Draytek V2866VAC-K Router with 802.11AC WiFi5 and Phone Port


The DrayTek Vigor 2866Vac is a high-performance multi-WAN router designed for small businesses and remote workers. It supports ultrafast G.fast, superfast VDSL2, and Ethernet WAN connections, providing robust and flexible broadband connectivity.

Key features:

  • Supports G.fast (up to 330Mbps), VDSL2, ADSL2+, and Ethernet WAN for future-proof connectivity.
  • Offers multi-WAN capabilities with load-balancing and failover for increased network uptime.
  • Provides up to 950Mbps firewall throughput and 800Mbps VPN throughput with IPsec acceleration.
  • Includes 32 LAN-to-LAN and remote VPN tunnels, as well as 16 DrayTek SSL VPN or OpenVPN tunnels.
  • Features 5+1 Gigabit LAN ports with VLAN support for segmenting private and guest networks.

£315.55 Excl VAT

CALL US to discuss volume pricing 01937 534914
Do you need a Fixed IP SIM Card?

DrayTek Vigor 2866Vac Simultaneous Triple-WAN VDSL2/ADSL2+ WiFi 5 Router w/ VPN & 3G/4G LTE Support (1.2Gbps AC) and Phone Port

The DrayTek Vigor 2866Vac Simultaneous Triple-WAN VDSL2/ADSL2+ WiFi 5 Router is a G.Fast / VDSL and Ethernet Multi-WAN Firewall VPN router. This router is ideally suited to connect directly to Ultrafast G.Fast broadband and Superfast VDSL. The Vigor 2866Vac provides advanced Firewall and Content Filtering, Quality of Service and VPN with Gigabit throughput. This router also provides 802.11ac (WiFi 5) simultaneous dual-band wireless and VoIP connectivity. The Vigor 2866Vac provides a reliable, flexible, and secure networking solution, that’s ideal for Home Offices, Small Business and Satellite Offices.

Key Features

  • G.Fast and Ethernet Load Balancer
    High throughput handles fast internet connections, with Load Balancing and Route Policy.
  • AC1300 Wireless with Mesh
    Supports dual-band 802.11ac WiFi 5. Use the router as the Mesh Root with DrayTek Mesh.
  • Robust SMB VPN Router
    Up to 32 active VPN tunnels, with up to 800Mbps IPsec Hardware Accelerated throughput.
  • VoIP Friendly
    The 2866Vac can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless.
  • 5+1 Gigabit LAN Ports with VLANs
    Extensive LAN management features, use VLANs to manage up to 8 networks.
  • VigorACS Central Management
    Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.
  • Firewall & Content Filtering
    Manage internet access with Firewall, App Enforcement & Category-based Web Filtering.
  • High Availability
    Connect a pair of Vigor 2866 series routers to provide a hardware backup solution.
  • DrayDDNS with LetsEncrypt Certificates
    Free DrayDDNS address for each router, with automated LetsEncrypt SSL/TLS Certificates.
  • Quality of Service with App QoS
    Easily prioritise latency-sensitive applications on your network with App QoS.
  • Hotspot Web Portal
    Provide internet access to guests and market your business with captive portal.
  • Centralised LAN Management
    Easily manage and provision DrayTek VigorAP access points and VigorSwitch switches (sold separately).

G.fast and Ethernet Load Balancer

The Vigor 2866Vac is a G.fast, VDSL2/ADSL2+ and Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. Connect the Vigor 2866Vac to Superfast Fibre with its integrated G.fast and VDSL modem, or connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN. Featuring high throughput with Load Balancing and Failover connectivity, it is suitable for handling Fibre to the Premises (FTTP) and Gigabit internet connections. The router offers up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.

With 802.11ac (WiFi 5) wireless, it provides fast wireless coverage to your network’s computers and devices. In addition, the router can connect to wireless networks for internet access, allowing it to make use of Mobile Hotspot wireless connections and nearby wireless networks, where for instance a neighbour’s wireless network could provide an emergency backup connection.

