Draytek Vigor2865 LTE Series Router
Multi-WAN routers with a Cat.6 4G LTE modem & 2 x SIM card slots, 1 x VDSL2 35b/ADSL2+ modem, 1 x congurable GbE WAN/LAN port, 5 x GbE LAN ports, SPI Firewall, 802.11ac, and 32 x VPN tunnels including 16 x SSL-VPN tunnels
- Estimated Delivery : Up to 4 business days
- Free Shipping & Returns : On all orders over $200
- Cat.6 4G LTE modem with dual SIM slots (SIM slot 2 for Failover) for FDD & TDD 4G LTE WAN
- Support 4G LTE bands: B1/B3/B5/B7/B8/B20/B28/B32/B38/B40; great coverage in Australia and New Zealand, Cat.6 4G LTE with 300Mbps download and 50Mbps upload speeds
- Multi-WAN with 1 x VDSL2 35b or ADSL2/2+ WAN port, 1 x configurable GbE WAN/LAN port, 1 x USB port , 2 x 4G LTE SIM slots, and 2 x Wi-Fi WANs (Lac model)
- 1 x XDSL port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
- 1 x USB 2.0 port for 3G/4G LTE USB modems, FTP server, network printer or thermometer
- 5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
- 32 x VPN tunnels (including 16 x OpenVPN/ SSL-VPN tunnels) with most security protocols
- Fast VPN throughput, VPN Load-balancing and backup for site-to-site applications
- Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.3Gbps (Multi-WAN) Firewall speed
- 16 x VLANs for secure and efficient workgroup management
- IPv6 & IPv4
- Up to 1022 IP addresses and 8 IP subnets
- Integrated IEEE 802.11ac (AC1300) wireless Access Point; dual band; up to 867 Mbps throughput (Lac model)
- High Availability mode
- Object-based SPI Firewall and CSM (Content Security Management) for network security
- Supports VigorACS 2 and VigorACS 3 Central Management Software for remote management
- SD WAN capability when used with VigorACS 3
- Central VPN Management for up to 8 remote Vigor routers Learn more
- Central AP Management for up to 20 Vigor Access Points Learn more
- Central Switch Management for up to 10 VigorSwitches Learn more
- 2 years back to base warranty
Cat.6 4G LTE and VDSL2 35b Supervectoring Security Routers for SMB

Vigor2865Lac
The Vigor2865 LTE series are VDSL2 35b/ADSL2+ firewall routers with embedded 4G LTE connectivity, making them ideal for SMB where business continuity rely on DSL or Ethernet Internet connectivity, or branch offices at new locations where DSL or Ethernet connection is unavailable.
These routers have 1 x RJ-11 WAN port for VDSL2 (including profile VDSL2 35b Supervectoring)/ADSL2+, 1 x GbE WAN/LAN switchable port, 2 x embedded SIM slots that support Cat.6 LTE (SIM slot 2 for Failover), and 1 x versatile USB port for an additional 4G LTE connection or other applications. These WANs provide robust Load Balancing and Failover functionality.
All models support professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and much more, and can act as controllers to manage VigorAPs and VigorSwitches on the LAN, or can register to VigorACS for cloud-based remote management. The Vigor2865Lac model supports built-in 802.11ac Wave 2 wireless LAN.
The Vigor2865 LTE series router has 2 LTE antennas. A 1 metre extension lead with a magnetic base allows the antennas to be placed in the best position for optimum 3G/4G reception.
LTE/4G Specification
- LTE/4G category 6
- 300 Mbps downstream and 50Mbps upstream
- 4G LTE FDD Band: 1, 3, 5, 7, 8, 20, 28, 32
- 4G LTE TDD Band: 38, 40
- 3G WCDMA Band: 1, 5, 8
The SMS feature allows status and alerts to be sent by the router, or an IT admin can reboot the router remotely. Learn more
For mission critical applications, the Vigor2865 LTE series routers can be used in High Availability mode to provide uninterrupted network connectivity in case the primary router fails.
The 4G LTE feature makes the Vigor2865 LTE series routers ideal solutions for applications such as:
- Remote locations with no fixed line or NBN coverage
- Quick setup for new branches waiting for NBN connections
- Load Balancing or Failover backup for an existing primary Internet connection which can be any of xDSL/Ethernet/LTE type
- Temporary installations such as disaster recovery, emergency, exhibitions, sporting events, etc., where Internet access is required for a short period
- Provision of Internet access on public transport such as coaches, buses, trains, freighters, ferries, etc.
The Vigor2865 LTE series routers can be rack mounted using a 1RU rack mount bracket on a standard 19” rack or cabinet.
VDSL2 35b
Download speed up to 300 Mbps
Up to 6 WANs for Lac model
Load Balancing; NAT throughput up to 800 Mbps
Cat.6 4G LTE
300Mbps download and 50Mbps upload speeds
32 x VPN tunnels
IPsec VPN throughput up to 300 Mbps


