Draytek Vigor 2927Lac Dual-WAN Firewall VPN Router and 4G/LTE modemThe Draytek Vigor 2927Lac is a Dual-Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. It offers high throughput with Load Balancing and Failover connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit Internet connections. The Vigor 2927Lac offers up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.Draytek Vigor 2927Lac Key
Features
Up to 950Mbps Throughput per WAN interface, 1800Mbps in totalUp to 300Mbps IPsec VPN Throughput50 LAN-to-LAN & Remote Teleworker VPN Tunnels25 DrayTek SSL VPN Tunnels5+1 Gigabit RJ-45 LAN
Ports
4G/LTE with dual-SIMs for second backup telcoAC1300 - 11ac 'Wave 2' Dual Band
Wireless
8 LAN Subnets with VLANs (Port-based / 802.1q)SPI Firewall and Content FilteringWith 802.11ac Dual-Band wireless, the Vigor 2927Lac provides fast wireless coverage to your network's computers and devices. In addition, the router can connect to
Wireless
networks for Internet access, allowing it to make use of Mobile Hotspot wireless connections and nearby wireless networks, where for instance a neighbour's wireless network could provide an emergency backup connection.The integrated 4G/LTE modem provides fast 4G+ Mobile Broadband with Carrier Aggregation to get the best performance out of 4G Broadband, for use as a backup connection or primary Internet connection.Dual Gigabit WAN Load BalancerMake full use of Fibre Broadband with the Vigor 2927Lac's Gigabit throughput per-WAN. Up to 1.8Gbps total combined throughput with Firewall, Content Filtering and Quality of Service.Benefits: Unleash the full potential of Fibre broadband. High speed,Gigabit CPE with flexible application.Dual-SIM 4G+ LTE ModemProvide ultra-reliable connectivity with an integrated 4G+/LTE modem. Get the best our of 4G Broadband with LTE Category 6. Handle Mobile network outages wiht Dual SIM Failover.Benefits: Ensure constant connectivity with high speed Mobile Broadband failover.Ideal VPN Router for Small to Medium BusinessesProvide fast and secure VPN access, with up to 50 VPN tunnels, enabling remote workers to access network resources and connect with remote sites with DrayTek SSL VPN and Open VPN support.Benefits: Provide secure, encrypted network access for remote workers.5+1 Gigabit LAN
Ports
Attach computers, servers and network attached storage directly, with up to 6 Gigabit LAN ports. Use VLANs to supply Broadband and VPN connectivity to as many as 8 separate networks.Benefits: Improve quality of service for private and guest data traffic.Designed for Centralised ManagementConfigure and manage the Vigor 2927 series remotely through the VigorACS central management platform.Benefits: Save time and money. Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.Draytek Vigor 2927Lac - Technical SpecificationsPhysical InterfacesWAN
Ports
: 1x Gigabit Ethernet (1G/100M/10M), RJ-45WAN/LAN Switchable
Ports
: 1x Gigabit Ethernet (1G/100M/10M), RJ-45LAN
Ports
: 5x Gigabit Ethernet (1G/100M/10M), RJ-452x Removable
Wireless
antennas2x Removable 4G/LTE
Wireless
antennasUSB 2.0 Port for 3G/4G Modem, thermometer or Printer
Wireless
On / Off / WPS buttonRecessed Factory Reset buttonPerformance:NAT Performance:950 Mb/s NAT Throughput for Single WAN with Hardware Acceleration1.8Gb/s Total NAT Throughput for Dual WAN with Hardware Acceleration800 Mb/s NAT Throughput per WAN60,000 NAT Sessions8000 Hardware Accelerated NAT SessionsVPN Performance:300 Mb/s IPsec (AES256) VPN Performance800 Mb/s Hardware Accelerated IPsec VPN Performance - (requires f/w 4.2.1)120 Mb/s SSL VPN PerformanceMax. 50 Concurrent VPN TunnelsMax. 25 Concurrent SSL VPN / OpenVPN TunnelsWAN InterfaceWAN1: Gigabit EthernetWAN2: Gigabit EthernetWAN3: 2.4GHz
Wireless
WANWAN4: 5GHz
Wireless
WANWAN5: Integrated 4G/LTE Category 6 ModemWAN6: 4G/LTE USB Modem (not included, see)Internet ConnectionLoad Balancing: IP-based, Session-basedHardware Acceleration802.1p/q Multi-VLAN TaggingMulti-VLAN/PVC2.4GHz & 5GHz Simultaneous
Wireless
WANWAN Active on Demand: Link Failure, Traffic ThresholdConnection Detection: PPP, ARP Detect, Ping DetectWAN Data BudgetDynamic DNSDrayDDNS – with automated LetsEncrypt CertificatesFull Feature-set Hardware Acceleration (requires f/w 4.2.1):Hardware Accelerated Quality of ServiceMulti-WAN Data BudgetTraffic Graph & Data Flow MonitorBandwidth LimitIPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TPIPv6 Connection Types:Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel4G/LTE Modem & USB 4G/LTE Modem: TSPC, AICCUIntegrated 4G LTE Modem
Features
Dual-SIM Failover4G LTE Category 6 Modem with fallback to 3G / GPRSUnlocked to any network (BT, EE, 3, O2, Vodafone, Eircom)4G LTE Max Data Rates:300Mbps Downlink (Category 6)50Mbps Uplink (Category 6)4G LTE (FDD) Bands: 1, 3, 5, 7, 8, 20, 28, 324G LTE (TDD) Bands: 38, 40, 413G (WCDMA/HSPA+/UMTS) Bands: 1, 3, 5, 82x LTE Antennas included with 1m extension cablesPer-SIM-Card WAN Data Budget2x Standard-Size SIM-Card SlotsRemovable SIM slot coverSMS Inbox - Send & Receive SMS text messagesSMS Router Commands - Status Report, Reboot via text messageLTE Bridge Mode
Wireless
Features
AC1300 - 11ac 'Wave 2' Dual Band
Wireless
:802.11ac 2x2 wireless access pointCompatible with 802.11a/b/g/n wirelessDual-band (2.4/5Ghz) simultaneous wirelessUp to 866Mbps PHY rate at 80MHz with 5GHzUp to 400Mbps PHY rate at 40MHz with 2.4GHz (256-QAM)Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80MHz for 5GHzMU-MIMOTx BeamformingMesh Root support with DrayTek VigorAP Mesh Nodes (requires f/w 4.3.0, available in Q4 2020)Up to 4 SSIDs per radio band- Channels 36-48, 52-64, 100-140
Wireless
Optimisation: Airtime Fairness, AP-Assisted Mobility, Band SteeringBandwidth Management (Per Station / Per SSID)WMM (
Wireless
MultiMedia)WPS - WiFi Protected SetupStation Control - Time limited wireless connectivity per Station (e.g. 1 hour)EAPOL Key Retry -to protect unpatched WLAN clients from KRACK
Wireless
Security:WPA2WPA3 –(requires f/w 4.2.2)Pre-Shared Key authenticationEnterprise 802.1x authenticationWEP/WPA for Legacy ClientsAccess Control – Blacklist / Whitelist client MAC addresses per SSIDFirewall and Content FilteringIP-based or User-based Firewall PolicyUser-based Time QuotaDoS Attack DefenceSpoofing DefenceContent Filtering:Application Content FilterURL Content FilterDNS Keyword FilterWeb
Features
Web Category Filter (requires GlobalView subscription)NAT
Features
NAT Port RedirectionOpen
Ports
Port TriggeringDMZ HostUPnPALG (Application Layer Gateway): SIP, RTSP, FTP, H.323VPN Pass-Through: PPTP, L2TP, IPsecLAN Management802.1q Tag-based, Port-based VLANUp to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)Up to 16 VLANsDMZ PortDHCP Server:Multiple IP SubnetCustom DHCP OptionsBind-IP-to-MACDHCP Pool Count up to 1022 addresses for LANs 1-3DHCP Pool Count up to 253 addresses for LANs 4-8DHCP Relay per LANLAN IP AliasWired 802.1x Port AuthenticationPort MirroringLocal DNS ServerConditional DNS ForwardingHotspot Web PortalHotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Serve
Network
ing featuresPolicy-based Routing: Protocol, IP Address, Port, Domain/Hostname, CountryHigh Availability: Active-Standby, Hot-StandbyDNS Security (DNSSEC)Local RADIUS serverSMB File Sharing (Requires external storage)Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, BonjourRouting
Features
: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGPVPN FacilitiesUp to 50 active VPN tunnels - including up to 25 SSL VPN or OpenVPN TunnelsUp to 16 Hardware Accelerated 800Mb/s IPsec tunnels – (requires f/w 4.2.1)LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN ClientTeleworker-to-LAN – Dial-In VPN ServerUser Authentication: Local, RADIUS, LDAP, TACACS+, mOTPIKE Authentication: Pre-Shared Key and Digital Signature (X.509)Encryption: MPPE, DES, 3DES, AES (128/192/256)Authentication: SHA-256, SHA-1VPN Trunk (Redundancy): Load Balancing, FailoverDead Peer Detection (DPD)IPsec NAT-Traversal (NAT-T)Virtual IP Mapping – Resolve VPN IP subnet/range conflictsDHCP over IPsecDrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NATVPN Protocols:IPsec IKEv1, IKEv2, IKEv2 EAPIPsec-XAuthDrayTek SSL VPNOpenVPN (Remote Dial-In User only)GRE over IPsecPPTPL2TP, L2TP over IPsecBandwidth ManagementIP-based Bandwidth LimitIP-based Session LimitUser-based Data QuotaQuality of Service (QoS)Classify via TOS, DSCP, 802.1p, IP Address, Service Type4 Priority QueuesApp QoSVoIP PrioritisationClass-based Outbound Traffic Tagging: DSCP & IP PrecedenceManagementLocal Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069Config File Export & ImportImport Config from Vigor 2926Auto Backup Config to USB
Storage
Firmware Upgrade via TFTP, HTTP, TR-0692-Level Administration PrivilegeAccess Control
Features
: Access List, Brute Force ProtectionSyslogSMS, E-mail Notification AlertSNMP: v1, v2c, v3Managed by VigorACSRouter Central Management
Features
AP Management: Up to 20 VigorAP access pointsSwitch Management: Up to 10 VigorSwitch network switchesVPN Management: Up to 8 Vigor routersDrayTek Mesh: Up to 7 VigorAP access points (requires f/w 4.3.0, available in Q4 2020)Operating RequirementsRack Mountable (Optional Vigor RM1 mounting bracket required)Wall MountableTemperature Operating: 0 °C ~ 45 °C
Storage
: -25 °C ~ 70 °CHumidity 10% ~ 90% (non-condensing)Power Consumption: Operating Power: DC 12V (via external PSU, supplied)
Warranty
: Two (2) Years RTBPower Requirements: 220-240VAC
Dimensions
:241mm
Width
165mm Depth44mm
Height
Box ContentsVigor 2927Lac routerQuick Start GuideScrews & wall plugs for wall mounting2m Cat-5e RJ-45
Network
Cable2x detachable wireless LAN antennas2x detachable LTE antennas2x 1m LTE extension baseDC 12V Power Supply with UK Plug
Exceeded my expectations.