DrayTek Vigor 2865 VDSL & Ethernet WAN Router
The DrayTek Vigor 2865 is a powerful VDSL and Ethernet WAN router designed for high-performance, secure connectivity. It combines VPN, advanced routing, firewall, content filtering, bandwidth management and more in a single, flexible platform.
Flexible WAN Connectivity & Load Balancing
- Integrated VDSL modem for direct connection to Superfast Fibre
- Ethernet WAN for use with Virgin Media Cable and Ultrafast FTTP
- High throughput with Load Balancing and Failover for resilient connectivity
- Suitable for Fibre to the Premises (FTTP) and Gigabit Internet
- Up to 950 Mbps per-WAN of hardware-accelerated throughput while retaining full feature set
Ideal VPN Router for SMB
A key strength of DrayTek routers is their comprehensive VPN (Virtual Private Networking) capability, ideal for linking:
- Remote and branch offices back to HQ
- Home-based and mobile teleworkers back to the office
VPN performance and capacity:
- Up to 300 Mbps standard IPsec VPN throughput
- Up to 50 concurrently active VPN tunnels
- IPsec Hardware Acceleration for up to 800 Mbps with 16 VPN tunnels
This allows securely encrypted tunnels between sites to make full use of high-speed Internet connections.
VPN Matcher for Routers Behind NAT
Connecting VPNs from behind NAT can be challenging, especially with:
- Routers behind other routers using NAT
- 4G Mobile Broadband connections
- Carrier-Grade NAT (CG-NAT) environments
DrayTek’s VPN Matcher service helps Vigor 2865 routers behind NAT:
- Allow Dial-In Teleworkers to connect
- Establish VPN tunnels between two DrayTek routers that could not normally connect
LAN-to-LAN VPN for Remote Sites
The Vigor 2865 is ideal for multi-site deployments:
- Supports up to 32 concurrently active VPN tunnels
- Fast, secure IPsec VPN tunnels for connecting offices and home workers
Once connected, remote users can access office resources through secure encrypted tunnels, enabling:
- Remote desktop
- File sharing
- Seamless access to office devices and services
DrayTek SSL VPN for Teleworkers
The Vigor 2865 supports secure SSL VPN connectivity:
- Up to 16 active DrayTek SSL VPN tunnels
- Uses SSL/TLS encryption (the same technology used by secure websites)
Teleworkers can connect easily using the free DrayTek Smart VPN Client:
- Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android
Supports both Dial-In Teleworker SSL VPN and LAN-to-LAN SSL VPN.
5+1 Gigabit LAN Ports with VLAN Support
The Vigor 2865 offers extensive wired networking options:
- Up to 6 Gigabit LAN ports for computers, servers and NAS
- 5 dedicated LAN ports plus 1 flexible LAN/WAN port
- Connect up to 6 devices directly with single Ethernet WAN
- Connect up to 5 devices with dual Ethernet WAN
Advanced LAN and VLAN capabilities:
- Up to 8 separate LAN subnets and VLANs
- Create separate internal and Guest networks
- Per-network:
- Content Filtering
- Firewall policies
- Quality of Service
- Route Policies
Full 802.1Q VLAN tagging support allows these subnets to extend to VLAN-capable devices, such as:
- DrayTek VigorSwitch G1080 8-port switch
Wireless LAN integrates with these VLANs, enabling:
- Separate Guest and Private wireless networks via different SSIDs
- Expansion with DrayTek VigorAP access points (e.g. VigorAP 903) to span the router’s wireless and additional APs
Centralised Management with VigorACS
The Vigor 2865 can be centrally managed via DrayTek’s VigorACS platform, alongside other DrayTek routers, APs and switches.
VigorACS provides:
- Central visibility and control
- Scalable management for multi-site deployments
- Reporting and monitoring
- Automated and bulk firmware updates
- VPN management
- Alarms for connectivity and other issues
Ideal for dealers, system integrators, and organisations managing multiple DrayTek devices.
Robust IPv4 / IPv6 Firewall Security
Security is central to the Vigor 2865:
- Protection against DoS and IP-based attacks
- Protection for Wireless, Ethernet and VPN interfaces
Object-based firewall:
- Create flexible rule combinations
- Apply Content Filtering selectively:
- Entire network
- Specific devices
- Guest-only network
IPv4 / IPv6 support:
- Dual-Stack IPv4/IPv6
- Firewall, QoS, Content Filtering and VLANs all support IPv4 and IPv6 networks
Advanced Web Content Filtering
The Vigor 2865 includes powerful web content control:
- Restrict website access
- Block downloads of specific file or data types
- Block specific sites with whitelists/blacklists
- Block IM/P2P applications and other unwanted content
- Apply per user, per device or globally, with time schedules
Key capabilities:
- DNS-based content filtering
- HTTPS/SSL site filtering where URLs are encrypted (beyond standard router blocking)
- GlobalView subscription service for category-based filtering (e.g. gambling, adult content), with continuously updated site classifications and compromised site data
- Free 30-day GlobalView trial included
High Availability (Hardware Failover)
For maximum resilience, the Vigor 2865 supports High Availability (HA):
- Deploy primary and secondary routers on your network
- Automatic failover if the primary unit fails
- Maintains Internet, routing and VPN connectivity with no manual intervention
- Reduces single point of failure for routing infrastructure
Config Sync:
- Manage both routers as a single unit
- Changes on the primary automatically sync to the secondary
- Ensures the backup router is always ready to take over
DrayDDNS Dynamic DNS
Each Vigor 2865 includes access to DrayTek’s free Dynamic DNS service:
- Maps the router’s current IP to a memorable “drayddns.com” hostname
- Example:
myrouter.drayddns.com - Automatically updates on IP address changes
- Dynamic WAN IPs
- WAN failover between primary and backup connections
Use your DrayDDNS hostname to access:
- VPN services
- Remote management
- Any services you expose through the router
The Vigor 2865 can also:
- Authenticate the DrayDDNS hostname with free SSL/TLS certificates from Let’s Encrypt
- Automatically manage certificate issuance and renewal
- Keep certificates ready for SSL VPN and other secure services
Quality of Service & Bandwidth Management
Optimise application performance with advanced QoS and bandwidth controls:
Quality of Service (QoS):
- App QoS for simplified prioritisation by application/service (e.g. Zoom, Skype)
- 4 separate QoS queues for:
- Specific IP addresses (servers, PCs)
- Specific services (VoIP, DNS)
- Packet tagging (802.1p, DSCP)
- Auto Voice VLAN to automatically prioritise VoIP calls without extra configuration
Bandwidth Control:
- Bandwidth Limit to control throughput:
- Per-client limits
- Group limits (IP ranges)
- Shared limits per subnet, e.g. Guest network
Central AP & Switch Management
The Vigor 2865 can centrally manage compatible DrayTek devices on the local network:
- DrayTek VigorAP wireless access points
- DrayTek VigorSwitch switches
Benefits:
- Single-point configuration and monitoring from the router
- Simplified deployment and administration of multiple APs and switches across a building or campus
