DrayTek Vigor 2136ax AX3000 2.5GbE Fibre Ethernet Router
The Vigor 2136ax is a high-performance Ethernet WAN router delivering over 2 Gigabit throughput, designed to make full use of DrayTek’s advanced feature set, including Quality of Service (QoS), VPN and Content Filtering. Connect easily to Virgin Media Cable and Ultrafast FTTP via Ethernet WAN and enjoy fast, reliable and secure Internet access for small office and home office environments.
Flexible WAN Connectivity & Failover
Keep your business online with multiple connectivity options:
- Ethernet WAN – Ideal for Virgin Media Cable and Ultrafast FTTP connections
- LTE USB Modem Support – Use as a primary or backup Internet link
- Wi-Fi as WAN – Use an existing wireless network (e.g. hotel, café, partner office) as the Internet feed
Either Ethernet, LTE USB modem or Wi-Fi WAN can be configured as the primary or failover connection. If the main Internet connection goes down, the Vigor 2136ax automatically switches to its backup to maintain Internet and VPN connectivity. Crucially, when using Wi-Fi as WAN, the router’s own wireless LAN continues to operate, providing normal wireless access to laptops, phones and tablets.
Advanced Route Policy & Traffic Management
The Vigor 2136ax provides powerful policy-based routing to control where and how outbound traffic is sent:
-
VPN Routing
Route all or selected traffic through specific VPN services. -
Service Routing
Direct particular services or ports (such as DNS) through a specific WAN, alternative gateway or VPN tunnel. -
Failover & Failback Control
Configure multiple failover rules and paths, and finely manage how connections move back to the primary link once it’s restored.
Powerful SoHo VPN Router
Ideal for small office and home office use, the Vigor 2136ax offers extensive VPN capabilities:
- High VPN Performance
- Up to 390 Mbps IPsec VPN throughput
-
Up to 4 concurrent VPN tunnels
-
Flexible VPN Deployment
- Connect branch or home offices back to a head office
-
Provide secure access to remote resources and internal services
-
Industry-Standard VPN Protocols
- IPsec IKEv1 & IKEv2 with EAP and XAuth authentication
- OpenVPN
- WireGuard
- Supports both LAN-to-LAN and Dial-In teleworker VPNs
User management for Dial-In Teleworkers is handled via the router’s web interface, with support for:
- mOTP 2-factor authentication
- TOTP
- Email or SMS authentication (for IPsec, OpenVPN and WireGuard VPN teleworker connections)
Once connected, remote users and sites access your office resources through secure, encrypted tunnels, enabling remote desktop, file sharing and seamless connectivity to internal devices.
Encrypted VPN for Teleworkers & Remote Sites
Connect up to 4 encrypted VPN tunnels to securely link:
- Teleworkers using software VPN clients
- Remote DrayTek Vigor routers over LAN-to-LAN VPNs
Teleworkers can connect to the Vigor 2136ax with secure IPsec, OpenVPN or WireGuard tunnels using the free DrayTek Smart VPN Client app, available for:
- Windows
- macOS
- Apple iOS (iPad, iPhone)
- Android
(OpenVPN and WireGuard may require additional native software on mobile devices.)
These VPNs use SSL/TLS-based encryption technology similar to HTTPS security used by secure websites such as online banking and shopping.
AX3000 Wi-Fi 6 Dual-Band Wireless
The Vigor 2136ax delivers fast, efficient wireless with Wi-Fi 6 (802.11ax) simultaneous Dual-Band:
- AX3000-class wireless LAN
- Multi-User MIMO (MU-MIMO) – Allows the router to send data to multiple devices at the same time, with each antenna streaming to different clients, improving efficiency and serving more wireless users effectively.
With firmware version 5.0.3, the Vigor 2136ax can be integrated into DrayTek’s Mesh wireless system:
- Operate as the Mesh Root
- Provide Internet access and central management for Mesh VigorAPs
2.5GbE & Gigabit LAN with VLAN Segmentation
The Vigor 2136ax offers flexible wired connectivity and segmented networking:
- LAN Ports
- 1 × 2.5GbE port
-
3 × 1GbE ports
Ideal for connecting computers, servers and Network Attached Storage (NAS). -
Up to Four LAN Subnets & VLANs
Configure up to four separate LAN subnets and VLANs to: -
Isolate guest networks from internal resources
- Separate printers, IoT and smart devices from computers and servers
- Run multiple IP networks through one router
Each subnet can have its own:
- Content Filtering
- Firewall rules
- Quality of Service (QoS)
- Route Policy settings
VLAN & Wireless Network Integration
The Vigor 2136ax fully supports 802.1Q VLAN tagging, enabling:
- Tagged VLANs to be extended to compatible devices such as the DrayTek VigorSwitch P2100 10-port switch, for additional ports and advanced switching features.
Wireless networks can also use VLANs:
- Create separate Guest & Private SSIDs mapped to different VLANs
- Extend these VLAN-based SSIDs using a DrayTek VigorAP (e.g. VigorAP 805), allowing consistent guest and private networks across the router’s own wireless and any connected access points.
