Home/Blog/New DrayTek 5G/4G LTE & VDSL2/Ethernet Security Firewall Routers – Vigor2865L-5G Series

New DrayTek 5G/4G LTE & VDSL2/Ethernet Security Firewall Routers – Vigor2865L-5G Series

August 28, 2024

Video: DrayTek Vigor2865L-5G router series

Overview

5G/4G LTE modem with dual nano SIM slots (SIM slot 2 for Failover) for SA and NSA 5G WAN
Support 5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78; great coverage in Australia and New Zealand
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
Multi-WAN with 1 x VDSL2 35b modem, 1 x configurable GbE WAN/LAN port, 1 x USB port, 2 x 5G/4G LTE nano SIM slots, and 2 x Wi-Fi WANs for Lax-5G model
1 x xDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
32 x VPN tunnels (including 16 x OpenVPN/ SSL-VPN tunnels) with comprehensive secure protocols
Fast VPN throughput, VPN Load Balancing and backup for site-to-site applications
Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.3 Gbps (Multi-WAN) Firewall speed
Integrated IEEE 802.11ax (WiFi 6, AX3000) wireless Access Point; dual band; up to 2402 Mbps throughput (Lax-5G model)
16 x VLANs for secure and efficient workgroup management
IPv6 & IPv4
Up to 1022 IP addresses and 8 IP subnets
High Availability mode
Object-based SPI Firewall and CSM (Content Security Management) for network security
Supports VigorACS 3 Central Management Software for remote management
SD-WAN capability when used with VigorACS 3
Central VPN Management for up to 8 remote Vigor routers Learn more
Central AP Management for up to 20 Vigor Access Points Learn more
Central Switch Management for up to 10 VigorSwitches Learn more
2 years back to base warranty

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

The Vigor2865L-5G series combines 4G LTE and 5G to provide excellent mobile coverage in Australia and New Zealand:

5G/LTE/WCDMA Specifications

5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78 5G NR Sub-6 NSA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78 5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)** 5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)** LTE FDD Band: B1, 3, 5, 7, 8, 20, 28 LTE TDD Band: B38, 40 LTE Category: Cat19 (DL) / Cat18 (UL) WCDMA (3G) Band: B1, 8 WCDMA Max. Data Rate: 42Mbps (DL) / 5.76Mbps (UL)**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

5G & WiFi 6 for Next-Gen Connectivity

The Vigor2865L-5G series routers offer most of the features of the Vigor2865 series, with the addition of an integrated 5G/4G LTE mobile broadband Nano SIM module, supporting speeds up to 10 times faster than 4G. This enhanced LTE capability makes the Vigor2865L-5G series routers ideal for applications such as:

Remote location with no fixed line or NBN/UFB coverage
Quick setup for new branches waiting for xDSL/Ethernet WAN (e.g. NBN deployment)
Load Balancing or Failover backup for an existing primary internet connection such as Cable/NBN/ UFB Ethernet broadband
Temporary installations such as disaster recovery, emergency, exhibitions and sporting events where internet access is required for a short period
Providing internet access on public transport such as coaches, buses, trains and freighters

The Vigor2865L-5G series includes one VDSL2 35b modem, one Gigabit Ethernet WAN/LAN configurable port, five Gigabit Ethernet LAN ports, and a dual Nano SIM card slot for 5G/4G LTE broadband connectivity, allowing for a second Nano SIM to be installed for failover. The WAN ports support NBN technologies including FTTP/N/B/C, HFC, Satellite and Fixed Wireless. All WAN interfaces, including the 3G/4G USB WAN interfaces, can be configured to Load Balance mode or Failover mode.

5G Support SA and NSA mode	AX3000 (Lax model) Delivers link rates up to 3 Gbps
32 x VPN tunnels IPsec VPN throughput up to 300 Mbps	60k NAT sessions Recommended for a network of up to 50+ devices

Interface

2 x Wireless Antennas (Lax model)
1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
WLAN/WAN Switchable Port: 1 x GbE RJ-45 (Lax model)
Fixed LAN Port: 5x GbE RJ-45
Fixed WAN Port: 1x RJ-11 for 35b/VDSL2/ADSL2+
4 x LTE Antennas
2 x Nano-Sized SIM Slots (SIM slot 2 for Failover)

Performance Comparison: Vigor2865 vs. Vigor2862

5G Router with High Speed Mobile Connectivity

* Backward compatible to 4G LTE

The integrated 5G/LTE modem with Category 19 supports carrier aggregation, providing high-speed mobile broadband connectivity for Internet access and VPN.
The dual SIM slot accepts two SIM cards from different mobile network providers. This ensures that the router can seamlessly switch to the secondary SIM and cellular network if the primary mobile connectivity is broken.
The four LTE antennas with 1-metre extension cables make it easy to place the router at locations that ensure the best possible signal coverage.

