DrayTek Vigor2865ax Review Published in APC Magazine Issue 515 – Jan 2023

February 24, 2023

“The DrayTek Vigor2865ax brings high performance AX3000 spec Wi-Fi to a router that already offers great features and flexibility for businesses that use a VDSL2 connection.”

The Vigor2865 series includes a range of small to medium business routers, with VDSL2 model, WAN port and a top notch Wi-Fi. We are testing the higher end, Wi-Fi 6 equipped Vigor2865ax, but there are also models without wireless, others with VoIP options, or even built-in LTE connectivity. The 2865 series is a multi-WAN router, so a key ingredient is being able to multiple internet connections for improved performance and redundancy.

All models include a VDSL2 modem, which supports 35b Supervectoring, as well as being backwards compatible with ADSL2+. With a suitable VDSL2 connection, the 2865 series can handle speeds up to 300 Mbps. Of course you can also use a non VDSL option via the Gigabit WAN port, or even configure Wi-Fi WAN connections. You also get 5 Gigabit LAN ports, and further connectivity is available via the USB ports, which can support 4G modems.

The 2865ax model includes ultra fast AX3000 spec Wi-Fi 6. This is provided by 2×2 MU-MIMO radios and 2402Mbps of bandwidth on the 5GHz band, while the 2.4GHz band can do up to 574 Mbps. While not the very fastest Wi-Fi available, this still offers excellent performance. For those not needing quite so much wireless bandwidth, or wanting to use the 2865 series with existing Wi-FI APs, there is an AC1300 spec model, as well as one with no Wi-Fi at all.

Multiple high speed WAN connections are not much use without enough performance to actually share it out over a wider network, so importantly the 2865 includes hardware acceleration options. It can be configured in different ways, but makes for a big improvement in overall throughput – especially when running multi WANs. For companies that use multiple SSL-VPN tunnels for remote access, hardware acceleration can give a huge 2.8x boost to throughput.

The Vigor2865 series has more features than we have space, so make sure to check out the DrayTek website for the full list. But some key points are up to 32 VPN tunnels, 16 VLANs, ability to handle 1022 IP addresses, 8 LAN subnets, a robust firewall, filtering and QoS options, failover and load balancing management and Wi-Fi hotspot options. The 2865 also supports managing up to 20 Vigor Access Points, and 8 Vigor routers. Management can be done via the 2865 interface itself, or using the Draytek VigorACS network management software. With the latest VigorACS 3, the 2865 even supports SD WAN.

Getting the 2865 set up and managing our network of other DrayTek devices was fast and easy. Performance of the wired side was top notch, and while exact Wi-Fi speed will depend on the connecting device we managed 549 Mbps at close range, which dropped off to a respectable 399 Mbps at ten meter range. Importantly the 2865ax handled multiple high bandwidth devices at the same time. It will come as no surprise that such a feature packed modem router has a rather dense interface, but it is generally well laid out and quite intuitive to use. DrayTek hosts virtual versions of their network gear online, so you can try it yourself at www.draytek.com/products/live-demo.

 

CLICK HERE TO READ THE FULL REVIEW

 

 

Overview

  • Multi-WAN with 1 x VDSL2 35b Supervectoring / ADSL2+ WAN port, 1 x configurable GbE WAN/LAN port, 2 x USB ports
  • 1 x XDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
  • 2 x USB 2.0 ports for 3G/4G LTE USB modems, FTP server, network printer or thermometer
  • 5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
  • 32 x VPN tunnels (including 16 x OpenVPN/ SSL-VPN tunnels) with most security protocols
  • Fast VPN throughput, VPN load-balancing and backup for site-to-site applications
  • Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.3Gbps (Multi-WAN) Firewall speed
  • 16 x VLANs for secure and efficient workgroup management
  • IPv6 & IPv4
  • Up to 1022 IP addresses and 8 IP subnets
  • Integrated IEEE 802.11ax (AX3000) wireless Access Point; dual band; up to 2402 Mbps throughput (ax model)
  • High Availability mode
  • Object-based SPI Firewall and CSM (Content Security Management) for network security
  • Supports VigorACS 2 and VigorACS 3 Central Management Software for remote management
  • SD WAN capability when used with VigorACS 3
  • Central VPN Management for up to 8 remote Vigor routers Learn More
  • Central AP Management for up to 20 Vigor Access Points Learn More
  • Central Switch Management for up to 10 VigorSwitches Learn More
  • 2 years back to base warranty

 

Multi-WAN VDSL2 35b/

Ethernet Security Routers for SMB

The Vigor2865 series are VDSL2 35b/ADSL2+ security Firewall routers integrating a DSL modem which is compatible with variants of ADSL and VDSL, including profile 35b supervectoring. There is also a configurable Gigabit Ethernet WAN/LAN port for broadband connections to share the traffic load or serve as a Failover connection. A 3G/4G/LTE USB modem can also be attached to the USB ports of the router. The Vigor2865 series includes models with built-in 802.11ax (AX3000)/ 802.11ac Wi-Fi and a VoIP gateway.

