Vigor 2928 Multi-Gigabit Multi-WAN Wired FTTP Router

The DrayTek Vigor 2928 is engineered for ambitious SME and SMB environments that demand uncompromising performance and reliability. Delivering up to 9.3Gbps throughput, it ensures your business is ready for today’s high-bandwidth applications and tomorrow’s multi-gigabit fibre connections. With integrated 10GbE and 10Gb SFP+ interfaces configurable for WAN connectivity, the Vigor 2928 provides the flexibility to fully leverage high-speed fibre services while supporting seamless network expansion.

Built on DrayTek’s advanced feature set, the Vigor 2928 combines powerful routing with intelligent traffic management. Quality of Service (QoS) prioritises mission-critical applications, ensuring consistent performance for voice, video and cloud services. Comprehensive VPN capabilities enable secure site-to-site and remote access connectivity, while robust Content Filtering tools give administrators granular control over web access and network usage.

Optimised for high-speed fibre broadband, the Vigor 2928 provides great IPsec VPN throughput, delivering fast and secure encrypted connections between sites and cloud platforms. Future firmware updates are expected to further enhance performance through hardware acceleration. Whether deployed as a central office gateway or as part of a multi-site infrastructure, the Vigor 2928 offers the scale, speed and security required for modern business connectivity.

Supporting up to 50 concurrently active VPN tunnels and great VPN throughput, the Vigor 2928 series is ideal as a business router, to connect with other branches.

Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.

Connect up to 50 VPN tunnels. These encrypted tunnels securely link teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - similar to the HTTPS security that's used for most secure websites on the internet such as on-line banking and shopping services.

Teleworkers can connect with the secure IPsec, OpenVPN, or WireGuard VPN tunnels to the DrayTek Vigor 2928, using the free DrayTek Smart VPN Client app. Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices. The latter two protocols may need additional native software installed on your mobile devices.

Download the SmartVPN client and learn more about DrayTek VPN here.

The Vigor 2928 provides 5 LAN ports: 1x switchable GbE LAN/WAN and 4x 1GbE for wired links to Computers, Servers and Network Attached Storage.

Up to four LAN subnets and VLANs allow the Vigor 2928 to manage guest networks that are fully separated from internal networks and data. Or any other configuration that can use up to four subnets, whether that's a separate LAN subnet to isolate printers, IoT and other smart devices from computers and servers, or simply providing multiple IP networks through the one router. Each network can have its own Content Filtering, Firewall, Quality of Service and Route Policy configurations.

Vigor 2928 routers have full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support tagged VLANs. Such as the DrayTek VigorSwitch P2100 10-port switch, for additional network ports and features.

The Wireless LAN can also utilise VLANs, making the same Guest & Private networks possible simply by using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 805 to do the same, spanning the router's own wireless and any connected wireless APs.

The Vigor 2928 can be centrally managed along with VigorAP's and switches, with the VigorACS central management platform.

This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.

For full details of VigorACS, click here.

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.

The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.

The Vigor 2928 supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.

The content control features of the Vigor 2928 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.

Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).

Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.

Prioritise latency-sensitive applications on your network with Quality of Service.

App QoS simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom and Skype.

Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support

Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.

Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.

This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2928 router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.

The Vigor 2928 can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages and automates the certificate process. Keeping the certificate up to date and ready for use with SSL VPN and other services.

Virtual Controller is a management feature that helps with deployment and monitoring of DrayTek VigorAPs and VigorSwitches. The system can auto detect access points and switches. For smaller setups with fewer than 8 APs, it seamlessly enables Mesh mode where 1 root AP and up to 7 nodes can be linked together. In larger wired deployments, it activates AP management mode for up to 20 APs, while switch management supports up to 5 switches, ensuring enhanced control and scalability.

DrayTek Vigor 2928 series routers can manage up to 20 DrayTek VigorAP access points with Vitrual Controller AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network. This enables you to centrally control, manage and administer a full DrayTek network installed around the home or office, through the router's web interface. Ideal for local or remote management.