Vigor 2862 - xDSL Business Class Router/Firewall - Draytek
Vigor 2862 Series VDSL/ADSL Router Firewall
The Vigor 2862 series is our new flagship router/firewall. Exact feature support varies by model (see specification tab). It is what we've called the 'Ultimate DSL router' supporting both ADSL or VDSL (BT Infinity™/FTTC) and packed with professional level features to increase security, flexibility and functionality, making it ideal as your standard router for almost any scenario.
As well as ADSL/VDSL support, alternative WAN ports can instead provide connectivity to Ethernet feeds (Gigabit WAN2 is switchable with LAN Port 5*), secondary xDSL modems or a 3G/4G cellular service using a supported USB adapter (or there is the Vigor 2862Ln model with 3G/4G/LTE built-in). These multiple LAN feeds can be combined for failover or load-balancing.
This latest router series includes support for other professional features such as VLAN tagging, QoS (Quality of Service Assurance), High Availability, DNS Filter, Policy Based Routing, and User Access Control. Hotspot features with customisable branding and wording which can be applied to guest network VLANs & SSIDs. If you deploy DrayTek Wireless Access Points, the Vigor 2862 can act as the Central Management controller (click on any of those links for an explanation of each feature).
VPN Features & SSL VPN
VPN - Linking remote offices, HQ, teleworkers and mobile staff
A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
The Vigor 2862 allows you to have up to 32 simultaneous VPN tunnels to remote offices or teleworkers. It supports all common industry standard protocols, encryption types and authentication methods (see specification tab for full support list). Teleworkers can authenticate directly with your LDAP server if preferred.
The Vigor 2862 supports VPN trunking; this allows you to create tunnels down muliple WAN connections to a remote site in order to increase bandwidth. VPN trunking also provides failover (backup) of your VPN route down a secondary WAN connection. You can learn more about DrayTek VPN here. Teleworkers can also use 2FA (Two factor authentication) such as MOTP.
DrayTek SSL VPN - Link teleworkers and remote networks with TLS encryption
The Vigor 2862 supports up to 16 DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - the same encryption that you use for secure web sites such as your bank.
Site to site VPN tunnels can connect branch offices to a main office, with DrayTek SSL VPN encryption securing the connection between the two offices, a TLS encrypted HTTPS tunnel which can be more secure than PPTP, and easier to configure than an IPsec VPN tunnel.
Teleworkers can easily create a secure DrayTek SSL VPN tunnel to the DrayTek Vigor 2862 using the DrayTek Smart VPN Client app.
DrayTek Smart VPN Client is free and supports Windows OS, macOS, Apple iOS (iPad, iPhone) and Android. You can learn more about the DrayTek Smart VPN Client here.
DrayTek SSL VPN is simple to configure, providing a more secure alternative to the now obsolete Point to Point Tunneling Protocol (PPTP VPN); which has known weaknesses and is now considered to be insecure. Setup is similar to a PPTP VPN tunnel in that it authenticates with an SSL VPN Username and Password.
You can learn more about DrayTek SSL VPNs here.
Wireless LAN Features
Dual-band MU-MIMO Wireless ('ac' models)
The Vigor 2862ac supports simultaneous operation of the newer 5Ghz band as well as the more common 2.4Ghz band. The 5Ghz band is far less congested so if your PCs or other devices support the 5Ghz band, you can use that. The Vigor 2862ac operate both bands at the same time, so your devices can use either. New in the Vigor 2862ac operating 802.11ac is support for MU-MIMO, TX Beam Forming, 1733Mb/s Link Rate and up to 4 spatial streams.
- 4x4 Multi-User-MIMO (5Ghz) - New!
- Up to 4 Spacial Streams
- TX Beam Forming
- 1733Mb/s Total Link Rate (5Ghz) + 300Mb/s (2.4Ghz)
- Dual-band (2.4/5Ghz) simultaneous wireless
- Band Steering - New!
- Router-Assisted Client Mobility - New!
- Extended DFS frequency range
Wireless Router-Assisted Client Mobility
A wireless network covering a large area is usually made up of several Wireless Access Points (APs), to provide coverage between rooms and avoid wireless dead spots.
A wireless client, such as a Laptop, Phone or Tablet, when moving around such a building, is typically expected to make the decision of when to uncouple from one wireless access point and re-connect to a closer one. In some cases, a client will try to stay connected to an AP even when that client has moved outside of the AP's optimal range, which can result in longer wait times for videos to buffer and pages to load.
The Vigor 2862 series routers with wireless capability (i.e. Vigor 2862ac and Vigor 2862n) can work in conjunction with VigorAP access points to manage the connection quality of wireless devices, to ensure that the wireless clients maintain a stronger and quicker wireless link when moving around.
When moving a device such as a tablet between the optimal ranges of both the Vigor 2862ac router and VigorAP, the router and access point share details of the tablet's connection strength.
If the tablet moves away from the router, the router can detect if the tablet would have a stronger signal if it was connected to a nearer VigorAP, and when this occurs, the tablet is moved off of the router's wireless, allowing it to quickly re-connect to the closer VigorAP and continue what it was doing with higher throughput and less chance of lagging.
Band Steering (Vigor 2862ac)
Band Steering is designed to 'steer' wireless clients that support both 2.4GHz and 5GHz bands to the faster and less congested 5GHz bands, for wireless clients that support 5GHz.
The DrayTek Vigor 2862ac supports Dual Band operation and has both a 2.4GHz and 5GHz wireless radio. If there are many more clients connecting to one of these radios than the other, the Access Point cannot make effective use of both its radios, wasting possible capacity and bandwidth.
If the decision of which band to connect to is made by the client(s) instead of the router, this can lead to more clients connecting to the 2.4GHz band, which suffers more significantly from congestion, caused by other wireless networks and other wireless systems such as Bluetooth that use the 2.4GHz band.
By guiding the 5GHz capable wireless devices onto the router's 5GHz wireless network, those devices can achieve higher speeds and potentially improve connectivity for wireless devices that are not 5GHz capable.
Wireless Hotspot (Vigor 2862n / Vigor 2862ac)
If your home or workplace wants an isolated network for guests or to separate departments, this can be achieved with separate IP subnets, but on wireless you can also use distinct SSIDs. For a full guest network, you can use DrayTek's new Wireless Hotspot feature.
The Vigor 2862 Series wireless models provides several independent levels of security including encryption (up to WPA2), authentication (802.1x) and methods such as MAC address locking and DHCP fixing to restrict access to authorised users only. The Web interface lets you see how many and which clients are currently connected as well as their current bandwidth usage. An 'instant' block lets you disconnect a wireless user temporarily in case of query. The Wireless VLAN facility allows you to isolate wireless clients from each other or from the 'wired' LAN.
The Vigor 2862 wireless versions also allow guest access with password protection so that visitors can use your WiFi access, but only with a password which you set for them. When the user connects to your wireless LAN, they are firstly presented with your login screen before any Internet access is permitted. This is in addition to any encryption system you have running.
The Multiple SSID features enables you to have up to four distinct or common virtual wireless access points. For example, you could have one for company usage, with access to your company LAN and another for public access which allows internet surfing only. Setting up wireless security is made easier thanks to the WPS feature (WiFi protected setup) whereby your client PC can get it's security keys by pressing a button on the front of the router.
For specialist or more demanding coverage applications, optional aerials can be used with the Vigor 2862 to potentially increase the range of wireless coverage (depending on environment) or provide directional coverage in order that your wireless transmission is focussed and concentrated into one direction only, for example into a room or across open space. With the increasing popularity of wireless LANs, you will want to choose the least congested wireless channel for yours so the Vigor can scan and provide a list of all devices in the vicinity so that you can choose the best channel (see screenshot below which shows an example in the 2.4Ghz band).
Above : The Vigor 2862 wireless models provide a local survey of other access points
so that you can choose the least congested channel.
- Optional Higher Gain or directional aerials available - Click Here.
- Time scheduled operation
- Wireless Hotspot
- Active Client list in Web Interface
- Wireless LAN Isolation (from each other or wired LAN)
- WPA2 Encryption
- Switchable Hidden SSID
- Restricted access list for clients (by MAC address)
- Access Point Discovery
- WDS (Wireless Distribution system) for Bridging and Repeating
- 802.1x Radius Authentication
- Wireless Rate-Control
- Automatic Power Management
- 802.11e WMM (Wi-Fi Multimedia)
Wireless LAN WDS Facility
Vigor 2862 wireless models support WDS (Wireless Distribution System) which enables you to use the wireless capability to bridge to another network, within wireless range. You need an additional compatible wireless router for this. For further details, see here.
VigorSwitch Management Features
Central Switch Management with a DrayTek Vigor Router
DrayTek Vigor router Central Switch Management provisions and monitors VigorSwitch switches through a DrayTek Vigor router, with profiles that can be applied to multiple switches and VLAN configuration all handled within the router.
This can simplify the setup of multiple subnets and VLANs, without needing in-depth knowledge of VLAN tagging and reduces setup time, with the time consuming step of configuring VLANs for each port handled by the router instead.
The Switch Hierarchy view provides a visual overview of interconnections between DrayTek VigorSwitch switches with the devices connected to each LAN port.
Switch Management Profiles
Switch Management profiles can be used configure schedules to enable or disable ports (including PoE) and set bandwidth limits for the ports. Descriptive names can be configured on the router which can be seen from the Switch Hierarchy view:
VLAN configuration of a VigorSwitch can be provisioned from the DrayTek Vigor router, with the router automatically configuring the Uplink port and being aware of the VLAN tags that the Vigor router and the connected LAN port have available:
Other Product Information