DrayTek Vigor C410ax 4G Wi‑Fi 6 Branch Office Gateway Router
The DrayTek Vigor C410ax is a low-cost, multi-WAN firewall VPN router designed as an ideal 4G networking gateway for branch and remote offices. It combines a built-in 4G LTE modem, Wi‑Fi 6 wireless, and multiple Ethernet WAN options with advanced security and central management support.
Key Features
- Multi-WAN Router with Failover
- 4G built-in modem with dual SIM slots for second backup telco
- 1 x Gigabit Ethernet WAN (RJ-45)
- 1 x Gigabit Ethernet WAN (RJ-45) / LAN switchable
- Wireless WAN backup (ax models) – can fall back to wireless hotspots (e.g. phone tethering, public hotspots)
-
Automatic failover between WAN interfaces
-
High-Performance Firewall & VPN
- Up to 940 Mbps firewall throughput
- Up to 370 Mbps IPsec VPN throughput
- Up to 4 LAN-to-LAN & Remote Teleworker VPN tunnels
- SPI Firewall and extensive Content Filtering
- VPN client/server with multiple protocol support
-
Quality of Service (QoS) controls
-
Wi‑Fi 6 AX3000 Dual-Band Wireless
- AX3000 Wi‑Fi 6 dual-band wireless LAN
- Wi‑Fi 6 module can provide Internet access and support local wireless LAN simultaneously
-
Mesh Root support with DrayTek VigorAP mesh nodes
-
Advanced LAN & VLAN Control
- 4 Gigabit RJ-45 LAN ports
- 4 LAN subnets with VLANs (port-based / 802.1q)
-
Up to 8 VLANs
-
Central Management & Service Options
- Compatible with VigorACS central management platform
- Optional VigorCare extended warranty available
- Latest DrayTek DrayOS 5 for enhanced security-focused capabilities
Technical Specification (UK Hardware Spec.)
Physical Interfaces
| Interface / Control | Details |
|---|---|
| WAN Ports | 1 x Gigabit Ethernet (1G/100M/10M), RJ-45 |
| WAN/LAN Switchable Port | 1 x Gigabit Ethernet (1G/100M/10M), RJ-45 |
| LAN Ports | 4 x Gigabit Ethernet (1G/100M/10M), RJ-45 |
| Wireless LAN Antennas | 2 x removable |
| 4G Cellular Antennas | 2 x removable |
| Buttons | Wireless On/Off/WPS, recessed Factory Reset |
| SIM Slot | 2 x Nano-SIM (1 active SIM) |
Performance
| Category | Specification |
|---|---|
| NAT Throughput | Up to 940 Mb/s |
| NAT Sessions | 50,000 |
| VPN Performance | 370 Mb/s IPsec VPN |
| Concurrent VPN | Max. 4 tunnels |
WAN Interfaces & Connectivity
- WAN Ports
- WAN1: Gigabit Ethernet
- WAN2: Gigabit Ethernet (LAN switchable)
- WAN3: 2.4GHz Wireless WAN
- WAN4: 5GHz Wireless WAN
-
WAN5: Integrated 5G/4G modem
-
Internet Connection Features
- Hardware Acceleration (Always On)
- 802.1p/q multi-VLAN tagging
- Multi-VLAN/PVC
- 2.4GHz or 5GHz Wireless WAN
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: ARP Detect, Ping Detect
- WAN Data Budget per WAN
- Dynamic DNS
-
DrayDDNS with automated Let’s Encrypt certificates
-
IPv4 Connection Types
-
PPPoE, DHCP, Static IP
-
IPv6 Connection Types
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel
Wireless Features (Wi‑Fi 6 AX3000)
| Feature | Specification |
|---|---|
| Standard | 802.11ax 2x2 wireless access point |
| Compatibility | 802.11a/b/g/n/ac |
| Bands | Dual-band 2.4GHz / 5GHz simultaneous |
| 5GHz PHY Rate | Up to 2402 Mbps at 160MHz |
| 2.4GHz PHY Rate | Up to 574 Mbps at 40MHz |
| Channel Bandwidth | 20/40MHz (2.4GHz), 20/40/80/160MHz (5GHz) |
| Technologies | OFDMA, MU-MIMO, Tx Beamforming, 1024-QAM |
| Mesh | Mesh Root support with DrayTek VigorAP Mesh Nodes |
| SSIDs | Up to 8 SSIDs per radio band |
| 5GHz Channels | Channels 36-48, 52-64, 100-140 (extended 5GHz band) |
| Optimisation | Assisted Client Roaming, Band Steering, WMM |
| Setup | WPS (Wi-Fi Protected Setup) |
Wireless Security
- OWE
- WEP
- WPA
- WPA2/WPA
- WPA3
- Pre-Shared Key authentication
- Enterprise 802.1x authentication
- Identity Access Policies (MAC address, Login, Guest Hotspot)
Antenna Specifications
Wireless LAN Antennas
- 2 x External Dipole
- 5GHz Gain: 2.8 dBi
- 2.4GHz Gain: 2.1 dBi
- RP-SMA fitting antenna connectors
5G/4G Cellular Antennas
- 2 x External Dipole
- 2 x Internal PIFA
- Gain: 4 dBi
- SMA fitting antenna connectors
Integrated 4G Modem Features
- Dual-SIM failover
- 4G LTE Category 6 modem
- Unlocked to any network (EE, 3, O2, Vodafone, Eircom)
- 4G max data rates:
- 300 Mbps downlink
-
50 Mbps uplink
-
Supported Bands
- 4G LTE (FDD) Bands: 1, 3, 7, 8, 20, 28
- 4G LTE (TDD) Bands: 38, 40
-
3G (WCDMA) Bands: 1, 8
-
2 x 4G external antennas included
- Per-SIM-card WAN data budget
- 2 x Nano-size SIM-card slots
- Removable SIM slot cover
- SMS Inbox – send & receive SMS text messages
Firewall & Content Filtering
- IP-based firewall policy
- DoS attack defence
- Spoofing defence
Content Filtering
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
Web Features
- Web Category Filter
NAT Features
- NAT Port Redirection
- Open Ports
- Port Triggering
- DMZ Host
- UPnP
- ALG: SIP, RTSP
LAN Management
- 802.1q tag-based & port-based VLAN
- Up to 4 LAN subnets (NAT or Routing mode selectable per LAN interface)
- Up to 8 VLANs
DHCP Server
- Multiple IP subnet support
- Custom DHCP options
- Bind-IP-to-MAC
- DHCP Pool: up to 253 addresses for LANs 1–4
- DHCP Relay per LAN
Additional LAN Features
- Wired 802.1x port authentication
- Local DNS server
- Conditional DNS forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, External Portal Server
Networking Features
- Policy-based Routing: by protocol, IP address, port
- DNS Security (DNSSEC)
- Local RADIUS server
- Multicast: IGMP Proxy, IGMP Snooping & Fast Leave
Routing (IPv4 & IPv6)
- Static Routing
- Inter-VLAN Routing
- RIP v1/v2/ng
- BGP
- OSPF
VPN Features
- Up to 4 active VPN tunnels
- Up to 370 Mb/s IPsec
- LAN-to-LAN – Dial-In VPN Server & Dial-Out VPN Client
- Teleworker-to-LAN – Dial-In VPN Server
User Authentication
- Local, RADIUS, TACACS+, mOTP, TOTP
Key Exchange & Security
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
Supported VPN Protocols
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- OpenVPN
- WireGuard
Bandwidth Management
- IP-based bandwidth limit
- IP-based session limit
QoS (Quality of Service)
- 4 priority queues
- App QoS
- VoIP prioritisation
Management & Monitoring
- Local Services: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config file export & import
- Firmware upgrade via TFTP, HTTP, TR-069
Access Control & Monitoring
- Access List
- Brute Force Protection
- Syslog
- SMS & Email notification alerts
- SNMP v1, v2c, v3
Central Management
- Managed by VigorACS
Router-Based Central Management Features
- AP Management: up to 20 VigorAP access points
- Switch Management: up to 5 VigorSwitch network switches
- DrayTek Mesh: up to 7 VigorAP access points^
Operating Requirements
| Parameter | Value |
|---|---|
| Power Requirements | 100–240 VAC |
| Power Consumption (Max) | 16 W |
| Operating Temperature | 0 °C ~ 45 °C |
| Storage Temperature | -25 °C ~ 70 °C |
| Humidity | 10% ~ 90% (non-condensing) |
| Operating Power | DC 12V @ 1.4A (via external PSU) |
| Mounting | Wall mountable |
Physical Specifications
| Dimension | Value |
|---|---|
| Width | 207 mm |
| Depth | 131 mm |
| Height | 42 mm |
| Weight | 840 g |
Box Contents
- Vigor C410ax series router
- Quick Start Guide
- Cat-5e RJ-45 network cable
- 2 x detachable wireless LAN antennas
- 2 x detachable cellular antennas
- DC 12V power supply with UK plug
Warranty & Support
- Standard Warranty: Two (2) year RTB
- Software security updates: 5 years after the EOL notification
(applies to products sold in the UK)
VigorCare Extended Warranty Options
- VigorCare A3 3 Year Subscription: VCARE-A3
- VigorCare A5 5 Year Subscription: VCARE-A5
