Home/Blog/New DrayTek 2.5GbE WAN High-Speed Routers – Vigor2136 Series

New DrayTek 2.5GbE WAN High-Speed Routers – Vigor2136 Series

February 14, 2025

Overview

Ready to connect to NTD (Network Termination Device) of NBN (Aust) and UFB (NZ)
1 x 2.5 Gigabit WAN port with 2 x USB ports for 4G Mobile Fail-Over
1 x configurable 2.5 GbE WAN/LAN port (P1)
3 x Gigabit LAN ports with 50,000 NAT sessions
NAT throughput with Hardware Acceleration over 2.3 Gbps
IPsec VPN throughput up to 390 Mbps (AES 256 bits)
Object-based SPI Firewall, Content Security Management (CSM) and QoS
IAM (Identity and Access Management) to enhance security management and user experience
IPv6 & IPv4
802.11ax (AX3000) Wi-Fi up to 574 + 2402Mbps speed (ax model)
4 x VPN tunnels, including IPsec, OpenVPN and Wireguard
2 x USB ports for 4G Backup, FTP server, network printer or thermometer
Virtual AP Controller for the deployment of up to 9 wireless VigorAPs
Wireless Mesh (ax model) up to 7 VigorAPs
Virtual Switch Controller to manage up to 5 VigorSwitches
Supports VigorACS 3 (Central Management system) for multi-site deployment
2 years back to base warranty

Vigor2136 Series 2.5GbE WAN High-Speed Router

Vigor2136 Series is a broadband router featuring a super-fast 2.5GbE WAN port that meets the demands of modern-day businesses. With a hardware accelerator, it delivers up to 2.3 Gbps performance with plenty of business-grade features, including Web Content Filtering, Route Policy, App-based QoS, Object-oriented SPI Firewall, Four VPN tunnels, Tag-based VLAN, traffic management, etc.

The Wi-Fi model of Vigor2136 Series supports 802.11ax Wi-Fi with Multiple/Hidden SSIDs, WDS, AP Discovery, SSID VLAN grouping with LAN ports, Wireless Rate Control, and WMM (Wi-Fi Multimedia).

1 x 2.5GbE WAN & 1 x 2.5GbE LAN/WAN Switchable	4x VPN tunnels IPsec throughput up to 390 Mbps
AX 3000 Delivers link rate up to 3 Gbps (ax model only)	50k NAT sessions Recommended for a network of up to 30+ devices

Interface

1 WLAN/WPS Button (ax model)
2 Reset Button
3 WAN Port: 1x 2.5GbE RJ-45
4 LAN/WAN Switchable Port: 1x 2.5GbE RJ-45
5 LAN Port: 3x GbE RJ-45
6 2x USB 2.0
7 Power On/Off Switch
8 Power Input
9 Wireless Antenna (ax model)

Performance Comparison: Vigor2136 vs. Vigor2135

NAT throughput with Hardware Acceleration (2.56x times faster)

Vigor2136 Series – 2.3 Gbps

Vigor2135 Series – 900 Mbps

IPSec throughput (2.3 times faster)

Vigor2136 Series – 350 Mbps

Vigor2135 Series – 150 Mbps

Multi-Gigabit Router

Faster Wired Connections

4K video streaming
Online Gaming
Large file transfers
Network-attached storage (NAS) devices etc

Beyond Gigabit

With internet speeds of up to 2.5 Gbps, users can fully utilize the available bandwidth.

Secure network with VPN

Vigor2136 supports the most secure VPN protocols:

Hardware NAT & Routing

With hardware acceleration enabled, the Vigor2136 Series’ NAT throughput can reach 2.3Gbps while still meeting the requirements of QoS. Business-critical apps can be prioritised over other apps.

LAN (2.5GbE) to WAN 1

2.3 Gbps

With Hardware NAT & Routing

LAN (1GbE) to WAN 1

950 Mbps

Without Hardware NAT & Routing

IAM (Identity and Access Management)

Vigor2136 Series with the new DrayOS5 is Zero Trust ready!

IAM (Identity and Access Management) is a cybersecurity system that controls user access by managing digital identities, authentication, and authorisation, to ensure correct access to network resources such as applications and devices.

DrayTek

With processes including identifying, authenticating, authorising users or groups, and assigning appropriate levels of access, IAM enhances both security management and the user experience and plays an important role in cloud-based services.

The IAM solution from Vigor2136 is Zero Trust Ready, and allows you to grant and categorize user privileges, create and manage access policies, and define large-scale group policies that integrate multiple filtering rules and traffic-shaping settings.

Users & Groups

User accounts and user groups allow flexible access level control.
Existing external authentication server is supported.
User and MFA protection can be easily configured.