Route Policy – Powerful Routing Management

The Vigor 2866Vac provides full policy-based control of where and how outbound traffic is routed with Route Policy:

  • VPN Routing
    Send all or select traffic through VPN services.
  • Hostname Routing
    Route access to individual websites, internet domains (i.e. www.bbc.co.uk) and hostnames through a VPN tunnel or a specific WAN.
  • Service Routing
    Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel.
  • Failover & Failback
    Extensive control of Failover with multiple Failover rules and paths. Manage how connections are moved back to the primary connection, after a Failover has occurred with Failback settings.

AC1300 Wireless LAN with Mesh

The Vigor 2866Vac provides 802.11ac (WiFi 5) simultaneous dual-band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its antennas streaming data to different devices at once, improving efficiency over standard 802.11ac (WiFi 5) wireless and allowing the router to effectively serve more wireless clients. With firmware 4.3.0, the Vigor 2866Vac wireless router can be used as part of DrayTek’s Mesh wireless system which allows the router to work as the Mesh Root, providing internet access and management of Mesh VigorAPs directly.

Ideal VPN router for SMB

A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office. The Vigor 2866Vac is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput and up to 50 concurrently active VPN tunnels. IPsec Hardware Acceleration boosts performance, up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed internet connections. It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients.

Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, DrayTek’s SSL VPN and L2TP for both LAN to LAN and Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with OpenVPN. User management for Dial-In Teleworkers is managed through the router’s web interface, with mOTP 2-factor authentication available for IPsec, L2TP and SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server.

Connect VPNs from behind NAT with DrayTek’s VPN Matcher

A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible. DrayTek’s VPN Matcher service helps DrayTek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two DrayTek VPN routers that are behind NAT and could not normally establish a VPN tunnel.

Connecting Remote Sites with LAN to LAN VPN

Supporting up to 32 concurrently active VPN tunnels, the Vigor 2866Vac is ideal for connecting multiple sites or home offices together with fast and secure IPsec VPN tunnels. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.

DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN

The Vigor 2866Vac supports up to 16 active DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology – the same encryption that you use for secure web sites such as your bank. Teleworkers can easily create a secure SSL VPN tunnel to the DrayTek Vigor 2866Vac using the free DrayTek Smart VPN Client app – available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices.

5+1 Gigabit LAN Ports with VLANs

The Vigor 2866Vac series provides up to 6 Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage. With 5 dedicated LAN ports and one flexible LAN/WAN port, the Vigor 2866Vac can connect up to 6 devices directly with a single Ethernet WAN configuration, or 5 devices with a dual Ethernet WAN configuration. With Multiple LAN subnets and VLANs, the Vigor 2866Vac can manage up to 8 separate networks. For instance, an internal network with a separate network for guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service and Route Policy applied. The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the DrayTek VigorSwitch G1080 8-port switch (sold separately), for additional network ports.

The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 903 (sold separately, see accessories tab) to do the same, spanning the router’s own wireless and any connected wireless APs.

Designed for Central Management

The Vigor 2866Vac (along with most other DrayTek routers, Access points and switches, sold separately) can be centrally managed by the VigorACS central management platform. This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers’ devices or any user who wants to know what’s going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.

Robust & Comprehensive IPv4 / IPv6 Firewall

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems. The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to. The Vigor 2866Vac supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.

Web Content Filtering with DNS Filter

The content control features of the Vigor 2866Vac allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules. Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block). Using the URL Reputation service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router, see accessories tab for compatible URL Reputation licences.

High Availability – Hardware Failover

For even greater resilience, the Vigor 2866Vac provides High Availability (HA), with both a primary and secondary router (secondary router sold separately) able to provide connectivity to your network and subnets. In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume internet, routing and VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time.

DrayDDNS – DrayTek Dynamic DNS Address

DrayTek provides a free Dynamic DNS address to each Vigor 2866Vac router, allowing you to link the router’s current IP address to a memorable “drayddns.com” hostname, such as “myrouter.drayddns.com”. This address automatically updates whenever the internet connection’s IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2866Vac router. Just use the hostname to access the router’s VPN services, management and any other services you have made accessible through the router. The Vigor 2866Vac can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages and automates the certificate process, keeping the certificate up to date and ready for use with SSL VPN and other services.

Manage Guest WiFi with Hotspot Web Portal

DrayTek routers make it easy to manage guest wireless with Hotspot Web Portal. The fully customisable captive portal can be applied to the router’s LAN / VLAN interfaces, for use with wireless access points. Authentication can be handled by Google/Facebook or an external web portal service such as Purple WiFi with RADIUS. Upon connecting to the wireless network, users are presented with your company’s branding and information. From there, depending on what you’ve set, they can simply click-through, provide their details or enter a PIN with a voucher generated by the router (voucher printer not included). Once connected, the router can allow access until a user reaches their quota limit of time connected or bandwidth used.

Quality of Service & Bandwidth Control

Prioritise latency-sensitive applications on your network with Quality of Service. App QoS simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom and Skype. Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support. Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration. Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a guest network.

Central AP & Switch Management

The Vigor 2866Vac manages DrayTek VigorAP access points and VigorSwitch switches connected locally to the router. This enables you to centrally control, manage and administer multiple AP & Switch devices installed around your building/campus from just the one router.

Central AP Management

The DrayTek router operating as the wireless controller can provision up to 20 DrayTek VigorAP access points with Central AP Management profiles, with an option to Auto Provision – auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router’s network.

Central Switch Management

DrayTek VigorSwitch switches can be provisioned and managed through the router with DrayTek’s Central Switch Management system, which allows you to:

  • Easily provision VLAN configuration and other port settings directly from the router.
  • Set bandwidth rate limits and schedules for individual ports.
  • Log switch events for alert notifications if network problems occur.
  • At a glance see the devices connected on your network with a virtual topology.

Specifications

Interface

Fixed WAN Port

  • 1 x RJ11 for G.fast/VDSL2 35b/ADSL2+

LAN/WAN Switchable Port

  • 1 x 10/100/1000Base-TX RJ45

Fixed LAN Port

  • 5 x 10/100/1000Base-TX RJ45

USB Port

  • 2 x USB 2.0

Wireless Antenna

  • 2 x External Dipole
  • Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz

2.4G WLAN

  • 802.11n 2×2 MIMO 400Mbps

5G WLAN

  • 802.11ac Wave 2 2×2 MU-MIMO 867Mbps

FXS RJ11

  • 2

Performance

NAT Throughput

  • 800 Mbps

NAT Throughput w/ Hardware Acceleration

  • 940 Mbps (Single Ethernet/DSL WAN)
  • 1.8 Gbps (Ethernet WAN + DSL WAN)

IPsec VPN Performance

  • 300 Mbps (AES 256 bits)

SSL VPN Performance

  • 150 Mbps

Max. Number of NAT Sessions

  • 60,000

Max. Concurrent VPN Tunnels

  • 32

Max. Concurrent OpenVPN + SSL VPN

  • 16

DSL

VDSL Standards

  • ITU-T G.993.2 Annex A/B/M/Q
  • T1.424
  • ITU-T G.993.5 (Vectoring)

VDSL2 Profile

  • 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b

G.fast Profile

  • 106Mhz, 212Mhz

ADSL Standards

  • ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2

Other Standards

  • ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)

Band Plan

  • 998, 997

Internet Connection

IPv4

  • PPPoE, DHCP, Static IP, PPTP/L2TP

IPv6

  • PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel

802.1p/q Multi-VLAN Tagging

  • Yes

Multi-VLAN/PVC

  • Yes

Wireless WAN

  • 2

3G/4G/LTE WAN with USB modem

  • Yes

Load Balancing

  • IP-based, Session-based

WAN Active on Demand

  • Link Failure, Traffic Threshold

Connection Detection

  • ARP, Ping

WAN Data Budget

  • Yes

Dynamic DNS

  • Yes

DrayDDNS

  • Yes

LAN Management

VLAN

  • 802.1q Tag-based, Port-based

Max. Number of VLAN

  • 16

Number of LAN Subnet

  • 8

DHCP Server

  • Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC

LAN IP Alias

  • Yes

Wired 802.1x Authentication

  • Yes

Port Mirroring

  • Yes

Local DNS Server

  • Yes

Conditional DNS Forwarding

  • Yes

Hotspot Web Portal

  • Yes

Hotspot Authentication

  • Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking

Routing

  • IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP

Policy-based Routing

  • Protocol, IP Address, Port, Domain, Country

High Availability

  • Yes

DNS Security (DNSSEC)

