Vigor3220 is a Quad-WAN broadband VPN firewall router designed for businesses that are looking for reliability and security in their office network. It's equipped with 4 Ethernet WAN ports and 1 Gigabit Ethernet LAN ports. It has 2 USB ports, one of which is usable for 3G/4G WAN connections. All the WAN can active at the same time. The router will smartly distribute the sessions among all the WANs to utilize each bandwidth as much as possible, aggregate the bandwidth is also configurable to get the combined bandwidth. Excellent VPN performance is also a highlight of the Vigor3220. It supports 200 concurrent VPN tunnels, with IPsec VPN throughput up to 200 Mbps.
4+1 WAN
Load balancing, NAT throughput up to 500 Mbps
200 VPN
IPsec VPN throughput up to 200 Mbps
50 SSL VPN
Throughput up to 90 Mbps
100k SessionsRecommended for a network of 200 hosts
Maximize throughput and reliability by using multiple Internet connections. Learn more
Build a secure and private tunnel from the LAN of Vigor3220 to the remote offices and teleworkers over the Internet. Learn more
The VPN works through firewalls providing secure remote access to any network environment. Learn more
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Use Point-to-Point connection on LAN to keep track of individual user's traffic. Setup Guide
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Use the Vigor3220 router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Vigor3220
Rack Mount Kit (brackets)
RJ-45 Cat-5 Ethernet Cable
Console Connector + Flat Cable
Power Cord
Quick Start GuideThe throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| WAN Port | 4x Gigabit Ethernet RJ-45 |
| LAN Port | 1x Gigabit Ethernet RJ-45 |
| DMZ Port | 1x Gigabit Ethernet RJ-45 |
| USB Port | 1x USB 3.0 + 1x USB 2.0 |
| Console Port | 1x RJ-45 |
Performance | |
| NAT Throughput | 500 Mbps |
| NAT Throughput w/ Hardware Acceleration | 900 Mbps |
| IPsec VPN Performance | 200 Mbps (AES 256 bits) |
| SSL VPN Performance | 90 Mbps |
| Max. Number of NAT Sessions | 100,000 |
| Max. Concurrent VPN Tunnels | 200 (f/w 3.8.8 or later) |
| Max. Concurrent OpenVPN + SSL VPN | 50 |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| Multi-VLAN/PVC | |
| 3G/4G/LTE WAN with USB modem | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 8 |
| Number of LAN Subnet | 8 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| PPPoE Server | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal | |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking | |
| Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| Multicast | IGMP Proxy, IGMP Snooping, Bonjour |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
VPN | |
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN(Host to LAN) |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256, MD5 |
| VPN Redundancy | Load Balancing, Failover |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
Firewall & Content Filtering | |
| NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323, TFTP |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
| DoS Attack Defense | |
| Spoofing Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, TR-069, FTP, SNMP |
| Config File Export & Import | |
| Config File Compatibility | Vigor3200 Series |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Syslog | |
| Notification Alert | SMS, E-mail |
| SNMP | v1, v2c, v3 |
| Managed by VigorACS | |
| Central VPN Management | 8 VPN |
| Central AP Management | 30 VigorAP |
| Central Switch Management | 10 VigorSwitch |
Physical | |
| Rack Mountable | Mouting Kit Included |
| Power Supply | AC 110-220V @ 1A |
| Max. Power Consumption | 15 watts |
| Dimension | 273mm x 171mm x 45mm |
| Weight | 1.35 kg |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -20 to 70°C |
| Operating Humidity | 10 to 90% (non-condensing) |
| Certificate |  |
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