Multi-WAN 5G Gigabit Security Router with Load Balance

WAN Load Balancing

The Vigor2865L-5G Series supports high throughput from Gigabit Internet connectivity via Fibre to the Premises (FTTP) and 5G LTE mobile connections. All active WANs automatically join the WAN Load Balance pool to optimize bandwidth utilisation

Seamless Failover

If an Internet connection is lost, the router automatically switches to surviving WAN connections, seamlessly transferring traffic. This ensures reliable Internet connectivity and avoids the costs associated with network downtime

Policy-Based Routing

Routing policies can be used to designate specific WAN interfaces for traffic from or to certain IP ranges and for applications such as VoIP thus enhancing network efficiency and performance.

Ideal VPN Router for SMB

Up to 800 Mbps hardware-accelerated IPsec VPN performance
Up to 32 active VPN tunnels concurrently

All common VPN standards are supported

WireGuard VPN (from firmware v4.4.3)
IKEv1/IKEv2 EAP/ SSL VPN/ L2TPoverIPsec/ PPTP/OpenVPN

Advanced Authentication for Teleworker

Two-factor authentication for teleworker VPN connections
Authentication can be integrated with Active Directory (LDAP), RADIUS, or TACACS+ servers in the network as required
Network administrators can be notified via SMS/Email when a teleworker VPN is online, preventing VPN credential loss or misuse by others

Hotspot Web Portal

Market your business while offering free Wi-Fi Wi-Fi Marketing Redirect hotspot guests to the company homepage, online surveys, or display a promotion message. Grow Customer Mailing List Require guests to leave contact info or social media accounts before they can use the Internet services. Various Authentication Types A variety of login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS. 3rd-Party Service Compliant Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer. Data Quota Management Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.

Comprehensive Firewall

Object-based Firewall

IPs and services can be grouped into objects before being applied to firewall rules. This feature simplifies the organisation of network activities.

Blocking Apps & DoH servers

APP Enforcement (APPE) allows the blocking of applications (IM, P2P, streaming, tunnelling, etc.) on a LAN network quickly and easily. For example, by blocking DoH servers in browsers, LAN clients can only use standard DNS queries and filtering.

Manage Traffic Beyond LAN to WAN

DrayTek Firewall manages not only traffic between LAN and WAN, but also those between LAN subnets, remote VPN subnets, and from WAN to the Vigor router itself. Internet IPs can be predefined for accessing the Vigor routers’ services, enhancing security and control.

Web Content Filtering with DNS Filter

The Web Content Filtering Service uses cloud-based technology to provide comprehensive and up-to-date protection for LAN clients for online activities, with 82 categories in total, 10 of which are security-focused.

Edge Router for SD-WAN

Latency, loss, and jitter measure the quality of every WAN/VPN interface. Based on these metrics, the Vigor2865L-5G can dynamically self-adjust to the best-quality interface for VoIP and business-critical applications.

Application Visibility and SD-WAN Policy

Application Visibility enables the network administrator to monitor data usage sorted by client, WAN interface, application, and time. With data usage details, SD-WAN policies can be created to route business-critical applications through the best-quality interfaces to improve the user experience.

App QoS

Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.

VoIP First

VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.

Improve Experience for Business-Critical Apps

Select your business critical apps, and easily put them into QoS classes.

Flexible Bandwidth Allocation

Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Learn More

Key Features

Embedded SIM Slot Provide 4G LTE/5G Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.

35b Supervectoring Modem Integrated VDSL modem, supporting VDSL2 profile 35b supervectoring.

Load Balancing Maximize throughput and reliability by using multiple Internet connections. Learn more

VPN (Virtual Private Network) Build a secure and private tunnel from the LAN of Vigor2865L-5G series to the remote offices and teleworkers over the Internet. Learn more

SSL VPN The VPN works through firewalls providing secure remote access to any network environment. Learn more

VPN Matcher Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more.

Firewall & Content Filter Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.

VoIP Friendly Vigor2865L-5G Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide

Bandwidth Management Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

Hotspot Web Portal Market your business and communicate with the guests while offering hospitality WLAN. Learn more

DrayDDNS The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more

Central AP Management Use the Vigor2865L-5G Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more

WiFi 6 (Lax model only) Feature OFDMA and MU-MIMO technology to improve WiFi efficiency and deliver higher wireless speed.

Mesh (Lax model only) Easily link to other VigorAP to expand the wireless network. Learn more.

Central Switch Management Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more

All-in-One Management

Mesh Management

Mesh (Vigor2865Lax-5G only) Up to 7 APs

DrayTek Wireless app-support
Discovery
Auto-Provisioning
Monitoring
Centralized Hierarchy View

Vigor Router SWM

Central Switch Management Up to 10 switches

Auto-Discovery
Auto-Provisioning
Monitoring
Centralized Hierarchy View
Reboot PoE Devices Remotely
Quick VLAN Configuration

Vigor Router APM

Vigor Router APM Up to 20 APs

Auto-Discovery
Auto-Provisioning
Monitoring
Centralized View
Alarm
Reboot VigorAP Remotely
Wi-Fi Client Load Balancing

Software Management

VigorACS 3

Zero Touch Deployment & Provisioning
Auto VPN
Interface Quality & SLA
VoIP Optimization & Monitoring
Application Visibility
Application Based SD-WAN Policy
Customized Hotspot Page with Multilingual
Hotspot Clients Analytics
ACS Server Load Balancing / Failover

In-the-box

Note :

The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Models

Vigor2865Lax-5G

Multi-WAN router with a dual 5G Nano SIM card slot, I x VDSL2 35b modem, 1 x configurable GbE WAN/LAN port, 5 x GbE LAN ports, SPI Firewall, 802.11ax (WiFi 6, AX3000) and 32 x VPN tunnels including 16 x Open VPN/SSL VPN tunnel

5G/4G LTE modem with dual nano SIM slots (SIM slot 2 for Failover) for SA and NSA 5G WAN
Support 5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78; great coverage in Australia and New Zealand
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
Multi-WAN with 1 x VDSL2 35b modem, 1 x configurable GbE WAN/LAN port, 1 x USB port, 2 x 5G/4G LTE nano SIM slots, and 2 x Wi-Fi WANs for Lax-5G model
1 x xDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
32 x VPN tunnels (including 16 x OpenVPN/ SSL-VPN tunnels) with comprehensive secure protocols
Fast VPN throughput, VPN Load Balancing and backup for site-to-site applications
Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.3 Gbps (Multi-WAN) Firewall speed
Integrated IEEE 802.11ax (WiFi 6, AX3000) wireless Access Point; dual band; up to 2402 Mbps throughput (Lax-5G model)
16 x VLANs for secure and efficient workgroup management
IPv6 & IPv4
Up to 1022 IP addresses and 8 IP subnets
High Availability mode
Object-based SPI Firewall and CSM (Content Security Management) for network security
Supports VigorACS 3 Central Management Software for remote management
SD-WAN capability when used with VigorACS 3
Central VPN Management for up to 8 remote Vigor routers Learn more
Central AP Management for up to 20 Vigor Access Points Learn more
Central Switch Management for up to 10 VigorSwitches Learn more
2 years back to base warranty

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.

Vigor2865L-5G

Multi-WAN router with a dual 5G Nano SIM card slot, I x VDSL2 35b modem, 1 x configurable GbE WAN/LAN port, 5 x GbE LAN ports, SPI Firewall, and 32 x VPN tunnels including 16 x Open VPN/SSL VPN tunnel

5G/4G LTE modem with dual nano SIM slots (SIM slot 2 for Failover) for SA and NSA 5G WAN
Support 5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78; great coverage in Australia and New Zealand
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
Multi-WAN with 1 x VDSL2 35b modem, 1 x configurable GbE WAN/LAN port, 1 x USB port and 2 x 5G/4G LTE nano SIM slots
1 x xDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
32 x VPN tunnels (including 16 x OpenVPN/ SSL-VPN tunnels) with comprehensive secure protocols
Fast VPN throughput, VPN Load Balancing and backup for site-to-site applications
Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.3 Gbps (Multi-WAN) Firewall speed
16 x VLANs for secure and efficient workgroup management
IPv6 & IPv4
Up to 1022 IP addresses and 8 IP subnets
High Availability mode
Object-based SPI Firewall and CSM (Content Security Management) for network security
Supports VigorACS 3 Central Management Software for remote management
SD-WAN capability when used with VigorACS 3
Central VPN Management for up to 8 remote Vigor routers Learn more
Central AP Management for up to 20 Vigor Access Points Learn more
Central Switch Management for up to 10 VigorSwitches Learn more
2 years back to base warranty