Dual-WAN VPN Firewall Router
The Equipment for All Services
Vigor2927 Series is a dual-Ethernet WAN firewall router, providing load-balancing and failover for your business continuity. Featuring VPN, QoS, route policy, firewall, content filtering, bandwidth management, captive hotspot portal, and a lot more, this is the ultimate router that does it all for SMB. The Series includes built-in 802.11ac Wave 2 WiFi and 802.11ax WiFi models.
Overview
50 VPN
IPsec VPN throughput up to 800 Mbps
25 SSL VPN
Throughput up to 120 Mbps
AX 3000*
Delivers link rate up to 3 Gbps
60k Sessions
Recommended for a network of 50 hosts
*ax model only
1Wireless Antenna (ac/ax model)
2Reset Button
3WLAN/WPS Button (ac/ax model)
4LED Indicator
52x USB 2.0
6Fixed WAN Port: 1x GbE RJ-45
7WAN/LAN Switchable Port: 1x GbE RJ-45
8Fixed LAN Port: 5x GbE RJ-45
10Power On/Off Switch
11Power Input
Hardware Acceleration
The accelerator delivers high performance without sacrificing traffic control features such as QoS, Bandwidth Limit, WAN Budget, Traffic Graph, and Data Flow Monitor.
Hardware NAT & Routing
With its hardware accelerator, the Vigor2927 can run connections over 2 high-speed WANs simultaneously. The accelerator supports up to 8k NAT and routing connections, delivering firewall performance of up to 940Mbps on a single WAN and 1.8Gbps combined across both WANs, while still meeting high expectations for QoS.
Hardware QoS
The accelerator includes Hardware QoS, so you get high QoS quality along with high firewall performance. You can easily prioritize business-critical apps and always keep VoIP as the 1st priority.
Hardware IPSec
The Vigor2927 already improves on the IPSec performance of the previous Vigor2926 series, and with Hardware IPSec enabled, IPSec performance rises further to 800 Mbps. The accelerator handles a maximum of 16 IPSec tunnels. The first 16 tunnels are accelerated automatically on a first-come, first-served basis. If any of the 16 accelerated tunnels disconnects, a new tunnel is moved into the accelerator automatically to keep 16 tunnels accelerated.
*Since firmware v4.2.2
APP QoS Bandwidth Management
VoIP First
VoIP always gets top priority! With UDP port 5060 as the default (configurable), VoIP QoS works out of the box.
Improve Experience for Business-Critical Apps
Select your business-critical apps and easily assign them to QoS classes.
Flexible Bandwidth Allocation
Bandwidth is reserved for high-priority classes, and low-priority classes can use it when it is available.
Management Solution
All-in-One Management
Mesh (ac/ax model)
Discovery, Provisioning, Monitoring, Centralized Hierarchy View
Vigor Router SWM
Auto-Discovery, Provisioning, Monitoring, Centralized Hierarchy View, Reboot PoE Devices Remotely, Quick VLAN Configuration
Vigor Router APM
Auto-Discovery, Provisioning, Monitoring, Centralized View, Alarm, Reboot VigorAP Remotely, Wi-Fi Client Load Balancing
Software Management
VigorACS 3
- Zero Touch Deployment & Provisioning
- Auto VPN
- Interface Quality & SLA
- VoIP Optimization & Monitoring
- Application Visibility
- Application Based SD-WAN Policy
*Click here to check the support model list. - Customized Hotspot Page with Multilingual
- Hotspot Clients Analytics
- ACS Server Load Balancing / Failover
DrayTek Router APP
- Easily manage your Vigor Routers
- Real-time monitoring of client usage and network status
- Integrated setup for VPN, firewall, route policy, and other advanced features
- Streamlined configuration workflow
- Parental Control for internet management and restrictions
- Flexible traffic routing with Split VPN/WAN
- Prioritize critical traffic with Route Policy
DrayTek Wireless APP
- Build Wireless Network
- Monitoring
- Parental Control & Client Management
- Mesh WiFi Setup
- Check signal strength and speed test
- Scheduled Maintenance
Reviews
In the Box
Vigor2927 Series
Antenna x 2
(ax model)
RJ-45 Cable (Ethernet)
Power Adapter
Quick Start Guide
`
Related Products
Vigor2927 LTE Series
– 4G LTE, Dual Gigabit Ethernet WANs
– Built-in LTE Modem
– 60k NAT Sessions
– 50 Concurrent VPNs
– Non-WiFi Model Available (optional)
– Built-in 11ac Wave 2 WLAN (optional)
Vigor2865 Series
– xDSL, Gigabit Ethernet WAN
– Built-in 35b/VDSL/ADSL Modem
– 60k NAT Sessions
– 32 Concurrent VPNs
– Non-WiFi Model Available (optional)
– Built-in 11ac Wave 2 WLAN (optional)
– Built-in 11ax WLAN (optional)
Note: Stated throughput figures are the maximums from DrayTek internal testing under optimal conditions, with Hardware Acceleration enabled where available. Actual performance may vary depending on network conditions and the applications in use.
