The DrayTek Vigor 2928 is a powerful Gigabit business router and firewall designed for small businesses, branch offices, home offices and professional networks that require reliable connectivity, advanced security and flexible WAN management.

Featuring Triple Gigabit Ethernet WAN ports, multiple Gigabit LAN ports, advanced VPN functionality, VLAN support, firewall protection and comprehensive traffic management, the Vigor 2928 provides a flexible networking platform for businesses that need greater control over their internet connections and internal network.

With support for WAN load balancing and failover, the DrayTek Vigor 2928 can combine or switch between multiple internet connections to improve network availability and resilience. It is an ideal choice for businesses using two-three broadband or fibre connections.

Key Specifications

• Multi-WAN Ethernet FTTP Router with Failover and Load Balancing
  
• 10 Gigabit and SFP+ Ports for future-proof connectivity
  
• Up to 9.3Gbps Total Maximum Throughput
  
• Up to 430Mbps IPsec VPN Throughput
  
• 50 LAN-to-LAN & Remote Teleworker VPN Tunnels
  
• Switchable 10GbE/SFP+ and dedicated 1x 2.5GbE and 3x GbE RJ-45 LAN Ports
  
• QoS and VLAN support for traffic prioritisation and network segmentation
  
• SPI Firewall and Content Filtering
  
• Optional VigorCare Available
  
• Can be centrally Managed by VigorACS

Technical Specification (UK Hardware Spec.)

Physical Interfaces

• WAN Port (P1): 1x Gigabit Ethernet (1G/100M/10M), RJ-45
• P2/P3/P4: 2 can be used out of 3 at once
• WAN Port (P2): 1x 10G/1G SFP+ Fiber Slot
• WAN/LAN Switchable (P3): 1x 10 Gigabit Ethernet (10G/2.5G/1G/100M/10M), RJ-45
• LAN Port (P4): 1x 10G/1G SFP+ Fiber Slot
• LAN Port (P5): 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45
• LAN Ports (P6-P8): 3x Gigabit Ethernet (1G/100M/10M), RJ-45
• 2x USB 2.0 Ports for LTE Modem, Thermometer or Printer
• Recessed Factory Reset button

Performance

• NAT Performance:
  • Up to 9.3 Gb/s NAT Throughput
  • 60,000 NAT Sessions
• VPN Performance:
  • Up to 430 Mb/s IPsec VPN Performance
  • Max. 50 Concurrent VPN Tunnels

WAN Interfaces

• WAN1: Gigabit Ethernet
• WAN2: 10 Gigabit SFP+ Slot for Fibre or another module
• WAN3/LAN Switchable Port: 10 Gigabit Ethernet
• WAN7: LTE USB Modem (not included)
• WAN8: LTE USB Modem (not included)

Internet Connection

• Load Balancing and Failover / Backup WAN
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• Connection Detection: ARP Detect, Ping Detect
• WAN Data Budget
• Dynamic DNS
• DrayDDNS – with automated Let’s Encrypt Certificates
• Full Feature-set Hardware Acceleration:
  • Hardware Accelerated Quality of Service
  • Multi-WAN Data Budget
  • Bandwidth Limit
• IPv4 Connection Types:  PPPoE, DHCP, Static IP
• IPv6 Connection Types: 
  • Ethernet: PPP, Static IPv6, DHCPv6, TSPC, 6in4, 6rd

Firewall & Content Filtering

• IP-based or User-based (IAM) Firewall Policy
• User-based Time Quota (IAM)
• DoS Attack Defence
• Spoofing Defence
• Content Filtering:
  • Application Content Filter
  • URL Content Filter
  • Web Category Filter*

NAT Features

• NAT Port Forwarding/Redirection
• Open Ports
• DMZ Host
• Port Trigger
• UPnP
• ALG (Application Layer Gateway):  SIP, RTSP, FTP, H.323
• NAT Traversal (NAT-T)

LAN Management

• 802.1q Tag-based, Port-based VLAN
• Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
• Up to 8 VLANs
• DHCP Server:
  • Multiple IP Subnet
  • Custom DHCP Options
  • Bind-IP-to-MAC
  • DHCP Relay per LAN
• Wired 802.1x Port Authentication
• Port Mirroring
• Conditional DNS Forwarding
• Hotspot Web Portal
  • Hotspot Authentication: Click-Through, External Portal Server, Social Login 

Networking Features

• Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname
• DNS Security (DNSSEC)
• Local RADIUS server
• SMB File Sharing (Requires external USB storage)
• Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP, OSPF

VPN Features

• Up to 50 active VPN tunnels
• Up to 430Mb/s IPsec
• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
• Teleworker-to-LAN – Dial-In VPN Server
• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
• Encryption: DES, 3DES, AES (128/192/256)
• Authentication: SHA-256, SHA-1
• Dead Peer Detection (DPD)
• IPsec NAT-Traversal (NAT-T)
• DHCP over IPsec
• VPN Protocols:
  • IPsec IKEv1, IKEv2, IKEv2 EAP
  • IPsec-XAuth
  • OpenVPN
  • WireGuard
  • EasyVPN – New!
• User Authentication:
  • Local
  • RADIUS
  • TACACS+
  • TOTP - Time-based One Time Password, compatible with Google Authenticator

Bandwidth Management

• IP-based Bandwidth Limit
• IP-based Session Limit
• QoS (Quality of Service):
  • Classify via TOS, DSCP, 802.1p, IP Address, Service Type
  • 4 Priority Queues
  • App QoS
  • VoIP Prioritization

Management

• Local Service: HTTP, HTTPS, Telnet, SSH v2, FTP, TR-069
• Config File Export & Import
• Firmware Upgrade via TFTP, HTTP, TR-069
• 2-Level Administration Privilege
• Access Control Features: Access List, Brute Force Protection
• Syslog
• SMS, E-mail Notification Alert
• SNMP: v1, v2c, v3
• Compatible with DrayTek VigorACS Management Platform**

Router-based Central Management Features

• Virtual AP Controller: Up to 20 VigorAP wireless access points
• Virtual Switch Controller: Up to 5 VigorSwitch network switches

Operating Requirements

• PSU Power Requirements: 100-240VAC
• Power Consumption (Watts, maximum):
  • Vigor 2928: 18W (12V @ 1.5A)
• Temperature Operating: 0 °C ~ 45 °C
• Storage: -25 °C ~ 70 °C
• Humidity 10% ~ 90% (non-condensing)
• Wall or Shelf Mountable
• Rack Mountable (Optional Vigor RM1 mounting bracket required)

Physical Specifications

• Dimensions:
  • 241mm Width
  • 165mm Depth
  • 43mm Height
• Weight
  • Vigor 2928: 590.6g

Box Contents

• Vigor 2928 router
• Quick Start Guide
• RJ-45 Network Cable
• DC 12V Power Supply with UK Plug

ROHS, UKCA & CE Compliant

Warranty

• Standard: Two (2) Year, RTB
• Software security updates:
  5 years after the EOL notification. Please note that this only applies to products sold in the UK
• Optional VigorCare Extended Warranty
  • VigorCare B3 3 Year Subscription: VCARE-B3
  • VigorCare B5 5 Year Subscription: VCARE-B5