DrayTek Vigor2136 Series Broadband Routers

$238 – $325

3 products sold in last 11 hours
Selling fast! Over 9 people have in their cart

Gigabit broadband routers with 1 x 2.5GbE WAN port, 1 x Configurable 2.5GbE WAN/LAN port, 3 x GbE LAN ports, SPI Firewall, 802.11ax Wi-Fi, 4 x VPN tunnels including IPsec, OpenVPN and Wireguard

21 people are viewing this right now
  • Check Mark Estimated Delivery : Up to 4 business days
  • Check Mark Free Shipping & Returns : On all orders over $200
  • Visa Card
  • MasterCard
  • American Express
  • Discover Card
  • PayPal
  • Apple Pay
Guaranteed Safe And Secure Checkout
SKU: DV2136 Category: Brand:

  • Ready to connect to NTD (Network Termination Device) of NBN (Aust) and UFB (NZ)

  • 1 x 2.5 Gigabit WAN port with 2 x USB ports for 4G Mobile Fail-Over
  • 1 x configurable 2.5 GbE WAN/LAN port (P1)
  • 3 x Gigabit LAN ports with 50,000 NAT sessions
  • NAT throughput with Hardware Acceleration over 2.3 Gbps
  • IPsec VPN throughput up to 390 Mbps (AES 256 bits)
  • Object-based SPI Firewall, Content Security Management (CSM) and QoS
  • IAM (Identity and Access Management) to enhance security management and user experience
  • IPv6 & IPv4
  • 802.11ax (AX3000) Wi-Fi up to 574 + 2402Mbps speed (ax model)
  • 4 x VPN tunnels, including IPsec, OpenVPN and Wireguard
  • 2 x USB ports for 4G Backup, FTP server, network printer or thermometer
  • Virtual AP Controller for the deployment of up to 9 wireless VigorAPs
  • Wireless Mesh (ax model) up to 7 VigorAPs
  • Virtual Switch Controller to manage up to 5 VigorSwitches
  • Supports VigorACS 3 (Central Management system) for multi-site deployment

  • 2 years back to base warranty

     

Vigor2136 Series 2.5GbE WAN High-Speed Router

Vigor2136 Series is a broadband router featuring a super-fast 2.5GbE WAN port that meets the demands of modern-day businesses. With a hardware accelerator, it delivers up to 2.3 Gbps performance with plenty of business-grade features, including Web Content Filtering, Route Policy, App-based QoS, Object-oriented SPI Firewall, Four VPN tunnels, Tag-based VLAN, traffic management, etc.

The Wi-Fi model of Vigor2136 Series supports 802.11ax Wi-Fi with Multiple/Hidden SSIDs, WDS, AP Discovery, SSID VLAN grouping with LAN ports, Wireless Rate Control, and WMM (Wi-Fi Multimedia).

1 x 2.5GbE WAN & 1 x 2.5GbE LAN/WAN Switchable

4x VPN tunnels

IPsec throughput up to 390 Mbps

AX 3000

Delivers link rate up to 3 Gbps
(ax model only)

50k NAT sessions

Recommended for a network of up to 30+ devices

Interface

(ax model)

  1. WLAN/WPS Button (ax model)
  2. Reset Button
  3. WAN Port: 1x 2.5GbE RJ-45
  1. LAN/WAN Switchable Port: 1x 2.5GbE RJ-45
  2. LAN Port: 3x GbE RJ-45
  3. 2x USB 2.0
  1. Power On/Off Switch
  2. Power Input
  3. Wireless Antenna (ax model)

Performance Comparison: Vigor2136 vs. Vigor2135

NAT throughput with Hardware Acceleration (2.56x times faster)

Vigor2136 Series – 2.3 Gbps

Vigor2135 Series – 900 Mbps

IPSec throughput (2.3 times faster)

Vigor2136 Series – 350 Mbps

Vigor2135 Series – 150 Mbps

Key Features

VPN (Virtual Private Network)

Build a secure and private tunnel from the LAN of Vigor2136 Series to the remote offices and teleworkers over the Internet. Learn more

Firewall & Content Filter

Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.

IAM

A solution that manages digital identities, authentication, and access control to ensure the right users or groups have appropriate access to critical resources.

Hotspot Web Portal

Market your business and communicate with the guests while offering hospitality WLAN. Learn more

Bandwidth Management

Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

Virtual AP/Switch controller

All-in-one management platform for Vigor2136 Series to maintain and monitor the VigorAPs and VigorSwitches.

DrayDDNS

The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more

Mesh (Wireless model only)

Easily link to other VigorAP to expand the wireless network. Learn more

Multi-Gigabit Router

2136 connect

Faster Wired Connections

  • 4K video streaming
  • Online Gaming
  • Large file transfers
  • Network-attached storage (NAS) devices etc

Beyond Gigabit

With internet speeds of up to 2.5 Gbps, users can fully utilize the available bandwidth.

Secure network with VPN

Vigor2136 supports the most secure VPN protocols:

ikev2 ipsec
openVPN
wireguardVPN

Hardware NAT & Routing

With hardware acceleration enabled, the Vigor2136 Series’ NAT throughput can reach 2.3Gbps while still meeting the requirements of QoS. Business-critical apps can be prioritised over other apps.

LAN (2.5GbE) to WAN 1

With Hardware NAT & Routing

2.3 Gbps

LAN (1GbE) to WAN 1

Without Hardware NAT & Routing

950 Mbps

Vigor2136ax 2.5GbE Router with AX3000 (WiFi 6) capacity

2136ax left H1125

Vigor2136ax is a 2×2 dual-band Wi-Fi router that provides 160MHz bandwidth and 1024-QAM modulation to increase wireless data speed greatly. The theoretical speed is up to 3,000Mbps, of which 574Mbps is in the 2.4GHz band and 2,402Mbps in the 5GHz band, making it 2.5 times faster than an 802.11ac 2×2 dual-band router. Equipped with business-grade features, including URL Reputation, Route Policy, App-based QoS, and lots more, Vigor2136ax is perfect for professional smart homes/SOHO users who want to take full control of their network.

OFDMA (Orthogonal Frequency Division Multiple Access).
With OFDMA modulation scheme, each channel is made up of 256 subcarriers spaced 78.125 kHz apart, compared to 64 subcarriers spaced 312.5 kHz apart with OFDM. With up to 4 times data efficiency and more advanced channel sharing technologies, a device can be allotted bandwidth based on the assessed needs for the highest airtime efficiency possible. For example, users on streaming or VoIP services can be allocated more bandwidth and time, while services such as email or website browsing can be assigned less bandwidth that are still sufficient for the tasks, thus improving user experience in high-density environments.

OFDMA Lossy

MU-MIMO

wifi mimo

BSS Colouring Instead of CSMA/CA which allows only one device to transmit at a time, 802.11ax uses BSS Colouring to manage collision avoidance. Each Wi-Fi device is assigned a Basic Service Set (BSS), a 6-bit colour field, while adjacent devices are allocated with different colours. Before transmitting, the device checks the BSS and backs off only when the BSS is of the same colour as its own. In this way, the spectral efficiency is maximized as APs and Wi-Fi clients can transmit simultaneously even if they are on the same channel.

BBS Colouring

TWT (Target wake time)
Devices negotiate with the AP for a Target Wake Time (TWT), or joint a TWT broadcast session, and transmit data only when the TWT arrives, thereby reducing power consumption and increase network efficiency.

wifi6 twt target wake time

WPA3 (Wi-Fi Protected Access 3) enhances the security of Wi-Fi networks by addressing vulnerabilities in previous standards (WEP, WPA and WPS2) and introduces new features including stronger authentication, better encryption, and improved protection against attacks such as brute-force password guessing and man-in-the-middle exploits.

DrayTek’s WiFi 6 encryption:

  • WEP (64 / 128-bit)
  • WPA / WPA2 / WPA3 / OWE

The comparison table below compares security design of Wi-Fi security protocols WEP, WPA, WPA2 and WPA3.

WEP WPA WPA2 WPA3
Encryption RC4 TKIP / RC4 AES-CCMP AES-CCMP /
AES-GCMP
Session Key 64/128 bit 128 bit 128 bit 128/256 bit
Authentication Open system,
shared key		 Pre-shared key Pre-shared key AES-CCMP /
AES-GCMP
Level of Security Very low low Moderate High

URL Reputation

URL Reputation is a cloud-based technology that provides a Threat Intelligence Service. This service adds an extra layer of security protection for LAN clients during their online activities.

There are 82 categories, 10 of which are security-focused, providing comprehensive and up-to-date protection to your home or office network.

The various categories cover network security, including malware, spyware, adware, parental control for child protection, business, social networking, and more, to ensure a safe online environment while boosting employee productivity and reaching efficient bandwidth management.

You can purchase URL Reputation B card for your Vigor2136 series

 

Learn More

 

2136 wcf

IAM (Identity and Access Management)

Vigor2136 Series with the new DrayOS5 is Zero Trust ready!

IAM (Identity and Access Management) is a cybersecurity system that controls user access by managing digital identities, authentication, and authorisation, to ensure correct access to network resources such as applications and devices.

iam concept

With processes including identifying, authenticating, authorising users or groups, and assigning appropriate levels of access, IAM enhances both security management and the user experience and plays an important role in cloud-based services.

The IAM solution from Vigor2136 is Zero Trust Ready, and allows you to grant and categorize user privileges, create and manage access policies, and define large-scale group policies that integrate multiple filtering rules and traffic-shaping settings.

Users & Groups
  •  User accounts and user groups allow flexible access level control.
  •  Existing external authentication server is supported.
  •  User and MFA protection can be easily configured.
iam user mfa security
Access Policies

System administrators can create access policies for the local users in this tab. The access policies can be configured based on:

  • MAC address filter list
  • The allowed / blocked user list
  • The login sessions lifetime

Access policies can be combined to create a robust security framework for your system.

iam access policy
Group Policies

Group policies can be configured for predefined local resources such as employees, workstations, network printers, and local servers. Network Firewall and traffic shaping policies can be configured to enhance network security and optimise traffic flows.

Conditional Access Policy

Conditional access policies can be configured to request users to provide multiple forms of authentication before granting appropriate access to a resource.

  • Specify a period for the user to re-authenticate
  • Restrict access to specific source IP addresses or ranges of IP addresses
  • Specify VLAN-based access level in your conditional policies
  • Set up time schedules when users are allowed to log-in
iam conditional access policy
Resources Tab

Configure local resources such as IP and Mac addresses for workstations, network printers, PBX systems, NVR systems, servers, etc.

Backup and Restore

Backup or restore router settings such as Users and Groups, Access and Group Policies, etc. A Password protection can be applied before backup or restore.

iam backup restore

AP-Assisted Roaming – built-in in selected Wi-Fi Vigor Routers and all Vigor Access Points

assisted roaming

Extend Transmission Range

When a Wi-Fi client moves out of its effective transmission range which is defined by the Basic Rate and/or Received Signal Strength threshold, the AP forces the Wi-Fi client to pick up a nearby access point with stronger signals thereby extending the range.

Improve Data Rates

When the “Minimum RSSI with Adjacent AP” option is set, APs or routers on the same local subnet will exchange client information with each other and switch to the AP or router that has the strongest signal, ensuring that data rates can be as good as possible.

Better User Experience

Instead of ineffective transmission with low basic rates or RSSI, the better links provide better user experience while saving the airtime.

No Controller Required

Assisted Roaming is a built-in feature in all Vigor Access Points and a number of Wi-Fi routers; it saves the need for an ad-hoc wireless controller and is an ideal solution for simple network deployments.

Mesh Wi-Fi (Vigor2316ax only)

Vigor2316ax supports up to 7 APs, which can form one or more Wireless Groups. Each group can form Mesh links automatically based on the optimum signal level among the APs and devices.

wireless app profile screenshot
mash ani 8s ok
mesh advantages

Hotspot Web Portal

Market your business while offering free Wi-Fi

vigor hotspot portal

Wi-Fi Marketing

Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.

Grow Customer Mailing List

Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types

Various login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, and RADIUS.

3rd-Party Service Compliant

Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.

Data Quota Management

Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.

LAN Management

The LAN Management platform allows easy and flexible configuration for Vigor devices on the LAN side, supporting up to 20 VigorAPs (including a root AP) and 5 VigorSwitches.

Automatic Device Discovery

Just connect new devices such as Vigor Switches or APs to the LAN port, Vigor2136 will auto-configure the new devices into the network.

2136 lan mana

Provisioning

New devices such as Vigor Switch/AP can be configured into the network automatically.

Monitoring

A summarized view of the network at the same page allows fast monitoring of all devices in the network.

System Maintenance

Tasks such as factory reset, backup and restore of configuration settings, or remote reboot can be performed from the Vigor routers, without needing to log in to the devices’ management pages.

Wireless Management Solution

mesh ac model

Mesh (ax model)

Up to 7 APs

  • DrayTek Wireless app-support
  • Discovery
  • Auto-Provisioning
  • Monitoring
  • Centralized Hierarchy View

vigor router apm

Virtual AP Controller

Up to 9 VigorAPs

  • Auto-Discovery
  • Auto-Provisioning
  • Monitoring
  • Centralized View
  • Alarm
  • Reboot VigorAP Remotely
  • Wi-Fi Client Load Balancing

wireless mesh status

Device Management

View and Configure VigorAPs

  • Device List
  • Mesh Status
  • AP Adoption

Switch Management Solution

switch mana

SWM

Virtual Switch Controller
Up to 5 VigorSwitches

swm manage devices

Device Management

Display VigorSwitch name, MAC address, IP address, Firmware Version, Model, Online Status, System Uptime, Port in Use, Clients, and Last Process Status.

Scan the network to add new VigorSwitches.

swm port profile

Port Profile

Create profiles that include general settings, VLAN, GVRP, Multicast STP, and QoS settings, which can be applied to the managed switch.

swm maintenance

Maintenance

Perform maintenance tasks for selected VigorSwitch.

Tasks include Configuration backup and restore, Remote Reboot and Factory Reset of the selected switch.

Software Management

VigorACS 3

software management acs3

  • Zero Touch Deployment & Provisioning
  • Auto VPN
  • Interface Quality & SLA
  • VoIP Optimization & Monitoring
  • Application Visibility
  • Application Based SD-WAN Policy
  • Customized Hotspot Page with Multilingual
  • Hotspot Clients Analytics
  • ACS Server Load Balancing / Failover

In-the-Box

Vigor2136 l 2024

Vigor2136 Series

antenna v3

Antenna x 2
(ax model)

ethernet cable

RJ-45 Cable
(Ethernet)

AU power

Power Adaptor

quick start guide

Quick Start Guide

Note :

The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

Models

Model Vigor2136 Vigor2136ax
Product Vigor2136 l 2024 Vigor2136ac l 2024
Gigabit WAN 1 x 2.5 GbE 1 x 2.5 GbE
Selectable Gigabit WAN/LAN 1 x 2.5 GbE 1 x 2.5 GbE
4G LTE/3G 2 x USB 2.0 2 x USB 2.0
Wireless WAN
Gigabit LAN 3 3
VPN Tunnels 4 4
Wireless LAN
WiFi 6, AX3000
Wi-Fi Antenna
2.7dBi for 5GHz
2.6dBi for 2.4GHz
VoIP (2xFXS)

Specifications

Interface
WAN Port 1 x 2.5 GbE
Selectable Gigabit WAN/LAN 1 x 2.5 GbE
LAN Port 3 x Gigabit Ethernet
USB Port 2 x USB 2.0 for 4G/LTE USB modem, storage, printer or thermometer
Wi-Fi Antenna 2x External Dipole, Gain: 2.7 dBi for 5GHz, 2.6 dBi for 2.4GHz (ax model)
2.4G WLAN 802.11ax 2×2 MIMO, up to 574Mbps Link Rate (ax model)
5G WLAN 802.11ax 2×2 MU-MIMO, up to 2402Mbps Link Rate (ax model)
Performance
NAT Throughput w/ Hardware Acceleration 2300 Mbps
IPsec VPN Performance 390 Mbps (AES 256 bits)
Wireguard VPN Throughput 90 Mbps
Max. Number of NAT Sessions 50,000
Max. Concurrent VPN Tunnels (including OpenVPN/
SSL-VPN/Wireguard)		 4
Internet Connection
IPv4 PPPoE, DHCP, Static IP
IPv6 PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
4G/LTE WAN with USB modem
WAN Failover
Connection Detection ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS
LAN Management
VLAN 802.1q Tag-based, Port-based
Max. Number of VLAN 8
Number of LAN Subnet 4
DHCP Server Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
Wired 802.1x Authentication
Port Mirroring  * Future Support
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal 2
Hotspot Authentication Click-Through, External Portal Server
Networking
Routing IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Routing, RIP v1/v2, BGP, OSPF(V2/V3)
Policy-based Routing Protocol, IP Address, Port
DNS Security (DNSSEC)
Multicast IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing  (Requires external storage)
VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols IPsec, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN, Wireguard
User Authentication Local, RADIUS, TACACS+, mOTP, TOTP
IKE Authentication Pre-Shared Key, X.509
IPsec Authentication SHA1, SHA256
Encryption DES, 3DES, AES128, AES192, AES256
Single-Armed VPN
NAT-Traversal (NAT-T)
VPN Connection Status
Backup & Restore
Security
IP Reputation Filter  * Future Support
Firewall Filter IP, Content, Traffic
Defense Setup ARP Spoofing, IP Spoofing
MAC Filtering Profile
IPv6 Address Security
IAM
Users & Groups
Access Policies
Group Policies
Conditional Access Policy
Resources
Backup and Restore
Bandwidth Management
Traffic Shaping Policy
IP-based Bandwidth Limit
QoS (Quality of Service) IP Address, Port, Application
APP QoS
Default Policy
VoIP Prioritization
Wireless LAN (ax model)
2.4GHz WLAN 802.11ax 2×2 MIMO
5GHz WLAN 802.11ax 3×3 MU-MIMO
Antennas 3
Antenna Spec 2 x External Detachable + 1 x 5GHz Internal PIFA
2.4GHz Antenna Gain 2.6dBi
5GHz Antenna Gain 2.7dBi
2.4GHz Max. Link Rate 574Mbps
5GHz Max. Link Rate 2402Mbps
Max. Number of SSIDs per band 8
Security Mode OWE, WEP, WPA, WPA2, Mixed (WPA+WPA2), WPA3, Mixed (WPA2+WPA3)
Authentication Pre-Shared Key, 802.1x
WiFi 6
OFDMA
Roaming Assisted Roaming
WPS PIN, PBC
WDS Repeater
Access Control Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling
AirTime Fairness
Band Steering
WMM
Mesh (5GHz only) Root
Management
Local Service HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069
Config File Export & Import
Firmware Upgrade TFTP, HTTP
Access Control Access List, Brute Force Protection
Notification Alert SMS, E-mail
SNMP v1, v2c, v3
Syslog
Virtual AP Controller 9
Mesh Network 7
Virtual Switch Controller 5
Managed by VigorACS Since f/w v5.3.0
Physical
Power Supply DC 12V @ 0.9A (Vigor2136)
DC 12V @ 1.5A (Vigor2136ax)
Max. Power Consumption 10 watts (Vigor2136)
18 watts (Vigor2136ax)
Dimension 207mm x 131mm x 42mm
Weight 452g (Vigor2136)
508g (Vigor2136ax)
Operating Temperature 0 to 45°C
Storage Temperature -25 to 70°C
Operating Humidity (non-condensing) 10 to 90%

Note :

  • All specifications are subject to change without notice.
  • The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.

 

Model

Vigor2136, Vigor2136ax

Models

Model Vigor2136 Vigor2136ax
Product
Gigabit WAN 1 x 2.5 GbE 1 x 2.5 GbE
Selectable Gigabit WAN/LAN 1 x 2.5 GbE 1 x 2.5 GbE
4G LTE/3G 2 x USB 2.0 2 x USB 2.0
Wireless WAN
No
No
Gigabit LAN 3 3
VPN Tunnels 4 4
Wireless LAN
No
 WiFi 6, AX3000
Wi-Fi Antenna
No
 2.7dBi for 5GHz
2.6dBi for 2.4GHz
VoIP (2xFXS)
No
No

Related products