Models
| Model | WAN Port | 2.4GHz WLAN | 5GHz WLAN | Wireless Antenna | Wireless Mode | Max. Link Rate | Max. Bandwidth | Wireless WAN | WDS | Mesh |
| Vigor2927 | GbE, RJ-45 | – | – | – | – | – | – | – | – | – |
| Vigor2927ax | GbE, RJ-45 | ✓ | ✓ | 2x Dual-Band (3dBi for 5GHz, 2.5dBi for 2.4GHz) | 2.4 GHz: 802.11b/g/n/ax 5 GHz: 802.11 a/n/ac/ax | 2.4 GHz: 574 Mbps 5 GHz: 2.4 Gbps | 160 MHz | – | ✓ 5GHz Only | ✓ 5GHz Only |
| Vigor2927ac | GbE, RJ-45 | ✓ | ✓ | 2x Dual-Band (3dBi for 5GHz, 2.5dBi for 2.4GHz) | 2.4 GHz: 802.11b/g/n 5 GHz: 802.11 a/n/ac | 2.4 GHz: 400 Mbps 5 GHz: 867 Mbps | 80 MHz | ✓ | ✓ 5GHz Only | ✓ 5GHz Only |
Key Features
Load Balancing
Maximize throughput and reliability by using multiple Internet connections. Learn more
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2927 Series to the remote offices and teleworkers over the Internet. Learn more
Wireless WAN (ac model only)
Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment. Learn more
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Central AP Management
Use the Vigor2927 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Firewall & Content Filter
Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.
Wi-Fi 6 (ax model only)
Feature OFDMA and MU-MIMO technology to improve Wi-Fi efficiency and deliver higher wireless speed.
VoIP Friendly
Vigor2927 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Central Switch Management
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
Specs
Specifications
Model | 2927 | 2927ac | 2927ax |
Performance | |||
| NAT Session | 60K | 60K | 60K |
| Max. NAT (Mbps) | 700 | 700 | 700 |
| Max. NAT with Hardware Acceleration : Single WAN (Mbps) | 940 | 940 | 940 |
| Max. NAT with Hardware Acceleration : Dual WAN (Mbps) | 1800 | 1800 | 1800 |
WAN | |||
| SFP (1G) | |||
| Ethernet (1 GbE) | 2 | 2 | 2 |
| Ethernet – Switchable * When this field is filled, the port count above includes both switchable and fixed ports. | ✓ (WAN/LAN) | ✓ (WAN/LAN) | ✓ (WAN/LAN) |
| Cellular (via USB) | 2 | 2 | 2 |
| Wireless WAN (2.4GHz + 5GHz) | ✓ | ||
Internet Connection | |||
| IPv4 | PPPoE DHCP Static IP PPTP/L2TP | PPPoE DHCP Static IP PPTP/L2TP | PPPoE DHCP Static IP PPTP/L2TP |
| IPv6 | PPP DHCPv6 Static IPv6 TSPC AICCU 6rd 6in4 Static Tunnel | PPP DHCPv6 Static IPv6 TSPC AICCU 6rd 6in4 Static Tunnel | PPP DHCPv6 Static IPv6 TSPC AICCU 6rd 6in4 Static Tunnel |
| 802.1p/q Multi-VLAN Tagging | ✓ | ✓ | ✓ |
| Multi-VLAN/PVC | ✓ | ✓ | ✓ |
| Failover | ✓ | ✓ | ✓ |
| Load Balancing | IP-based, Session-based | IP-based, Session-based | IP-based, Session-based |
| WAN Active on Demand | Link Failure, Traffic Threshold | Link Failure, Traffic Threshold | Link Failure, Traffic Threshold |
| Connection Detection | ARP, Strict ARP, Ping | ARP, Strict ARP, Ping | ARP, Strict ARP, Ping |
| WAN Data Budget | ✓ | ✓ | ✓ |
| Dynamic DNS | ✓ | ✓ | ✓ |
| DrayDDNS | ✓ | ✓ | ✓ |
LAN | |||
| Fixed LAN (RJ-45, GbE) | 5 | 5 | 5 |
| LAN Subnet | 8 | 8 | 8 |
| DMZ Port | 1 | 1 | 1 |
| VLAN | 802.1q Tag-based VLAN Port-based VLAN | 802.1q Tag-based VLAN Port-based VLAN | 802.1q Tag-based VLAN Port-based VLAN |
| Max. Number of VLAN | 16 | 16 | 16 |
| DHCP Server | Multiple IP Subnet Custom DHCP Options Bind-IP-to-MAC | Multiple IP Subnet Custom DHCP Options Bind-IP-to-MAC | Multiple IP Subnet Custom DHCP Options Bind-IP-to-MAC |
| LAN IP Alias | ✓ | ✓ | ✓ |
| Wired 802.1x Authentication | ✓ | ✓ | ✓ |
| Port Mirroring | ✓ | ✓ | ✓ |
| Local DNS Server | ✓ | ✓ | ✓ |
| Conditional DNS Forwarding | ✓ | ✓ | ✓ |
| Hotspot Web Portal (Profile No.) | 4 | 4 | 4 |
| Hotspot Authentication | Click-Through Social Login SMS PIN Voucher PIN RADIUS External Portal Server | Click-Through Social Login SMS PIN Voucher PIN RADIUS External Portal Server | Click-Through Social Login SMS PIN Voucher PIN RADIUS External Portal Server |
Other Ports | |||
| USB | 2 | 2 | 2 |
| USB Type | 2.0 | 2.0 | 2.0 |
| FXS (RJ-11) | |||
Networking | |||
| Routing | IPv4 Static Route IPv6 Static Route Policy Route Inter-VLAN Route RIP v1/v2 BGP | IPv4 Static Route IPv6 Static Route Policy Route Inter-VLAN Route RIP v1/v2 BGP | IPv4 Static Route IPv6 Static Route Policy Route Inter-VLAN Route RIP v1/v2 BGP |
| Policy-based Routing | Protocol IP Address Port Domain Country | Protocol IP Address Port Domain Country | Protocol IP Address Port Domain Country |
| High Availability | Dray High Availability | Dray High Availability | Dray High Availability |
| DNS Security (DNSSEC) | ✓ | ✓ | ✓ |
| IGMP | IGMP v2/v3 IGMP Proxy IGMP Snooping & Fast Leave | IGMP v2/v3 IGMP Proxy IGMP Snooping & Fast Leave | IGMP v2/v3 IGMP Proxy IGMP Snooping & Fast Leave |
| Local RADIUS server | ✓ | ✓ | ✓ |
| SMB File Sharing (Requires external storage) | ✓ | ✓ | ✓ |
VPN | |||
| LAN-to-LAN | ✓ | ✓ | ✓ |
| Teleworker-to-LAN | ✓ | ✓ | ✓ |
| EasyVPN | ✓ | ✓ | ✓ |
| Protocols | PPTP L2TP IPsec L2TP over IPsec SSL GRE IKEv2 IKEv2-EAP IPsec-XAuth OpenVPN WireGuard | PPTP L2TP IPsec L2TP over IPsec SSL GRE IKEv2 IKEv2-EAP IPsec-XAuth OpenVPN WireGuard | PPTP L2TP IPsec L2TP over IPsec SSL GRE IKEv2 IKEv2-EAP IPsec-XAuth OpenVPN WireGuard |
| Max. VPN Tunnels | 50 | 50 | 50 |
| Max. OpenVPN + SSL VPN Tunnels | 25 | 25 | 25 |
| IPsec VPN Throughput (AES 256 bits) (single-directional) (Mbps) | 250 | 250 | 250 |
| IPsec VPN Throughput (Hardware NAT Enabled) | 800 | 800 | 800 |
| SSL VPN Throughput (single-directional) (Mbps) | 120 | 120 | 120 |
| WireGuard VPN Throughput (single-directional) (Mbps) | 80 | 80 | 80 |
| User Authentication | Local RADIUS LDAP TACACS+ mOTP | Local RADIUS LDAP TACACS+ mOTP | Local RADIUS LDAP TACACS+ mOTP |
| IKE Authentication | Pre-Shared Key, X.509 | Pre-Shared Key, X.509 | Pre-Shared Key, X.509 |
| IPsec Authentication | SHA-1, SHA-256 | SHA-1, SHA-256 | SHA-1, SHA-256 |
| Encryption | MPPE, DES, 3DES, AES | MPPE, DES, 3DES, AES | MPPE, DES, 3DES, AES |
| VPN Trunk (Redundancy) | Load Balancing, Failover | Load Balancing, Failover | Load Balancing, Failover |
| Single-Armed VPN | ✓ | ✓ | ✓ |
| NAT-Traversal (NAT-T) | ✓ | ✓ | ✓ |
| VPN Matcher | ✓ | ✓ | ✓ |
Firewall & Content Filtering | |||
| NAT | Port Redirection Open Ports Port Triggering Port Knocking DMZ Host UPnP | Port Redirection Open Ports Port Triggering Port Knocking DMZ Host UPnP | Port Redirection Open Ports Port Triggering Port Knocking DMZ Host UPnP |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 | SIP, RTSP, FTP, H.323 | SIP, RTSP, FTP, H.323 |
| VPN Pass-Through | PPTP, L2TP, IPsec | PPTP, L2TP, IPsec | PPTP, L2TP, IPsec |
| IP-based Firewall Policy | ✓ | ✓ | ✓ |
| Content Filtering | APP URL Keyword DNS Keyword Web Features Web Category*(*subscription required) | APP URL Keyword DNS Keyword Web Features Web Category*(*subscription required) | APP URL Keyword DNS Keyword Web Features Web Category*(*subscription required) |
| DoS Attack Defense | ✓ | ✓ | ✓ |
| Spoofing Defense | ✓ | ✓ | ✓ |
Bandwidth Management | |||
| IP-based Bandwidth Limit | ✓ | ✓ | ✓ |
| IP-based Session Limit | ✓ | ✓ | ✓ |
| QoS (Quality of Service) | TOS DSCP 802.1p IP Address Port Application | TOS DSCP 802.1p IP Address Port Application | TOS DSCP 802.1p IP Address Port Application |
| VoIP Prioritization | ✓ | ✓ | ✓ |
| APP QoS | ✓ | ✓ | ✓ |
WLAN | |||
| 2.4GHz WLAN | 802.11n 2×2 MIMO | 802.11ax 2×2 MIMO | |
| 5GHz WLAN | 802.11ac Wave 2 2×2 MU-MIMO | 802.11ax 2×2 MU-MIMO | |
| Antennas | 2 | 2 | |
| Antenna Type | External Dipole | External Dipole | |
| 2.4GHz Antenna Gain (dBi) | 2.5 | 2.5 | |
| 5GHz Antenna Gain (dBi) | 3 | 3 | |
| 2.4GHz Max. Link Rate (Mbps) | 300 | 574 | |
| 5GHz Max. Link Rate (Mbps) | 867 | 2402 | |
| Max. Number of SSIDs (per band) | 8 (4) | 8 (4) | |
| Security Mode | OWE WEP WPA WPA2 Mixed(WPA+WPA2) WPA3 | OWE WEP WPA WPA2 Mixed(WPA+WPA2) WPA3 | |
| Authentication | Pre-Shared Key, 802.1X | Pre-Shared Key, 802.1X | |
| WiFi 6 | ✓ | ||
| OFDMA | ✓ | ||
| WPS | PIN, PBC | PIN, PBC | |
| WDS | Repeater (5GHz only) | Repeater (5GHz only) | |
| Access Control | Access List Client Isolation Hide SSID WLAN Scheduling | Access List Client Isolation Hide SSID WLAN Scheduling | |
| AirTime Fairness | ✓ | ✓ | |
| Band Steering | ✓ | ✓ | |
| WMM | ✓ | ✓ | |
| Mesh (5GHz Only) | Root | Root | |
VoIP | |||
| Protocols | |||
| SIP Registrars | |||
| Dial Plan | |||
| Call Features | |||
| Voice Codec | |||
| Caller ID | |||
Management | |||
| Local Service | HTTP HTTPS Telnet SSH v2 FTP TR-069 | HTTP HTTPS Telnet SSH v2 FTP TR-069 | HTTP HTTPS Telnet SSH v2 FTP TR-069 |
| Port Knocking for Local Service | ✓ | ✓ | ✓ |
| Config Backup/Restore | ✓ | ✓ | ✓ |
| Config File Compatibility | Vigor2926 | Vigor2926 | Vigor2926 |
| Firmware Upgrade | WUI, TFTP, TR-069 | WUI, TFTP, TR-069 | WUI, TFTP, TR-069 |
| 2-Level Administration Privilege | ✓ | ✓ | ✓ |
| Access Control | Access List, Brute Force Protection | Access List, Brute Force Protection | Access List, Brute Force Protection |
| Notification Alert | SMS, E-mail | SMS, E-mail | SMS, E-mail |
| Netflow | v5, v9, IPFIX | v5, v9, IPFIX | v5, v9, IPFIX |
| SNMP | v1, v2c, v3 | v1, v2c, v3 | v1, v2c, v3 |
| Syslog | ✓ | ✓ | ✓ |
| VPN Managment | 8 | 8 | 8 |
| AP Managment | 20 | 20 | 20 |
| Mesh (Number of manageable APs) | 7 | 7 | |
| Switch Management | 10 | 10 | 10 |
| VigorACS Management (Since f/w) | V4.2.0.1 | V4.2.0.1 | V4.2.0.1 |
Physical | |||
| Power Input | DC 12V @ 2A | DC 12V @ 2A | DC 12V @ 2.5A |
| Max. Power Consumption (watts) | 21.6 | 24 | 26.4 |
| Dimension (mm) | 241 x 165 x 44 | 241 x 165 x 44 | 241 x 165 x 44 |
| Operating Temperature | 0 to 45°C | 0 to 45°C | 0 to 45°C |
| