Vigor2927 Series

Dual-WAN Security Router

Vigor2927 Series is a dual-Ethernet WAN firewall router, providing load-balancing and failover for your business
continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal,
and a lot more, this is the ultimate router that does it all for SMB. The series includes built-in 802.11ax Wi-Fi and VoIP
gateway models.

Dual-WAN 50 VPN 25 SSL VPN 60k Sessions

4 1 2 3 5

Interface Networking
1 Fixed WAN Port 1 x 10/100/1000Base-TX, RJ-45 or Routing IPv4 Static Route, IPv6 Static Route, BGP,
1 x 100/1000M SFP Slot (F model) Policy Route, Inter-VLAN Route, RIP v1/v2
2 WAN/LAN 1 x 10/100/1000Base-TX, RJ-45 Policy-based Routing Protocol, IP Address, Port, Domain, Country
Switchable Port (WAN 2 or LAN Port 6) High Availability
3 Fixed LAN Port 5 x 10/100/1000Base-TX, RJ-45 DNS Security (DNSSEC)
4 USB Port 2 x USB 2.0 or 1 x USB 2.0 (L/5G model) IGMP IGMP v2/v3, IGMP Proxy,
5 VoIP 2 x FXS, RJ-11 (V model) IGMP Snooping & Fast Leave
Wi-Fi Antenna 2 x External Dipole (wireless model) Local RADIUS server
LTE Antenna 2 x External Dipole (L model) SMB File Sharing (Requires external storage)
5G/LTE Antenna 4 x External Dipole (5G model)
SIM Slot 2 x Nano-Sized (1 SIM online at a time)
(L/5G model)
Button 1 x Factory Reset Firewall & Content Filtering
1 x Wireless On/OFF/WPS (wireless model) NAT Port Redirection, Open Ports, Port Triggering,
DMZ Host, UPnP
ALG SIP, RTSP, FTP, H.323
Bandwidth Management VPN Pass-Through PPTP, L2TP, IPsec
IP-based Bandwidth Limit IP-based Firewall Policy
IP-based Session Limit Content Filtering APP, URL, DNS Keyword, Web Features,
QoS (Quality of Service) TOS, DSCP, 802.1p, IP Address, Web Category* (*: subscription required)
Port, Application DoS Attack Defense
VoIP Prioritization Spoofing Defense
APP QoS
Internet Connection Management
IPv4 PPPoE, PPPoA, DHCP, Static IP, Local Service HTTP, HTTPS, Telnet, SSH v2, FTP,
MPoA, PPTP/L2TP TR-069
IPv6 PPP, DHCPv6, Static Ipv6, TSPC, Config Backup/Restore
AICCU, 6rd, 6in4 Static Tunnel Config File Compatibility Vigor2926
802.1p/q Multi-VLAN Tagging Firmware Upgrade TFTP, HTTP, TR-069
Multi-VLAN/PVC 2-Level Administration Privilege
Failover Access Control Access List, Brute Force Protection
Load Balancing IP-based, Session-based Notification Alert SMS, E-mail
WAN Active on Demand Link Failure, Traffic Threshold Netflow IPFIX, v5, v9
Connection Detection ARP, Ping, Strict ARP SNMP v1, v2c, v3
WAN Data Budget Syslog
Dynamic DNS Managed by VigorACS
DrayDDNS VPN Management 8
AP Management (APM) 20
Switch Management (SWM) 10
LAN Management
VLAN 802.1q Tag-based, Port-based
Max. Number of VLAN 16
LAN Subnet 8 VoIP (V model)
DMZ Port 1 Protocol SIP, RTP/RTCP, ZRTP
DHCP Server Multiple IP Subnet, Custom DHCP SIP Registrars 12
Options, Bind-IP-to-MAC Dial Plan Phone Book, Digit Map, Call Barring, Regional
LAN IP Alias Call Features Call Waiting, Call Transfer, Scheduled DND,
Wired 802.1x Authentication Hotline
Port Mirroring Voice Codec G.711 A/u law, G.723.1, G.726, G.729 A/B
Local DNS Server Caller ID FSK_ETSI, FSK_BELLCORE, DTMF
Conditional DNS Forwarding
Hotspot Web Portal 4
Hotspot Authentication Click-Through, Social Login, SMS PIN,
5G/LTE/WCDMA (5G model)
Voucher PIN, RADIUS, External Portal
5G Band n1,3,7,8,20,28,38,40,77,78
Server
5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)
NR NSA: 2.8Gbps (DL) / 555Mbps (UL)
Wireless LAN (Wireless model) LTE FDD Band B1,3,7,8,20,28
WiFi 6 (ax model) LTE TDD Band B38,40
Number of SSID 4 per radio band LTE Category Cat19 (DL) / Cat18 (UL)
Security Mode OWE, WEP, WPA, WPA2, LTE Max. Data Rate 1.6Gbps (DL) / 200Mbps (UL)
Mixed(WPA+WPA2), WPA3 B1,8
WCDMA (3G) Band
Authentication Pre-Shared Key, 802.1x
OFDMA (ax model)
WPS PIN, PBC
WDS Repeater (5GHz only) LTE (L model)
Access Control Access List, Client Isolation, Hide SSID, LTE FDD Band B1,3,7,8,20,28
Wi-Fi Scheduling LTE TDD Band B38,40
AirTime Fairness LTE Category Cat6
Band Steering LTE Max. Data Rate 300 Mbps (DL) / 50 Mbps (UL)
WMM WCDMA (3G) Band B1, 8
Mesh (5G Only) Root

For other band availability, please contact your local DrayTek distributor or us.

VPN
LAN-to-LAN
Teleworker-to-LAN
Protocols PPTP, L2TP, IPsec, L2TP over IPsec, SSL, WLAN 5G/LTE LTE VoIP Fiber
GRE, IKEv2, IKEv2-EAP, IPsec-XAuth, Vigor2927
OpenVPN, Wireguard Vigor2927F
User Authentication Local, RADIUS, LDAP, TACACS+, mOTP Vigor2927L
IKE Authentication Pre-Shared Key, X.509 Vigor2927ac/ax
IPsec Authentication SHA-1, SHA-256 Vigor2927Lac
Encryption MPPE, AES, DES, 3DES Vigor2927Vac
VPN Trunk (Redundancy) Load Balancing, Failover Vigor2927L-5G
Single-Armed VPN Vigor2927Lax-5G
NAT-Traversal (NAT-T)
VPN Matcher

991-2927002-00G
E-mail: [email protected] Tel: +886 3 5972727 Fax: +886 3 598 2121
Trademarks and brand names are the properties of their respective owners.
Specifications subject to change at any time without notice, for more information please visit www.draytek.com or contact your local representative.
www.draytek.com