- 1 x USB 2.0 ports for connection to 3G/4G LTE USB modems, FTP server, network printer and thermometer
- GbE LAN/WAN Switchable Port: 1x GbE RJ-45
- Fixed LAN Port: 5x GbE RJ-45
- Fixed WAN Port: 1x RJ-11 for VDSL2 35b/ADSL2+
- LTE Antenna
- Power Input
- Power On/Off Switch
- 2 x Standard-sized SIM Slots (SIM slot 2 for Failover)
Key Features

Embedded SIM Slot
Provides 4G/LTE Internet access to where fixed lines are not available without the need for a USB dongle.

DrayDDNS
Free DDNS service to access the router using a fixed hostname of your choice. Learn more

Load Balancing
Maximise throughput and reliability by using multiple Internet connections. Learn more

Wireless WAN (Wireless model only)
Get Internet access wirelessly from a Wi-Fi network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more

35b Supervectoring Modem
Integrated VDSL modem, supporting VDSL2 profile 35b supervectoring.

Hotspot Web Portal
Market your business and communicate with guests by offering hospitality Wi-Fi. Learn more

VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of the Vigor2865 Series to remote offices and teleworkers over the Internet. Learn more

Bandwidth Management
Prevent one device using all the bandwidth with bandwidth limit policy, session limit policy, and QoS settings.

SSL VPN
SSL VPNs work through firewalls providing secure remote access to any network environment. Learn more

Central AP Management
Use the Vigor2865 router as a wireless controller to maintain and monitor VigorAPs. Learn more

Firewall & Content Filter
Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.

Central Switch Management
Set up VLANs easily from the router and get a centralised hierarchy view of the switches. Learn more
Performance Comparison: Vigor2865 vs. Vigor2862
NAT throughput (1.6 times faster)
800 Mbps
Vigor2865 Series
500 Mbps
Vigor2862 Series
IPSec throughput (3.5 times faster)
300 Mbps
Vigor2865 Series
85 Mbps
Vigor2862 Series
SSL-VPN throughput (2.9 times faster)
130 Mbps
Vigor2865 Series
45 Mbps
Vigor2862 Series
Hardware Acceleration
Without sacrificing traffic control features such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph and Data Flow Monitor, Hardware Acceleration enhances performance for:
- NAT & routing connections
- QoS
- IPsec VPN

Hardware NAT & Routing
With Hardware Acceleration and Hardware QoS enabled, the router supports up to 8k NAT and routing connections, and firewall performance reaching 940Mbps on single WAN and 1.3Gbps combined performance on multi-WANs.
Dual WAN (Ethernet + DSL)
1.6x Faster NAT Performance
1.3 Gbps
with Hardware NAT & Routing
800 Mbps
without Hardware NAT & Routing
Single Ethernet WAN
1.2x Faster NAT Performance
940 Mbps
with Hardware NAT & Routing
800 Mbps
without Hardware NAT & Routing
Hardware QoS
Hardware QoS allows prioritization of applications and services on DrayTek routers, to improve performance of critical applications such as VoIP, conferencing and video streaming, etc. Furthermore, it allows flexible bandwidth allocation to suit business requirements.

Dual WAN (Ethernet + DSL)
1.6x Faster QoS Performance
1.3 Gbps
with Hardware QoS
700 Mbps
with Software QoS
Single Ethernet WAN
1.3x Faster QoS Performance
940 Mbps
with Hardware QoS
700 Mbps
with Software QoS
Hardware IPsec
While the Vigor2865 series already has improved IPsec performance over the previous Vigor2862 series, with Hardware Acceleration enabled, IPsec performance can now reach 800 Mbps. The first 16 tunnels are automatically accelerated on a first come first serve basis. If any drops out, a new tunnel will be put into the accelerator automatically to top off 16 accelerated tunnels.
2.7x Faster IPsec Performance
800 Mbps
with Hardware IPsec
300 Mbps
with Software IPsec

APP QoS
Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications, such as VoIP, conferencing video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.
VoIP First
VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Hotspot Web Portal
Market your business while offering free Wi-Fi
Wi-Fi Marketing
Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.
Grow Customer Mailing List
Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types
A variety of login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.
3rd-Party Service Compliant
Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.
Data Quota Management
Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.
Management Solution



All-in-One Management | ||
---|---|---|
Mesh (ac model) | Central Switch Management | Central AP Management |
DiscoveryProvisioningMonitoringCentralised Hierarchy View | Auto-DiscoveryProvisioningMonitoringCentralised Hierarchy ViewReboot PoE Devices RemotelyQuick VLAN Configuration | Auto-DiscoveryAuto-ProvisioningMonitoringCentralised ViewAlarmReboot VigorAP RemotelyWi-Fi Client Load Balancing |


Software Management | |
---|---|
VigorACS 2 | VigorACS 3 |
ProvisioningMonitoringCentralised Hierarchy ViewAlarmReboot Vigor Devices RemotelyScheduled MaintenanceReport | Zero Touch Deployment & ProvisioningAuto VPNInterface Quality & SLAVoIP Optimization & MonitoringApplication VisibilityApplication Based SD-WAN PolicyCustomized Hotspot Page with MultilingualHotspot Clients AnalyticsACS Server Load Balancing / Failover |
In-the-Box

Vigor2865L/Lac

2 x LTE Antennas + Socket

2 x Wireless Antennas
(Lac model)

RJ-45 Cable
(Ethernet)

RJ-11 to RJ-11 Cable
(Annex A)

