Vigor3900 is a Quad-WAN broadband router/VPN gateway for up to 500 simultaneous VPN connections, equipped with 4 Gigabit Ethernet WAN ports, 1 SFP WAN port, and two multi-function USB ports through which 3G/4G cellular connectivity can add. It allows up to 7 WAN connections for load balancing, providing 900Mbps+ NAT throughput.
950 Mbps
NAT Throughput
500 VPN
IPsec throughput up to 900 Mbps
100 SSL VPN
Throughput up to 400 Mbps
120k SessionsRecommended for a network of 500 hosts
Build a secure and private tunnel from the LAN of Vigor3900 to the remote offices and teleworkers over the Internet. Learn more
Maximize throughput and reliability by using multiple Internet connections. Learn more
Use Point-to-Point connection on LAN to keep track of individual user's traffic. Setup Guide
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Use the Vigor3900 router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Vigor3900
Rack Mount Kit (brackets)
Console Connector + Console Flat Cable
RJ-45 Cable (Ethernet)
Power Cord
Quick Start GuideThe throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Interface | |
| WAN Port | 4x GbE RJ-45 + 1x SFP |
| LAN Port | 2x GbE RJ-45 + 1x SFP |
| USB Port | 2 |
| Console Port | 1x RJ-45 |
Performance | |
| NAT Throughput | 950 Mbps |
| IPsec VPN Performance | 900 Mbps (ASE 256 bits) |
| SSL VPN Performance | 400 Mbps (LAN-to-LAN) |
| NAT Sessions | 120,000 |
| Max. Concurrent VPN Tunnels | 500 |
| Max. Concurrent OpenVPN + SSL VPN | 100 |
Internet Connection | |
| IPv4 | PPPoE, DHCP, Static IP, PPTP |
| IPv6 | Link Local, Static, PPP, DHCP IA NA, DHCP IA PD |
| Multi-VLAN | |
| 3G/4G/LTE WAN with USB modem | |
| Outbound Load Balancing | IP-based, Session-based |
| Inbound Load Balancing | |
| Failover | |
| Connection Detection | ARP, Ping, HTTP |
| Dynamic DNS | |
| DrayDDNS | |
LAN Management | |
| 802.1q VLAN | |
| Max. Number of VLAN | 50 |
| Number of LAN Subnet | 50 |
| DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
| PPPoE Server | |
| Port Mirroring | |
| Local DNS Server | |
| Conditional DNS Forwarding | |
| Web Portal | |
| Web Portal Authentication | Local User Profile, Guest Profile, RADIUS, LDAP, SMS PIN |
Networking | |
| Static Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing |
| Dynamic Routing | RIPv2, OSPFv2, BGP |
| Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
| High Availability | Active-Standby, Hot-Standby |
| DNS Security (DNSSEC) | |
| GVRP | |
| Proxy | IGMP, LAN ARP, WAN ARP |
| SMB File Sharing | (Requires external storage) |
VPN | |
| LAN-to-LAN | |
| Remote Dial-In (Teleworker-to-LAN) | |
| Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN(Host to LAN) |
| User Authentication | Local, RADIUS, LDAP, mOTP |
| IKE Authentication | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-2/256, MD5 |
| VPN Redundancy | Load Balancing, Failover |
| NAT-Traversal (NAT-T) | |
Firewall & Content Filtering | |
| NAT | Port Redirection, DMZ Host, UPnP |
| ALG (Application Layer Gateway) | SIP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | |
| Content Filtering | Application, URL Keyword, File Extension, Web Category*, QQ Filter (*: subscription required) |
| DoS Attack Defense | |
Bandwidth Management | |
| IP-based Bandwidth Limit | |
| IP-based Session Limit | |
| QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Service Type |
| Hardware QoS | |
| VoIP Prioritization | |
Management | |
| Local Service | HTTP, HTTPS, Telnet, SSH v2, FTP, SAMBA, TR-069 |
| Config File Export & Import | |
| Firmware Upgrade | TFTP, HTTP, TR-069 |
| 2-Level Administration Privilege | |
| Access Control | Access List, Brute Force Protection (Fail to Ban), Access Barrier |
| Syslog | |
| Notification Alert | SMS, E-mail |
| SNMP | v2, v2c, v3 |
| Managed by VigorACS | |
| Central AP Management | 50 VigorAP |
| Central Switch Management | 20 VigorSwitch |
| Central VPN Management | 16 VPN |
Physical | |
| Rack Mountable | Mouting Kit Included |
| Dimension | 443 mm x 285 mm x 45 mm |
| Weight | 2.86 kg |
| Max. Power Consumption | 20 watts |
| Operating Temperature | 0 to 45°C |
| Storage Temperature | -10 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% |
| Certificate | 
 |
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
