4G LTE & G.fast Router for SMB
Vigor2866 LTE Series is a G.fast firewall router with embedded 4G/LTE connectivity, making it ideal for SMB/Branch office where Internet connection is the core of business continuity, or new business locations that wired connection is yet to be available.
It has one G.fast supported DSL WAN, delivering fiber-like speed up to 1 Gbps, one configurable Ethernet WAN, 2 x embedded SIM slots supporting LTE Cat. 6 (1 SIM online at a time), and 1 x versatile USB port for additional 4G/LTE connection or other applications. All these WANs together provide robust load-balancing/failover functionality.
The series includes models without wireless LAN and with built-in 802.11ac Wave2 wireless LAN. It also offers other professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and more. It can act as the controller to manage other VigorAP and VigorSwitch in LAN, or register to VigorACS for cloud-based management.
300 Mbps
Maximum LTE Speed
G.fast
Download speed up to 1 Gbps
32 VPN
IPsec VPN throughput up to 300 Mbps
Dual-SIM
Insert 2x SIM cards for Failover
1 Wireless Antenna (ac model)
2Reset Button
3WLAN/WPS Button (ac model)
4LED Indicator
51x USB 2.0
6LAN/WAN Switchable Port: 1x GbE RJ-45
7Fixed LAN Port: 5x GbE RJ-45
8Fixed WAN Port: 1x RJ-11 for G.fastVDSL2 35b/ADSL2+
9LTE Antenna
10Power Input
11Power On/Off Switch
122x Standard-Sized SIM Slots
Key Features
Embedded SIM Slot
Provide 4G/LTE Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.
Load Balancing
Maximize throughput and reliability by using multiple Internet connections. Learn more
G.fast Modem
Integrated VDSL modem, supporting G.fast to deliver fiber-like DSL speed.
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2866 LTE Series to the remote offices and teleworkers over the Internet. Learn more
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Wireless WAN (ac model only)
Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Central AP Management
Use the Vigor2866 LTE Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more
Central Switch Management
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Hardware Acceleration
Without sacrificing traffic control features, such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph, Data Flow Monitor, the accelerator brings great performance.
Hardware NAT & Routing
Vigor2866 is fully capable of handling 2 high-speed WANs when enabling Hardware Acceleration. The accelerator supports up to 8k NAT and routing connections, providing firewall performance up to 940Mbps on single WAN and 1.8Gbps combined performance across both Ethernet and DSL WAN (G.fast), while still meeting high expectation of QoS quality.
Hardware QoS
The accelerator includes Hardware QoS to meet high expectation of QoS quality while enjoying high firewall performance. You m ay easily prioritized business critical apps, and always keep VoIP in 1 st priority.
Hardware IPSec
Although Vigor2866 LTE Series already has improved IPSec performance from the previous Vigor2862 LTE Series, with Hardware IPSec enabled, IPSec performance is further improved to 800 Mbps. The acceleration capacity is 16 IPSec tunnels max. First 16 tunnels are accelerated automatically on a first come first serve basis. If any of the accelerating 16 tunnels disconnected, new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.
APP QoS
VoIP First
VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.
