Vigor2865L-5G Series is a Multi-WAN VDSL2 35b VPN Router with embedded 5G cellular connectivity. Two SIM slots (1 SIM online at a time) are prepared to deliver an uninterrupted cellular network connection. Featuring VPN, QoS, route policy, web content filtering, hotspot web portal, and more. It is ideal for companies that require higher-performance 5G connectivity with an efficient network. The series includes built-in 802.11ax models.
5G
support SA and NSA mode
32 VPN
IPsec VPN throughput up to 300 Mbps
AX3000*
Delivers link rate up to 3 Gbps
60k Sessions
Recommended for a network of 50 hosts
*ax model only
12x Wireless Antenna (ax model)
21x USB 2.0
3WLAN/WAN Switchable Port: 1x GbE RJ-45
4Fixed LAN Port: 5x GbE RJ-45
5Fixed WAN Port: 1x RJ-11 for 35b/VDSL2/ADSL2+
64x LTE Antenna
72x Nano-Sized SIM Slot
Key Features
Embedded SIM Slot
Provide 4G LTE/5G Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.
Maximize throughput and reliability by using multiple Internet connections. Learn more
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2865L-5G Series to the remote offices and teleworkers over the Internet. Learn more
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment. Learn more
VPN Matcher
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more
Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
VoIP Friendly
Vigor2865L-5G Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN.
Learn more
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Central AP Management
Use the Vigor2865L-5G Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
WiFi 6 (ax model only)
Feature OFDMA and MU-MIMO technology to improve WiFi efficiency and deliver higher wireless speed.
Mesh (Wireless model only)
Easily link to other VigorAP to expand the wireless network. Learn more
Central Switch Management
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Performance
5G Router with High Speed Mobile
Connectivity
Integrated 5G/LTE modem with Category 19, the carrier aggregation method can get high-speed mobile
broadband connectivity for Internet access and VPN.
Dual-SIM Slot allows using two mobile network providers. So that in the event of one mobile network not
providing Internet connectivity, the router can switch to a secondary SIM and cellular network connection.
4x LTE antennas with 1M extension cables allow users to find the optimum position to install the router to
get the best signal coverage.
*Backward compatible to 4G LTE
Dual Gigabit + 5G WAN Load Balancer
WAN Load Balancing
Vigor2865L-5G Series offers high throughput with load-balancing connectivity, suitable for handling fiber
to the premises (FTTP) and gigabit Internet connections. The 5G LTE WAN can provide high-speed mobile
broadband connectivity. All the active WANs will automatically join the WAN Load Balance Pool to optimize
Bandwidth Utilization.
Seamless Failover
Can do automatic failovers between WAN connections. In the events of ISP outage, the router will transfer
the traffic to another WAN smoothly. Ensure reliable Internet connectivity and save you from the cost of
network downtime.
Policy-Based Routing
Using routing policies to designate a WAN interface for Applications, VoIP traffic, traffic from a certain
range of IPs, or traffic to a specific destination enhances network efficiency and fluency.
Ideal VPN Router for SMB
Fast IPsec Performance
Up to 800Mbps Hardware Accelerated IPsec VPN Performance
Up to 32 concurrently active VPN tunnels
All common VPN standards are supported
Wireguard VPN (since firmware v4.4.3)
IKEv1/IKEv2 EAP/ SSL VPN/ L2TPoverIPsec /PPTP/OpenVPN are all supported
Advanced Authentication for Teleworker
2-factor authentication available for Teleworker VPN connections
Authentication can be done with the Active Directory (LDAP) / RADIUS / TACACS+ server in the network
Notify User by SMS/Email when a Teleworker VPN is online to prevent VPN credential lost or misused by
the others
Market Business with Hotspot Web
Portal
Market your business when providing free WiFi.
WiFi Marketing
Redirect the hotspot guests to the company homepage, online surveys, or display promotion message.
Grow Your Email List
Require the guest to leave contact info or social media accounts before they can use the Internet service.
Various Authentication Type
A variety of login methods are supported to meet your business need, including Facebook Login, Google
Login, SMS PIN, Voucher PIN, and RADIUS.
3rd-Party Service Compliant
Supports external captive portal authentication. You can keep using the WiFi marketing solution you like.
Quota Management
Bandwidth management is integrated into Hotspot to control the bandwidth and session usage of the Hotspot
guests.
Comprehensive Firewall
Object-based Firewall
Group IPs and Services by Object before applying to Firewall rules. Easy to organize the network
activities.
Manage Traffics not only from LAN to WAN
DrayTek's Firewall can manage traffic between LAN subnets, remote VPN subnets, and the traffic from WAN to
the Vigor Router itself! Pre-defining the Internet IPs that can access Vigor Router's service is possible.
Web Content Filtering with DNS Filter
Web Content Filtering Service uses cloud-based technology, 82 categories in total, 10 of which are
security-focused, providing comprehensive and up-to-date protection to LAN client during their online
activities.
Blocking Apps & DoH servers
APP Enforcement (APPE) can easily block applications (IM/P2P/Stream/Tunneling, etc.) on a LAN network with
a few clicks. Blocking DoH servers in the browsers can force the LAN clients to use the standard DNS query
to make the DNS Filtering work.
Edge Router for SD-WAN
Edge Router for SD-WAN
The quality of every WAN/VPN interface is measured by latency, loss, and jitter.
Based on the interface quality records, Vigor2865L-5G can adjust the metric to use the best-quality interface
for VoIP and business critical apps.
Application Visibility and SD-WAN Policy
The application visibility lets Network Administrator understand the data usage. From every single clients,
via which WAN, to which application, at what time.
Based on the application visibility, Network Administrator can create SD-WAN policies to send
business-critical applications through the best-quality interface to optimize the user experience.
*SD-WAN requires cooperation with VigorACS 3
APP QoS Bandwidth Management
VoIP First
VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.
Note :The stated throughput performance figures are the maximum derived from DrayTek internal testing, conducted under optimal conditions, with Hardware Acceleration enabled where available. The actual performance may vary based on network conditions and activated applications.
Model
2.4GHz WLAN
5GHz WLAN
Wireless Antenna
Wireless Mode
Max. Link Rate
Max. Bandwidth
WDS
Mesh
Vigor2865L-5G
-
-
-
-
-
-
-
-
Vigor2865Lax-5G
2x Dual-Band (3.5dBi for 5GHz, 2.3dBi for 2.4GHz)
2.4 GHz: 802.11b/g/n/ax 5 GHz: 802.11a/n/ac/ax
2.4 GHz: 574 Mbps 5 GHz: 2.4 Gbps
160 MHz
5GHz Only
5GHz Only
Model
Performance
NAT Session
Max. NAT (Mbps)
Max. NAT with Hardware Acceleration (Mbps)
Max. NAT with Hardware Acceleration : Single WAN (Mbps)
Max. NAT with Hardware Acceleration : Dual WAN (Mbps)
Max. NAT with Software Acceleration (single-directional) (Mbps)
Max. NAT with Software Acceleration (bi-directional) (Mbps)
",
"Config Backup/Restore":"T",
"Config File Compatibility":"Vigor2865 LTE",
"Firmware Upgrade":"TFTP, HTTP, TR-069",
"2-Level Administration Privilege":"T",
"Role-based Privilege":"F",
"Access Control":"Access List, Brute Force Protection",
"Notification Alert":"SMS, E-mail",
"Netflow":"v5, v9, IPFIX",
"SNMP":"v1, v2c, v3",
"Syslog":"T",
"Broadcast DSL Info to LAN":"F",
"VPN Managment":"8",
"AP Managment (APM)":"20",
"Virtual AP Controller":"0",
"Mesh (Number of manageable APs)":"7",
"Switch Management (SWM)":"10",
"Virtual Switch Controller":"0",
"VigorACS Management (Since f/w)":"V4.4.5",
"Power Input":"DC 12V @ 2.6A",
"Max. Power Consumption (watts)":"31.2",
"Memory":"-",
"Dimension (mm)":"241 x 165 x 44",
"Weight (g)":"-",
"Operating Temperature":"0 to 45°C",
"Storage Temperature":"-25 to 70°C",
"Operating Humidity (non-condensing)":"10 to 90%",
"IAM - Users & Groups":"F",
"IAM - Access Policies":"F",
"IAM - Group Policies":"F",
"IAM - Confidential Access Policy":"F",
"IAM - Resources":"F",
"IAM - Backup and Restore":"F"
}
Note :The stated throughput performance figures are the maximum derived from DrayTek internal testing, conducted under optimal conditions, with Hardware Acceleration enabled where available. The actual performance may vary based on network conditions and activated applications.
Antenna + Socket
Antenna x 2 
RJ-45 to RJ-45 Cable (Annex B)
RJ-11 to RJ-45 Cable (Annex B) 
Power Adapter
Quick Start Guide
