New DrayTek 5G cellular VPN routers – Vigor C510 series

• Ready to connect to NTD (Network Termination Device) of NBN (Aust) and UFB (NZ)
• 5G/4G LTE modem with dual nano SIM slots (SIM slot 2 for Failover) for SA and NSA 5G WAN
• Supports 5G NR Sub-6 SA Band: n1, 3, 7, 8, 20, 28, 38, 40, 77, 78; great coverage in Australia and New Zealand
• 5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
• 5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
• LTE FDD Band: 1, 3, 5, 7, 8, 20, 28
• LTE TDD Band: 38, 40
• 1 x configurable GbE WAN/LAN port (P1)
• 3 x Gigabit LAN ports with 50,000 NAT sessions
• NAT throughput 940 Mbps
• IPsec VPN throughput up to 370 Mbps (AES 256 bits)
• 802.11ax (WiFi 6, AX3000) Wi-Fi up to 574 + 2402 Mbps link speeds (ax model)
• 4 x VPN tunnels, including IPsec, OpenVPN, and WireGuard
• Object-based SPI Firewall, Content Security Management (CSM), and IP Reputation
• IAM (Identity and Access Management) to enhance security management and user experience
• IPv6 & IPv4
• Virtual AP Controller for deployment of up to 20 wireless VigorAPs
• Wireless Mesh (ax model) up to 7 VigorAPs
• Virtual Switch Controller to manage up to 5 VigorSwitches
• Supports VigorACS 3 (Central Management system) for multi-site deployment
• 2 years back-to-base warranty

Interface

1. 1 2 x WiFi Antennas (ax model)
2. 2 WAN Port: 1x GbE RJ-45
3. 3 LAN/WAN Switchable Port: 1x GbE RJ-45
4. 4 LAN Port: 3x GbE RJ-45
5. 5 2 x Nano-Sized SIM Slots
6. 6 2 x Cellular Antennas

• The integrated 5G/LTE modem with Category 19 supports carrier aggregation, providing high-speed mobile broadband connectivity for Internet access and VPN.
• The dual SIM slot accepts two SIM cards from different mobile network providers. This ensures that the router can seamlessly switch to the secondary SIM and cellular network if the primary mobile connectivity is broken.
• Equipped with four cellular antennas (2 internal + 2 external), the router allows users to optimise placement for the strongest possible signal coverage.

• Manually generate WireGuard keys
• Import OpenVPN configuration files
• Upload certificates

IAM (Identity and Access Management)

Vigor C510 Series with the new DrayOS5 is Zero Trust ready!

Users & Groups

•  User accounts and user groups allow flexible access level control.
•  Existing external authentication server is supported.
•  User and MFA protection can be easily configured.

Access Policies

System administrators can create access policies for the local users in this tab. The access policies can be configured based on:

• MAC address filter list
• The allowed / blocked user list
• The login sessions lifetime

Group Policies

Conditional Access Policy

Conditional access policies can be configured to request users to provide multiple forms of authentication before granting appropriate access to a resource.

• Specify a period for the user to re-authenticate
• Restrict access to specific source IP addresses or ranges of IP addresses
• Specify VLAN-based access level in your conditional policies
• Set up time schedules when users are allowed to log-in

Resources Tab

Configure local resources such as IP and Mac addresses for workstations, network printers, PBX systems, NVR systems, servers, etc.

Hotspot Web Portal

DrayTek’s Hotspot Web Portal offers a fully customizable Wi-Fi login experience with multiple authentication methods, including username/password, social media login, and voucher-based access. It also supports quotation management, Wi-Fi marketing tools for promotions, and custom branding options to enhance user engagement and brand visibility.

Network administrators can easily manage user access, set bandwidth limits, and monitor real-time usage, making it an ideal solution for guest Wi-Fi in cafés, hotels, retail stores, and event venues.

Account Status

The Account Status feature includes brute force protection, which automatically logs key details such as the attacking IP address, targeted username or profile, and the service under attack. It also tracks the protection duration, recording the start and end times of the block, along with the total number of attempted hits.

For flexibility, administrators can manually unblock access in cases where a legitimate user was mistakenly restricted.

Backup and Restore

Easily back up or restore router settings, including Users and Groups, Access Policies, Group Policies, and more. For added security, password protection can be applied during the backup and restore process to prevent unauthorised access.

URL Reputation

URL Reputation is a cloud-based threat intelligence service that adds an extra layer of security to protect LAN clients during their online activities.

With a total of 82 content categories, including 10 security-focused ones, it provides comprehensive and up-to-date protection for both home and business networks.

These categories cover a wide range of areas—from malware, spyware, and adware, to parental controls, business productivity, and social networking—helping to create a safer online environment, enhance employee productivity, and support efficient bandwidth management.

IP Reputation

• Botnets
• TOR nodes and anonymous proxies
• Command-and-Control (C2) servers
• Phishing servers
• Distributed Denial of Service (DDoS) attacks

• High-risk traffic
• Suspicious proxies
• Malware distributors
• IPs associated with recent malicious activity

The system evaluates IPs based on multiple factors, including infection history, protocol behaviour, and attack frequency. Each IP is assigned a reputation score, which determines whether it should be trusted, monitored, or blocked, ensuring proactive and intelligent network protection.

You can purchase a URL Reputation B card for your VigorC510 series

Vigor C510ax 5G Cellular Router with AX3000 (WiFi 6) Capacity

The Vigor C510ax is a high-performance 2×2 dual-band WiFi 6 and 5G cellular router, delivering blazing-fast wireless connectivity with 160MHz channel bandwidth and 1024-QAM modulation for significantly increased throughput. With theoretical speeds of up to 3000Mbps—574Mbps on the 2.4GHz band and 2402Mbps on the 5GHz band, it offers up to 2.5 times the speed of a standard 802.11ac 2×2 dual-band router.
Packed with business-grade features such as URL Reputation filtering, Route Policy, Application-based QoS, and more, the Vigor C510ax is an ideal solution for professional smart homes, SOHO users, and anyone who demands complete control and visibility over their network.

OFDMA (Orthogonal Frequency Division Multiple Access).
With OFDMA modulation scheme, each channel is made up of 256 subcarriers spaced 78.125 kHz apart, compared to 64 subcarriers spaced 312.5 kHz apart with OFDM. With up to 4 times data efficiency and more advanced channel sharing technologies, a device can be allotted bandwidth based on the assessed needs for the highest airtime efficiency possible. For example, users on streaming or VoIP services can be allocated more bandwidth and time, while services such as email or website browsing can be assigned less bandwidth that is still sufficient for the tasks, thus improving user experience in high-density environments.

OFDM

OFDMA

MU-MIMO functions by transmitting data to multiple users simultaneously, much like several delivery trucks operating in parallel. This improves overall network capacity and boosts individual user speeds.

BSS Colouring Instead of CSMA/CA which allows only one device to transmit at a time, 802.11ax uses BSS Colouring to manage collision avoidance. Each Wi-Fi device is assigned a Basic Service Set (BSS), a 6-bit colour field, while adjacent devices are allocated with different colours. Before transmitting, the device checks the BSS and backs off only when the BSS is of the same colour as its own. In this way, the spectral efficiency is maximized as APs and Wi-Fi clients can transmit simultaneously even if they are on the same channel.

TWT (Target wake time) Devices negotiate with the AP for a Target Wake Time (TWT), or joint a TWT broadcast session, and transmit data only when the TWT arrives, thereby reducing power consumption and increase network efficiency.

WPA3 (Wi-Fi Protected Access 3) enhances the security of Wi-Fi networks by addressing vulnerabilities in previous standards (WEP, WPA and WPS2) and introduces new features including stronger authentication, better encryption, and improved protection against attacks such as brute-force password guessing and man-in-the-middle exploits.

DrayTek’s WiFi 6 encryption:

• WEP (64 / 128-bit)
• WPA / WPA2 / WPA3 / OWE

The comparison table below compares security design of Wi-Fi security protocols WEP, WPA, WPA2 and WPA3.

AP-Assisted Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

Extend Transmission Range

When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.

Improve Data Rates

When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.

Better User Experience

Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.

No Controller Required

Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.

Mesh Wi-Fi
(Vigor C510ax only)

Vigor C510ax supports up to 7 APs, which can form one or more Wireless Groups. Each group can form Mesh links automatically based on the optimum signal level among the APs and devices.

Embedded SIM Slot
Provide 4G LTE/5G Internet access to where fixed lines are not available, without the need for a USB dongle.

Firewall & Content Filter
Filter webpages by URL keywords or web categories to block access to insecure or inappropriate content.

VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor C510 series to the remote offices and teleworkers over the Internet. Learn more

URL/IP Reputation
Improve network security by classifying URLs and IPs to control web access and protect against online threats Learn more.

EasyVPN
Secure VPN in Seconds: No Keys, No Configs, Just Login.

Hotspot Web Portal
Market your business and communicate with guests while offering hospitality WLAN. Learn more.

IAM
A solution that manages digital identities, authentication, and access control to ensure the right users or groups have appropriate access to critical resources.

Virtual AP/Switch controller
All-in-one management platform for Vigor C510 Series to maintain and monitor the VigorAPs and VigorSwitches.

Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

Mesh (ax model only)
Easily link to other VigorAP to expand the wireless network. Learn more

DrayDDNS
A free DDNS service to allow access to your router using a fixed hostname of your choice. Learn more

Mesh (ax model)

• DrayTek Wireless app-support
• Discovery
• Auto-Provisioning
• Monitoring
• Centralized Hierarchy View

Virtual AP Controller

• Auto-Discovery
• Auto-Provisioning
• Monitoring
• Centralized View
• Alarm
• Reboot VigorAP Remotely
• Wi-Fi Client Load Balancing

Device Management

• Device List
• Mesh Status
• Optimize All Mesh Links
• AP Adoption
• AP Discovery

Switch Management Solution

SWM

Virtual Switch Controller
Up to 5 VigorSwitches

Device Management

Display VigorSwitch name, MAC address, IP address, Firmware Version, Model, Online Status, System Uptime, Port in Use, Clients, and Last Process Status.

Scan the network to add new VigorSwitches.

Port Profile

Create profiles that include general settings, VLAN, GVRP, Multicast STP, and QoS settings, which can be applied to the managed switch.

Maintenance

Perform maintenance tasks for selected VigorSwitch.

Tasks include Configuration backup and restore, Remote Reboot and Factory Reset of the selected switch.

VigorACS 3

• Zero Touch Deployment & Provisioning
• Auto VPN
• Interface Quality & SLA
• VoIP Optimization & Monitoring
• Application Visibility
• Application Based SD-WAN Policy
• Customized Hotspot Page with Multilingual
• Hotspot Clients Analytics
• ACS Server Load Balancing / Failover

In-the-box

Note :

The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated

Click below for the Config Demo Page: