DrayTek Vigor 2865ax VDSL & Ethernet Load Balancer Router
The DrayTek Vigor 2865ax is a high-performance VDSL and Ethernet WAN router designed for demanding business and home office networks. It combines VPN, advanced routing, firewall, content filtering, and bandwidth management in one powerful, flexible platform.
Flexible VDSL & Ethernet WAN Connectivity
- Integrated VDSL modem to connect directly to Superfast Fibre services
- Ethernet WAN ports for Virgin Media Cable and Ultrafast FTTP
- High throughput with Load Balancing and Failover for robust, always-on connectivity
- Handles Fibre to the Premises (FTTP) and Gigabit Internet connections
- Up to 950 Mbps per-WAN hardware-accelerated throughput while retaining the full feature set
The router can also connect to wireless networks for Internet access, enabling use of Mobile Hotspot connections or nearby wireless such as a neighbour's network for emergency backup.
Wi-Fi 6 AX3000 Wireless Performance
The Vigor 2865ax features Wi-Fi 6 (802.11ax) with AX3000 performance to deliver ultra-fast, efficient wireless coverage.
- OFDMA allows the router to serve multiple devices at once
- Dynamically allocates wireless bandwidth to users based on their needs (e.g. more for video, less for VoIP)
- Improves overall efficiency and responsiveness for busy wireless networks
Mesh Wireless & Central AP Management
Use the Vigor 2865ax as part of DrayTek’s Mesh wireless system:
- Operates as a Mesh Root, providing Internet access and central management for Mesh VigorAPs
- No need to install additional network cabling for Mesh nodes
- VLANs bridged across Mesh so multiple SSIDs and separate segments work seamlessly across Mesh with DrayTek wireless routers and VigorAPs
For cabled wireless networks:
- Central AP Management simplifies installation and ongoing management
- Auto-provisioning configures new VigorAPs automatically when connected to the router’s network
Ideal VPN Router for SMB
VPN is central to DrayTek routers, and the Vigor 2865 series is designed as an ideal VPN router for small and medium businesses.
- 300 Mbps standard IPsec VPN throughput
- Up to 50 concurrently active VPN tunnels
- IPsec Hardware Acceleration boosts performance up to 800 Mbps for 16 VPN tunnels, enabling secure, high-speed site-to-site links
Broad VPN Protocol Support
Supports common industry-standard VPN protocols for connecting to VPN services, linking remote offices, and handling diverse VPN clients:
- IPsec IKEv1 & IKEv2 with EAP and XAuth authentication
- DrayTek SSL VPN
- L2TP for LAN-to-LAN and Dial-In teleworker VPNs
- OpenVPN for teleworkers
User management for Dial-In Teleworkers is handled via the router’s web interface, with:
- mOTP 2-factor authentication for IPsec, L2TP and SSL VPN teleworker connections
- Optional authentication forwarding to Active Directory (LDAP), RADIUS or TACACS+ servers
VPN Matcher – VPN from Behind NAT
DrayTek’s VPN Matcher service enables VPN connectivity when the router is behind NAT or CG-NAT:
- Allows Dial-In Teleworkers to connect to routers that are not directly reachable on the public Internet
- Connects two DrayTek VPN routers behind NAT that otherwise could not establish a VPN tunnel
LAN-to-LAN VPN for Remote Sites
With support for up to 32 concurrently active VPN tunnels, the Vigor 2865 series is ideal for linking multiple offices or home workers via fast, secure IPsec VPN:
- Provides secure, encrypted tunnels between sites
- Enables remote desktop, file sharing and seamless access to office resources and devices
DrayTek SSL VPN for Teleworkers & Site Links
The Vigor 2865 supports up to 16 active DrayTek SSL VPN tunnels:
- Uses SSL/TLS encryption, the same technology used for secure banking and ecommerce sites
- Connects teleworkers and remote DrayTek Vigor routers back to the main office
- Free DrayTek Smart VPN Client app available for:
- Windows
- macOS
- Apple iOS (iPad, iPhone)
- Android
5+1 Gigabit LAN Ports with VLANs
The Vigor 2865 series offers flexible wired connectivity with powerful network segmentation.
- Up to 6 Gigabit LAN ports
- 5 dedicated LAN ports plus 1 flexible LAN/WAN port
- Connect up to 6 devices directly in single Ethernet WAN mode
- Connect up to 5 devices in dual Ethernet WAN mode
With Multiple LAN subnets and VLANs, the router can manage up to 8 separate networks:
- Example:
- Private internal network
- Isolated Guest network
- Each network can have its own:
- Content Filtering
- Firewall rules
- Quality of Service (QoS)
- Route Policy
Additional capabilities:
- Full support for 802.1Q VLAN tagging to extend VLANs to other VLAN-capable devices such as DrayTek VigorSwitch G1080
- Wireless LAN integrates with VLANs to provide Guest & Private SSIDs
- Supports DrayTek VigorAP access points (e.g. VigorAP 903) to extend VLAN-based wireless across multiple APs
Designed for Central Management (VigorACS)
The Vigor 2865 series can be centrally managed through VigorACS, DrayTek’s scalable management platform:
- Central visibility, control and reporting for DrayTek routers, access points and switches
- Ideal for dealers/SIs managing customer deployments or multi-site organisations
- Features include:
- Automated / bulk firmware updates
- VPN management
- Alarms for connectivity and other issues
Robust IPv4 / IPv6 Firewall Security
Security is built into every layer of the Vigor 2865:
- Protection against DoS attacks, IP-based attacks and unauthorised remote access
- Security applied across Wireless, Ethernet and VPN interfaces
The object-based firewall enables:
- Flexible rule sets tailored to home or small office environments
- Content Filtering applied:
- Network-wide
- To specific devices
- Only to guest networks
The Vigor 2865 supports Dual-Stack IPv4/IPv6:
- Advanced features such as object-based Firewall, QoS, Content Filtering and VLANs work across both IPv4 and IPv6 networks
Web Content Filtering with DNS Filter
Control and secure web access across your network:
- Restrict access to specific websites via whitelists / blacklists
- Block downloads of certain file or data types
- Block IM/P2P and other potentially harmful or wasteful applications
- Apply restrictions per user, per device, or network-wide, with time schedules
- Content filtering operates even for HTTPS/SSL websites where URLs are encrypted
Using the GlobalView service (annual subscription):
- Block entire categories such as gambling or adult content
- Continuously updated categorisation, including newly compromised or malware-infected sites
- Includes a free 30-day trial with new routers
High Availability – Hardware Failover
Increase resilience and eliminate single points of failure with High Availability (HA):
- Use a primary and secondary Vigor 2865 to protect connectivity
- If the primary unit fails, the secondary automatically takes over:
- Internet access
- Routing
- VPN connectivity
- Config Sync manages both routers as a single unit:
- Configuration changes on the primary are synchronized to the secondary
- Ensures the backup unit is always ready to take over
DrayDDNS – Free Dynamic DNS
Each Vigor 2865 router includes a free DrayTek Dynamic DNS (DrayDDNS) address:
- Maps the router’s current IP address to a memorable “drayddns.com” hostname
- Example:
myrouter.drayddns.com
Guest WiFi Management with Hotspot Web Portal
Simplify Guest WiFi management using the built-in Hotspot Web Portal:
- Customisable captive portal for both:
- Router’s wireless networks
- LAN interfaces (for use with wireless access points)
- Supports authentication via:
- External web portal services such as Purple WiFi with RADIUS
- Display your company branding and information on login
- Flexible access methods:
- Click-through
- User details submission
- PIN / voucher generated by the router
- Control guest usage with limits based on:
- Connection time
- Bandwidth consumption
Quality of Service & Bandwidth Control
Prioritise critical, latency-sensitive applications with advanced Quality of Service (QoS):
- App QoS makes setup simple: select applications to prioritise (e.g. Zoom, Skype)
- Use 4 separate queues to prioritise:
- Specific servers & PCs (by IP address)
- Services such as VoIP or DNS
- Traffic tagged with 802.1p and DSCP (e.g. IP phones)
- Auto Voice VLAN automatically prioritises VoIP calls without extra configuration
- Bandwidth control:
- Set speed limits per client
- Limit groups of IPs
- Control throughput for entire subnets such as Guest networks
Central AP & Switch Management
Streamline network infrastructure management:
- Centrally manage DrayTek VigorAP access points and VigorSwitch switches connected to the router
- Configure, monitor and administer multiple APs and switches from a single interface
- Ideal for buildings and campus networks requiring coordinated, simplified management
