The DrayTek Vigor 2927 - Dual-WAN Load Balancing Firewall VPN router allows you to make the most of FTTP Fibre Broadband with Gigabit WAN throughput, extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls.
The Vigor 2927 provides a reliable, flexible, and secure network solution, that’s ideal for Small Business and Home Offices.
Key Specifications
- Gigabit Dual-WAN Ethernet WAN Router with Load Balancing & Failover
- Up to 950Mbps Throughput per WAN interface, 1800Mbps in total
- Up to 300Mbps IPsec VPN Throughput
- 50 LAN-to-LAN & Remote Teleworker VPN Tunnels
- 25 DrayTek SSL VPN Tunnels
- 5+1 Gigabit RJ-45 LAN Ports
- 8 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
Technical Specification
Physical Interfaces
- WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- WAN/LAN Switchable Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x USB 2.0 Ports for 3G/4G Modem, thermometer or Printer
- Recessed Factory Reset button
Performance
NAT Performance:
- 950 Mb/s NAT Throughput for Single WAN with Hardware Acceleration
- 1.8Gb/s Total NAT Throughput for Dual WAN with Hardware Acceleration
- 800 Mb/s NAT Throughput per WAN
- 60,000 NAT Sessions
- 8000 Hardware Accelerated NAT Sessions
VPN Performance:
- 300 Mb/s IPsec (AES256) VPN Performance
- 800 Mb/s Hardware Accelerated IPsec VPN Performance - New! (requires f/w 4.2.1)
- 120 Mb/s SSL VPN Performance
- Max. 50 Concurrent VPN Tunnels
- Max. 25 Concurrent SSL VPN / OpenVPN Tunnels
WAN Interfaces
- WAN1: Gigabit Ethernet
- WAN2: Gigabit Ethernet
- WAN3: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
- WAN4: 4G/LTE USB Modem (not included, see supported 4G/LTE modem list)
Internet Connection
- Load Balancing: IP-based, Session-based
- Hardware Acceleration
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget
- Dynamic DNS
- DrayDDNS – with automated LetsEncrypt Certificates
- Full Feature-set Hardware Acceleration (requires f/w 4.2.1):
- Hardware Accelerated Quality of Service
- Multi-WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
- IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
- IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
- USB 4G/LTE Modem: TSPC, AICCU
Firewall & Content Filtering
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter (requires GlobalView subscription)
NAT Features
- NAT Port Redirection
- Open Ports
- Port Triggering
- DMZ Host
- UPnP
- ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
- VPN Pass-Through: PPTP, L2TP, IPsec
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 16 VLANs
- DMZ Port
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 1022 addresses for LANs 1-3
- DHCP Pool Count up to 253 addresses for LANs 4-8
- DHCP Relay per LAN
- LAN IP Alias
- Wired 802.1x Port Authentication
- Port Mirroring
- Local DNS Server
- Conditional DNS Forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server
Networking Features
- Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
- High Availability: Active-Standby, Hot-Standby
- DNS Security (DNSSEC)
- Local RADIUS server
- SMB File Sharing (Requires external storage)
- Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
- Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP
VPN
- Up to 50 active VPN tunnels - including up to 25 SSL VPN or OpenVPN Tunnels
- Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels – New! (requires f/w 4.2.1)
- LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: MPPE, DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- VPN Trunk (Redundancy): Load Balancing, Failover
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
- Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
- DHCP over IPsec
- DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- DrayTek SSL VPN
- OpenVPN (Remote Dial-In User only)
- GRE over IPsec
- PPTP
- L2TP, L2TP over IPsec
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
Quality of Service (QoS)
- Classify via TOS, DSCP, 802.1p, IP Address, Service Type
- 4 Priority Queues
- App QoS
- VoIP Prioritization
- Class-based Outbound Traffic Tagging: DSCP & IP Precedence
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export & Import
- Import Config from Vigor 2926
- Auto Backup Config to USB Storage – New!
- Firmware Upgrade via TFTP, HTTP, TR-069
- 2-Level Administration Privilege
- Access Control Features: Access List, Brute Force Protection
- Syslog
- SMS, E-mail Notification Alert
- SNMP: v1, v2c, v3
- Managed by VigorACS
Router Central Management Features
- AP Management: Up to 20 VigorAP access points
- Switch Management: Up to 10 VigorSwitch network switches
- VPN Management: Up to 8 Vigor routers
Operating Requirements
- Rack Mountable (Optional Vigor RM1 mounting bracket required)
- Wall Mountable
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Power Consumption:
- Operating Power: DC 12V (via external PSU, supplied)
- Warranty : Two (2) Years RTB
- Power Requirements : 220-240VAC
Dimensions:
- 241mm Width
- 165mm Depth
- 44mm Height
Box Contents
- Vigor 2927 router
- Quick Start Guide
- Screws & wall plugs for wall mounting
- 2m Cat-5e RJ-45 Network Cable
- DC 12V Power Supply with UK Plug