Physical Interfaces

• WAN1 Port: 1 x Gigabit Ethernet (1G/100M/10M), RJ-45
• LAN Ports: 4 x Gigabit Ethernet (1G/100M/10M), RJ-45
• 2 x USB 2.0 Port for 3G/4G Modem (not included), USB storage, thermometer or Printer
• Wireless On / Off / WPS button
• Recessed Factory Reset button

Antenna Specifications

• Wireless Antennas:
  • 2 x External Dipole Antennas
  • 5GHz Gain: 2.5 dBi
  • 2.4GHz Gain: 2.7 dBi

Performance

• Router Performance:
  • 940 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
  • 600 Mb/s NAT Throughput per Ethernet WAN without Hardware Acceleration
  • 50,000 NAT Sessions
• VPN Performance:
  • 150 Mb/s IPsec (AES256) VPN Throughput
  • 100 Mb/s SSL VPN Throughput
  • Max. 2 Concurrent VPN Tunnels

Internet Connection

• Hardware Acceleration
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• Connection Detection: PPP, ARP Detect, Ping Detect
• WAN Data Budget
• Dynamic DNS
• DrayDDNS – with automated LetsEncrypt Certificates
• Full Feature-set Hardware Acceleration:
  • Hardware Accelerated Quality of Service
  • WAN Data Budget
  • Traffic Graph & Data Flow Monitor
  • Bandwidth Limit
• IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
• IPv6 Connection Types:
  • Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
  • USB 4G/LTE Modem: TSPC, AICCU, DHCPv6, Static IPv6

Wireless Features

• AX3000 WiFi 6 Wireless:
  • 802.11ax 2×2 wireless access point
  • Compatible with 802.11a/b/g/n/ac wireless
  • Dual-band (2.4/5Ghz) simultaneous wireless
  • Up to 2402Mbps PHY rate with 5GHz
  • Up to 574Mbps PHY rate with 2.4GHz (256-QAM)
  • Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
  • MU-MIMO
• Mesh Root support with DrayTek VigorAP 906 Mesh Nodes
• Up to 4 SSIDs per radio band
• Extended 5Ghz Band – Channels 36-48, 52-64, 100-140
• Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
• Bandwidth Management (Per Station / Per SSID)
• WMM (Wireless MultiMedia)
• WPS – WiFi Protected Setup
• Station Control – Time limited wireless connectivity per Station (e.g. 1 hour)
• EAPOL Key Retry – Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
• Wireless Security:
  • WPA2
  • WPA3
  • Pre-Shared Key authentication
  • WEP/WPA for Legacy Clients
  • Access Control – Blacklist / Whitelist client MAC addresses per SSID

Firewall & Content Filtering

• IP-based Firewall Policy
• User-based Time Quota
• DoS Attack Defence
• Spoofing Defence
• Content Filtering:
  • Application Content Filter
  • URL Content Filter
  • DNS Keyword Filter
  • Web Features
  • Web Category Filter (requires URL Reputation licence, see accessories tab)
  • DoH (DNS over HTTP) & DoT (DNS over TLS) Filtering

NAT Features

• NAT Port Redirection
• Open Ports
• Port Triggering
• DMZ Host
• UPnP
• ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
• VPN Pass-Through: PPTP, L2TP, IPsec

LAN Management

• 802.1q Tag-based, Port-based VLAN
• Up to 4 LAN Subnets
• Up to 4 VLANs
• DHCP Server:
  • Multiple IP Subnet
  • Custom DHCP Options
  • Bind-IP-to-MAC
  • DHCP Pool Count up to 253 addresses per subnet
• Wired 802.1x Port Authentication
• Port Mirroring
• Local DNS Server
• Conditional DNS Forwarding

Networking Features

• Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
• DNS Security (DNSSEC)
• Local RADIUS server
• SMB File Sharing (Requires external USB storage)
• Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
• Compatible with IPTV and ISP Video on Demand services (YouView, Sky Q)
• Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing

VPN Features

• 2 Concurrent active VPN Tunnels
• LAN-to-LAN – Dial-Out VPN Client / Dial-In VPN Server
• Teleworker-to-LAN – Dial-In VPN Server
• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
• Encryption: MPPE, DES, 3DES, AES (128/192/256)
• Authentication: SHA-256, SHA-1
• Dead Peer Detection (DPD)
• IPsec NAT-Traversal (NAT-T)
• Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
• DHCP over IPsec
• DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT
• VPN Protocols:
  • IPsec IKEv1, IKEv2, IKEv2 EAP
  • IPsec-XAuth
  • DrayTek SSL VPN
  • OpenVPN
  • PPTP for legacy applications
  • L2TP, L2TP over IPsec
• User Authentication:
  • Local
  • RADIUS
  • mOTP – Mobile One Time Password
  • TOTP – Time-based One Time Password, compatible with Google Authenticator

Bandwidth Management

• IP-based (IPv4 & IPv6) Bandwidth Limit
• App-based Bandwidth Limit
• IP-based (IPv4 & IPv6) Session Limit

Quality of Service (QoS)

• Classify via TOS, DSCP, 802.1p, IP Address, Service Type
• 4 Priority Queues
• App QoS
• VoIP Prioritisation
• Class-based Outbound Traffic Tagging: DSCP & IP Precedence
• Hardware QoS

Management

• Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
• Config File Export & Import
• Auto Backup Config to USB Storage
• Firmware Upgrade via TFTP, HTTP, TR-069
• 2-Level Administration Privilege
• Access Control Features: Access List, Brute Force Protection
• Syslog
• SMS, E-mail Notification Alert
• SNMP: v1, v2c, v3
• Managed by VigorACS

Router Central Management Features

• AP Management: 2 VigorAP access points
• DrayTek Mesh: Up to 7 VigorAP 906 access points

Operating Requirements

• Wall or Shelf Mountable with included fittings
• Temperature
  • Operating: 0°C ~ 45°C
  • Storage: -25°C ~ 70°C
• Humidity 10% ~ 90% (non-condensing)
• Power Consumption: 23.6 Watts maximum
• Operating Power: DC 12V (via external PSU, supplied)
• Power Requirements : 100-240VAC
• Dimensions:
  • 155 mm Width
  • 50 mm Depth
  • 194 mm Height