DrayTek DV2927 Dual GigE WAN Router/Firewall, IPSec, PPTP, SSL VPN, QoS
- Dual Gigabit WAN
- Application Aware QoS
- VPN (Virtual Private Network) 50 IPSec, 25 SSL VPN
- VPN Matcher
- Load Balancing & Bandwidth Management
- Firewall & Content Filter
- VoIP Friendly
- Hotspot Web Portal
- DrayDDNS
- Central AP Management, Central Switch Management
The Vigor 2927 is a dual-Ethernet WAN firewall router, providing load-balancing and failover for business continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal, and a lot more, this is the ultimate router that does it all for SMB.
Up to 2 WAN
Load balancing. NAT throughput up to 800 Mbps
50 VPN
IPsec VPN throughput up to 290 Mbps
25 SSL VPN
Throughput up to 120 Mbps
60k Sessions
Recommended for a network of 50 hosts
Load Balancing
Maximize throughput and reliability by using multiple Internet connections.
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2927 Series to the remote offices and teleworkers over the Internet.
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment.
VPN Matcher
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN.
Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
VoIP Friendly
Vigor2927 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality Wi-Fi.
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice.
Central AP Management
Use the Vigor2927 Series router as a wireless controller to maintain and monitor the VigorAPs.
Central Switch Management
Set up VLAN easily from the router and get a centralized hierarchy view of the switches.
APP QoS
VoIP First
VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.
Note :
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Specification
|
Interface |
|
|
Fixed WAN Port |
1x GbE RJ-45 |
|
WAN/LAN Switchable Port |
1x GbE RJ-45 |
|
Fixed LAN Port |
5x GbE RJ-45 |
|
USB Port |
2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
|
RJ-11 Port for Voice |
2x FXS (V model only) |
|
Wi-Fi Antenna |
2x External Dipole |
|
2.4G WLAN |
802.11n 2x2 MIMO 400Mbps (wireless model only) |
|
5G WLAN |
802.11ac Wave 2 2x2 MU-MIMO 867Mbps (dual-band model) |
|
Performance |
|
|
NAT Throughput |
800 Mbps |
|
IPsec VPN Performance |
290 Mbps (AES 256 bits) |
|
SSL VPN Performance |
120 Mbps |
|
Max. Number of NAT Sessions |
60,000 |
|
Max. Concurrent VPN Tunnels |
50 |
|
Max. Concurrent OpenVPN + SSL VPN |
25 |
|
Internet Connection |
|
|
IPv4 |
PPPoE, DHCP, Static IP, PPTP/L2TP |
|
IPv6 |
PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
|
802.1p/q Multi-VLAN Tagging |
|
|
Multi-VLAN/PVC |
|
|
Wireless WAN |
(wireless model only) |
|
3G/4G/LTE WAN with USB modem |
|
|
Load Balancing |
IP-based, Session-based |
|
WAN Active on Demand |
Link Failure, Traffic Threshold |
|
Connection Detection |
ARP, Ping |
|
WAN Data Budget |
|
|
Dynamic DNS |
|
|
DrayDDNS |
|
|
LAN Management |
|
|
VLAN |
802.1q Tag-based, Port-based |
|
Max. Number of VLAN |
16 |
|
Number of LAN Subnet |
8 |
|
DHCP Server |
Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
|
LAN IP Alias |
|
|
Wired 802.1x Authentication |
|
|
Port Mirroring |
|
|
Local DNS Server |
|
|
Conditional DNS Forwarding |
|
|
Hotspot Web Portal |
|
|
Hotspot Authentication |
Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
|
Networking |
|
|
Routing |
IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP |
|
Policy-based Routing |
Protocol, IP Address, Port, Domain, Country |
|
High Availability |
|
|
DNS Security (DNSSEC) |
|
|
Multicast |
IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour |
|
Local RADIUS server |
|
|
SMB File Sharing |
(Requires external storage) |
|
VPN |
|
|
LAN-to-LAN |
|
|
Teleworker-to-LAN |
|
|
Protocols |
PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN) |
|
User Authentication |
Local, RADIUS, LDAP, TACACS+, mOTP |
|
IKE Authentication |
Pre-Shared Key, X.509 |
|
IPsec Authentication |
SHA-1, SHA-256 |
|
Encryption |
MPPE, DES, 3DES, AES |
|
VPN Trunk (Redundancy) |
Load Balancing, Failover |
|
Single-Armed VPN |
|
|
NAT-Traversal (NAT-T) |
|
|
DrayTek VPN Matcher |
|
|
Firewall & Content Filtering |
|
|
NAT |
Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
|
ALG (Application Layer Gateway) |
SIP, RTSP, FTP, H.323 |
|
VPN Pass-Through |
PPTP, L2TP, IPsec |
|
IP-based Firewall Policy |
|
|
Content Filtering |
Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
|
DoS Attack Defence |
|
|
Spoofing Defence |
|
|
Bandwidth Management |
|
|
IP-based Bandwidth Limit |
|
|
IP-based Session Limit |
|
|
QoS (Quality of Service) |
TOS, DSCP, 802.1p, IP Address, Port, Application |
|
VoIP Prioritization |
|
|
Wireless LAN (wireless model only) |
|
|
Number of SSID |
4 per radio band |
|
Security Mode |
WEP, WPA, WPA2, Mixed (WPA+WPA2) |
|
Authentication |
Pre-Shared Key, 802.1X |
|
WPS |
PIN, PBC |
|
WDS |
Bridge, Repeater |
|
Access Control |
Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
|
AirTime Fairness |
|
|
Band Steering |
(dual-band model) |
|
MU-MIMO |
(5GHz Only) (dual-band model) |
|
WMM |
|
|
VoIP Gateway (V model) |
|
|
Protocol |
SIP, RTP/RTCP, ZRTP |
|
SIP Registrars |
12 |
|
Dial Plan |
Phone Book, Digit Map, Call Barring, Regional |
|
Call Features |
Call Waiting, Call Transfer, Scheduled DND, Hotline |
|
Voice Codec |
G.711 A/u law, G.723.1, G.726, G.729 A/B |
|
Caller ID |
FSK_ETSI, FSK_BELLCORE, DTMF |
|
Management |
|
|
Local Service |
HTTP, HTTPS, Telnet, SSH, FTP, TR-069 |
|
Config File Export & Import |
|
|
Config File Compatibility |
Vigor2926 |
|
Firmware Upgrade |
TFTP, HTTP, TR-069 |
|
2-Level Administration Privilege |
|
|
Access Control |
Access List, Brute Force Protection |
|
Notification Alert |
SMS, E-mail |
|
SNMP |
v1, v2c, v3 |
|
Syslog |
|
|
Central VPN Management |
8 VPN |
|
Central AP Management |
20 VigorAP |
|
Central Switch Management |
10 VigorSwitch |
|
Physical |
|
|
Power Supply |
DC 12V @ 2A |
|
Max. Power Consumption |
24 watts (ac model) |
|
Dimension |
241mm x 165mm x 44mm |
|
Weight |
630g (ac model) |
|
Operating Temperature |
0 to 45°C |
|
Storage Temperature |
-25 to 70°C |
|
Operating Humidity (non-condensing) |
10 to 90% |
|
Certificate |
CE |
Notes :
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Available Models
|
Model |
2.4GHz Wi-Fi |
5GHz Wi-Fi |
Wi-Fi Antenna |
VoIP Gateway |
FXS RJ11 |
|
Vigor2927 |
- |
- |
- |
- |
- |
|
Vigor2927ac |
2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz) |
- |
- |
||
|
Vigor2927Vac |
2x Dual-Band (4dBi for 5GHz, 2dBi for 2.4GHz) |
2 |
Vigor 2927 series specification.
|
Interface |
|
|
Fixed WAN Port |
1x GbE RJ-45 |
|
WAN/LAN Switchable Port |
1x GbE RJ-45 |
|
Fixed LAN Port |
5x GbE RJ-45 |
|
USB Port |
2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer |
|
RJ-11 Port for Voice |
2x FXS (V model) |
|
Wi-Fi Antenna |
2x External Dipole |
|
2.4G WLAN |
802.11n 2x2 MIMO 400Mbps (wireless model) |
|
5G WLAN |
802.11ac Wave 2 2x2 MU-MIMO 867Mbps (dual-band model) |
|
Performance |
|
|
NAT Throughput |
800 Mbps |
|
IPsec VPN Performance |
290 Mbps (AES 256 bits) |
|
SSL VPN Performance |
120 Mbps |
|
Max. Number of NAT Sessions |
60,000 |
|
Max. Concurrent VPN Tunnels |
50 |
|
Max. Concurrent OpenVPN + SSL VPN |
25 |
|
Internet Connection |
|
|
IPv4 |
PPPoE, DHCP, Static IP, PPTP/L2TP |
|
IPv6 |
PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel |
|
802.1p/q Multi-VLAN Tagging |
|
|
Multi-VLAN/PVC |
|
|
Wireless WAN |
(wireless model) |
|
3G/4G/LTE WAN with USB modem |
|
|
Load Balancing |
IP-based, Session-based |
|
WAN Active on Demand |
Link Failure, Traffic Threshold |
|
Connection Detection |
ARP, Ping |
|
WAN Data Budget |
|
|
Dynamic DNS |
|
|
DrayDDNS |
|
|
LAN Management |
|
|
VLAN |
802.1q Tag-based, Port-based |
|
Max. Number of VLAN |
16 |
|
Number of LAN Subnet |
8 |
|
DHCP Server |
Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC |
|
LAN IP Alias |
|
|
Wired 802.1x Authentication |
|
|
Port Mirroring |
|
|
Local DNS Server |
|
|
Conditional DNS Forwarding |
|
|
Hotspot Web Portal |
|
|
Hotspot Authentication |
Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server |
|
Networking |
|
|
Routing |
IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP, BGP |
|
Policy-based Routing |
Protocol, IP Address, Port, Domain, Country |
|
High Availability |
|
|
DNS Security (DNSSEC) |
|
|
Multicast |
IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour |
|
Local RADIUS server |
|
|
SMB File Sharing |
(Requires external storage) |
|
VPN |
|
|
LAN-to-LAN |
|
|
Teleworker-to-LAN |
|
|
Protocols |
PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, OpenVPN(Host to LAN) |
|
User Authentication |
Local, RADIUS, LDAP, TACACS+, mOTP |
|
IKE Authentication |
Pre-Shared Key, X.509 |
|
IPsec Authentication |
SHA-1, SHA-256 |
|
Encryption |
MPPE, DES, 3DES, AES |
|
VPN Trunk (Redundancy) |
Load Balancing, Failover |
|
Single-Armed VPN |
|
|
NAT-Traversal (NAT-T) |
|
|
DrayTek VPN Matcher |
|
|
Firewall & Content Filtering |
|
|
NAT |
Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP |
|
ALG (Application Layer Gateway) |
SIP, RTSP, FTP, H.323 |
|
VPN Pass-Through |
PPTP, L2TP, IPsec |
|
IP-based Firewall Policy |
|
|
Content Filtering |
Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required) |
|
DoS Attack Defence |
|
|
Spoofing Defence |
|
|
Bandwidth Management |
|
|
IP-based Bandwidth Limit |
|
|
IP-based Session Limit |
|
|
QoS (Quality of Service) |
TOS, DSCP, 802.1p, IP Address, Port, Application |
|
VoIP Prioritization |
|
|
Wireless LAN (wireless model) |
|
|
Number of SSID |
4 per radio band |
|
Security Mode |
WEP, WPA, WPA2, Mixed(WPA+WPA2) |
|
Authentication |
Pre-Shared Key, 802.1X |
|
WPS |
PIN, PBC |
|
WDS |
Bridge, Repeater |
|
Access Control |
Access List, Client Isolation, Hide SSID, Wi-Fi Scheduling |
|
AirTime Fairness |
|
|
Band Steering |
(dual-band model) |
|
MU-MIMO |
(5GHz Only) (dual-band model) |
|
WMM |
|
|
VoIP Gateway (V model) |
|
|
Protocol |
SIP, RTP/RTCP, ZRTP |
|
SIP Registrars |
12 |
|
Dial Plan |
Phone Book, Digit Map, Call Barring, Regional |
|
Call Features |
Call Waiting, Call Transfer, Scheduled DND, Hotline |
|
Voice Codec |
G.711 A/u law, G.723.1, G.726, G.729 A/B |
|
Caller ID |
FSK_ETSI, FSK_BELLCORE, DTMF |
|
Management |
|
|
Local Service |
HTTP, HTTPS, Telnet, SSH, FTP, TR-069 |
|
Config File Export & Import |
|
|
Config File Compatibility |
Vigor2926 |
|
Firmware Upgrade |
TFTP, HTTP, TR-069 |
|
2-Level Administration Privilege |
|
|
Access Control |
Access List, Brute Force Protection |
|
Notification Alert |
SMS, E-mail |
|
SNMP |
v1, v2c, v3 |
|
Syslog |
|
|
Central VPN Management |
8 VPN |
|
Central AP Management |
20 VigorAP |
|
Central Switch Management |
10 VigorSwitch |
|
Physical |
|
|
Power Supply |
DC 12V @ 2A |
|
Max. Power Consumption |
24 watts (ac model) |
|
Dimension |
241mm x 165mm x 44mm |
|
Weight |
630g (ac model) |
|
Operating Temperature |
0 to 45°C |
|
Storage Temperature |
-25 to 70°C |
|
Operating Humidity (non-condensing) |
10 to 90% |
|
Certificate |
CE |
Notes :
All specifications are subject to change without notice.
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
