The Vigor2865 series are VDSL2 35b/ADSL2+ security Firewall routers integrating a DSL modem which is compatible with variants of ADSL and VDSL, including profile 35b supervectoring. There is also a configurable Gigabit Ethernet WAN/LAN port for broadband connections to share the traffic load or serve as a Failover connection. A 3G/4G/LTE USB modem can also be attached to the USB ports of the router.

OVERVIEW

SPECIFICATION

Interface
Fixed WAN Port	1x RJ-11 for VDSL2 35b or ADSL2/2+
LAN/WAN Switchable Port	1x 10/100/1000Base-TX RJ-45
Fixed LAN Port	5x 10/100/1000Base-TX RJ-45
USB Port	2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
Wi-Fi Antenna	2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz(ac/Vac/ax model)
2.4G WLAN	802.11n 2×2 MIMO 400Mbps (ac/Vac/ax model)
5G WLAN	802.11ac Wave 2 2×2 MU-MIMO 867Mbps (ac/Vac/ax model)
RJ-11 Port for Voice	2x FXS (Vac model)

Performance
NAT Throughput	800 Mbps
IPsec VPN Performance	300 Mbps (AES 256 bits)
SSL VPN Performance	130 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	32
Max. Concurrent OpenVPN / SSL-VPN	16

VDSL/ADSL
VDSL Standards	ITU-T G.993.2 Annex A/B/M/Q (up to Profile 35b but excluding 30a); T1.424; ITU-T G.993.5 (Vectoring)
VDSL2 Profile	8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b (not G.fast)
ADSL Standards	ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other Standards	ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan	998, 997

Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN	(ac/Vac/ax model)
3G/4G/LTE WAN with USB modem
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
Multicast	IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Local RADIUS server
SMB File Sharing	(Requires external storage)

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN)
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Redundancy	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher

Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (* subscription required)
DoS Attack Defence
Spoofing Defense

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritisation

Wireless LAN (ac/Vac/ax model)
Number of SSID	4 per radio band
Security	WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1x
WPS	PIN, PBC
WDS	Bridge, Repeater
Access Control	Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling
AirTime Fairness
Band Steering	(ac/Vac/ax model)
MU-MIMO (5GHz Only)	(ac/Vac/ax model)
WMM

VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF

Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2862
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management	8 remote Vigor routers
Central AP Management	20 VigorAPs
Central Switch Management	10 VigorSwitches

Physical
Power Supply	DC 12V @ 2A
Max. Power Consumption	24 watts (ac/Vac/axmodel)
Dimension	241mm x 166mm x 46mm
Weight	620g (ac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate