DK-VIGOR-2926AC | DrayTek Vigor2926ac: Dual-WAN Load Balancing VPN Router, Built-in 802.11ac Wave 2 dual-band Wi-FI, delivers speed up to 1733Mbps plus 300Mbps, 50 Simultaneous VPN Tunnels, including up to 25 SSL VPN

Hardware Interface

• 2 x 10/100/1000Base-TX, RJ-45 (WAN1/WAN2)
• 4 x 10/100/1000Base-TX LAN, RJ-45 (Configurable Physical DMZ on Port4)
• 2 x Detachable Antennas (n model)
• 4 x Detachable Antennas (ac,Vac Model)
• 2 x USB Host 2.0
• 1 x Factory Reset Button
• 1 x Wireless On/Off/ WPS Button (n/ac/Vac model)
• 2 x FXS and 1 x Life Line Port, RJ11 (Vac Model)

• Operating: 0°C~45°C
• Storage: -25°C~70°C
• Humidity: 10%~90% (non-condensing)
• Power Adapter: DC 12V @ 1.5A~2A
• Power Consumption: 19~24 Watt
• Dimension: L241*W165*H44 (mm)

• Ethernet WAN:
• DHCP Client
• Static IP
• PPPoE
• PPTP / L2TP (WAN-2 only)
• 802.1q Multi-VLAN Tagging
• IPv6 Connection Type:
• Dual Stack: PPP, DHCPv6 Client, Static IPv6
• Tunnel Mode: TSPC, AICCU, 6rd, 6in4 Static Tunnel
• USB WAN:
• PPP (3G) / CDC driver (3G)
• Support IPv6 protocol: TSPC/AICCU

• Load-Balance / Route Policy
• Outbound policy-based load-balance
• WAN Connection Failover
• Multiple-VLAN

• Support IPv6 LAN
• Port-based / Tag-based VLAN
• Bind IP to MAC Address:
• Disable / Enable / Strict Bind
• IP Bind list: 1024 entries
• LAN Port Mirror
• Wired 802.1x
• Web Portal
• Support IP Pool Count more than 253 (up to 1022) for LAN1~3 subnet
• 8 x Multiple Subnet LAN

• DMZ Host: Port-redirection, Open Port, Port Triggering
• User-based / Rule-based Firewall
• Object-based Firewall：SPI (Stateful Packet Inspection) (Flow Track)
• DoS Prevention
• Time Schedule Control
• DNS Filter Enhancement
• User Management
• Firewall Wizard Mode and Advanced Mode

• Up to 50 VPN Tunnels (including 25 SSL VPN tunnels)
• VPN Wizard
• VPN Trunk with Backup / Load Balance
• Protocol: PPTP, IPsec, L2TP, L2TP over IPsec, GRE over IPSec
• Encryption: MPPE and hardware-based AES/DES/3DES
• Authentication: MD5, SHA-1
• IKE Authentication: Pre-shared Key and Digital Signature (X.509)
• LAN-to-LAN, Teleworker-to-LAN (remote user dial-in)
• DHCP over IPsec
• IPsec NAT-traversal (NAT-T)
• Dead Peer Detection (DPD)
• VPN Pass-through
• mOTP

• QoS
• Guarantee bandwidth for VoIP
• Class-based bandwidth guarantee by user-defined traffic categories
• DiffServ Code Point classifying
• 4-level priority for each direction (Inbound/Outbound)
• Bandwidth borrowed
• Bndwidth/Session limitation
• Smart Bandwidth Limit
• config by ip range
• Layer-3 (TOS/DSCP) QoS
• Layer-2 (802.1p) QoS
• WAN budget

• Hotspot Web Portal
• Packet Forwarding Acceleration
• DHCP client/relay/server
• DHCP Option: 1,3,6,51,53,54,58,59,60,61,66,125
• IGMP v2/v3
• LAN DNS/DNS Forwarding
• Dynamic DNS
• NTP Client
• Call Scheduling
• RADIUS/TACACS+ Client
• Internal RADIUS Server
• Active Directory/LDAP compatible (client)
• DNS Cache/Proxy and LAN DNS
• UPnP 50 sessions
• Wake on LAN
• Bonjour service
• Routing Protocol:
• Static Routing
• RIP v1/v2
• BGP
• Triple-Play Application
• IGMP snooping/proxy
• 6 x Multiple Subnet LAN
• Support Smart Monitor (Up to 30 PCs)

• AP Management
• VPN Management
• Switch Management
• External Devices

• APP Enforcement
• Support APPE Signature Upgrade by license
• URL Content Filter
• Access Control : URL Keyword Blocking (White/Black List)
• Web Feature : Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
• Web Content Filter (support Cyren and BPjM)
• DNS Filter

• Printer Sharing
• File System
• Support FAT32 File System
• Support FTP Function for File Sharing
• 3.5G (HSDPA) and 4G (LTE) as WAN3/WAN4 by using USB dongle (can support Dual USB WAN)
• USB Device Status (disk/modem/printer/sensor)
• Support USB Temperature Sensor
• Support file sharing (DrayTek’s own SMB protocol stack)

• Web-based User Interface (HTTP/HTTPS)
• CLI (Command Line Interface, Telnet/SSH)
• Administration Access Control
• Configuration Backup/Restore
• Built-in Diagnostic Function
• Firmware Upgrade via TFTP/HTTP/TR-069
• Logging via Syslog
• SNMP v2/v3
• Support SMS/E-mail Alert
• Management Session Time Out
• Two-level Management (Admin/User Mode)
• External device detection (master mode)
• TR-069/TR-104
• Support Multiple-Firmware Upgrade Utility (MFUU)
• Dashboard

• 2.4 GHz (for n model)
• 2.4 + 5 GHz (for ac/Vac model)
• Wireless Client List
• Wireless LAN Isolation
• 64/128-bit WEP
• WPA/WPA2
• Hidden SSID
• WPS
• MAC Address Access Control
• Access Point Discovery
• WDS (Wireless Distribution System)
• 802.1x Authentication
• Multiple SSID
• Wireless Rate-control
• WMM
• SSID VLAN Grouping with LAN Port (Port-based VLAN)