Draytek V2927AX-K Router with 802.11AX WiFi6

DrayTek Vigor 2927ax Simultaneous Dual-WAN WiFi 6 Broadband Router w/ VPN & 3G/4G LTE Support (2.9Gbps AX)The DrayTek Vigor 2927ax Simultaneous Dual-WAN WiFi 6 Broadband Router allows you to make the most of FTTP Fibre Broadband with Gigabit WAN throughput, extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls. The Vigor 2927ax features WiFi 6, providing fast and efficient AX3000 wireless networking to your computers and devices. OFDMA enables the router to send data to more than one client at a time. The Vigor 2927ax provides a reliable, flexible, and secure network solution, ideal for small businesses and home offices.Key FeaturesGigabit Dual-WAN Load Balancer High throughput handles fast internet connections, with Load Balancing and Route Policy.AX3000 Wireless with Mesh Provides WiFi 6 performance. Use the router as the Mesh Root with DrayTek Mesh (available in a future update).5 1 Gigabit LAN Ports with VLANs Extensive LAN management features – use VLANs to manage up to 8 networks.Firewall & Content Filtering Manage internet access with Firewall, App Enforcement & Category-based Web Filtering (requires URL Reputation subscription, see accessories tab).DrayDDNS with LetsEncrypt Certificates Free DrayDDNS address for each router, with automated LetsEncrypt SSL/TSL Certificates.Hotspot Web Portal Provide internet access to guests and market your business with captive portal.DrayTek SSL VPN Access the Vigor 2927ax’s network remotely with a TLS encrypted VPN tunnel.Ideal VPN Router for SMB Up to 50 active VPN tunnels, with up to 800Mbps IPsec Hardware Accelerated throughput.Designed for Centralised Management Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.High Availability Connect a pair of Vigor 2927ax routers to provide a hardware backup solution (additional router sold separately).Quality of Serive with App QoS Easily prioritise latency-sensitive applicatins on your network with App QoS.Centralised LAN Management Easily manage and provision DrayTek VigorAP access points and VigorSwitch switches.Dual Gigabit WAN Load BalancerThe Vigor 2927ax is a Dual-Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. It offers high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit internet connections. It also offers up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.With WiFi 6 AX3000 wireless, it provides ultra fast and efficient wireless coverage to your network’s computers and devices. In addition, the router can connect to wireless networks for internet access, allowing it to make use of mobile hotspot wireless connections and nearby wireless networks, where for instance a neighbour’s wireless network could provide an emergency backup connection.Route Policy – Powerful Routing ManagementThe Vigor 2927ax provides full policy-based control of where and how outbound traffic is routed with Route Policy:VPN Routing Send all or select traffic through VPN services.Hostname Routing Route access to individual websites, internet domains (e.g. www.bbc.co.uk) and hostnames through a VPN tunnel or a specific WAN.Service Routing Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel.Failover & Failback Extensive control of Failover with multiple Failover rules and paths. Manage how connections are moved back to the primary connection after a failover has occurred with Failback settings.WiFi 6 – AX3000 Performance with MeshThe Vigor 2927ax features ultra-fast and highly efficient WiFi 6, or 802.11ax. OFDMA allows the router to send to more than one device at a time, splitting up wireless frequency into blocks, assigning more to users that need more e.g. video data, less to users that need less e.g. VoIP calls, then sending all at once. This ensures all users have less of a wait, greatly improving efficiency. It allows the router to effectively and responsively serve more wireless clients.Ideal VPN router for SMBA feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office. The Vigor 2927ax is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput and up to 50 concurrently active VPN tunnels. With IPsec Hardware Acceleration for up to 16 VPN tunnels, performance increases up to 800 Mbps, allowing securely encrypted tunnels between sites to make full use of high speed internet connections.It supports all common industry standard VPN protocols, so it can connect to VPN services, link remote offices and handle connections from all types of VPN clients. It supports IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, DrayTek’s SSL VPN and L2TP for both LAN to LAN and Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with OpenVPN.User management for Dial-In Teleworkers is managed through the router’s web interface, with mOTP 2-factor authentication available for IPsec, L2TP and SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS server.Connect VPNs from behind NAT with DrayTek’s VPN MatcherA typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible.DrayTek’s VPN Matcher service helps DrayTek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two DrayTek VPN routers that are behind NAT and could not normally establish a VPN tunnel.Connecting Remote Sites with LAN to LAN VPNSupporting up to 50 concurrently active VPN tunnels, the Vigor 2927ax is ideal for connecting multiple sites or home offices together with fast and secure IPsec VPN tunnels. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.DrayTek SSL VPN for Dial-In Teleworkers & LAN to LANThe Vigor 2927ax supports up to 25 active DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology – the same encryption that you use for secure web sites such as your bank.Teleworkers can easily create a secure SSL VPN tunnel to the DrayTek Vigor 2927ax using the free DrayTek Smart VPN Client app. Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices.5 1 Gigabit LAN Ports with VLANsThe Vigor 2927ax provides up to six (6) Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage. With five (5) dedicated LAN ports and one (1) flexible LAN/WAN port, the Vigor 2927ax can connect up to six (6) devices directly with a single Ethernet WAN configuration, or five (5) devices with a dual Ethernet WAN configuration.With Multiple LAN subnets and VLANs, the Vigor 2927ax can manage up to eight (8) separate networks. For instance, an internal network with a separate network for guests to use, completely separate from the private network. Each network has its own Content Filtering, Firewall, Quality of Service and Route Policy applied.The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the DrayTek VigorSwitch G1080 8-port switch (sold separately, see accessories tab), for additional network ports.The Wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Alternatively, connect up a DrayTek VigorAP wireless access point, such as the VigorAP 903 (sold separately, see accessories tab) to do the same, spanning the router’s own wireless and any connected wireless APs.Designed for Central ManagementThe Vigor 2927ax (along with most other DrayTek routers, access points and switches) can be centrally managed by the VigorACS central management platform (not included, see accessories tab for 2927ax VigorACS bundle). This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers’ devices or any user who wants to know what’s going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.Robust & Comprehensive IPv4 / IPv6 FirewallSecurity is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.The Vigor 2927ax supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.Web Content Filtering with DNS FilterThe content control features of the Vigor 2927ax allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block). Using the URL Reputation service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with this router, see accessories tab for compatible URL Reputation licences.DrayDDNS – DrayTek Dynamic DNS AddressDrayTek provides a free Dynamic DNS address to each Vigor 2927ax router, allowing you to link the router’s current IP address to a memorable “drayddns.com” hostname, such as “vigor2927.drayddns.com”.This address automatically updates whenever the internet connection’s IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2927ax router. Just use the hostname to access the router’s VPN services, management, and any other services you have made accessible through the router.The Vigor 2927ax can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt. The router manages and automates the certificate process, keeping the certificate up to date and ready for use with SSL VPN and other services.High Availability – Hardware FailoverFor even greater resilience, the Vigor 2927ax provides High Availability (HA), with both a primary and secondary router (secondary router sold separately) able to provide connectivity to your network and subnets.In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume internet, routing and VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers.With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it is ready to take over at any time.Manage Guest WiFi with Hotspot Web PortalDrayTek routers make it easy to manage Guest Wireless with Hotspot Web Portal. The fully customisable captive portal can apply to both the router’s wireless networks and LAN interfaces, for use with wireless access points. Authentication can be handled by Google/Facebook or an external web portal service such as Purple WiFi with RADIUS. Upon connecting to the wireless network, users are presented with your company’s branding and information. From there, depending on what you’ve set, they can simply click-through, provide their details, or enter a PIN with a voucher generated by the router (voucher printer sold separately). Once connected, the router can allow access until a user reaches their quota limit of time connected or bandwidth used.Quality of Service & Bandwidth ControlPrioritise latency-sensitive applications on your network with Quality of Service. App QoS simplifies setting up Quality of Service significantly – simply select which applications or services to prioritise, such as Zoom and Skype.Use four (4) separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support. Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration. Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a guest network.Central AP & Switch ManagementThe Vigor 2927ax manages DrayTek VigorAP access points and VigorSwitch switches connected locally to the router. This enables you to centrally control, manage and administer multiple AP & Switch devices installed around your building/campus from just the one router.Central AP ManagementThe DrayTek router operating as the wireless controller can provision up to 20 DrayTek VigorAP access points with Central AP Management profiles, with an option to Auto Provision. This auto configures newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router’s network.Central Switch ManagementDrayTek VigorSwitch switches (sold separately) can be provisioned and managed through this router with DrayTek’s Central Switch Management system, which allows you to:Easily provision VLAN configuration and other port settings directly from the router.Set bandwidth rate limits and schedules for individual ports.Log switch events for alert notifications if network problems occurAt a glance see the devices connected on your network with a virtual topology.SpecificationsPhysical InterfacesWAN Ports: 1 x Gigabit Ethernet (1G/100M/10M), RJ45WAN/LAN Switchable Ports: 1 x Gigabit Ethernet (1G/100M/10M), RJ45LAN Ports: 5 x Gigabit Ethernet (1G/100M/10M), RJ452 x Removable wireless antennas2 x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer (sold separately)Wireless On / Off / WPS buttonRecessed Factory Reset buttonAntenna SpecificationsWireless LAN Antennas:2 x External Dipole5GHz Gain: 4.5 dBi2.4GHz Gain: 5 dBiRP-SMA fitting antenna connectorsPerformanceNAT Performance:950 Mb/s NAT Throughput for Single WAN with Hardware Acceleration1.8Gb/s Total NAT Throughput for Dual WAN with Hardware Acceleration800 Mb/s NAT Throughput per WAN60,000 NAT Sessions8000 Hardware Accelerated NAT SessionsVPN Performance:300 Mb/s IPsec (AES256) VPN Performance800 Mb/s Hardware Accelerated IPsec VPN Performance120 Mb/s SSL VPN PerformanceMax. 50 Concurrent VPN TunnelsMax. 25 Concurrent SSL VPN / OpenVPN TunnelsWAN InterfacesWAN1: Gigabit EthernetWAN2: Gigabit EthernetWAN3: 2.4GHz Wireless WANWAN4: 5GHz Wireless WANWAN5: 4G/LTE USB Modem (not included)WAN6: 4G/LTE USB Modem (not included)Internet ConnectionLoad Balancing: IP-based, Session-basedHardware Acceleration802.1p/q Multi-VLAN TaggingMulti-VLAN/PVC2.4GHz & 5GHz Simultaneous Wireless WANWAN Active on Demand: Link Failure, Traffic ThresholdConnection Detection: PPP, ARP Detect, Ping DetectWAN Data BudgetDynamic DNSDrayDDNS – with automated LetsEncrypt CertificatesFull Feature-set Hardware Acceleration:Hardware Accelerated Quality of ServiceMulti-WAN Data BudgetTraffic Graph & Data Flow MonitorBandwidth LimitIPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TPIPv6 Connection Types:Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCUWireless FeaturesAX3000 WiFi 6 wireless:802.11ax 2×2 wireless access pointCompatible with 802.11a/b/g/n/ac wirelessDual-band (2.4/5Ghz) simultaneous wirelessUp to 2400Mbps PHY rate at 160MHz with 5GHzUp to 574Mbps PHY rate at 40MHz with 2.4GHzChannel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHzOFDMAMU-MIMOTx Beamforming1024-QAMMesh Root support with DrayTek VigorAP Mesh Nodes (available in a future update)Up to 4 SSIDs per radio bandExtended 5Ghz Band – Channels 36-48, 52-64, 100-140Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band SteeringBandwidth Management (Per Station / Per SSID)WMM (Wireless MultiMedia)WPS – WiFi Protected SetupStation Control – Time limited wireless connectivity per Station (e.g. 1 hour)EAPOL Key Retry – Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACKWireless Security:WPA2WPA3Pre-Shared Key authenticationEnterprise 802.1x authenticationWEP/WPA for Legacy ClientsAccess Control – Blacklist / Whitelist client MAC addresses per SSIDFirewall & Content FilteringIP-based or User-based Firewall PolicyUser-based Time QuotaDoS Attack DefenceSpoofing DefenceContent Filtering:Application Content FilterURL Content FilterDNS Keyword FilterWeb FeaturesWeb Category Filter (requires URL Reputation subscription, sold separately)NAT FeaturesNAT Port RedirectionOpen PortsPort TriggeringDMZ HostUPnPALG (Application Layer Gateway): SIP, RTSP, FTP, H.323VPN Pass-Through: PPTP, L2TP, IPsecLAN Management802.1q Tag-based, Port-based VLANUp to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)Up to 16 VLANsDMZ PortDHCP Server:Multiple IP SubnetCustom DHCP OptionsBind-IP-to-MACDHCP Pool Count up to 1022 addresses for LANs 1-3DHCP Pool Count up to 253 addresses for LANs 4-8DHCP Relay per LANLAN IP AliasWired 802.1x Port AuthenticationPort MirroringLocal DNS ServerConditional DNS ForwardingHotspot Web PortalHotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal ServerNetworking FeaturesPolicy-based Routing: Protocol, IP Address, Port, Domain/Hostname, CountryHigh Availability: Active-Standby, Hot-StandbyDNS Security (DNSSEC)Local RADIUS serverSMB File Sharing (Requires external storage)Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, BonjourRouting Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGPVPNUp to 50 active VPN tunnels – including up to 25 SSL VPN or OpenVPN TunnelsUp to 16 Hardware Accelerated 800Mb/s IPsec tunnelsLAN-to-LAN – Dial-In VPN Server & Dial-Out VPN ClientTeleworker-to-LAN – Dial-In VPN ServerUser Authentication: Local, RADIUS, LDAP, TACACS , mOTPIKE Authentication: Pre-Shared Key and Digital Signature (X.509)Encryption: MPPE, DES, 3DES, AES (128/192/256)Authentication: SHA-256, SHA-1VPN Trunk (Redundancy): Load Balancing, FailoverDead Peer Detection (DPD)IPsec NAT-Traversal (NAT-T)Virtual IP Mapping – Resolve VPN IP subnet/range conflictsDHCP over IPsecDrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NATVPN Protocols:IPsec IKEv1, IKEv2, IKEv2 EAPIPsec-XAuthDrayTek SSL VPNOpenVPN (Remote Dial-In User only)GRE over IPsecPPTPL2TP, L2TP over IPsecBandwidth ManagementIP-based Bandwidth LimitIP-based Session LimitUser-based Data QuotaQuality of Service (QoS)Classify via TOS, DSCP, 802.1p, IP Address, Service Type4 Priority QueuesApp QoSVoIP PrioritisationClass-based Outbound Traffic Tagging: DSCP & IP PrecedenceManagementLocal Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069Config File Export & ImportImport Config from Vigor 2926Auto Backup Config to USB StorageFirmware Upgrade via TFTP, HTTP, TR-0692-Level Administration PrivilegeAccess Control Features: Access List, Brute Force ProtectionSyslogSMS, E-mail Notification AlertSNMP: v1, v2c, v3Managed by VigorACSRouter Central Management FeaturesAP Management: Up to 20 VigorAP access pointsSwitch Management: Up to 10 VigorSwitch network switchesVPN Management: Up to 8 Vigor routersDrayTek Mesh: Up to 7 VigorAP access points (available in a future update)Operating RequirementsRack Mountable (Vigor RM1 mounting bracket required, sold separately)Wall MountableOperating Temperature: 0°C ~ 45°CStorage Temperature: -25°C ~ 70°CHumidity: 10% ~ 90% (non-condensing)Power Consumption: 26.8 Watt Max.Operating Power: DC 12V (via external PSU, included)Power Requirements : 100-240VACWeight: 780 gDimensions:241 mm Width165 mm Depth44 mm HeightPackage Contents1 x Vigor 2927ax router1 x Quick Start Guide1 x Set of screws & wall plugs for wall mounting1 x 2m CAT5e RJ45 network cable2 x Detachable wireless LAN antennas1 x UK Power supply (DC 12V) SKU: DRAYTEK-V2927AX-N Category: DrayTek Tags: draytek, v2927AX-K, wifi6