Draytek Vigor 2927ac Dual-WAN Firewall VPN Router
Draytek Vigor 2927ac 1 Gb Ethernet Dual-WAN Firewall VPN Router 4G/LTE with dual-SIMs for second backup telco
The Draytek Vigor 2927ac is a Dual-Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. It offers high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit Internet connections. The Vigor 2927 offers up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.
Draytek Vigor 2927ac Key Features
- Gigabit Dual-WAN Ethernet WAN Router with Load Balancing & Failover
- Up to 950Mbps Throughput per WAN interface, 1800Mbps in total
- Up to 300Mbps IPsec VPN Throughput
- 50 LAN-to-LAN & Remote Teleworker VPN Tunnels
- 25 DrayTek SSL VPN Tunnels
- 5+1 Gigabit RJ-45 LAN Ports
- AC1300 - 11ac 'Wave 2' Dual Band Wireless
- 8 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
With 802.11ac wireless, the Vigor 2927ac provides fast wireless coverage to your network's computers and devices. In addition, the router can connect to Wireless networks for Internet access, allowing it to make use of Mobile Hotspot wireless connections and nearby wireless networks, where for instance a neighbour's wireless network could provide an emergency backup connection.
Dual Gigabit WAN Load Balancer
Make full use of Fibre Broadband with the Vigor 2927ac's Gigabit throughput per-WAN. Up to 1.8Gbps total combined throughput with Firewall, Content Filtering and Quality of Service.
Benefits: Unleash the full potential of Fibre broadband. High speed,Gigabit CPE with flexible application.
Hotspot Web Portal
Use Draytek's captive portal solutions to provide guest internet accss via wireless access points. Extensive options for customisation and authentication, with per-user data and time quotas.
Benefits: Provide internet access to guests and market your business via a captive portal.
Ideal VPN Router for Small to Medium Businesses
Provide fast and secure VPN access, with up to 50 VPN tunnels, enabling remote workers to access network resources and connect with remote sites with DrayTek SSL VPN and Open VPN support.
Benefits: Provide secure, encrypted network access for remote workers.
5+1 Gigabit LAN Ports
Attach computers, servers and network attached storage directly, with up to 6 Gigabit LAN ports. Use VLANs to supply Broadband and VPN connectivity to as many as 8 separate networks.
Benefits: Improve quality of service for private and guest data traffic. Mix fixed and virtual configurations.
Designed for Centralised Management
Configure and manage the Vigor 2927 series remotely through the VigorACS central management platform.
Benefits: Save time and money. Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.
Physical Interfaces
- WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- WAN/LAN Switchable Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x Removable Wireless antennas
- 2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
- Wireless On / Off / WPS button
- Recessed Factory Reset button
- NAT Performance:
- 950 Mb/s NAT Throughput for Single WAN with Hardware Acceleration
- 1.8Gb/s Total NAT Throughput for Dual WAN with Hardware Acceleration
- 800 Mb/s NAT Throughput per WAN
- 60,000 NAT Sessions
- 8000 Hardware Accelerated NAT Sessions
- VPN Performance:
- 300 Mb/s IPsec (AES256) VPN Performance
- 800 Mb/s Hardware Accelerated IPsec VPN Performance - New! (requires f/w 4.2.1)
- 120 Mb/s SSL VPN Performance
- Max. 50 Concurrent VPN Tunnels
- Max. 25 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interface
- WAN1: Gigabit Ethernet
- WAN2: Gigabit Ethernet
- WAN3: 2.4GHz Wireless WAN
- WAN4: 5GHz Wireless WAN
- WAN5: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
- WAN6: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
Internet Connection
- Load Balancing: IP-based, Session-based
- Hardware Acceleration
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- 2.4GHz & 5GHz Simultaneous Wireless WAN
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget
- Dynamic DNS
- DrayDDNS – with automated LetsEncrypt Certificates
- Full Feature-set Hardware Acceleration (requires f/w 4.2.1):
- Hardware Accelerated Quality of Service
- Multi-WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
- IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
- IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
- 4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICC
Wireless Features
AC1300 - 11ac 'Wave 2' Dual Band Wireless:
- 802.11ac 2x2 wireless access point
- Compatible with 802.11a/b/g/n wireless
- Dual-band (2.4/5Ghz) simultaneous wireless
- Up to 866Mbps PHY rate at 80MHz with 5GHz
- Up to 400Mbps PHY rate at 40MHz with 2.4GHz (256-QAM)
- Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80MHz for 5GHz
- MU-MIMO
- Tx Beamforming
- Mesh Root support with DrayTek VigorAP Mesh Nodes – New! (requires f/w 4.3.0, available in Q4 2020)
- Up to 4 SSIDs per radio band
- Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
- Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
- Bandwidth Management (Per Station / Per SSID)
- WMM (Wireless MultiMedia)
- WPS - WiFi Protected Setup
- Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
- EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
- Wireless Security:
- WPA2
- WPA3 – New! (requires f/w 4.2.2)
- Pre-Shared Key authentication
- Enterprise 802.1x authentication
- WEP/WPA for Legacy Clients
- Access Control – Blacklist / Whitelist client MAC addresses per SSID
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter (requires GlobalView subscription)
NAT Features
- NAT Port Redirection
- Open Ports
- Port Triggering
- DMZ Host
- UPnP
- ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
- VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 16 VLANs
- DMZ Port
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 1022 addresses for LANs 1-3
- DHCP Pool Count up to 253 addresses for LANs 4-8
- DHCP Relay per LAN
- LAN IP Alias
- Wired 802.1x Port Authentication
- Port Mirroring
- Local DNS Server
- Conditional DNS Forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Serve
Networking features
- Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
- High Availability: Active-Standby, Hot-Standby
- DNS Security (DNSSEC)
- Local RADIUS server
- SMB File Sharing (Requires external storage)
- Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
- Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN Facilities
- Up to 50 active VPN tunnels - including up to 25 SSL VPN or OpenVPN Tunnels
- Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – (requires f/w 4.2.1)
- LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: MPPE, DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- VPN Trunk (Redundancy): Load Balancing, Failover
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
- Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
- DHCP over IPsec
- DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT
- VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- DrayTek SSL VPN
- OpenVPN (Remote Dial-In User only)
- GRE over IPsec
- PPTP
- L2TP, L2TP over IPsec
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
Quality of Service (QoS)
- Classify via TOS, DSCP, 802.1p, IP Address, Service Type
- 4 Priority Queues
- App QoS
- VoIP Prioritisation
- Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export & Import
- Import Config from Vigor 2926
- Auto Backup Config to USB Storage
- Firmware Upgrade via TFTP, HTTP, TR-069
- 2-Level Administration Privilege
- Access Control Features: Access List, Brute Force Protection
- Syslog
- SMS, E-mail Notification Alert
- SNMP: v1, v2c, v3
- Managed by VigorACS
Router Central Management Features
- AP Management: Up to 20 VigorAP access points
- Switch Management: Up to 10 VigorSwitch network switches
- VPN Management: Up to 8 Vigor routers
- DrayTek Mesh: Up to 7 VigorAP access points (requires f/w 4.3.0, available in Q4 2020)
Operating Requirements
- Rack Mountable (Optional Vigor RM1 mounting bracket required)
- Wall Mountable
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Power Consumption: Operating Power: DC 12V (via external PSU, supplied)
- Warranty: Two (2) Years RTB
- Power Requirements: 220-240VAC
- Dimensions:
- 241mm Width
- 165mm Depth
- 44mm Height
Box Contents
- Vigor 2927ac router
- Quick Start Guide
- Screws & wall plugs for wall mounting
- 2m Cat-5e RJ-45 Network Cable
- 2x detachable wireless LAN antennas
- DC 12V Power Supply with UK Plug
Draytek Vigor 2927ac 1 Gb Ethernet Dual-WAN Firewall VPN Router 4G/LTE with dual-SIMs for second backup telco
The Draytek Vigor 2927ac is a Dual-Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. It offers high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit Internet connections. The Vigor 2927 offers up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.
Draytek Vigor 2927ac Key Features
- Gigabit Dual-WAN Ethernet WAN Router with Load Balancing & Failover
- Up to 950Mbps Throughput per WAN interface, 1800Mbps in total
- Up to 300Mbps IPsec VPN Throughput
- 50 LAN-to-LAN & Remote Teleworker VPN Tunnels
- 25 DrayTek SSL VPN Tunnels
- 5+1 Gigabit RJ-45 LAN Ports
- AC1300 - 11ac 'Wave 2' Dual Band Wireless
- 8 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
With 802.11ac wireless, the Vigor 2927ac provides fast wireless coverage to your network's computers and devices. In addition, the router can connect to Wireless networks for Internet access, allowing it to make use of Mobile Hotspot wireless connections and nearby wireless networks, where for instance a neighbour's wireless network could provide an emergency backup connection.
Dual Gigabit WAN Load Balancer
Make full use of Fibre Broadband with the Vigor 2927ac's Gigabit throughput per-WAN. Up to 1.8Gbps total combined throughput with Firewall, Content Filtering and Quality of Service.
Benefits: Unleash the full potential of Fibre broadband. High speed,Gigabit CPE with flexible application.
Hotspot Web Portal
Use Draytek's captive portal solutions to provide guest internet accss via wireless access points. Extensive options for customisation and authentication, with per-user data and time quotas.
Benefits: Provide internet access to guests and market your business via a captive portal.
Ideal VPN Router for Small to Medium Businesses
Provide fast and secure VPN access, with up to 50 VPN tunnels, enabling remote workers to access network resources and connect with remote sites with DrayTek SSL VPN and Open VPN support.
Benefits: Provide secure, encrypted network access for remote workers.
5+1 Gigabit LAN Ports
Attach computers, servers and network attached storage directly, with up to 6 Gigabit LAN ports. Use VLANs to supply Broadband and VPN connectivity to as many as 8 separate networks.
Benefits: Improve quality of service for private and guest data traffic. Mix fixed and virtual configurations.
Designed for Centralised Management
Configure and manage the Vigor 2927 series remotely through the VigorACS central management platform.
Benefits: Save time and money. Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.
Physical Interfaces
- WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- WAN/LAN Switchable Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x Removable Wireless antennas
- 2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
- Wireless On / Off / WPS button
- Recessed Factory Reset button
- NAT Performance:
- 950 Mb/s NAT Throughput for Single WAN with Hardware Acceleration
- 1.8Gb/s Total NAT Throughput for Dual WAN with Hardware Acceleration
- 800 Mb/s NAT Throughput per WAN
- 60,000 NAT Sessions
- 8000 Hardware Accelerated NAT Sessions
- VPN Performance:
- 300 Mb/s IPsec (AES256) VPN Performance
- 800 Mb/s Hardware Accelerated IPsec VPN Performance - New! (requires f/w 4.2.1)
- 120 Mb/s SSL VPN Performance
- Max. 50 Concurrent VPN Tunnels
- Max. 25 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interface
- WAN1: Gigabit Ethernet
- WAN2: Gigabit Ethernet
- WAN3: 2.4GHz Wireless WAN
- WAN4: 5GHz Wireless WAN
- WAN5: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
- WAN6: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
Internet Connection
- Load Balancing: IP-based, Session-based
- Hardware Acceleration
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- 2.4GHz & 5GHz Simultaneous Wireless WAN
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget
- Dynamic DNS
- DrayDDNS – with automated LetsEncrypt Certificates
- Full Feature-set Hardware Acceleration (requires f/w 4.2.1):
- Hardware Accelerated Quality of Service
- Multi-WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
- IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
- IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
- 4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICC
Wireless Features
AC1300 - 11ac 'Wave 2' Dual Band Wireless:
- 802.11ac 2x2 wireless access point
- Compatible with 802.11a/b/g/n wireless
- Dual-band (2.4/5Ghz) simultaneous wireless
- Up to 866Mbps PHY rate at 80MHz with 5GHz
- Up to 400Mbps PHY rate at 40MHz with 2.4GHz (256-QAM)
- Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80MHz for 5GHz
- MU-MIMO
- Tx Beamforming
- Mesh Root support with DrayTek VigorAP Mesh Nodes – New! (requires f/w 4.3.0, available in Q4 2020)
- Up to 4 SSIDs per radio band
- Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
- Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
- Bandwidth Management (Per Station / Per SSID)
- WMM (Wireless MultiMedia)
- WPS - WiFi Protected Setup
- Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
- EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
- Wireless Security:
- WPA2
- WPA3 – New! (requires f/w 4.2.2)
- Pre-Shared Key authentication
- Enterprise 802.1x authentication
- WEP/WPA for Legacy Clients
- Access Control – Blacklist / Whitelist client MAC addresses per SSID
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter (requires GlobalView subscription)
NAT Features
- NAT Port Redirection
- Open Ports
- Port Triggering
- DMZ Host
- UPnP
- ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
- VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 16 VLANs
- DMZ Port
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 1022 addresses for LANs 1-3
- DHCP Pool Count up to 253 addresses for LANs 4-8
- DHCP Relay per LAN
- LAN IP Alias
- Wired 802.1x Port Authentication
- Port Mirroring
- Local DNS Server
- Conditional DNS Forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Serve
Networking features
- Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
- High Availability: Active-Standby, Hot-Standby
- DNS Security (DNSSEC)
- Local RADIUS server
- SMB File Sharing (Requires external storage)
- Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
- Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN Facilities
- Up to 50 active VPN tunnels - including up to 25 SSL VPN or OpenVPN Tunnels
- Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – (requires f/w 4.2.1)
- LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: MPPE, DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- VPN Trunk (Redundancy): Load Balancing, Failover
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
- Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
- DHCP over IPsec
- DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT
- VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- DrayTek SSL VPN
- OpenVPN (Remote Dial-In User only)
- GRE over IPsec
- PPTP
- L2TP, L2TP over IPsec
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
Quality of Service (QoS)
- Classify via TOS, DSCP, 802.1p, IP Address, Service Type
- 4 Priority Queues
- App QoS
- VoIP Prioritisation
- Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export & Import
- Import Config from Vigor 2926
- Auto Backup Config to USB Storage
- Firmware Upgrade via TFTP, HTTP, TR-069
- 2-Level Administration Privilege
- Access Control Features: Access List, Brute Force Protection
- Syslog
- SMS, E-mail Notification Alert
- SNMP: v1, v2c, v3
- Managed by VigorACS
Router Central Management Features
- AP Management: Up to 20 VigorAP access points
- Switch Management: Up to 10 VigorSwitch network switches
- VPN Management: Up to 8 Vigor routers
- DrayTek Mesh: Up to 7 VigorAP access points (requires f/w 4.3.0, available in Q4 2020)
Operating Requirements
- Rack Mountable (Optional Vigor RM1 mounting bracket required)
- Wall Mountable
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Power Consumption: Operating Power: DC 12V (via external PSU, supplied)
- Warranty: Two (2) Years RTB
- Power Requirements: 220-240VAC
- Dimensions:
- 241mm Width
- 165mm Depth
- 44mm Height
Box Contents
- Vigor 2927ac router
- Quick Start Guide
- Screws & wall plugs for wall mounting
- 2m Cat-5e RJ-45 Network Cable
- 2x detachable wireless LAN antennas
- DC 12V Power Supply with UK Plug
