2.5G WAN Ultra-High Speed Router
Vigor2136 Series is a broadband VPN router, featuring 2.5G WAN port to deliver fast speed that meets the growing network demands of business. It delivers up to 2.3 Gbps performance without sacrificing bandwidth control features. The router is equipped with business-grade features, including web content filtering, Route Policy, App-based QoS, and more. The series includes models with built-in 802.11ax WiFi.
1x 2.5G WAN, 1x 2.5G LAN/WAN Switchable
4 VPN
IPsec throughput up to 390 Mbps
AX 3000*
Delivers link rate up to 3 Gbps
50k Sessions
Recommended for a network of 30 hosts
Interface
(ax model)
1WLAN/WPS Button (ax model)
2Reset Button
3WAN Port: 1x 2.5GbE RJ-45
4LAN/WAN Switchable Port: 1x 2.5GbE RJ-45
5LAN Port: 3x GbE RJ-45
62x USB 2.0
7Power On/Off Switch
8Power Input
9Wireless Antenna (ax model)
Key Features
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2136 Series to the remote offices and teleworkers over the Internet. Learn more
IAM
A solution that manages digital identities, authentication, and access control to ensure the right users or groups have appropriate access to critical resources.
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Virtual AP/Switch controller
All-in-one management platform for Vigor2136 Series to maintain and monitor the VigorAPs and VigorSwitches.
Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more
Multi-gig Routers
Faster Wired Connections
- 4K video streaming
- online gaming
- large file transfers
- network-attached storage (NAS) devices etc
Beyond Gigabit
Up to 2.5Gbps internet speed enable the users to fully utilize the available bandwidth
Secure network with VPN
Vigor2136 Series supports the most secure VPN protocols :
NAT & Routing Performance
The NAT throughput of the Vigor2136 Series can reach 2.3Gbps while meeting high QoS xpectation. Business-critical applications can be easily prioritized, and always keep VoIP in 1st priority.
Vigor2136 2.5G Router with AX3000 capacity (ax model)
Vigor2136 Series is a dual-band WiFi router that provides 160MHz bandwidth and 1024-QAM to greatly increase the speed of wireless connection. The theoretically speed is up to 3000Mbps, of which 574Mbps is in the 2.4GHz band and 2402Mbps in the 5GHz band. Which is 2.5 times faster than an 802.11ac 2x2 dual-band router. In the household .It’s also equipped with business-grade features, including URL Reputation, Route Policy, App-based QoS and lots more, and is perfect for professional smart homes/SOHO users who would like to take full control of their own network.
OFDMA (Orthogonal Frequency Division Multiple Access) is a key characteristic of the WiFi 6 certification program. Included in the WiFi 6 standard, OFDMA relies on efficient scheduling techniques to function effectively in congested and complex network environments. As WiFi 6 gains traction among manufacturers and the broader industry, it becomes crucial to analyze and document the potential benefits of successful OFDMA implementation and the ability to measure its impact.
OFDM
OFDMA
MU-MIMO is similar to multiple trucks serving users simultaneously. It increases capacity and results in higher speed per users.
BSS Coloring is a technique used to improve co-existence of overlapping BSSs and to allow spatial reuse within one channel .Simply say BSS coloring helps in mitigating problem of co-channel interference found in legacy wifi networks.
TWT (Target wake time ) ensures that end devices spend more time in standby while sending and receiving data more economically. This reduces energy consumption and increases overall efficiency within the home network. It allows an AP to manage activity in the WiFi network, in order to minimize medium contention between Stations (STAs), and to reduce the required amount of time that an STA in the power-save mode needs to be awake.
WPA3 (WiFi Protected Access 3) enhances the security of WiFi networks by addressing vulnerabilities in previous standards (like WPA2) and introducing new features to protect modern wireless communications better. WPA3 was introduced in 2018 to provide stronger authentication, better encryption, and improved defenses against attacks such as brute-force password guessing and man-in-the-middle exploits.
DrayTek's WiFi 6 encryption:
- WEP (64 / 128-bit)
- WPA / WPA2 / WPA3 / OWE
And you may check below comparison table to see WPA3's strength is obviously an surplus development in WLAN security design.
| WEP | WPA | WPA2 | WPA3 | |
|---|---|---|---|---|
| Encryption | RC4 | TKIP / RC4 | AES-CCMP | AES-CCMP / AES-GCMP |
| Session Key | 64/128 bit | 128 bit | 128 bit | 128/256 bit |
| Authentication | Open system, shared key | Pre-shared key | Pre-shared key | AES-CCMP / AES-GCMP |
| Level of Security | Very low | Low | Moderate | High |
URL Reputation
URL Reputation is a cloud-based technology to provide Threat Intelligence Service. This service adds an extra layer of security protection to LAN client for their online activities.
There are 82 categories in total, 10 of which are security-focused, providing comprehensive and up-to-date protection to your home network or office network.
The various categories cover network security, including malware, spyware, adware, parental control for child protection, business, social networking, and more to ensure a safe online environment while also boosting employee productivity and can reach efficient bandwidth management.
You can purchase URL reputation B card for your Vigor2136 Series.
*Future Support
IAM Identity and Access Management
Vigor2136 Series with the new DrayOS5 is Zero Trust ready!
IAM (Identity and Access Management) is a framework of policies and processes that ensure the right users or groups have appropriate access to critical resources by managing digital identities, authentication, and access control.
It encompasses processes for identifying, authenticating, and authorizing users or groups to access systems, applications, and data. By assigning specific roles to users and ensuring they have the appropriate level of access to corporate resources and networks, IAM enhances both security management and the user experience.
IAM provides a set of security management tools for Vigor Routers, which is Zero Trust Ready. This solution allows you to grant and categorize user privileges, create and manage access policies, and define large-scale group policies that integrate multiple filtering rules and traffic shaping settings. DrayTek's IAM plays an important role in your cloud security strategy.
Users & Groups
- User account > user groups makes it easy to control and manage accounts in a group level
- Configure external authentication server
- Enable user and MFA protection
Access Policies
System administrators can create access policies on the local users in this tab The access policies can be created according to
- MAC address filter list
- The allowed /blocked user list
- The login sessions lifetime
Combine these access policies can create a robust security framework for your system.
Group Policies
Setup group policies with predefined local resources like employees, workstations, network printers ,and local servers. Customize firewall policies and traffic shaping policies to enhance network security and optimize traffic flow.
Conditional Access Policy
Conditional access policies can require users to provide multiple forms of authentication before they are granted access to a resource.
- Specify a time period for user to re-authenticate
- Restrict access to specific source IP address or ranges of IP addresses
- Specify VLAN-based access controls in your conditional policies
- Set up time schedules when user are allowed to log-in
Resources
Record local resources’ IP addresses and Mac addresses under Resources tab. For examples, Workstations ,Net printers ,PBX systems ,NVR systems and servers.
Backup and Restore
You can backup or restore any of your settings such as Users and Groups, Access and Group Policies and so on. Of course, you can add in Password protection to well save them before you take action.
WiFi Roaming
Solve the sticky client problem and improve WiFi roaming experience.
Proactive Roaming
WiFi clients automatically hand-off to another AP/router with a better signal strength when moving around in an area with multiple APs/routers.
However, WiFi clients sometimes stick to the AP/router with weak signal, and not switching to the one with better signal.
Assisted Roaming
Vigor Router will disassociate the WiFi clients who are out of the effective transmission range, forcing them to pick up another access point/router with a stronger signal.
Stronger Signal Guaranteed
Furthermore, with "Minimum RSSI with Adjacent AP" option, Vigor Router can disassociate the client only when other AP/router has a stronger wireless signal, and keep client stayed when there’s no other AP/router nearby.
Mesh
You can connect 7 APs, and form the wireless Group within the same network which creates MESH links automatically based on the optimum algorism among the root and node APs.
s_ok.gif)
Hotspot Web Portal
Market your business while offering free WLAN
WiFi Marketing
Redirect the hotspot guests to the company homepage, online surveys, or display promotion message.
Various Authentication Type
A variety of login methods are supported to meet your business need, including Click Through, IAM User Login, and an external RADIUS Server.
LAN Management
The platform offers comprehensive management for Vigor devices on the LAN side, supporting up to 20 APs (a root AP included) and 5 switches.
Automatic Device Discovery
All you need is connect the Vigor Switch/AP to the LAN side of the router, Vigor Router will then discover the devices to be managed.
Provisioning
Basic settings may be done on the Vigor Router, and provision to the managed Vigor Switch/AP.
Monitoring
Vigor Router provides a centralized view of managing devices, you may always check if the managed Vigor Switch/AP is online.
System Maintenance
You may perform a factory reset, save/restore a configuration backup, or trigger a remote reboot directly on the Vigor Router. There’s no need to log in to each device’s management page.
Management Solution
Virtual Controller
Role Setup
Mesh Setup (ax model)
Discovery, Provisioning, Monitoring, Centralized Hierarchy View
AP Management Setup
Auto-Discovery, Provisioning, Monitoring, Centralized View, Alarm, Reboot VigorAP Remotely, WiFi Client Load Balancing
Device
- Device List
-
Mesh Status
- Mesh Action: Optimize All Mesh Links
-
AP Adoption
- AP Discovery
SWM
Device Management
Port Profile
Maintenance
Software Management
VigorACS3
- Zero Touch Deployment & Provisioning
- Auto VPN
- Interface Quality & SLA
- VoIP Optimization & Monitoring
- Application Visibility
- Application Based SD-WAN Policy
- Customized Hotspot Page with Multilingual
- Hotspot Clients Analytics
- ACS Server Load Balancing / Failover
Antenna x 2
(ax model)
RJ-45 Cable (Ethernet)
Power Adapter
Quick Start Guide
Note :The stated throughput performance figures are the maximum derived from DrayTek internal testing, conducted under optimal conditions, with Hardware Acceleration enabled where available. The actual performance may vary based on network conditions and activated applications.
