DrayTek Vigor2866ax – Dual WAN VDSL 802.11ac Router with built-in G.fast modem

SKU: Vigor2866ax Category:



The Ultimate DSL Router for SMB

Vigor2866 Series is a dual WAN firewall router. It has one G.fast supported DSL WAN, delivering fiber-like speed up to 1 Gbps, and one configurable Ethernet WAN. The built-in DSL modem is backward compatible with VDSL2 profile 35b supervectoring and ADSL2+. Vigor2866 Series provides load-balancing and failover for your business continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal, and a lot more, this is the ultimate DSL router that does it all for SMB. The series includes built-in 802.11ax wireless models.

G.fast: Download speed up to 1 Gbps

32 VPN: IPsec VPN throughput up to 300 Mbps

60k Sessions: Recommended for 30 clients

AX 3000*: Delivers link rate up to 3 Gbps

* ax model only

1.Wireless Antenna (ac/ax model)

2.Reset Button

3.WLAN/WPS Button (ac/ax model)


5.2x USB 2.0

6.LAN/WAN Switchable Port: 1x GbE RJ-45

7.Fixed LAN Port: 5x GbE RJ-45

8.2x FXS for VoIP (V model)

9.Fixed WAN Port: 1x RJ-11 for G.fast/VDSL2 35b/ADSL2+

10.Power On/Off Switch

11.Power Input

Additional information

Weight 5.00 lbs
Dimensions 18.00 × 12.00 × 7.00 in


There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Key Features

load balancing router

Load Balancing

Maximize throughput and reliability by using multiple Internet connections. Learn more

G.fast icon

G.fast Modem

Integrated VDSL modem, supporting G.fast to deliver fiber-like DSL speed.

VPN router

VPN (Virtual Private Network)

Build a secure and private tunnel from the LAN of Vigor2866 Series to the remote offices and teleworkers over the Internet. Learn more

SSL VPN router


The VPN works through firewalls providing secure remote access to any network environment. Learn more

Firewall & Content Filter

Firewall & Content Filter

Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.

dynamic DNS service


The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more

wi-fi WAN connectivity

Wireless WAN (ac model only)

Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more

captive portal

Hotspot Web Portal

Market your business and communicate with the guests while offering hospitality WLAN. Learn more

speed control

Bandwidth Management

Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.


VoIP Friendly

Vigor2866 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide

wireless management

Central AP Management

Use the Vigor2866 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more

wireless mesh

Mesh (Wireless model only)

Easily link to other VigorAP to expand the wireless network. Learn more

switch management

Central Switch Management

Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more

Fixed WAN Port 1x RJ-11 for G.fast/VDSL2 35b/ADSL2+
LAN/WAN Switchable Port 1x 10/100/1000Base-TX RJ-45
Fixed LAN Port 5x 10/100/1000Base-TX RJ-45
USB Port 2x USB 2.0
Wirelss Antenna 2x External Dipole
Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz
(ac/ax model)
2.4G WLAN 802.11n 2×2 MIMO, up to 400Mbps Link Rate (ac model)
802.11ax 2×2 MIMO, up to 574Mbps Link Rate (ax model)
5G WLAN 802.11ac Wave 2 2×2 MU-MIMO, up to 867Mbps Link Rate (ac model)
802.11ax 2×2 MU-MIMO, up to 2402Mbps Link Rate (ax model)
FXS RJ-11 2 (V model)
NAT Throughput 800 Mbps
NAT Throughput w/ Hardware Acceleration 940 Mbps (Single Ethernet/DSL WAN)
1.8 Gbps (Ethernet WAN + DSL WAN)
IPsec VPN Performance 300 Mbps (AES 256 bits)
SSL VPN Performance 150 Mbps
Max. Number of NAT Sessions 60,000
Max. Concurrent VPN Tunnels 32
Max. Concurrent OpenVPN + SSL VPN 16
VDSL Standards ITU-T G.993.2 Annex A/B/M/Q
ITU-T G.993.5 (Vectoring)
VDSL2 Profile 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
G.fast Profile 106Mhz, 212Mhz
ADSL Standards ITU-T G.992.3 (G.dmt.bis)*, ITU-T G.992.5 (ADSL2+) (G.adslplus)
Other Standards ITU-T G.998.4 (Retransmission)
Band Plan 998, 997
* AnnexA support only
Internet Connection
IPv6 PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Wireless WAN 2 (ac model)
3G/4G/LTE WAN with USB modem
Load Balancing IP-based, Session-based
WAN Active on Demand Link Failure, Traffic Threshold
Connection Detection ARP, Ping
WAN Data Budget
Dynamic DNS
LAN Management
VLAN 802.1q Tag-based, Port-based
Max. Number of VLAN 16
Number of LAN Subnet 8
DHCP Server Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Routing IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2, BGP
Policy-based Routing Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
IGMP IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing  (Requires external storage)
Protocols PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
User Authentication Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication Pre-Shared Key, X.509
IPsec Authentication SHA-1, SHA-256
Encryption MPPE, DES, 3DES, AES
VPN Trunk (Redundancy) Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
NAT Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway) SIP, RTSP, FTP, H.323
VPN Pass-Through PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service) TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
Wireless LAN (ac/ax model)
WiFi 6  (ax model)
Number of SSID 4 per radio band
Security Mode OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication Pre-Shared Key, 802.1X
OFDMA  (ax model)
WDS Repeater (5GHz only)
Access Control Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering
MU-MIMO  (5GHz Only)
VoIP Gateway (V model)
SIP Registrars 12
Dial Plan Phone Book, Digit Map, Call Barring, Regional
Call Features Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec G.711 A/u law, G.723.1, G.726, G.729 A/B
Local Service HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility Vigor2865, Vigor2862, Vigor2860
Firmware Upgrade TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control Access List, Brute Force Protection
Notification Alert SMS, E-mail
SNMP v1, v2c, v3
Managed by VigorACS
Central VPN Management 8 VPN
Central AP Management 20 VigorAP
Mesh Network 7 VigorAP (ac model)
Central Switch Management 10 VigorSwitch
Power Supply DC 12V @ 2A
Max. Power Consumption 26.4 watts (Vac model)
Dimension 241mm x 166mm x 46mm
Weight 680g (Vac model)
Operating Temperature 0 to 45°C
Storage Temperature -25 to 70°C
Operating Humidity (non-condensing) 10 to 90%
Certificate CE

Ordering Information


Model # Description Availability
Vigor2866ax Dual WAN VDSL 802.11ac router with built-in G.fast modem General Availability