
Build a secure and private tunnel from the LAN of Vigor2865 LTE Series to the remote offices and teleworkers over the Internet. Learn more
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Get Internet access wirelessly from a Wi-Fi network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more
Market your business and communicate with the guests while offering hospitality Wi-Fi. Learn more
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Use the Vigor2865 LTE Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.
Select your business critical apps, and easily put them into QoS classes.
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.
Vigor2865 LTE
Antenna + Socket
Antenna x 2
RJ-45 to RJ-45 Cable (Annex B)
RJ-11 to RJ-45 Cable (Annex B)
Power Adapter
Quick Start Guide- 1 xDSL + 1 Gigabit Ethernet WAN
- Built-in 35b/VDSL/ADSL Modem
- 60k Concurrent Sessions
- 32 Concurrent VPN
- Built-in 11ac Wave 2 WLAN (optional)
- 1 xDSL + 1 Gigabit Ethernet WAN
- Built-in VDSL/ADSL & LTE Modem
- 50k NAT Sessions
- 32 Concurrent VPN
- Built-in 11ac Wave 2 WLAN (optional)
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| Fixed WAN Port | 1x RJ-11 for VDSL2 or ADSL2/2+ |
| LAN/WAN Switchable Port | 1x 10/100/1000Base-TX RJ-45 |
| Fixed LAN Port | 5x 10/100/1000Base-TX RJ-45 |
| SIM Slot | 2x Standard-Sized (1 SIM online at a time) |
| USB Port | 1x USB 2.0 |
| LTE Antenna | 2x External Dipole Gain: 3 dBi |
| Wi-Fi Antenna | 2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (wireless model) |
| 2.4G WLAN | 802.11n 2x2 MIMO 400Mbps (wireless model) |
| 5G WLAN | 802.11ac Wave 2 2x2 MU-MIMO 867Mbps (dual-band model) |
Performance | |
| NAT Throughput | 800 Mbps |
| IPsec VPN Performance | 300 Mbps (AES 256 bits) |
| SSL VPN Performance | 130 Mbps |
| Max. Number of NAT Sessions | 60,000 |
| Max. Concurrent VPN Tunnels | 32 |
| Max. Concurrent OpenVPN + SSL VPN | 16 |
VDSL/ADSL | |
| VDSL Standards | ITU-T G.993.2 Annex A/B/M/Q (up to Profile 35b but excluding 30a) T1.424 ITU-T G.993.5 (Vectoring) |
| VDSL2 Profile | 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b (not G.fast) |
| ADSL Standards | ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2 |
| Other Standards | ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission) |
| Band Plan | 998, 997 |
LTE | |
| LTE Category | 6 |
| Max. Data Rate | 300 Mbps downlink, 50 Mbps uplink |
| FDD Band | 1 (2100MHz), 3 (1800MHz), 7 (2600MHz), 8 (900MHz), 20 (800MHz) |
| WCDMA (3G) Band | 1, 5, 8 |
| For other band availability, please contact your local DrayTek distributor or us | |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| Wireless WAN | (wireless model) |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 16 |
| Number of LAN Subnet | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| Multicast | IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN) |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
Wireless LAN (wireless model) | |
| Number of SSID | 4 per radio band |
| Security Mode | WEP, WPA, WPA2, Mixed(WPA+WPA2) |
| Authentication | Pre-Shared Key, 802.1X |
| WPS | PIN, PBC |
| WDS | Bridge, Repeater (5GHz only) |
| Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
| AirTime Fairness | |
| Band Steering | (dual-band model) |
| MU-MIMO | (5GHz Only) (dual-band model) |
| WMM | |
VoIP Gateway (V model) | |
| Protocol | SIP, RTP/RTCP, ZRTP |
| SIP Registrars | 12 |
| Dial Plan | Phone Book, Digit Map, Call Barring, Regional |
| Call Features | Call Waiting, Call Transfer, Scheduled DND, Hotline |
| Voice Codec | G.711 A/u law, G.723.1, G.726, G.729 A/B |
| Caller ID | FSK_ETSI, FSK_BELLCORE, DTMF |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Config File Export & Import | |
| Config File Compatibility | Vigor2862 LTE |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central VPN Management | 8 VPN |
| Central AP Management | 20 VigorAP |
| Central Switch Management | 10 VigorSwitch |
Physical | |
| Power Supply | DC 12V @ 2A-2.5A |
| Max. Power Consumption | 28.1 watts |
| Dimension | 241mm x 166mm x 46mm |
| Weight | 670g (Lac model) |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate |  |
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
