Vigor2962 Series is a high performance and dynamic firewall router with configurable WAN/LAN ports. With the selection of 2.5GbE port, 1GbE Fiber port, and 2 of 1GbE ports, users can set 2 of the ports as WAN for load balancing/failover purpose and enjoy overall 2.2Gbps NAT throughput. The Vigor2962P model also supports 802.11af/at standard to provide a flexible network deployment, it can supply the power to the connected Access Point, IP Cam, or other PD devices.
Up to 2 WANs
including 2.5G Ethernet and SFP
200 VPN
IPsec VPN throughput up to 1 Gbps
50 SSL VPN
Throughput up to 800 Mbps
2.2 Gbps
Max. NAT Throughput
1Power Input
2Power On/Off Switch
3Reset Button
4LED Indicator
51x 2.5G RJ-45*
61x GbE/SFP Combo*
72x GbE RJ-45*
8Fixed LAN Port: 2x GbE RJ-45
91x USB 2.0 & 1x USB 3.0
*Switchable WAN/LAN Port, up to 2 simultaneous WANs.
*P1/P4/P5/P6: PoE-Out ports (P model).
Deliver power and data over one ethernet cable, turn on/off the PoE device periodically with PoE Schedule.
Enable Ping Watchdog for all PoE devices, if they lose their network connection, automatically restart them by a power cycle.
Maximize throughput and reliability by using multiple Internet connections. Learn more
Build a secure and private tunnel from the LAN of Vigor2962 Series to the remote offices and teleworkers over the Internet. Learn more
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more
Use Point-to-Point connection on LAN to keep track of individual user's traffic. Setup Guide
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Use the Vigor2962 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Vigor2962 Series features four configurable WAN/LAN ports, including one 2.5GbE port, one SFP/GbE combo port, and two GbE ports. Two of the four ports can be used as WAN port concurrently. Dual WAN for load balancing/failover improves Internet resilience of your business.
Market your business while offering free WLAN
Redirect the hotspot guests to the company homepage, online surveys, or display promotion message.
Require the guest to leave contact info or social media accounts before they can use the Internet service.
A variety of login methods are supported to meet your business need, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.
Supports external captive portal authentication. You can keep using the WLAN marketing solution you like.
Bandwidth management is integrated into Hotspot to control the bandwidth and session usage of the Hotspot guests.
A management platform for Vigor devices on the LAN side and offer simple and massive deployment.
Automatically discover LAN subnets and add detected VigorSwitch/AP into managed list.
Most-frequent used settings can be pre-defined on the Vigor Router, and provision to the managed VigorSwitch/AP.
Vigor Router provides a centralized view of managing devices, you may always check if the managed Vigor Switch/AP is online.
You may perform a factory reset, save/restore a configuration backup, or trigger a remote reboot directly on the Vigor Router. There’s no need to log in to each device’s management page.
Vigor2962 or Vigor2962P
Rack Mount Kit (brackets)
RJ-45 Cable (Ethernet)
Power Cord
Quick Start GuideThe throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| WAN/LAN Switchable Port | 1x 2.5G Ethernet, RJ-45 (PoE capable port for P model) 1x GbE/SFP Combo 2x GbE, RJ-45 (PoE capable port(P4) for P model) *up to 2 simultaneous WANs |
| Fixed LAN Port | 2x GbE, RJ-45 (PoE capable ports for P model) |
| USB Port | 1x USB 2.0 + 1x USB 3.0 for storage (since f/w v3.9.6) and USB Thermometer (since f/w v4.3.1) |
Performance | |
| NAT Throughput w/ Hardware Acceleration | 2.2 Gbps |
| IPsec VPN Performance | 1 Gbps (AES 256 bits) |
| SSL VPN Performance | 800 Mbps |
| NAT Sessions | 300,000(since f/w v3.9.6, 150,000 with f/w v3.9.3.1 or before) |
| Max. Concurrent VPN Tunnels | 200 |
| Max. Concurrent OpenVPN + SSL VPN | 50 |
PoE (P model) | |
| PoE Capable Ports | 4 (P1/P4/P5/P6) |
| PoE Standards | PoE/PoE+ (802.3af/802.3at) |
| Power Budget | 65 watts |
| PD Device Check | |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping, Strict ARP |
| WAN Data Budget | (since f/w v3.9.6) |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 20 |
| Number of LAN Subnet | 20 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2, OSPF, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN), Wireguard |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256, MD5 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Service Type |
| VoIP Prioritization | |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Config File Export & Import | |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Syslog | |
| Managed by VigorACS | |
| Central AP Management | 50 VigorAP |
| Central Switch Management | 30 VigorSwitch |
Physical | |
| Rack Mountable | Mouting Kit Included |
| Power Supply | AC 100-240V @ 1A |
| Max. Power Consumption | 100 watts (P model) |
| Dimension | 273 mm x 171 mm x 45 mm |
| Weight | 1.53 kg (P model) |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate |   |
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
