Vigor 2865ax

SKU
272249
MPN
V2865AX-K
DrayTek’s Vigor 2865 series Multi-WAN Firewall VPN routers are ideal for Superfast VDSL Broadband and Ethernet-based FTTP Fibre Broadband. With Gigabit throughput, Quality of Service, VPN client/server, comprehensive Firewall and Content Filtering controls.
  • VDSL2 (Superfast Fibre) and Gigabit Ethernet WAN Router
  • Up to 950Mbps Firewall Throughput for Ethernet WAN
  • 5+1 Gigabit RJ-45 LAN Ports
  • AX3000 – Wi-Fi 6 Dual Band Wireless
  • 8 LAN Subnets with VLANs (Port-based / 802.1q)
Enquiry

The Ideal DSL Router with VPN for Small Business and Remote Working

DrayTek’s Vigor 2865 series Multi-WAN Firewall VPN routers are ideal for Superfast VDSL Broadband and Ethernet-based FTTP Fibre Broadband. With Gigabit throughput, Quality of Service, VPN client/server, comprehensive Firewall and Content Filtering controls.

Options for Wi-Fi 6 on ‘ax’ models, or Wi-Fi 5 ‘ac’ models provide fast & efficient wireless connectivity, while the integrated 4G+ LTE modem on ‘Lac’ models takes full advantage of mobile broadband. The Vigor 2865 series provides a reliable, flexible, and secure networking solution, that’s ideal for Home Offices, Small Business and Satellite Offices.

DrayTek Vigor 2865 series

VDSL and Ethernet Load Balancer

DrayTek Vigor 2865 Router Interfaces

The Vigor 2865 is a VDSL and Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. Connect the Vigor 2865 to Superfast Fibre with its integrated VDSL modem. Or connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN.

Featuring high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit Internet connections. Offering up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.

Route Policy - Powerful Routing Management

The Vigor 2865 series provides full policy-based control of where and how outbound traffic is routed with Route Policy:

VPN Routing
Send all or select traffic through VPN services.
Hostname Routing
Route access to individual websites, Internet domains (i.e. www.bbc.co.uk) and hostnames through a VPN tunnel or a specific WAN.
Service Routing
Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel.
Failover & Failback
Extensive control of Failover with multiple Failover rules and paths. Manage how connections are moved back to the primary connection, after a failover has occurred with Failback settings.
DrayTek Route Policy and VPN Service Connectivity

Wi-Fi 6 - AX3000 Performance

The Vigor 2865ax features ultra-fast and highly efficient Wi-Fi 6, or 802.11ax. OFDMA allows the router to send to more than one device at a time, splitting up wireless frequency into blocks, assigning more to users that need more e.g. video data, less to users that need less e.g. VoIP calls, then sending all at once. Which ensures all users have less of a wait, greatly improving efficiency. It allows the router to effectively and responsively, serve more wireless clients.

Wi-Fi 6 - AX3000 Performance

Click here to learn more about the exciting new features that Wi-Fi 6 brings to home and office wireless networks.

Ideal VPN router for SMB

A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office.

The Vigor 2865 is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput and up to 50 concurrently active VPN tunnels.

IPsec Hardware Acceleration boosts performance, up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed Internet connections.

DrayTek VPN Features

It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients. Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, DrayTek's SSL VPN and L2TP for both LAN to LAN and Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with OpenVPN.

User management for Dial-In Teleworkers is managed through the router's web interface, with mOTP 2-factor authentication available for IPsec, L2TP and SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server.

Connect VPNs from behind NAT with DrayTek's VPN Matcher

DrayTek VPN Matcher system

A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public Internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible.

DrayTek's new VPN Matcher service helps DrayTek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two DrayTek VPN routers that are behind NAT and could not normally establish a VPN tunnel.

Connect an OpenVPN Teleworker to a DrayTek router behind NAT

Connect two DrayTek router's behind NAT with a LAN-to-LAN VPN

Connecting Remote Sites with LAN to LAN VPN

Supporting up to 32 concurrently active VPN tunnels, the Vigor 2865 series is ideal for connecting multiple sites or home offices together with fast and secure IPsec VPN tunnels.

Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.

DrayTek VPN Features

DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN

DrayTek SSL VPN

The Vigor 2865 supports up to 16 active DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - the same encryption that you use for secure web sites such as your bank.

Teleworkers can easily create a secure SSL VPN tunnel to the DrayTek Vigor 2865 using the free DrayTek Smart VPN Client app. Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices.

You can download the SmartVPN client and learn more about DrayTek SSL VPNs here.

5+1 Gigabit LAN Ports with VLANs

The Vigor 2865 series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage.

With 5 dedicated LAN ports and one flexible LAN/WAN port, the Vigor 2865 can connect up to 6 devices directly with a single Ethernet WAN configuration, or 5 devices with a dual Ethernet WAN configuration.

With Multiple LAN subnets and VLANs, the Vigor 2865 can manage up to 8 separate networks. For instance, an internal network with a separate network for Guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service and Route Policy applied.

The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the DrayTek VigorSwitch G1080 8-port switch, for additional network ports. 

Designed for Central Management

The Vigor 2865 series (along with most other DrayTek routers, Access points and switches) can be centrally managed by our VigorACS central management platform.

This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.

For full details of VigorACS, click here.

Robust & Comprehensive IPv4 / IPv6 Firewall

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.

The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.

The Vigor 2865 supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.

Web Content Filtering with DNS Filter

GlobalView Categories

The content control features of the Vigor 2865 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.

Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).

Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.

High Availability - Hardware Failover

For even greater resilience, the Vigor 2865 series provides High Availability (HA), with both a primary and secondary router able to provide connectivity to your network and subnets.

In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume Internet, routing and VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers.

DrayTek Vigor 2865 - High Availability

With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time.

Read more about DrayTek High Availability here.

DrayDDNS - DrayTek Dynamic DNS Address

DrayTek provides a free Dynamic DNS address to each Vigor 2865 router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "myrouter.drayddns.com".

DrayTek DrayDDNS with LetsEncrypt Certificate

This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2865 router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.

The Vigor 2865 can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages and automates the certificate process. Keeping the certificate up to date and ready for use with SSL VPN and other services.

Manage Guest WiFi with Hotspot Web Portal

DrayTek routers make it easy to manage Guest Wireless with Hotspot Web Portal. The fully customisable captive portal can be applied to the router's LAN / VLAN interfaces, for use with wireless access points.

Authentication can be handled by Google/Facebook or an external web Portal service such as Purple WiFi with RADIUS.

Upon connecting to the wireless network, users are presented with your company's branding and information. From there, depending on what you've set, they can simply click-through, provide their details or enter a PIN with Voucher generated by the router.

Once connected, the router can allow access until a user reaches their quota limit of time connected or bandwidth used.

Read more about Hotspot Web Portal here.

Quality of Service & Bandwidth Control

Prioritise latency-sensitive applications on your network with Quality of Service.

App QoS simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom and Skype.

Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support

Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.

Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.

Central AP & Switch Management

The Vigor 2865 manages DrayTek VigorAP access points and VigorSwitch switches connected locally to the router. This enables you to centrally control, manage and administer multiple AP & Switch devices installed around your building/campus from just the one router.

Central AP Management

The DrayTek router operating as the wireless controller can provision up to 20 DrayTek VigorAP access points with Central AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network.

Central Switch Management

DrayTek VigorSwitch switches can be provisioned and managed through the router with DrayTek’s Central Switch Management system, which allows you to:

  • Easily provision VLAN configuration and other port settings directly from the router.
  • Set bandwidth rate limits and schedules for individual ports.
  • Log switch events for alert notifications if network problems occur
  • At a glance see the devices connected on your network with a virtual topology.

Centralised AP Management
Provision & Manage VigorAPs with a DrayTek Vigor router

For further details of the central management feature, click here.