Management Solution
All-in-One Management
Mesh (ac model)
Discovery, Provisioning, Monitoring, Centralized Hierarchy View
Vigor Router SWM
Auto-Discovery, Provisioning, Monitoring, Centralized Hierarchy View, Reboot PoE Devices Remotely, Quick VLAN Configuration
Vigor Router APM
Auto-Discovery, Provisioning, Monitoring, Centralized View, Alarm, Reboot VigorAP Remotely, Wi-Fi Client Load Balancing
Software Management
VigorACS3
- Zero Touch Deployment & Provisioning
- Auto VPN
- Interface Quality & SLA
- VoIP Optimization & Monitoring
- Application Visibility
- Application Based SD-WAN Policy
- Customized Hotspot Page with Multilingual
- Hotspot Clients Analytics
- ACS Server Load Balancing / Failover
VigorACS2
- Provisioning
- Monitoring
- Centralized Hierarchy View
- Alarm
- Reboot Vigor Devices Remotely
- Scheduled Maintenance
- Report
Antenna + Socket
Antenna x 2
(ac model)
RJ-45 Cable (Ethernet)
RJ-11 to RJ-45 Cable (Annex B)
RJ-11 to RJ-11 Cable (Annex A)
Power Adapter
Quick Start Guide
Related Products
Interface | |
| Fixed WAN Port | 1x RJ-11 for G.fast/VDSL2 35b/ADSL2+ |
| LAN/WAN Switchable Port | 1x 10/100/1000Base-TX RJ-45 |
| Fixed LAN Port | 5x 10/100/1000Base-TX RJ-45 |
| SIM Slot | 2x Standard-Sized (1 SIM online at a time) |
| USB Port | 1x USB 2.0 |
| LTE Antenna | 2x External Dipole Gain: 3 dBi |
| Wirelss Antenna | 2x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (Lac model) |
| 2.4G WLAN | 802.11n 2x2 MIMO Up to 400Mbps Link Rate (ac model) |
| 5G WLAN | 802.11ac Wave 2 2x2 MU-MIMO Up to 867Mbps Link Rate (ac model) |
Performance | |
| NAT Throughput | 800 Mbps |
| NAT Throughput w/ Hardware Acceleration | 940 Mbps (Single Ethernet/DSL WAN) 1.8 Gbps (Ethernet WAN + DSL WAN) |
| IPsec VPN Performance | 300 Mbps (AES 256 bits) |
| SSL VPN Performance | 150 Mbps |
| Max. Number of NAT Sessions | 60,000 |
| Max. Concurrent VPN Tunnels | 32 |
| Max. Concurrent OpenVPN + SSL VPN | 16 |
DSL | |
| VDSL Standards | ITU-T G.993.2 Annex A/B/M/Q ITU-T G.993.5 (Vectoring) |
| VDSL2 Profile | 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b |
| G.fast Profile | 106Mhz, 212Mhz |
| ADSL Standards | ITU-T G.992.3 (G.dmt.bis)*, ITU-T G.992.5 (ADSL2+) (G.adslplus) |
| Other Standards | ITU-T G.998.4 (Retransmission) |
| Band Plan | 998, 997 |
| * AnnexA support only | |
LTE | |
| LTE Category | 6 |
| Max. Data Rate | 300 Mbps downlink, 50 Mbps uplink |
| FDD Band | 1 (2100MHz), 3 (1800MHz), 7 (2600MHz), 8 (900MHz), 20 (800MHz), 28 (700MHz) |
| TDD Band | 38 (2600MHz), 40 (2300MHz), 41(2540-2640MHz, for Saudi Arabia only) |
| WCDMA (3G) Band | 1, 8 |
| SMS Gateway | Learn More |
| For other band availability, please contact your local DrayTek distributor or us | |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| Wireless WAN | 2 (ac model) |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 16 |
| Number of LAN Subnet | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
Wireless LAN (ac model) | |
| Number of SSID | 4 per radio band |
| Security Mode | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
| Authentication | Pre-Shared Key, 802.1X |
| WPS | PIN, PBC |
| WDS | Repeater (5GHz only) |
| Access Control | Access List, Client Isolation, Hide SSID, WLAN Scheduling |
| AirTime Fairness | |
| Band Steering | |
| MU-MIMO | (5GHz Only) |
| WMM | |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Config File Export & Import | |
| Config File Compatibility | Vigor2865 LTE |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central VPN Management | 8 VPN |
| Central AP Management | 20 VigorAP |
| Mesh Network | 7 VigorAP (ac model) |
| Central Switch Management | 10 VigorSwitch |
Physical | |
| Power Supply | DC 12V @ 2.5A |
| Max. Power Consumption | 28.8 watts (Lac model) |
| Dimension | 241mm x 166mm x 46mm |
| Weight | 960g (Lac model) |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate |  |
