Vigor2927 Series is a dual-Ethernet WAN firewall router, providing load-balancing and failover for your business continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal, and a lot more, this is the ultimate router that does it all for SMB. The Series includes built-in 802.11ac Wave 2 WiFi, 802.11ax WiFi, and VoIP gateway models.
50 VPN
IPsec VPN throughput up to 290 Mbps
25 SSL VPN
Throughput up to 120 Mbps
60k Sessions
Recommended for a network of 50 hosts
AX 3000*
Delivers link rate up to 3 Gbps
1Wireless Antenna (ac/ax model)
2Reset Button
3WLAN/WPS Button (ac/ax model)
4LED Indicator
52x USB 2.0
6Fixed WAN Port: 1x GbE RJ-45
7WAN/LAN Switchable Port: 1x GbE RJ-45
8Fixed LAN Port: 5x GbE RJ-45
92x FXS for VoIP (V model)
10Power On/Off Switch
11Power Input
Maximize throughput and reliability by using multiple Internet connections. Learn more
Build a secure and private tunnel from the LAN of Vigor2927 Series to the remote offices and teleworkers over the Internet. Learn more
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
Vigor2927 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Use the Vigor2927 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Easily link to other VigorAP to expand the wireless network. Learn more
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Without sacrificing traffic control features, such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph, Data Flow Monitor, the accelerator brings great performance.
With Hardware accelerator, Vigor2927 is fully capable of providing connections via 2 high speed WANs simultaneously. The accelerator supports up to 8k NAT and routing connections, providing firewall performance up to 940Mbps on single WAN and 1.8Gbps combine d performance across both WAN, while still meeting high expectation of QoS quality.
The accelerator includes Hardware QoS to meet high expectation of QoS quality while enjoying high firewall performance. You may easily prioritized business critical apps, and always keep VoIP in 1 st priority.
Although Vigor2927 already has improved IPSec performance from the previous Vigor2926 series, with Hardware IPSec enabled, IPSec performance is further improved to 800 Mbps. The acceleration capacity is 16 IPSec tunnels max. First 16 tunnels are accelerated automatically on a first come first serve basis. If any of the accelerating 16 tunnels disconnected, new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.
*Since firmware v4.2.2
VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.
Select your business critical apps, and easily put them into QoS classes.
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.
Set up a Mesh network from scratch
Monitoring all Mesh nodes and get an overview of the topology
Check all the Wi-Fi clients
Change SSID Configuration for all the nodes
Add TR-069 Settings to all the nodes
*wireless model only
Vigor2927
Antenna x 2
RJ-45 Cat-5 Ethernet Cable
Power Adapter
Quick Start GuideThe throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| Fixed WAN Port | 1x GbE RJ-45 |
| WAN/LAN Switchable Port | 1x GbE RJ-45 |
| Fixed LAN Port | 5x GbE RJ-45 |
| USB Port | 2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
| RJ-11 Port for Voice | 2x FXS (V model) |
| Wireless Antenna | 2x External Dipole Gain: 3 dBi for 5GHz, 2.5 dBi for 2.4GHz (ac/ax model) |
| 2.4G WLAN | 802.11n 2x2 MIMO, up to 400Mbps Link Rate (ac model) 802.11ax 2x2 MIMO, up to 574Mbps Link Rate (ax model) |
| 5G WLAN | 802.11ac Wave 2 2x2 MU-MIMO, up to 867Mbps Link Rate (ac model) 802.11ax 2x2 MU-MIMO, up to 2402Mbps Link Rate (ax model) |
Performance | |
| NAT Throughput | 800 Mbps |
| NAT Throughput w/ Hardware Acceleration | 940 Mbps (Single WAN) 1.8 Gbps (Dual WAN) |
| IPsec VPN Performance | 290 Mbps (AES 256 bits) |
| SSL VPN Performance | 120 Mbps |
| Max. Number of NAT Sessions | 60,000 |
| Max. Concurrent VPN Tunnels | 50 |
| Max. Concurrent OpenVPN + SSL VPN | 25 |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| Wireless WAN | 2 (ac model) |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 16 |
| Number of LAN Subnet | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
Wireless LAN (ac/ax model) | |
| WiFi 6 | (ax model) |
| Number of SSID | 4 per radio band |
| Security Mode | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
| Authentication | Pre-Shared Key, 802.1X |
| OFDMA | (ax model) |
| WPS | PIN, PBC |
| WDS | Repeater (5GHz only)(ac model) |
| Access Control | Access List, Client Isolation, Hide SSID, WLAN Scheduling |
| AirTime Fairness | |
| Band Steering | |
| MU-MIMO | (5GHz Only) |
| WMM | |
VoIP Gateway (V model) | |
| Protocol | SIP, RTP/RTCP, ZRTP |
| SIP Registrars | 12 |
| Dial Plan | Phone Book, Digit Map, Call Barring, Regional |
| Call Features | Call Waiting, Call Transfer, Scheduled DND, Hotline |
| Voice Codec | G.711 A/u law, G.723.1, G.726, G.729 A/B |
| Caller ID | FSK_ETSI, FSK_BELLCORE, DTMF |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Config File Export & Import | |
| Config File Compatibility | Vigor2926 |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central VPN Management | 8 VPN |
| Central AP Management | 20 VigorAP |
| Mesh Network | 7 VigorAP (ac model) |
| Central Switch Management | 10 VigorSwitch |
Physical | |
| Power Supply | DC 12V @ 2A |
| Max. Power Consumption | 24 watts (ac model) |
| Dimension | 241mm x 165mm x 44mm |
| Weight | 630g (ac model) |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate |   |
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
