DrayTek DV2135 – Broadband router with 1 x GbE WAN, 4 x GbE LAN ports, SPI Firewall, 2 x VPN tunnels including 2 x SSL-VPN, and support VigorACS 2/3

Description

Vigor2135 Series is a broadband firewall and a VPN router. With hardware accelerator, it delivers up to 940 Mbps performance without sacrificing bandwidth control features. It’s also equipped with business-grade features, including web content filtering, Route Policy, App-based QoS and lots more, and is perfect for professional smart homes/SOHO users who would like to take full control of their own network. The series includes models with built-in 11ac Wave 2 wireless standard and fiber WAN.

Hardware NAT & Routing with Hardware QoS

The accelerator supports up to 4k NAT and routing connections. With acceleration enabled, Vigor2135’s firewall performance can reach 940Mbps, while still meeting high expectation of QoS quality. You may easily prioritized business critical apps, and always keep VoIP in 1st priority.

AP-assisted Roaming

• Making Transmission Effective:  Disassociate the Wireless clients who are out of the effective transmission range defined by custom Basic Rate or/and RSSI threshold, and force them to pick up another access point with a stronger signal.
• Resource Saving: Proactively kick out the clients with a low basic rate or low RSSI can prevent the access points trying to do ineffective transmission but saving the airtime, which will results in better WLAN experience for all.
• No Controller Required: Assisted Roaming is a feature built in all Vigor Access Points and selected Wireless routers. They operate without a wireless controller, providing an ideal solution for simple network deployment.
• Stronger Signal Guaranteed: By using the “Minimum RSSI with Adjacent AP” option, the AP/Router on the same local subnet will exchange client information with each other, providing the choice to disassociate the client only when other AP detecting a stronger signal. Thus to keep the client stayed when there is no other AP nearby.

What’s in it for you?

• VPN (Virtual Private Network):Build a secure and private tunnel from the LAN of Vigor2135 Series to the remote offices and teleworkers over the Internet
• SSL VPN:The VPN works through firewalls providing secure remote access to any network environment
• VPN Matcher:Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN.
• VoIP Friendly:Vigor2135 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless.
• Bandwidth Management:Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
• Firewall & Content Filter:Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
• Hotspot Web Portal:Market your business and communicate with the guests while offering hospitality WLAN.
• DrayDDNS:The free DDNS service for you to access the router by a fixed hostname of your choice.
• Central AP Management:Use the Vigor2135 Series router as a wireless controller to maintain and monitor the VigorAPs.
• Mesh (Wireless model only):Easily link to other VigorAP to expand the wireless network

Interface
WAN Port	1x Gigabit Ethernet or 100/1000M Fiber SFP (F model)
LAN Port	4x Gigabit Ethernet
USB Port	2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
Wirelss Antenna	2x External Dipole Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz (ac model)
2.4G WLAN	802.11n 2x2 MIMO 400Mbps (ac model)
5G WLAN	802.11ac Wave 2 2x2 MU-MIMO 867Mbps (ac model)
FXS RJ-11	2 (V model)
Performance
NAT Throughput	600 Mbps
NAT Throughput w/ Hardware Acceleration	940 Mbps
IPsec VPN Performance	150 Mbps (AES 256 bits)
SSL VPN Performance	100 Mbps
Max. Number of NAT Sessions	50,000
Max. Concurrent VPN Tunnels	2
Internet Connection
IPv4	PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6	PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging	✔
Multi-VLAN/PVC	✔
3G/4G/LTE WAN with USB modem	✔
WAN Failover	✔
Connection Detection	ARP, Strict ARP, Ping
WAN Data Budget	✔
Dynamic DNS	✔
DrayDDNS	✔
LAN Management
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	8
Number of LAN Subnet	4
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
Wired 802.1x Authentication	✔
Port Mirroring	✔
Local DNS Server	✔
Conditional DNS Forwarding	✔
Hotspot Web Portal	✔
Hotspot Authentication	Click-Through, Social Login, SMS PIN, Mail PIN, RADIUS, External Portal Server
Networking
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP
Policy-based Routing	Protocol, IP Address, Port, Domain, Country
DNS Security (DNSSEC)	✔
IGMP	IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
SMB File Sharing	(Requires external storage)
VPN
LAN-to-LAN	✔
Teleworker-to-LAN	✔
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN
User Authentication	Local, RADIUS, mOTP
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256, MD5
Encryption	MPPE, DES, 3DES, AES
Single-Armed VPN	✔
NAT-Traversal (NAT-T)	✔
DrayTek VPN Matcher	✔
Firewall & Content Filtering
NAT	Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy	✔
Content Filtering	Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense	✔
Spoofing Defense	✔
Bandwidth Management
IP-based Bandwidth Limit	✔
IP-based Session Limit	✔
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization	✔
APP QoS	✔
Wireless LAN (ac model)
Number of SSID	4 per radio band
Security Mode	OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
Authentication	Pre-Shared Key, 802.1X
WPS	PIN, PBC
WDS	Repeater (5GHz Only)
Access Control	Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness	✔
Band Steering	(ac model)
MU-MIMO	(5GHz Only) (ac model)
WMM	✔
VoIP Gateway (V model)
Protocol	SIP, RTP/RTCP, ZRTP
SIP Registrars	6
Dial Plan	Phone Book, Digit Map, Call Barring, Regional
Call Features	Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec	G.711 A/u law, G.726, G.729 A/B
Caller ID	FSK_ETSI, FSK_BELLCORE, DTMF
Management
Local Service	HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069
Config File Export & Import	✔
Config File Compatibility	Vigor2132 Series, Vigor2133 Series
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege	✔
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
Netflow	(v5, v9, IPFIX)
SNMP	v1, v2c, v3
Syslog	✔
Managed by VigorACS	✔
Central AP Management	2 VigorAP
Mesh Network	7 VigorAP (ac model)
Physical
Power Supply	DC 12V @ 1-1.5A
Max. Power Consumption	18 watts (Vac model)
Dimension	207mm x 131mm x 42mm
Weight	440g (Vac model)
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%
Certificate

Datasheet