Enhanced Intel Speedstep Technology
No
AC Adapter Included
No
Power Over Ethernet Poe
No
Fingerprint Reader
No
Built In Display
No
Vesa Mounting
No
Bluetooth
No
MAC Compatibility
No
USB Connectivity
No
Hardware Encryption
No
Web Based Management
No
Wi-Fi
No
Hot Swap Drive Bays
No
Coming Soon
No
Newly Launched
No
EOL
No
Ethernet Lan
No
Storage Drives Installed
No
USB Port
No
Built In Ftp Server
No
Jumbo Frames Support
No
Built In Camera
No
Clamp Included
No
Rack Mounting
No
Discrete Graphics Support
No
Intel Extreme Memory Profile Xmp
No
Nvidia G Sync
No
AMD Freesync
No
Customizable Movement Resolution
No
Backlight
No
Noise Canceling
No
Cable Management
No
Intel Quick Sync Video Technology
No
Hdmi
No
DVI Port
No
Height Adjustment
No
Card Reader Integrated
No
Screws Included
No
Tiltable
No
Wall Mountable
No
Front Panel Connector
No
Touchscreen
No
DVI Output
No
Hdmi Output
No
Displayport Output
No
Remote Control Included
No
Power Supply Included
No
Atx Power Connector 24 Pin
No
Intel Stable Image Platform Program Sipp
No
Cpu Fan Connector
No
SFP Module Slots Quantity
0
Read Speed USB 3 2 Gen 1 3 1 Gen 1
0
Total Storage Capacity
0
Total Megapixels
0
Installed SFP Modules Quantity
0
Power Over Ethernet Poe Ports Quantity
0
Sim Card Slot
No
Gigabit Ethernet Copper Ports Quantity
0
Combo SFP Ports Quantity
0
Number of M 2 M Slots
0
Floppy Drive Power Connector
0
PCI Express X16 Gen 4 X Slots
0
Number of Sata Power Connectors
0
PCI Slots
0
PCI Express X16 Gen 3 X Slots
0
PCI Express X16 Slots
0
PCI Express X1 Slots
0
PCI Express X1 Gen 2 X Slots
0
PCI Express X1 Gen 3 X Slots
0
PCI Express X4 Slots
0
Maximum Psu Length
0
Maximum Graphics Card Length
0
Height Adjustment Range
0
DVI D Ports Quantity
0
Movement Resolution
0
Number of 3 5 Bays
0
PCI Express Power Connectors 6 2 Pin
0
Peripheral Molex Power Connectors 4 Pin
0
VGA D Sub Ports Quantity
0
PCI Express X8 Gen 3 X Slots
0
Number of Products Included
0
Depth Without Stand
0
PCI Express X4 Gen 3 X Slots
0
Compatible Operating Systems
0
Width Without Stand
0
Number of Displays Supported On Board Graphics
0
USB 3 2 Gen 2 3 1 Gen 2 Type A Ports Quantity
0
Fiber Ports Quantity
0
Compatible Products
0
Esata Ports Quantity
0
Master Outer Case Gross Weight
0
USB 3 2 Gen 2 3 1 Gen 2 Type C Ports Quantity
0
Displayports Quantity
0
Number of Sata Iii Connectors
0
Switching Capacity
0
Microphone Frequency
0
MPN
V2865AX-K
Viewable Size Horizontal
0
Viewable Size Vertical
0
Maximum Weight Capacity
0
Battery Voltage
0
Basic Switching RJ 45 Ethernet Ports Quantity
0
Depth With Stand
0
Width With Stand
0
Output Power Capacity
0
Weight With Stand
0
Number of Fans
0
USB 3 2 Gen 1 3 1 Gen 1 Type A Ports Quantity
0
Number of Storage Drives Supported
0
Master Outer Case Length
0
Master Outer Case Width
0
Master Outer Case Height
0
Storage Relative Humidity H H
0
Vendor
Draytek
Storage Temperature T T
0
Quantity Per Pack
0
Package Height
0
Package Depth
0
Width
0
Depth
0
Height
0
Weight
0
Package Weight
0
Package Width
0
Quantity
0
Processor Lithography
0
Maximum Supported Storage Capacity
0
Hdmi Ports Quantity
0
USB 2 0 Ports Quantity
0
Package Height
0
Package Depth
0
Width
0
Depth
0
Height
0
Package Width
0
Product Enquiry
Product Name
Vigor 2865ax
Product SKU
272249