Multi DrayTek WAN Router with VDSL2 35b/G.Fast, 1 x GbE WAN/LAN, and 3G/4G USB WAN port for Load Balancing and Fail-over, 5 x GbE LANs, Object-based SPI Firewall, CSM, QoS, 32 x VPNs, 16 x SSL VPNs, and support VigorACS 2/3

Refer to: https://www.draytek.com.au/products/adsl-vdsl-modem-routers/vigor2866-series/

Specifications

Interface
Fixed WAN Port	1 x RJ-11 for G.fast/VDSL2 35b/ADSL2+
LAN/WAN Switchable Port	1 x 10/100/1000Base-TX RJ-45
Fixed LAN Port	5 x 10/100/1000Base-TX RJ-45
USB Port	2 x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
Wi-Fi Antenna	2 x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (ax/ac/Vac models)
2.4G WLAN	802.11n 2×2 MIMO 400Mbps (ac/Vac models) 802.11ax 2×2 MIMO 574Mbps (ax model)
5G WLAN	802.11ac Wave 2 2×2 MU-MIMO 867Mbps (ac/Vac models) 802.11ax 2×2 MU-MIMO 2402Mbps (ax model)
RJ-11 Port for Voice	2 x FXS (Vac model)

Performance
NAT Throughput	800 Mbps
NAT Throughput with Hardware Acceleration	940 Mbps (Single Ethernet or xDSL WAN) 1.8 Gbps (Ethernet WAN + xDSL WAN)
IPsec VPN Performance	300 Mbps (AES 256 bits)
SSL VPN Performance	150 Mbps
Max. Number of NAT Sessions	60,000
Max. Concurrent VPN Tunnels	32
Max. Concurrent OpenVPN / SSL-VPN	16

VDSL/G.fast/ADSL
VDSL Standards	ITU-T G.993.2 Annex A/B/M/Q T1.424 ITU-T G.993.5 (Vectoring)
VDSL2 Profile	8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
G.fast Profile	106Mhz, 212Mhz (AU)
ADSL Standards	ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other Standards	ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan	998, 997

Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Wireless WAN	2 (ac/Vac models)
3G/4G/LTE WAN with USB modem
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	ARP, Ping
WAN Data Budget
Dynamic DNS
DrayDDNS

LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	16
Number of LAN Subnet	8
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP (IPv4)
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing	(Requires external storage)

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN)
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	MPPE, DES, 3DES, AES
VPN Redundancy	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher

Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (* subscription required)
DoS Attack Defence
Spoofing Defense

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritisation

Wireless LAN (ax/ac/Vac models)
Number of SSID	4 per radio band
Security	OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1x
WPS	PIN, PBC
WDS	Repeater (5GHz only)(ac/Vac only)
Access Control	Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling
AirTime Fairness
Band Steering
MU-MIMO (5GHz Only)
WMM

VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	12
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF

Management
Local Service	HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility	Vigor2862
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog
Managed by VigorACS
Central VPN Management	8 remote Vigor routers
Central AP Management	20 VigorAPs
Mesh Network	7 VigorAPs (Lac model)
Central Switch Management	10 VigorSwitches

Physical
Power Supply	DC 12V @ 2A
Max. Power Consumption	26.4 watts (Vac model)
Dimension	241mm x 166mm x 46mm
Weight	680g (Vac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate