DrayTek Vigor2865L 5G Series Router
Multi-WAN routers with a dual 5G Nano SIM card slot, 1 x VDSL2 35b modem, 1 x congurable GbE WAN/LAN port, 5 x GbE LAN ports, SPI Firewall, 802.11ax Wi-Fi (Lax-5G model), and 32 x VPN tunnels including 16 x OpenVPN/SSL VPN tunnels
- Estimated Delivery : Up to 4 business days
- Free Shipping & Returns : On all orders over $200
**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.
The Vigor2865L-5G series combines 4G LTE and 5G to provide excellent mobile coverage in Australia and New Zealand:
5G/LTE/WCDMA Specifications
5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78
5G NR Sub-6 NSA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
LTE FDD Band: B1, 3, 5, 7, 8, 20, 28
LTE TDD Band: B38, 40
LTE Category: Cat19 (DL) / Cat18 (UL)
WCDMA (3G) Band: B1, 8
WCDMA Max. Data Rate: 42Mbps (DL) / 5.76Mbps (UL)

**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.
5G & WiFi 6 for Next-Gen Connectivity

The Vigor2865L-5G series routers offer most of the features of the Vigor2865 series, with the addition of an integrated 5G/4G LTE mobile broadband Nano SIM module, supporting speeds up to 10 times faster than 4G. This enhanced LTE capability makes the Vigor2865L-5G series routers ideal for applications such as:
- Remote location with no fixed line or NBN/UFB coverage
- Quick setup for new branches waiting for xDSL/Ethernet WAN (e.g. NBN deployment)
- Load Balancing or Failover backup for an existing primary internet connection such as Cable/NBN/ UFB Ethernet broadband
- Temporary installations such as disaster recovery, emergency, exhibitions and sporting events where internet access is required for a short period
- Providing internet access on public transport such as coaches, buses, trains and freighters
The Vigor2865L-5G series includes one VDSL2 35b modem, one Gigabit Ethernet WAN/LAN configurable port, five Gigabit Ethernet LAN ports, and a dual Nano SIM card slot for 5G/4G LTE broadband connectivity, allowing for a second Nano SIM to be installed for failover. The WAN ports support NBN technologies including FTTP/N/B/C, HFC, Satellite and Fixed Wireless. All WAN interfaces, including the 3G/4G USB WAN interfaces, can be configured to Load Balance mode or Failover mode.
Interface


Key Features
Performance Comparison: Vigor2865 vs. Vigor2862
NAT throughput (1.6 times faster)
Vigor2865 Series
Vigor2862 Series
IPsec throughput (3.5 times faster)
Vigor2865 Series
Vigor2862 Series
SSL-VPN throughput (2.9 times faster)
Vigor2865 Series
Vigor2862 Series
5G Router with High Speed Mobile Connectivity
- The integrated 5G/LTE modem with Category 19 supports carrier aggregation, providing high-speed mobile broadband connectivity for Internet access and VPN.
- The dual SIM slot accepts two SIM cards from different mobile network providers. This ensures that the router can seamlessly switch to the secondary SIM and cellular network if the primary mobile connectivity is broken.
- The four LTE antennas with 1-metre extension cables make it easy to place the router at locations that ensure the best possible signal coverage.

* Backwards compatible to 4G LTE
Multi-WAN 5G Gigabit Security Router with Load Balance

WAN Load Balancing
The Vigor2865L-5G Series supports high throughput from Gigabit Internet connectivity via Fibre to the Premises (FTTP) and 5G LTE mobile connections. All active WANs automatically join the WAN Load Balance pool to optimise bandwidth utilisation
Seamless Failover
If an Internet connection is lost, the router automatically switches to surviving WAN connections, seamlessly transferring traffic. This ensures reliable Internet connectivity and avoids the costs associated with network downtime.
Policy-Based Routing
Routing policies can be used to designate specific WAN interfaces for traffic from or to certain IP ranges, and for applications such as VoIP, thus enhancing network efficiency and performance.
Ideal VPN Router for SMB
Ideal VPN Router for SMB
- Up to 800 Mbps hardware-accelerated IPsec VPN performance
- Up to 32 active VPN tunnels concurrently
All common VPN standards are supported
- WireGuard VPN (from firmware v4.4.3)
- IKEv1/IKEv2 EAP/ SSL VPN/ L2TPoverIPsec/ PPTP/OpenVPN

Advanced Authentication for Teleworkers
- Two-factor authentication for teleworker VPN connections
- Authentication can be integrated with Active Directory (LDAP), RADIUS, or TACACS+ servers in the network as required
- Network administrators can be notified via SMS/Email when a teleworker VPN is online, preventing VPN credential loss or misuse by others
Hotspot Web Portal
Market your business while offering free Wi-Fi
Wi-Fi Marketing
Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.
Grow Customer Mailing List
Require guests to leave contact info or social media accounts before they can use the Internet services.

Various Authentication Types
Various login methods are supported to meet business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.
3rd-Party Service Compliant
Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.
Data Quota Management
Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.
Comprehensive Firewall
Object-based Firewall
IP addresses and services can be grouped into objects before being applied to firewall rules. This feature simplifies the organisation of network activities.
Blocking Apps & DoH servers
APP Enforcement (APPE) allows the blocking of applications (IM, P2P, streaming, tunnelling, etc.) on a network quickly and easily. For example, by blocking DoH servers in browsers, LAN clients can only use standard DNS queries and filtering.
Manage Traffic Beyond LAN to WAN
The DrayTek Firewall manages not only traffic between LAN and WAN, but also between LAN subnets, remote VPN subnets, and from the WAN to the Vigor router itself. Internet IPs can be predefined for accessing the Vigor routers’ services, enhancing security and control.

Web Content Filtering with DNS Filter
The Web Content Filtering Service uses cloud-based technology to provide comprehensive and up-to-date protection for LAN clients for online activities, with 82 categories in total, 10 of which are security-focused.
Edge Router for SD-WAN
Edge Router for SD-WAN
Latency, loss, and jitter measure the quality of every WAN/VPN interface. Based on these metrics, the Vigor2865L-5G can dynamically self-adjust to the best-quality interface for VoIP and business-critical applications.


* SD-WAN requires cooperation with VigorACS 3
Application Visibility and SD-WAN Policy
Application Visibility enables the network administrator to monitor data usage sorted by client, WAN interface, application, and time.
With data usage details, SD-WAN policies can be created to route business-critical applications through the best-quality interfaces to improve the user experience.
APP QoS
Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming. It also allow flexible bandwidth allocation to suit business requirements.
VoIP First
VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

All-in-One Management
Software Management

VigorACS 3
- Zero Touch Deployment & Provisioning
- Auto VPN
- Interface Quality & SLA
- VoIP Optimisation & Monitoring
- Application Visibility
- Application Based SD-WAN Policy
- Customized Hotspot Page with Multilingual
- Hotspot Clients Analytics
- ACS Server Load Balancing / Failover
In-the-Box

Vigor2865L-5G series

5G Antenna + Socket

ax Antenna x 2
(Vigor2865Lax-5G)

RJ-45 Cable
(Ethernet)

RJ-11 to RJ-11 Cable (Annex A)

Power Adaptor

Quick Start Guide
Dimensions | N/A |
---|---|
Model | Vigor2865L-5G, Vigor2865Lax-5G |
Models
Model | Vigor2865L-5G | Vigor2865Lax-5G |
---|---|---|
Product | ![]() |
![]() |
VDSL2 35b or ADSL2/2+ |
Yes
|
Yes
|
Selectable Gigabit WAN/LAN | 1 | 1 |
5G/4G LTE/3G | 2 x nano SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 |
2 x nano SIM slots (SIM slot 2 for Failover) 1 x USB 2.0 |
Wireless WAN | 2 | |
Gigabit LAN | 5 | 5 |
VPN Tunnels | 32 | 32 |
Wireless LAN |
No
|
WiFi 6, AX3000 |
Wi-Fi Antenna |
No
|
3.5 dBi for 5GHz 2.3 dBi for 2.4GHz |
VoIP (2xFXS) |
No
|
No
|
Specifications
Performance | |
---|---|
NAT Session | 60K |
NAT Throughput | 700 Mbps |
NAT Throughput w/ Hardware Acceleration: Single WAN | 940 Mbps |
NAT Throughput w/ Hardware Acceleration: Dual WAN | 1800 Mbps |
5G | |
---|---|
5G Band | n1, n20, n28, n3, n38, n40, n5, n7, n77, n78, n8 |
5G Antenna Peak Gain | 4.37 dBi |
5G NSA Max. Rx Link Rate** | 3400 Mbps |
5G NSA Max. Tx Link Rate** | 550 Mbps |
5G SA Max. Rx Link Rate** | 2400 Mbps |
5G SA Max. Tx Link Rate** | 900 Mbps |
**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions. |
4G | |
---|---|
LTE Category | CAT.19 |
LTE Antenna (External Dipole) | 4 |
Max. Rx Link Rate | 1600 Mbps |
Max. Tx Link Rate | 200 Mbps |
FDD Band | 1 (2100MHz), 20 (800MHz), 28 (700MHz), 3 (1800MHz), 5 (850MHz), 7 (2600MHz), 8 (900MHz) |
TDD Band | 38 (2600MHz), 40 (2300MHz) |
WCDMA (3G) Band | 1, 8 |
SMS Gateway | Learn More |
Internet Connection | |
---|---|
IPv4 | PPPoE, DHCP, Static IP, PPTP/L2TP |
IPv6 | PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
LTE WAN Bridge | |
802.1p/q Multi-VLAN Tagging | |
Multi-VLAN/PVC | |
4G LTE/3G WAN with USB modem | |
WAN Failover | |
Load Balancing | IP-based, Session-based |
WAN Active on Demand | Link Failure, Traffic Threshold |
Connection Detection | ARP, Strict ARP, Ping |
WAN Data Budget | |
Dynamic DNS | |
DrayDDNS |
LAN Management | |
---|---|
VLAN | 802.1q Tag-based, Port-based |
Max. Number of VLAN | 16 |
Number of LAN Subnet | 8 |
DMZ Port | 1 |
DHCP Server | Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
LAN IP Alias | |
Wired 802.1x Authentication | |
Port Mirroring | |
Local DNS Server | |
Conditional DNS Forwarding | |
Hotspot Web Portal (Profile No.) | 4 |
Hotspot Authentication | Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
Networking | |
---|---|
Routing | IPv4 Static Routing, IPv6 Static Routing, Policy Route, Inter-VLAN Route, RIP v1/v2, BGP |
Policy-based Routing | Protocol, IP Address, Port, Domain, Country |
High Availability | |
DNS Security (DNSSEC) | |
IGMP | IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave |
Local RADIUS server | |
SMB File Sharing | Â (Requires external storage) |
VPN | |
---|---|
LAN-to-LAN | |
Teleworker-to-LAN | |
Protocols | PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN, Wireguard |
Max. VPN Tunnels | 32 |
Max. OpenVPN + SSL VPN Tunnels | 16 |
IPsec VPN Throughput (AES 256 bits) (single-directional) | 300 Mbps |
SSL VPN Throughput (single-directional) | 130 Mbps |
Wireguard VPN Throughput (single-directional) | 75 Mbps |
User Authentication | Local, RADIUS, LDAP, TACACS+, mOTP |
IKE Authentication | Pre-Shared Key, X.509 |
IPsec Authentication | SHA-1, SHA-256 |
Encryption | MPPE, DES, 3DES, AES |
VPN Trunk (Redundancy) | Failover, Load Balancing |
Single-Armed VPN | |
NAT-Traversal (NAT-T) | |
DrayTek VPN Matcher |
Firewall & Content Filtering | |
---|---|
IP-based Firewall Policy | |
Content Filtering | Application, URL, DNS Keyword, Web Features, Web Category (subscription required) |
DoS Attack Defence | |
Spoofing Defense |
NAT | |
---|---|
NAT | Port Redirection, Open Ports, Port Triggering, Port Knocking Fast NAT, DMZ Host, UPnP, Server Load Balance |
ALG (Application Layer Gateway) | FTP, H.323, RTSP, SIP |
VPN Pass-Through | PPTP, L2TP, IPsec |
Bandwidth Management | |
---|---|
IP-based Bandwidth Limit | |
IP-based Session Limit | |
QoS (Quality of Service) | TOS, DSCP, 802.1p, IP Address, Port, Application |
VoIP Prioritization | |
APP Qos |
Wireless LAN (Lax-5G model) | |
---|---|
2.4G WLAN | 802.11ax 2×2 MIMO |
5G WLAN | 802.11ax 2×2 MU-MIMO |
Antennas | 2 |
Antenna Type | External Dipole |
2.4 GHz Gain | 2.3 dBi |
5 GHz Gain | 3.5 dBi |
2.4 GHz Max. Link Rate | 574 Mbps |
5 GHz Max. Link Rate | 2402 Mbps |
Max. Number of SSIDs per band | 4 |
Security Mode | OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3 |
Authentication | Pre-Shared Key, 802.1x |
WiFi 6 | |
OFDMA | |
WPS | PIN, PBC |
WDS | Repeater (5GHz only) |
Access Control | Access List, Client Isolation, Hide SSID, WLAN Scheduling |
AirTime Fairness | |
Band Steering | |
WMM | |
Mesh (Lax model only) | Root (See Mesh compatibility chart) |
Management | |
---|---|
Local Service | HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069 |
Config Backup/Restore | |
Config File Compatibility | Vigor2865 LTE |
Firmware Upgrade | TFTP, HTTP, TR-069 |
2-Level Administration Privilege | |
Access Control | Access List, Brute Force Protection |
Notification Alert | SMS, E-mail |
Netflow | IPFIX, v5, v9 |
SNMP | v1, v2c, v3 |
Syslog | |
VPN Managment | 8 |
AP Managment (APM) | 20 |
Mesh (Number of manageable APs) | 7 |
Switch Management (SWM) | 10 |
VigorACS Management (Since f/w) | v4.4.5 |
Physical | |
---|---|
Power Supply | Vigor2865L-5G: DC 12V @ 2.1A Vigor2865Lax-5G: DC 12V @ 2.6A |
Max. Power Consumption | Vigor2865L-5G: 25.2 watts Vigor2865Lax-5G: 31.2 watts |
Dimensions | 241mm x 165mm x 44mm |
Operating Temperature | 0 to 45°C |
Storage Temperature | -25 to 70°C |
Operating Humidity (non-condensing) | 10 to 90% |
Note :
- All specifications are subject to change without notice.
- The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.