DrayTek DV2866Lac – Multi WAN Router with a Cat 6 4G LTE SIM slot, VDSL2 35b/G.Fast, 1 x GbE WAN/LAN, and 3G/4G USB WAN port for Load Balancing and Fail-over, 5 x GbE LANs, Object-based SPI Firewall, CSM, QoS, 802.11ac (AC1300) WiFi, 32 x VPNs, 16 x SSL VPNs, and support Vi


DrayTek DV2866Lac – Multi WAN Router with a Cat 6 4G LTE SIM slot, VDSL2 35b/G.Fast, 1 x GbE WAN/LAN, and 3G/4G USB WAN port for Load Balancing and Fail-over, 5 x GbE LANs, Object-based SPI Firewall, CSM, QoS, 802.11ac (AC1300) WiFi, 32 x VPNs, 16 x SSL VPNs, and support Vi

Availability: Out of stock SKU: DV2866Lac

$1,047.16 (inc. of GST)

Or $209.43 today and more time to pay with

Vigor2866 LTE Series 4G LTE & G.fast VPN Firewall Router

Availability: Out of stock


Vigor2866 LTE Series is a G.fast firewall router with embedded 4G/LTE connectivity, making it ideal for SMB/Branch office where Internet connection is the core of business continuity, or new business locations that wired connection is yet to be available.

It has one G.fast supported DSL WAN, delivering fiber-like speed up to 1 Gbps, one configurable Ethernet WAN, 2 x embedded SIM slots supporting LTE Cat. 6 (1 SIM online at a time), and 1 x versatile USB port for additional 4G/LTE connection or other applications. All these WANs together provide robust load-balancing/failover functionality.

The series includes models without wireless LAN and with built-in 802.11ac Wave2 wireless LAN. It also offers other professional features including QoS, High Availability, Route Policy, SPI Firewall, Content Filtering and more. It can act as the controller to manage other VigorAP and VigorSwitch in LAN, or register to VigorACS for cloud-based management.

What’s in it for you?

  • Embedded SIM Slot:Provide 4G/LTE Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle
  • Load Balancing:Maximize throughput and reliability by using multiple Internet connections
  • G.fast Modem:Integrated VDSL modem, supporting G.fast to deliver fiber-like DSL speed.
  • VPN (Virtual Private Network):Build a secure and private tunnel from the LAN of Vigor2866 LTE Series to the remote offices and teleworkers over the Internet
  • SSL VPN:The VPN works through firewalls providing secure remote access to any network environment
  • Firewall & Content Filter:Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
  • DrayDDNS:The free DDNS service for you to access the router by a fixed hostname of your choice
  • Wireless WAN (Wireless model only:Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphone
  • Hotspot Web Portal:Market your business and communicate with the guests while offering hospitality WLAN
  • Bandwidth Management:Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings
  • Central AP Management:Use the Vigor2866 LTE Series router as a wireless controller to maintain and monitor the VigorAPs.
  • Mesh(Wireless model only:Easily link to other VigorAP to expand the wireless network
  • Central Switch Management:Set up VLAN easily from the router and get a centralized hierarchy view of the switches
Fixed WAN Port
  • 1x RJ-11 for G.fast/VDSL2 35b/ADSL2+
LAN/WAN Switchable Port
  • 1x 10/100/1000Base-TX RJ-45
Fixed LAN Port
  • 5x 10/100/1000Base-TX RJ-45
SIM Slot
  • 2x Standard-Sized (1 SIM online at a time)
USB Port
  • 1x USB 2.0
LTE Antenna
  • 2x External Dipole
  • Gain: 3 dBi
Wirelss Antenna
  • 2x External Dipole
  • Gain: 3.5 dBi for 5GHz, 2.3 dBi for 2.4GHz
  • (Lac model)
  • 802.11n 2x2 MIMO 400Mbps (ac model)
  • 802.11ac Wave 2 2x2 MU-MIMO 867Mbps (ac model)
NAT Throughput
  • 800 Mbps
NAT Throughput w/ Hardware Acceleration
  • 940 Mbps (Single Ethernet/DSL WAN)
  • 1.8 Gbps (Ethernet WAN + DSL WAN)
IPsec VPN Performance
  • 300 Mbps (AES 256 bits)
SSL VPN Performance
  • 150 Mbps
Max. Number of NAT Sessions
  • 60,000
Max. Concurrent VPN Tunnels
  • 32
Max. Concurrent OpenVPN + SSL VPN
  • 16
VDSL Standards
  • ITU-T G.993.2 Annex A/B/M/Q
  • T1.424
  • ITU-T G.993.5 (Vectoring)
VDSL2 Profile
  • 8a, 8b, 8c, 8d, 12a, 12b, 17a, 35b
G.fast Profile
  • 106Mhz, 212Mhz
ADSL Standards
  • ITU-T G.992.1 (G.dmt), ITU-T G.992.3 (G.dmt.bis), ITU-T G.992.5 (ADSL2+) (G.adslplus), T1.413 Issue 2
Other Standards
  • ITU-T G.994.1 (G.hs), ITU-T G.997.1 (G.ploam), ITU-T G.998.4 (Retransmission)
Band Plan
  • 998, 997
LTE Category
  • 6
Max. Data Rate
  • 300 Mbps downlink, 50 Mbps uplink
FDD Band
  • 1 (2100MHz), 3 (1800MHz), 7 (2600MHz), 8 (900MHz), 20 (800MHz), 28 (700MHz)
TDD Band
  • 38 (2600MHz), 40 (2300MHz), 41(2540-2640MHz, for Saudi Arabia only)
WCDMA (3G) Band
  • 1, 8
SMS Gateway
Internet Connection
  • PPPoE, DHCP, Static IP, PPTP/L2TP
  • PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Wireless WAN
  • 2 (ac model)
3G/4G/LTE WAN with USB modem
Load Balancing
  • IP-based, Session-based
WAN Active on Demand
  • Link Failure, Traffic Threshold
Connection Detection
  • ARP, Ping
WAN Data Budget
Dynamic DNS
LAN Management
  • 802.1q Tag-based, Port-based
Max. Number of VLAN
  • 16
Number of LAN Subnet
  • 8
DHCP Server
  • Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
Wired 802.1x Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication
  • Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
  • IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP
Policy-based Routing
  • Protocol, IP Address, Port, Domain, Country
High Availability
DNS Security (DNSSEC)
  • IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
Local RADIUS server
SMB File Sharing  
  •  (Requires external storage)
  • PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN
User Authentication
IKE Authentication
  • Pre-Shared Key, X.509
IPsec Authentication
  • SHA-1, SHA-256
VPN Trunk (Redundancy)
  • Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)
DrayTek VPN Matcher
Firewall & Content Filtering
  • Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)
  • SIP, RTSP, FTP, H.323
VPN Pass-Through
  • PPTP, L2TP, IPsec
IP-based Firewall Policy
Content Filtering
  • Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
DoS Attack Defense
Spoofing Defense
Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)
  • TOS, DSCP, 802.1p, IP Address, Port, Application
VoIP Prioritization
Wireless LAN (ac model)
Number of SSID
  • 4 per radio band
Security Mode
  • OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
  • Pre-Shared Key, 802.1X
  • PIN, PBC
  • Repeater (5GHz only)
Access Control
  • Access List, Client Isolation, Hide SSID, WLAN Scheduling
AirTime Fairness
Band Steering
  •  (5GHz Only)
Local Service
  • HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
Config File Export & Import
Config File Compatibility
  • Vigor2865 LTE
Firmware Upgrade
  • TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control
  • Access List, Brute Force Protection
Notification Alert
  • SMS, E-mail
  • v1, v2c, v3
Managed by VigorACS
Central VPN Management
  • 8 VPN
Central AP Management
  • 20 VigorAP
Mesh Network
  • 7 VigorAP (ac model)
Central Switch Management
  • 10 VigorSwitch
Power Supply
  • DC 12V @ 2.5A
Max. Power Consumption
  • 28.8 watts (Lac model)
  • 241mm x 166mm x 46mm
  • 960g (Lac model)
Operating Temperature
  • 0 to 45°C
Storage Temperature
  • -25 to 70°C
Operating Humidity (non-condensing)
  • 10 to 90%
  • CE