DrayTek Vigor 2862ac

Vigor 2862ac ADSL/VDSL router technical specification

Want to get straight to the techy part? Below you’ll find all the information you need to make a decision.

Physical interfaces

LAN Ports (Switch): 5 X Gigabit Ethernet (1000Mb/s) Ports / LAN Port 5 Switchable with WAN2 (req. f/w 3.8.8 or later) | WAN Ports: WAN1 ADSL/VDSL, RJ11 WAN2 Gigabit Ethernet (1000Mb/s) Ethernet for load balance and WAN failover / Switchable with LAN Port 5 WAN3 USB 2.0 Port for 3G/4G Modem, thermometer or Printer WAN4 USB 2.0 Port for 3G/4G Modem or Printer Wireless WAN Wireless interface can provide WAN connectivity

Performance

Firewall up to 400Mb/s max | IPSec VPN up to 60Mb/s max

ADSL compatibility

ANSI T1.413 Issue2 | ITU-T G.992.1 G.dmt (ADSL) | ITU-T G.992.2 G.lite | ITU-T G.992.3 ADSL2 | ITU-T G.992.5 ADSL2+ | Annex L (READSL) | Annex A | Annex M | ANFP Issue 3 Compliant/Certified (for Annex A & Annex M) | DSL Forum TR-048/67 & TR-100

VDSL compatibility

Ultrafast Fibre compatible | BT Infinity option 1 & option 2 compatible | SIN498 MCT Approved | Support for G.INP & Vectoring | ITU-T VDSL2 G.993.2 | ITU-T G.993.1, G.997.1 | Band Plan: G.998, G.997 | Annex A, Annex B, Annex C | VDSL2 Profile: 8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a | OLR, UPBO, DPBO Supported | US0 Supported | Loop Diagnostic Mode | DSL Forum WT-114

Load balance / Failover features

Outbound policy-based load-balance to direct traffic via: NAT or routing, WAN interface, LAN interface, specific LAN gateway, VPN tunnel | IP-based or session-based load balance modes | WAN connection failover | BoD (bandwidth on demand) | WAN1 PPPoE/PPPoA fallback account, used if the primary details are unable to establish a working connection | Configurable load balance pool, specify WAN interfaces to load balance | WAN budget

Vigor 2862 ATM protocols (DSL)

RFC-2684/RFC-1483 multiple protocol over AAL5 | RFC-2516 PPP over Ethernet | RFC-2364 PPP over AAL5 | PPPoE pass through LAN/WLAN | PPPoE/PPPoA relay | Transparent bridge for MPoA | Multiple PVC support for triple play applications (up to 8 simultaneous) | Support for RFC4638 for MTU up to 1500

Wireless LAN features

802.11g/b/n and 802.11ac | Backward compatibility for 802.11b/g | Wireless features: 802.11a, 802.11ac (5Ghz), 4x4 MU-Mimo (5Ghz), up to 4 spacial streams, TX beamforming, 1733Mb/s link rate (5Ghz) + 300Mb/s (2.4Ghz), Dual-band (2.4/5Ghz) simultaneous wireless, 256QAM / Extended DFS frequency range | Multiple SSID: create up to 4 virtual wireless LANs (independent or joined) | Packet aggregation and channel bonding | Optional higher gain or directional aerials available | Active client list in web interface | Wireless LAN isolation (from VLAN groups and wired Ethernet interfaces) | 64/128-bit WEP encryption | WPA/WPA2 encryption | Switchable hidden SSID | Restricted access list for clients (by MAC address) | Time scheduling (WLAN radio can be disabled at certain times of day) | Time scheduling for individual SSIDs | Access point discovery | WDS (wireless distribution system) for WLAN bridging and repeating | 802.1x radius authentication | Wireless VLAN | Wireless rate-control | Automatic power management | 802.11e WMM (Wi-Fi multimedia) | Station control, limit wireless client access time per day | Airtime fairness | Band steering | Wireless WAN mode for WAN2, switchable with Ethernet (Wireless models only)

WAN protocols (Ethernet)

DHCP client | Static IP | PPPoE | PPTP | BPA

Firewall & security features

CSM (content security management): URL keyword filtering - whitelist or blacklist specific sites or keywords in URLs | Block websites by category, e.g. adult, gambling, etc. (subject to subscription) | Prevent accessing of websites by using their direct IP address (thus URLs only) | Blocking automatic download of Java applets and ActiveX controls | Blocking of website cookies | Block http downloads of file types: binary executable (.exe, .com, .bat, .scr, .pif), compressed (.zip, .sit, .arc, .cab, .arj, .rar), and multimedia (.mov, .mp3, .mpeg, .mpg, .wmv, .wav, .ram, .ra, .rm, .avi, .au) | Time schedules for enabling/disabling the restrictions | Block popular P2P (Peer-to-Peer) file sharing programs | Block instant messaging programs, e.g. IRC, Skype/Yahoo messenger, etc