  1. Wireless Antenna (ax/ac/Vac models)
  2. Reset Button
  3. WLAN/WPS Button (ax/ac/Vac models)
  4. LED Indicator
  5. 2 x USB 2.0 ports for 3G/4G LTE USB modems, FTP server, network printer or thermometer
  6. GbE LAN/WAN Switchable Port: 1x GbE RJ-45
  7. Fixed LAN Port: 5x GbE RJ-45
  8. 2 x VoIP FXS ports (Vac model)
  9. Fixed WAN Port: 1x RJ-11 for VDSL2 35b/ADSL2+
  10. Power On/Off Switch
  11. Power Input

New OFDMA Feature for 802.11ax

(Vigor2865ax Only)

 

Higher Transmission Efficiency with OFDMA

OFDMA has been used in LTE for many years, and is now available in 802.11ax for multi-user mode.

With legacy OFDM, each frame is transmitted across the entire channel width. When the transmission rate is low, this causes more latency and jitters and lower the overall efficiency.

OFDMA splits a single frame into groups of subcarriers, and each subcarrier can be sent simultaneously. With multiple access mode, it allows multiple users to transmit at the same time thus improving efficiency and enhancing user experiences in high density environments.

 

OFDM

OFDMA

 

802.11ax Downlink & Uplink MU-MIMO

(Vigor2865ax only)

 

802.11ax BSS Colouring

(Vigor2865ax only)

 

In traditional 802.11 Wi-Fi networks, access points are designed to wait and take turns if other signals of the same frequency are detected from adjacent access points. This sharing of a resource, in this case radio frequencies, is called a basic service set (BSS). 802.11ax adds Colouring to the BSS information being broadcast so that APs can use the same channel at the same time without having to take turns. This increases Wi-Fi efficiency, particularly in high density environments.

In the diagram here, AP1 and AP4 are using Channel 1 simultaneously, which normally means they would have to take turns if transmitting information at the same time. However, using BSS Colouring, the 2 APs can now transmit simultaneously without waiting.

An 802.11ax AP using BSS Colouring has the ability to change its BSS Colour if it detects another AP using the same BSS Colour on the same frequency.

Hardware Acceleration

NAT Acceleration & Hardware QoS

Without sacrificing traffic control features such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph and Data Flow Monitor, Hardware Acceleration enhances performance for:

  • NAT & routing connections
  • QoS
  • IPsec VPN

Hardware NAT & Routing

With Hardware Acceleration and Hardware QoS enabled, the router supports up to 8k NAT and routing connections, and firewall performance reaching 940Mbps on single WAN and 1.3Gbps combined performance on multi-WANs.

Hardware QoS

Hardware QoS allows prioritization of applications and services on DrayTek routers, to improve performance of critical applications such as VoIP, conferencing and video streaming, etc. Furthermore, it allows flexible bandwidth allocation to suit business requirements.

Hardware IPsec

While the Vigor2865 series already has improved IPsec performance over the previous Vigor2862 series, with Hardware Acceleration enabled, IPsec performance can now reach 800 Mbps. The first 16 tunnels are automatically accelerated on a first come first serve basis. If any drops out, a new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.

App QoS

 

Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications, such as VoIP, conferencing video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

VoIP First

VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.

Improve Experience for Business-Critical Apps

Select your business critical apps, and easily put them into QoS classes.

Flexible Bandwidth Allocation

Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

 

 

Hotspot Web Portal

Market your business while offering free Wi-Fi

Wi-Fi Marketing

Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.

Grow Customer Mailing List

Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types

A variety of login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.

3rd-Party Service Compliant

Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.

Data Quota Management

Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.

 

AP-Assisted Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

Extend Transmission Range

When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.

Improve Data Rates

When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.

Better User Experience

Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.

No Controller Required

Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.

Key Features

Load Balancing Maximise throughput and reliability by using multiple Internet connections. Learn more



Bandwidth Management Prevent one device using all the bandwidth with bandwidth limit policy, session limit policy, and QoS settings.



VPN (Virtual Private Network) Build a secure and private tunnel from the LAN of the Vigor2865 Series to remote offices and teleworkers over the Internet. Learn more




Hotspot Web Portal Market your business and communicate with the guests while offering hospitality Wi-Fi. Learn more




SSL VPN SSL VPN works through firewalls providing secure remote access to any network environment. Learn more




35b Supervectoring Modem Integrated VDSL modem, supporting VDSL2 profile 35b supervectoring.




DrayDDNS Free DDNS service to access the router using a fixed hostname of your choice. Learn more




Firewall & Content Filter Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.




Central AP Management Use the Vigor2865 router as a wireless controller to maintain and monitor VigorAPs. Learn more




Central Switch Management Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more




Management Solution

All-in-One Management

Central Switch Management

Central AP Management

  • Auto-Discovery
  • Provisioning
  • Monitoring
  • Centralised Hierarchy View
  • Reboot PoE Devices Remotely
  • Quick VLAN Configuration
  • Auto-Discovery
  • Auto-Provisioning
  • Monitoring
  • Centralised View
  • Alarm
  • Reboot VigorAP Remotely
  • Wi-Fi Client Load Balancing

Software Management

VigorACS 2 VigorACS 3

  • Provisioning
  • Monitoring
  • Centralised Hierarchy View
  • Alarm
  • Reboot Vigor Devices Remotely
  • Scheduled Maintenance
  • Report

In-the-box

Note :

The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Config Demo

CLICK HERE TO THE CONFIG DEMO PAGE

 

LEARN MORE