Power Adaptor

Quick Start Guide
Note :
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Dimensions | N/A |
---|---|
Model | Vigor2865L, Vigor2865Lac |
Models
Model | Vigor2865L | Vigor2865Lac |
---|---|---|
Product | ![]() |
![]() |
VDSL2 35b or ADSL2/2+ |
Yes
|
Yes
|
Selectable Gigabit WAN/LAN | 1 | 1 |
4G LTE/3G | 2 x SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 |
2 x SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 |
Wireless WAN |
No
|
2 |
Gigabit LAN | 5 | 5 |
VPN Tunnels | 32 | 32 |
Wireless LAN |
No
|
WiFi 5, AC1300 |
Wi-Fi Antenna |
No
|
3.5 dBi for 5GHz 2.3 dBi for 2.4GHz |
VoIP (2xFXS) |
No
|
No
|
Specifications
Interface | |
---|---|
Fixed WAN Port | 1 x RJ-11 for VDSL2 35b or ADSL2/2+ |
LAN/WAN Switchable Port | 1 x 10/100/1000Base-TX RJ-45 |
Fixed LAN Port | 5 x 10/100/1000Base-TX RJ-45 |
SIM Slot | 2 x Standard-sized SIM slots (SIM slot 2 for Failover) |
USB Port | 1 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
LTE Antenna | 2 x External Dipole Gain: 3 dBi |
Wi-Fi Antenna | 2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (Lac model) |
2.4G WLAN | 802.11n 2×2 MIMO 400Mbps (Lac model) |
5G WLAN | 802.11ac Wave 2 2×2 MU-MIMO 867Mbps (Lac model) |
Performance | |
---|---|
NAT Throughput | 800 Mbps |
NAT Throughput w/ Hardware Acceleration | 940 Mbps (Single Ethernet or xDSL WAN) 1.3 Gbps (Ethernet WAN + xDSL WAN) |
IPsec VPN Performance | 300 Mbps (AES 256 bits) |
SSL VPN Performance | 150 Mbps |
Max. Number of NAT Sessions | 60,000 |
Max. Concurrent VPN Tunnels | 32 |
Max. Concurrent OpenVPN/ SSL VPN | 16 |
VDSL/ADSL | |
---|---|
VDSL Standards | ITU-T G.993.2 Annex A/B/M/Q (up to Profile 35b but excluding 30a) T1.424 ITU-T G.993.5 (Vectoring) |
VDSL2 Profile | 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b (not G.fast) |
ADSL Standards | ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2 |
Other Standards | ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission) |
Band Plan | 998, 997 |
LTE | |
---|---|
LTE Category | 6 |
Max. Data Rate | 300 Mbps downlink, 50 Mbps uplink |
FDD Band | B1/B3/B5/B7/B8/B20/B28/B32/B38/B40 |
TDD Band | B38/B40 |
WCDMA (3G) Band | 1, 5, 8 |
SMS Gateway | Learn More |
Internet Connection | |
---|---|
IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
802.1p/q Multi-VLAN Tagging | |
Multi-VLAN/PVC | |
Wireless WAN | (Lac model) |
3G/4G/LTE WAN with USB modem | |
Load Balancing | IP-based, Session-based |
WAN Active on Demand | Link Failure, Traffic Threshold |
Connection Detection | ARP, Ping |
WAN Data Budget | |
Dynamic DNS | |
DrayDDNS |
LAN Management | |
---|---|
VLAN | 802.1q Tag-based, Port-based |
Max. Number of VLAN | 16 |
Number of LAN Subnet | 8 |
DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
LAN IP Alias | |
Wired 802.1x Authentication | |
Port Mirroring | |
Local DNS Server | |
Conditional DNS Forwarding | |
Hotspot Web Portal | |
Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking | |
---|---|
Routing | IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP (IPv4) |
Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
High Availability | |
DNS Security (DNSSEC) | |
Multicast | IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour |
Local RADIUS server | |
SMB File Sharing | (Requires external storage) |
VPN | |
---|---|
LAN-to-LAN | |
Teleworker-to-LAN | |
Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN) |
User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
IKE Authentication | Pre-Shared Key, X.509 |
IPsec Authentication | SHA-1, SHA-256 |
Encryption | MPPE, DES, 3DES, AES |
VPN Redundancy | Load Balancing, Failover |
Single-Armed VPN | |
NAT-Traversal (NAT-T) | |
DrayTek VPN Matcher |
Firewall & Content Filtering | |
---|---|
NAT | Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 |
VPN Pass-Through | PPTP, L2TP, IPsec |
IP-based Firewall Policy | |
Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category* (* subscription required) |
DoS Attack Defence | |
Spoofing Defense |
Bandwidth Management | |
---|---|
IP-based Bandwidth Limit | |
IP-based Session Limit | |
QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
VoIP Prioritisation |
Wireless LAN (Lac model) | |
---|---|
Number of SSID | 4 per radio band |
Security | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
Authentication | Pre-Shared Key, 802.1x |
WPS | PIN, PBC |
WDS | Repeater (5GHz only) |
Access Control | Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
AirTime Fairness | |
Band Steering | |
MU-MIMO | |
WMM |
Management | |
---|---|
Local Service | HTTP, HTTPS, Telnet, SSH, FTP, TR-069 |
Config File Export & Import | |
Config File Compatibility | Vigor2862 LTE |
Firmware Upgrade | TFTP, HTTP, TR-069 |
2-Level Administration Privilege | |
Access Control | Access List, Brute Force Protection |
Notification Alert | SMS, E-mail |
SNMP | v1, v2c, v3 |
Syslog | |
Managed by VigorACS | |
Central VPN Management | 8 remote Vigor routers |
Central AP Management | 20 VigorAPs |
Mesh Network | 7 VigorAPs (Lac model) |
Central Switch Management | 10 VigorSwitches |
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Deployment Examples
4G LTE Router Applications
DrayTek 4G LTE routers, including the Vigor2865 LTE series and Vigor2927 LTE series, have all the features you need for a network in a small to medium size business. Each of these routers has an integrated LTE modem and accepts one or two SIM cards from any of the major broadband service providers in Australia (Telstra, Optus, Vodafone, etc.), as well as those in New Zealand (Spark, 2Degrees and Vodafone). Speeds up to 300Mbps downstream and 50Mbps upstream are supported. What’s more, each of the wireless models, Vigor2865Lac and Vigor2927Lac, has a built-in 802.11ac wireless access point.

With the 4G LTE internet access and strong network features, the DrayTek 4G LTE routers support a wide range of application scenarios besides indoor offices, including internet access for mobile and PC devices on public transport, outdoor events and mobile offices.
Provision of Internet services for tourist bus or coach passengers
One ideal application of either the Vigor2865Lac or Vigor2927Lac routers is to provide internet access for passengers on public transport such as tourist bus or coach. For the transport company to provide free Wi-Fi access for its passengers, the wireless router can be placed in a suitable location on the bus to provide good Wi-Fi coverage throughout the bus. On larger busses or double decked busses, you can install a Wi-Fi access point such as the VigorAP 903 to extend the Wi-Fi coverage.
The passengers can be given unrestricted access to the internet, or the User Management feature in the router can be used to issue usernames and passwords for the passengers to prevent unauthorised users outside the bus from getting free internet access. In addition, users can be directed to the company web portal for information on the services. Other security measures that can be implemented are the use of the firewall and Content Security Management (CSM) to protect the users from undesirable website contents (eg. for under aged passengers).

Provision of Internet services for outdoor events
A range of leisure and social activities such as sports events, weekend markets or special functions, require short term internet access. At most such outdoor locations, there is no fixed cabling to provide ADSL, VDSL or NBN services, and the only way to provide internet access is to use wireless broadband. Both the Vigor2865Lac and Vigor2927Lac routers can be set up quickly and provide internet access for these events.
The user management, web portal and firewall/CSM features can be used to enhance the operations. You can also use the Wi-Fi hotspot feature where users connect to your Wi-Fi network using the social login accounts such as Facebook or Google login, and monitor who is using your services.

Provision of Internet services for a mobile office
Mobile offices for businesses or projects may be at temporary sites without permanent internet access facilities. Both the Vigor2865 LTE and Vigor2927 LTE series routers can provide internet access for these mobile offices.
For your inter-office communication needs, you can set up VPN connections over the 3G/4G network to share network resources such as files and servers. To protect your network, you can configure the Object-oriented SPI Firewall, DoS defense, CSM (Content Security Management) and WCF (Web Content Filter) as required. Additionally, the VLAN feature allows up to 16 workgroups to be set up to add further security and to provide different levels of network access based on the workgroup.

Technical Installation Requirements (Power Requirements when used in Mobile Applications)
Vigor2865 LTE and Vigor2927 LTE series routers require a 12–15V DC power supply. Therefore when used in vehicles such as busses or trucks which have a 24V supply, you will need to use a DC to DC converter to produce 12VDC regulated output. These converters are available from electronic suppliers. They plug into the cigarette lighter socket in your bus or truck and have an output socket that plugs into the router.

The DC to DC converter shown here is available from Jaycar Electronics
It is recommended to also use the DC to DC converter when the router is used in a motor vehicle to ensure a constant voltage to the router. Although a 13.8 volt car battery output is still within the router’s power supply requirements, the voltage may fluctuate to outside the router’s requirements.

Application Notes and Video
Configuring the Vigor2865L and Vigor2927L for LTE Internet access
This application note shows you how to configure the Vigor2865 LTE and Vigor2927 LTE series routers to enable 4G communication via the integrated LTE modem.
View the full application note: Click Here
Watch the video: Click Here