| Interface | |
|---|---|
| Fixed WAN Port | 1 x RJ-11 for VDSL2 35b or ADSL2/2+ |
| LAN/WAN Switchable Port | 1 x Gigabit Ethernet |
| Fixed LAN Port | 5 x Gigabit Ethernet |
| SIM Slot | 2 x nano SIM slots (SIM slot 2 for Failover) |
| USB Port | 1 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
| LTE Antenna | 4 x External Dipole Peak Gain: 4.37dBi |
| Wi-Fi Antenna | 2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3dBi for 2.4GHz (Lax model) |
| 2.4G WLAN | 802.11x 2×2 MIMO 574Mbps (Lax model) |
| 5G WLAN | 802.11ax 2×2 MU-MIMO 2402Mbps (Lax model) |
| Performance | |
|---|---|
| NAT Session | 60K |
| NAT Throughput | 700 Mbps |
| NAT Throughput w/ Hardware Acceleration: Single WAN | 940 Mbps |
| NAT Throughput w/ Hardware Acceleration: Dual WAN | 1800 Mbps |
| 5G | |
|---|---|
| 5G Band | n1, n20, n28, n3, n38, n40, n5, n7, n77, n78, n8 |
| 5G Antenna Peak Gain | 4.37 dBi |
| 5G NSA Max. Rx Link Rate** | 3400 Mbps |
| 5G NSA Max. Tx Link Rate** | 550 Mbps |
| 5G SA Max. Rx Link Rate** | 2400 Mbps |
| 5G SA Max. Tx Link Rate** | 900 Mbps |
| **Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions. | |
| 4G | |
|---|---|
| LTE Category | CAT.19 |
| LTE Antenna (External Dipole) | 4 |
| Max. Rx Link Rate | 1600 Mbps |
| Max. Tx Link Rate | 200 Mbps |
| FDD Band | 1 (2100MHz), 20 (800MHz), 28 (700MHz), 3 (1800MHz), 5 (850MHz), 7 (2600MHz), 8 (900MHz) |
| TDD Band | 38 (2600MHz), 40 (2300MHz) |
| WCDMA (3G) Band | 1, 8 |
| SMS Gateway | Learn More |
| Internet Connection | |
|---|---|
| IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
| IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| LTE WAN Bridge | |
| 802.1p/q Multi-VLAN Tagging | |
| Multi-VLAN/PVC | |
| 4G LTE/3G WAN with USB modem | |
| WAN Failover | |
| Load Balancing | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Strict ARP, Ping |
| WAN Data Budget | |
| Dynamic DNS | |
| DrayDDNS | |
| LAN Management | |
|---|---|
| VLAN | 802.1q Tag-based, Port-based |
| Max. Number of VLAN | 16 |
| Number of LAN Subnet | 8 |
| DMZ Port | 1 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias | |
| Wired 802.1x Authentication | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Hotspot Web Portal (Profile No.) | 4 |
| Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
| Networking | |
|---|---|
| Routing | IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Route, RIP v1/v2, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | |
| DNS Security (DNSSEC) | |
| IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server | |
| SMB File Sharing | (Requires external storage) |
| VPN | |
|---|---|
| LAN-to-LAN | |
| Teleworker-to-LAN | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN, Wireguard |
| Max. VPN Tunnels | 32 |
| Max. OpenVPN + SSL VPN Tunnels | 16 |
| IPsec VPN Throughput (AES 256 bits) (single-directional) | 300 Mbps |
| SSL VPN Throughput (single-directional) | 130 Mbps |
| Wireguard VPN Throughput (single-directional) | 75 Mbps |
| User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256 |
| Encryption | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Failover, Load Balancing |
| Single-Armed VPN | |
| NAT-Traversal (NAT-T) | |
| DrayTek VPN Matcher | |
| Firewall & Content Filtering | |
|---|---|
| IP-based Firewall Policy | |
| Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category (subscription required) |
| DoS Attack Defence | |
| Spoofing Defense | |
| NAT | |
|---|---|
| NAT | Port Redirection, Open Ports, Port Triggering, Port Knocking Fast NAT, DMZ Host, UPnP, Server Load Balance |
| ALG (Application Layer Gateway) | FTP, H.323, RTSP, SIP |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| Bandwidth Management | |
|---|---|
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization | |
| APP Qos | |
| Wireless LAN (Lax-5G model) | |
|---|---|
| 2.4G WLAN | 802.11ax 2×2 MIMO |
| 5G WLAN | 802.11ax 2×2 MU-MIMO |
| Antennas | 2 |
| Antenna Type | External Dipole |
| 2.4 GHz Gain | 2.3 dBi |
| 5 GHz Gain | 3.5 dBi |
| 2.4 GHz Max. Link Rate | 574 Mbps |
| 5 GHz Max. Link Rate | 2402 Mbps |
| Max. Number of SSIDs per band | 4 |
| Security Mode | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
| Authentication | Pre-Shared Key, 802.1x |
| WiFi 6 | |
| OFDMA | |
| WPS | PIN, PBC |
| WDS | Repeater (5GHz only) |
| Access Control | Access List, Client Isolation, Hide SSID, WLAN Scheduling |
| AirTime Fairness | |
| Band Steering | |
| WMM | |
| Mesh (Lax model only) | Root (See Mesh compatibility chart) |
| Management | |
|---|---|
| Local Service | HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069 |
| Config Backup/Restore | |
| Config File Compatibility | Vigor2865 LTE |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail |
| Netflow | IPFIX, v5, v9 |
| SNMP | v1, v2c, v3 |
| Syslog | |
| VPN Managment | 8 |
| AP Managment (APM) | 20 |
| Mesh (Number of manageable APs) | 7 |
| Switch Management (SWM) | 10 |
| VigorACS Management (Since f/w) | v4.4.5 |
| Physical | |
|---|---|
| Power Supply | Vigor2865L-5G: DC 12V @ 2.1A Vigor2865Lax-5G: DC 12V @ 2.6A |
| Max. Power Consumption | Vigor2865L-5G: 25.2 watts Vigor2865Lax-5G: 31.2 watts |
| Dimensions | 241mm x 165mm x 44mm |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |