DrayTek DV2866ax – Multi WAN Router with VDSL2 35b/G.Fast, 1 x GbE WAN/LAN, and 3G/4G USB WAN port for Load Balancing and Fail-over, 5 x GbE LANs, Object-based SPI Firewall, CSM, QoS, 802.11ax (AX2300) WiFi, 32 x VPNs, 16 x SSL VPNs, and support VigorACS 2/3


DrayTek DV2866ax – Multi WAN Router with VDSL2 35b/G.Fast, 1 x GbE WAN/LAN, and 3G/4G USB WAN port for Load Balancing and Fail-over, 5 x GbE LANs, Object-based SPI Firewall, CSM, QoS, 802.11ax (AX2300) WiFi, 32 x VPNs, 16 x SSL VPNs, and support VigorACS 2/3

Availability: In stock SKU: DV2866ax

$780.59 (inc. of GST)

Or $156.12 today and more time to pay with

Multi WAN Router with VDSL2 35b/G.Fast, 1 x GbE WAN/LAN, and 3G/4G USB WAN port for Load Balancing and Fail-over, 5 x GbE LANs, Object-based SPI Firewall, CSM, QoS, 802.11ax (AX2300) WiFi, 32 x VPNs, 16 x SSL VPNs, and support VigorACS 2/3

View cartAvailability: In stock


Vigor2866 Series is a dual WAN firewall router. It has one G.fast supported DSL WAN, delivering fiber-like speed up to 1 Gbps, and one configurable Ethernet WAN. The built-in DSL modem is backward compatible with VDSL2 profile 35b supervectoring and ADSL2+. Vigor2866 Series provides load-balancing and failover for your business continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal, and a lot more, this is the ultimate DSL router that does it all for SMB. The series includes built-in 802.11ax wireless models.


  • VoIP Firs: VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.
  • Improve Experience for Business-Critical Apps: Select your business critical apps, and easily put them into QoS classes.
  • Flexible Bandwidth Allocation: Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

What’s in it for you?

  • Load Balancing: Maximize throughput and reliability by using multiple Internet connections.
  • Hotspot Web Portal: Market your business and communicate with the guests while offering hospitality WLAN.
  • G.fast Modem: Integrated VDSL modem, supporting G.fast to deliver fiber-like DSL speed.
  • Bandwidth Management: Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
  • VPN (Virtual Private Network): Build a secure and private tunnel from the LAN of Vigor2866 Series to the remote offices and teleworkers over the Internet.
  • VoIP Friendly: Vigor2866 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless.
  • SSL VPN: The VPN works through firewalls providing secure remote access to any network environment
  • Firewall & Content Filter: Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents
  • DrayDDNS: The free DDNS service for you to access the router by a fixed hostname of your choice
  • Central Switch Management:Set up VLAN easily from the router and get a centralized hierarchy view of the switches
  • Mesh (Wireless model only): Easily link to other VigorAP to expand the wireless network
  • Wireless WAN (Wireless model only): Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones
Fixed WAN Port
  • 1x RJ-11 for G.fast/VDSL2 35b/ADSL2+
LAN/WAN Switchable Port
  • 1x 10/100/1000Base-TX RJ-45
Fixed LAN Port
  • 5x 10/100/1000Base-TX RJ-45
USB Port
  • 2x USB 2.0
Wirelss Antenna
  • 2x External Dipole Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz (ac/ax model)
  • 802.11n 2x2 MIMO 400Mbps (ac model) 802.11ax 2x2 MIMO 574Mbps (ax model)
  • 802.11ac Wave 2 2x2 MU-MIMO 867Mbps (ac model) 802.11ax 2x2 MU-MIMO 2402Mbps (ax model)
  • 2 (V model)
NAT Throughput
  • 800 Mbps
NAT Throughput w/ Hardware Acceleration
  • 940 Mbps (Single Ethernet/DSL WAN) 1.8 Gbps (Ethernet WAN + DSL WAN)
IPsec VPN Performance
  • 300 Mbps (AES 256 bits)
SSL VPN Performance
  • 150 Mbps
Max. Number of NAT Sessions
  • 60,000
Max. Concurrent VPN Tunnels
  • 32
Max. Concurrent OpenVPN + SSL VPN
  • 16
VDSL Standards
  • ITU-T G.993.2 Annex A/B/M/Q T1.424 ITU-T G.993.5 (Vectoring)
VDSL2 Profile
  • 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
G.fast Profile
  • 106Mhz, 212Mhz
ADSL Standards
  • ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other Standards
  • ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan
  • 998, 997
Internet Connection
  • PPPoE, DHCP, Static IP, PPTP/L2TP
  • PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Wireless WAN
  • 2 (ac model)
3G/4G/LTE WAN with USB modem
Load Balancing
  • IP-based, Session-based
WAN Active on Demand
  • Link Failure, Traffic Threshold
Connection Detection
  • ARP, Ping
WAN Data Budget
Dynamic DNS
LAN Management
  • 802.1q Tag-based, Port-based
Max. Number of VLAN
  • 16
Number of LAN Subnet
  • 8
DHCP Server
  • Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication
  • Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
  • IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP
Policy-based Routing
  • Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
  • IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing
  •  (Requires external storage)
  • PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
User Authentication
IKE Authentication
  • Pre-Shared Key, X.509
IPsec Authentication
  • SHA-1, SHA-256
VPN Trunk (Redundancy)
  • Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
  • Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)
  • SIP, RTSP, FTP, H.323
VPN Pass-Through
  • PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering
  • Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)
  • TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
Wireless LAN (ac/ax model)
WiFi 6
  •  (ax model)
Number of SSID
  • 4 per radio band
Security Mode
  • OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
  • Pre-Shared Key, 802.1X
  •  (ax model)
  • PIN, PBC
  • Repeater (5GHz only)(ac model)
Access Control
  • Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering
  •  (5GHz Only)
VoIP Gateway (V model)
SIP Registrars
  • 12
Dial Plan
  • Phone Book, Digit Map, Call Barring, Regional
Call Features
  • Call Waiting, Call Transfer, Scheduled DND, Hotline
Voice Codec
  • G.711 A/u law, G.723.1, G.726, G.729 A/B
Caller ID
Local Service
  • HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility
  • Vigor2865, Vigor2862, Vigor2860
Firmware Upgrade
  • TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control
  • Access List, Brute Force Protection
Notification Alert
  • SMS, E-mail
  • v1, v2c, v3
Managed by VigorACS
Central VPN Management
  • 8 VPN
Central AP Management
  • 20 VigorAP
Mesh Network
  • 7 VigorAP (ac model)
Central Switch Management
  • 10 VigorSwitch
Power Supply
  • DC 12V @ 2A
Max. Power Consumption
  • 26.4 watts (Vac model)
  • 241mm x 166mm x 46mm
  • 680g (Vac model)
Operating Temperature
  • 0 to 45°C
Storage Temperature
  • -25 to 70°C
Operating Humidity (non-condensing)
  • 10 to 90%
  • CE