| Performance |
| NAT Session |
60K |
| Max. NAT (Mbps) |
800 |
| Max. NAT with Hardware Acceleration (Mbps) |
1300 |
| WAN |
| xDSL |
1 |
| Ethernet (1 GbE) |
1 |
| Ethernet - Switchable |
(WAN/LAN) |
| VDSL Standards |
ITU-T G.993.2 VDSL2, ITU-T G.993.5 Vectoring, ITU-T G.997.1, ITU-T G.998.4 Retransmission |
| VDSL2 Profile |
8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a, 35b |
| ADSL Standards |
T1.413 Issue 2, ITU-T G.992.1 ADSL (G.dmt), ITU-T G.992.3 ADSL2, ITU-T G.992.5 ADSL2+ |
| Annex Support |
Annex A/B/J/M |
| Band Plan |
998, 997 |
| Cellular (via USB) |
2 |
| Wireless WAN (2.4GHz + 5GHz) |
✓ |
| Internet Connection |
| IPv4 |
PPPoE, PPPoA, DHCP, Static IP, MPoA, PPTP/L2TP |
| IPv6 |
PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging |
✓ |
| Multi-VLAN/PVC |
✓ |
| Failover |
✓ |
| Load Balancing |
IP-based, Session-based |
| WAN Active on Demand |
Link Failure, Traffic Threshold |
| Connection Detection |
ARP, Strict ARP, Ping |
| WAN Data Budget |
✓ |
| Dynamic DNS |
✓ |
| DrayDDNS |
✓ |
| LAN |
| Fixed LAN (RJ-45, GbE) |
5 |
| LAN Subnet |
8 |
| DMZ Port |
1 |
| VLAN |
802.1q Tag-based VLAN, Port-based VLAN |
| Max. Number of VLAN |
16 |
| DHCP Server |
Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| LAN IP Alias |
✓ |
| Wired 802.1x Authentication |
✓ |
| Port Mirroring |
✓ |
| Local DNS Server |
✓ |
| Conditional DNS Forwarding |
✓ |
| Hotspot Web Portal (Profile No.) |
4 |
| Hotspot Authentication |
Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
| Other Ports |
| USB |
2 |
| USB Type |
2.0 |
| FXS (RJ-11) |
2 |
| Networking |
| Routing |
IPv4 Static Route, IPv6 Static Route, Policy Route, Inter-VLAN Route, RIP v1/v2, BGP |
| Policy-based Routing |
Protocol, IP Address, Port, Domain, Country |
| High Availability |
Dray High Availability, VRRP |
| DNS Security (DNSSEC) |
✓ |
| IGMP |
IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
| Local RADIUS server |
✓ |
| SMB File Sharing (Requires external storage) |
✓ |
| VPN |
| LAN-to-LAN |
✓ |
| Teleworker-to-LAN |
✓ |
| EasyVPN |
✓ |
| Port Knocking |
✓ |
| Protocols |
PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN, WireGuard |
| Max. VPN Tunnels |
32 |
| Max. OpenVPN + SSL VPN Tunnels |
16 |
| IPsec VPN Throughput (AES 256 bits) (single-directional) (Mbps) |
300 |
| SSL VPN Throughput (single-directional) (Mbps) |
130 |
| WireGuard VPN Throughput (single-directional) (Mbps) |
75 |
| User Authentication |
Local, RADIUS, LDAP, TACACS+, mOTP |
| IKE Authentication |
Pre-Shared Key, X.509 |
| IPsec Authentication |
SHA-1, SHA-256 |
| Encryption |
MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) |
Load Balancing, Failover |
| Single-Armed VPN |
✓ |
| NAT-Traversal (NAT-T) |
✓ |
| VPN Matcher |
✓ |
| Firewall & Content Filtering |
| NAT |
Port Redirection, Open Ports, Port Triggering, Port Knocking, DMZ Host, UPnP |
| ALG (Application Layer Gateway) |
SIP, RTSP, FTP, H.323 |
| VPN Pass-Through |
PPTP, L2TP, IPsec |
| IP-based Firewall Policy |
✓ |
| Content Filtering |
APP, URL Keyword, DNS Keyword, Web Features, Web Category*(*subscription required) |
| DoS Attack Defense |
✓ |
| Spoofing Defense |
✓ |
| Bandwidth Management |
| IP-based Bandwidth Limit |
✓ |
| IP-based Session Limit |
✓ |
| QoS (Quality of Service) |
TOS, DSCP, 802.1p, IP Address, Port, Application |
| VoIP Prioritization |
✓ |
| APP QoS |
✓ |
| WLAN |
| 2.4GHz WLAN |
802.11n 2x2 MIMO, 802.11ax 2x2 MIMO, 802.11n 2x2 MIMO |
| 5GHz WLAN |
802.11ac Wave 2 2x2 MU-MIMO, 802.11ax 2x2 MU-MIMO, 802.11ac Wave 2 2x2 MU-MIMO |
| Antennas |
2 |
| Antenna Type |
External Dipole |
| 2.4GHz Antenna Gain (dBi) |
2.6 |
| 5GHz Antenna Gain (dBi) |
2.7 |
| 2.4GHz Max. Link Rate (Mbps) |
300, 574, 300 |
| 5GHz Max. Link Rate (Mbps) |
867, 2402, 867 |
| Max. Number of SSIDs (per band) |
8 (4) |
| Security Mode |
OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
| Authentication |
Pre-Shared Key, 802.1X |
| WiFi 6 |
✓ |
| OFDMA |
✓ |
| WPS |
PIN, PBC |
| WDS |
Repeater (5GHz only) |
| Access Control |
Access List, Client Isolation, Hide SSID, WLAN Scheduling |
| AirTime Fairness |
✓ |
| Band Steering |
✓ |
| WMM |
✓ |
| Mesh (5GHz Only) |
Root |
| VoIP |
| Protocols |
SIP, RTP/RTCP, ZRTP |
| SIP Registrars |
12 |
| Dial Plan |
Phone Book, Digit Map, Call Barring, Regional |
| Call Features |
Call Waiting, Call Transfer, Scheduled DND, Hotline |
| Voice Codec |
G.711 A/u law, G.723.1, G.726, G.729 A/B |
| Caller ID |
FSK_ETSI, FSK_BELLCORE, DTMF |
| Management |
| Local Service |
HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069 |
| Port Knocking for Local Service |
✓ |
| Config Backup/Restore |
✓ |
| Config File Compatibility |
Vigor2862 |
| Firmware Upgrade |
WUI, TFTP, TR-069 |
| 2-Level Administration Privilege |
✓ |
| Access Control |
Access List, Brute Force Protection |
| Notification Alert |
SMS, E-mail |
| Netflow |
v5, v9, IPFIX |
| SNMP |
v1, v2c, v3 |
| Syslog |
✓ |
| VPN Managment |
8 |
| AP Managment |
20 |
| Mesh (Number of manageable APs) |
7 |
| Switch Management |
10 |
| VigorACS Management (Since f/w) |
V4.0.5.1 |
| Physical |
| Power Input |
DC 12V @ 2A, DC 12V @ 2.5A |
| Max. Power Consumption (watts) |
22.3, 24, 27, 28.1 |
| Dimension (mm) |
241 x 166 x 46 |
| Operating Temperature |
0 to 45°C |
| Storage Temperature |
-25 to 70°C |
| Operating Humidity (non-condensing) |
10 to 90% |