  • Yes

IGMP

  • IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave

Local RADIUS server

  • Yes

SMB File Sharing

  • Yes (Requires external storage)

VPN

LAN-to-LAN

  • Yes

Teleworker-to-LAN

  • Yes

Protocols

  • PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN

User Authentication

  • Local, RADIUS, LDAP, TACACS+, mOTP

IKE Authentication

  • Pre-Shared Key, X.509

IPsec Authentication

  • SHA-1, SHA-256

Encryption

  • MPPE, DES, 3DES, AES

VPN Trunk (Redundancy)

  • Load Balancing, Failover

Single-Armed VPN

  • Yes

NAT-Traversal (NAT-T)

  • Yes

DrayTek VPN Matcher

  • Yes

Firewall & Content Filtering

NAT

  • Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP

ALG (Application Layer Gateway)

  • SIP, RTSP, FTP, H.323

VPN Pass-Through

  • PPTP, L2TP, IPsec

IP-based Firewall Policy

  • Yes

Content Filtering*

  • Application, URL, DNS Keyword, Web Features, Web Category

DoS Attack Defence

  • Yes

Spoofing Defence

  • Yes

Bandwidth Management

IP-based Bandwidth Limit

  • Yes

IP-based Session Limit

  • Yes

QoS (Quality of Service)

  • TOS, DSCP, 802.1p, IP Address, Port, Application

VoIP Prioritisation

  • Yes

Wireless

WiFi 5

  • Yes

Number of SSID

  • 4 per radio band

Security Mode

  • OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3

Authentication

  • Pre-Shared Key, 802.1X

WPS

  • PIN, PBC

WDS

  • Repeater (5GHz only)

Access Control

  • Access List, Client Isolation, Hide SSID, WLAN Scheduling

AirTime Fairness

  • Yes

Band Steering

  • Yes

MU-MIMO

  • Yes (5GHz Only)

WMM

  • Yes

VoIP Gateway

Protocol

  • SIP, RTP/RTCP, ZRTP

SIP Registrars

  • 12

Dial Plan

  • Phone Book, Digit Map, Call Barring, Regional

Call Features

  • Call Waiting, Call Transfer, Scheduled DND, Hotline

Voice Codec

  • G.711 A/u law, G.723.1, G.726, G.729 A/B

Caller ID

  • FSK_ETSI, FSK_BELLCORE, DTMF

Management

Local Service

  • HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069

Config File Export & Import

  • Yes

Config File Compatibility

  • Vigor2865, Vigor2862, Vigor2860

Firmware Upgrade

  • TFTP, HTTP, TR-069

2-Level Administration Privilege

  • Yes

Access Control

  • Access List, Brute Force Protection

Notification Alert

  • SMS, E-mail

SNMP

  • v1, v2c, v3

Syslog

  • Yes

Managed by VigorACS

  • Yes

Central VPN Management

  • 8 VPN

Central AP Management

  • 20 VigorAP

Mesh Network

  • 7 VigorAP

Central Switch Management

  • 10 VigorSwitch

Physical

Power Supply

  • DC 12V @ 2A

Max. Power Consumption

  • 26.4 watts

Dimensions

  • 241 x 166 x 46 mm

Weight

  • 680g

Operating Temperature

  • 0°C to 45°C

Storage Temperature

  • -25°C to 70°C

Operating Humidity (non-condensing)

  • 10% to 90%

Certificate

  • CE

Package

Package Contents

  • 1 x Vigor 2866Vac
  • 1 x RJ45 Cable (Ethernet)
  • 1 x RJ11 to RJ45 Cable (Annex A)
  • 1 x RJ11 to RJ11 Cable (Annex B)
  • 1 x Power Adapter
  • 2 x Antenna
  • 1 x Quick Start Guide
SKU: DRAYTEK-V2866VAC-N Category:

Based on 0 reviews

0.0 overall
0
0
0
0
0

Be the first to review “Draytek V2866VAC-K Router with 802.11AC WiFi5 and Phone Port”

There are no reviews yet.