Access Policies

System administrators can create access policies for the local users in this tab. The access policies can be configured based on:

MAC address filter list
The allowed / blocked user list
The login sessions lifetime

Access policies can be combined to create a robust security framework for your system.

Group Policies

Group policies can be configured for predefined local resources such as employees, workstations, network printers, and local servers. Network Firewall and traffic shaping policies can be configured to enhance network security and optimise traffic flows.

DrayTek

Conditional Access Policy

Conditional access policies can be configured to request users to provide multiple forms of authentication before granting appropriate access to a resource.

Specify a period for the user to re-authenticate
Restrict access to specific source IP addresses or ranges of IP addresses
Specify VLAN-based access level in your conditional policies
Set up time schedules when users are allowed to log-in

Resources Tab

Configure local resources such as IP and Mac addresses for workstations, network printers, PBX systems, NVR systems, servers, etc.

Backup and Restore

Backup or restore router settings such as Users and Groups, Access and Group Policies, etc. A Password protection can be applied before backup or restore.

URL Reputation

URL Reputation is a cloud-based technology that provides a Threat Intelligence Service. This service adds an extra layer of security protection for LAN clients during their online activities.

There are 82 categories, 10 of which are security-focused, providing comprehensive and up-to-date protection to your home or office network.

The various categories cover network security, including malware, spyware, adware, parental control for child protection, business, social networking, and more, to ensure a safe online environment while boosting employee productivity and reaching efficient bandwidth management.

You can purchase URL Reputation B card for your Vigor2136 series

Learn More

Vigor2136ax 2.5GbE Router
with AX3000 (WiFi 6) capacity

Vigor2136ax is a 2×2 dual-band Wi-Fi router that provides 160MHz bandwidth and 1024-QAM modulation to increase wireless data speed greatly. The theoretical speed is up to 3,000Mbps, of which 574Mbps is in the 2.4GHz band and 2,402Mbps in the 5GHz band, making it 2.5 times faster than an 802.11ac 2×2 dual-band router. Equipped with business-grade features, including URL Reputation, Route Policy, App-based QoS, and lots more, Vigor2136ax is perfect for professional smart homes/SOHO users who want to take full control of their network.

OFDMA (Orthogonal Frequency Division Multiple Access).
With OFDMA modulation scheme, each channel is made up of 256 subcarriers spaced 78.125 kHz apart, compared to 64 subcarriers spaced 312.5 kHz apart with OFDM. With up to 4 times data efficiency and more advanced channel sharing technologies, a device can be allotted bandwidth based on the assessed needs for the highest airtime efficiency possible. For example, users on streaming or VoIP services can be allocated more bandwidth and time, while services such as email or website browsing can be assigned less bandwidth that are still sufficient for the tasks, thus improving user experience in high-density environments.

MU-MIMO

BSS Colouring Instead of CSMA/CA which allows only one device to transmit at a time, 802.11ax uses BSS Colouring to manage collision avoidance. Each Wi-Fi device is assigned a Basic Service Set (BSS), a 6-bit colour field, while adjacent devices are allocated with different colours. Before transmitting, the device checks the BSS and backs off only when the BSS is of the same colour as its own. In this way, the spectral efficiency is maximized as APs and Wi-Fi clients can transmit simultaneously even if they are on the same channel. DrayTek

TWT (Target wake time) Devices negotiate with the AP for a Target Wake Time (TWT), or joint a TWT broadcast session, and transmit data only when the TWT arrives, thereby reducing power consumption and increase network efficiency. DrayTek

WPA3 (Wi-Fi Protected Access 3) enhances the security of Wi-Fi networks by addressing vulnerabilities in previous standards (WEP, WPA and WPS2) and introduces new features including stronger authentication, better encryption, and improved protection against attacks such as brute-force password guessing and man-in-the-middle exploits.

DrayTek’s WiFi 6 encryption:

WEP (64 / 128-bit)
WPA / WPA2 / WPA3 / OWE

The comparison table below compares security design of Wi-Fi security protocols WEP, WPA, WPA2 and WPA3.

	WEP	WPA	WPA2	WPA3
Encryption	RC4	TKIP / RC4	AES-CCMP	AES-CCMP/ AES-GCMP
Session Key	64/128 bit	128 bit	128 bit	128/256 bit
Authentication	Open system, shared key	Pre-shared key	Pre-shared key	AES-CCMP/ AES-GCMP
Level of Security	Very low	low	Moderate	High

AP-Assisted Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

Extend Transmission Range

When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.

Improve Data Rates

When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.

Better User Experience

Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.

No Controller Required

Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.

Mesh Wi-Fi (Vigor2316ax only)

Vigor2316ax supports up to 7 APs, which can form one or more Wireless Groups. Each group can form Mesh links automatically based on the optimum signal level among the APs and devices.