DNS filter: use DNS to enforce categorisation | Web portal | Multi-NAT (32 WAN IPs per WAN1 & WAN2) | DMZ host | DMZ port (via LAN port P1, switchable) | 40 port redirection rules | 40 open port rules (10 port ranges per rule) | Policy-based firewall | MAC address filter | SPI (stateful packet inspection) with new FlowTrack mechanism | DoS / DDoS protection | IP address anti-spoofing | Email alert and logging via Syslog | Bind IP to MAC address | User management: up to 200 profiles, supports external authentication via LDAP or RADIUS, per user bandwidth and time quota, and schedule control to delete or disable account automatically

Bandwidth management

Quality of Service (QoS): guaranteed bandwidth for VoIP, class-based bandwidth guarantee by user-defined traffic categories, layer 2&3 (802.1p & TOS/DCSP), DiffServ code point classifying, 4-level priority for each direction (inbound / outbound), Bandwidth borrowed, app QoS: classify traffic by ppplication | Temporary (5 minute) quick blocking of any LAN client | Bandwidth limit (shared or individual limit) | Smart bandwidth limitation (triggered by traffic / session) | Session limit

Network / Router management

Web-based user interface (HTTP / HTTPS) | CLI (command line interface) / Telnet / SSH | Web console: access CLI through web interface | Administration access control | Brute force protection | Configuration backup / restore | Configuration import from Vigor 2820, Vigor 2830, Vigor 2850 & Vigor 2860 | Built-in diagnostic function | Firmware upgrade via web interface, TFTP, FTP | Logging via Syslog | Supports SmartMonitor (up to 50 IPs monitored) | SNMP v2 & v3 management with MIB-II | TR-069 | TR-104 | Centrally manage up to 20 DrayTek Vigor access points | Centrally manage up to 10 DrayTek Vigor switches

VPN facilities

Up to 32 concurrent VPN tunnels (incoming or outgoing) | Tunnelling protocols: PPTP, IPSec, L2TP, L2TP over IPSec, DrayTek SSL, GRE | IPSec main and agressive modes | IKE phase 1 DiffieHelman groups 1,2,5 & 14 | IKE phase 2 DiffieHelman groups 1,2,5 & 14 (will match phase 1 selection) | IPsec IKEv1 & IKEv2 | Encryption: MPPE, DES / 3DES (168bits) and hardware-based AES (128/192/256bits) | Authentication: hardware-based MD5, SHA-1 and SHA-256 (f/w 3.8.3 and later) | IKE authentication: pre-shared Key or X.509 digital signature | SSL VPN for teleworkers - up to 16 simultaneous users. Proxy or tunnel | LAN-to-LAN & Teleworker-to-LAN connectivity | DHCP over IPSec | NAT-Traversal (NAT-T) | Dead peer detection (DPD) | VPN Pass-Through | MOTP (mobile one time password) for two factor authentication (2FA) | Virtual IP mapping, map a remote IP subnet/range to another range to resolve IP subnet/range conflicts | Port forwarding (port redirection, open ports) to remote clients connected via an IPsec LAN to LAN VPN

Network features

Port-based VLAN (inclusive/exclusive groups) | 802.1q VLAN tagging | Port mirroring | 802.1X port authentication | Multi subnet DHCP servers with DHCP relay | LAN clients: up to 1022 per subnet (for subnets 1-3) | Custom DHCP option support | Dynamic DNS | DNSSEC support | DNS transparent proxy | DNS caching | LAN DNS (supports CNAME) | NTP client (synchronise router time) | Call scheduling (enable/trigger Internet access by time) | RADIUS client | LDAP client | TACACS+ client | High availability | Internal RADIUS server | Microsoft™ UPnP support | Maximum MTU 1534 | Routing protocols: static routing (30 routes), RIP V2, RIPng for IPv6

Operating requirements

Rack mountable (optional Vigor RM1 mounting bracket required) | Wall mountable | Temperature operating: 0°C ~ 45°C | Storage: -25°C ~ 70°C | Humidity: 10% ~ 90% (non-condensing) | Power consumption: 18 Watt Max. | Dimension (W*H*L): 165.07mm*43.96mm*240.96mm | Operating power: DC 12V (via external PSU, supplied) | Warranty: two years return to base | Power requirements: 220-240VAC