Hotspot Web Portal

Market your business while offering free Wi-Fi.

Wi-Fi Marketing

Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.

Grow Customer Mailing List

Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types

Various login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, and RADIUS.

3rd-Party Service Compliant

Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.

Data Quota Management

Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.

LAN Management

The LAN Management platform allows easy and flexible configuration for Vigor devices on the LAN side, supporting up to 20 VigorAPs (including a root AP) and 5 VigorSwitches.

Automatic Device Discovery

Just connect new devices such as Vigor Switches or APs to the LAN port, Vigor2136 will auto-configure the new devices into the network.

Provisioning

New devices such as Vigor Switch/AP can be configured into the network automatically.

Monitoring

A summarized view of the network at the same page allows fast monitoring of all devices in the network.

System Maintenance

Tasks such as factory reset, backup and restore of configuration settings, or remote reboot can be performed from the Vigor routers, without needing to log in to the devices’ management pages.

Key Features

VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2136 Series to the remote offices and teleworkers over the Internet. Learn more.

IAM
A solution that manages digital identities, authentication, and access control to ensure the right users or groups have appropriate access to critical resources.

Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more.

Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.

Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more.

Virtual AP/Switch controller
All-in-one management platform for Vigor2136 Series to maintain and monitor the VigorAPs and VigorSwitches.

Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more.

Wireless Management Solution

Mesh (ax model)

Up to 7 APs

DrayTek Wireless app-support
Discovery
Auto-Provisioning
Monitoring
Centralized Hierarchy View

Virtual AP Controller

Up to 9 VigorAPs

Auto-Discovery
Auto-Provisioning
Monitoring
Centralized View
Alarm
Reboot VigorAP Remotely
Wi-Fi Client Load Balancing

Device Management

View and Configure VigorAPs

Device List
Mesh Status
AP Adoption

Switch Management Solution

SWM

Virtual Switch Controller
Up to 5 VigorSwitches

Device Management

Display VigorSwitch name, MAC address, IP address, Firmware Version, Model, Online Status, System Uptime, Port in Use, Clients, and Last Process Status.

Scan the network to add new VigorSwitches.

Port Profile

Create profiles that include general settings, VLAN, GVRP, Multicast STP, and QoS settings, which can be applied to the managed switch.

Maintenance

Perform maintenance tasks for selected VigorSwitch.

Tasks include Configuration backup and restore, Remote Reboot and Factory Reset of the selected switch.

Software Management

VigorACS 3

Zero Touch Deployment & Provisioning
Auto VPN
Interface Quality & SLA
VoIP Optimization & Monitoring
Application Visibility
Application Based SD-WAN Policy
Customized Hotspot Page with Multilingual
Hotspot Clients Analytics
ACS Server Load Balancing / Failover

In-the-box

Note :

The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated

Videos:

How to setup Wireless WAN in Vigor2136ax

If you're not in an area with cabled broadband, did you know that DrayTek wireless routers can connect to a wireless hotspot? In some remote areas, you may have access to a wireless broadcast nearby. In this case, a DrayTek wireless router can be configured to connect to it and then share that internet service with your local area network, with all of the same firewall and other security benefits that DrayTek routers provide. It can also connect to a mobile phone's hotspot and use the phone's 4G or 5G internet connection, which can come in very handy if your usual ISP goes down.

Config Demo

Click below for the Config Demo Page:

Vigor2136 Config Demo Page

Learn More

Click here to view the latest videos »»»

New DrayTek 2.5GbE WAN High-Speed Routers – Vigor2136 Series

Interface

Performance Comparison: Vigor2136 vs. Vigor2135

NAT throughput with Hardware Acceleration (2.56x times faster)

IPSec throughput (2.3 times faster)

Faster Wired Connections

Beyond Gigabit

Vigor2136 supports the most secure VPN protocols:

Hardware NAT & Routing

IAM (Identity and Access Management)

Vigor2136 Series with the new DrayOS5 is Zero Trust ready!

Users & Groups

Access Policies

Group Policies

URL Reputation

Vigor2136ax 2.5GbE Routerwith AX3000 (WiFi 6) capacity

MU-MIMO

AP-Assisted Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

Extend Transmission Range

Improve Data Rates

Better User Experience

No Controller Required

Mesh Wi-Fi (Vigor2316ax only)

Hotspot Web Portal

Wi-Fi Marketing

Grow Customer Mailing List

Various Authentication Types

3rd-Party Service Compliant

Data Quota Management

LAN Management

Automatic Device Discovery

Provisioning

Monitoring

System Maintenance

Mesh (ax model)

Virtual AP Controller

Device Management

SWM

Device Management

Port Profile

Maintenance

VigorACS 3

Note :

Videos:

Recent posts

Vigor2136ax 2.5GbE Router
with AX3000 (WiFi 6) capacity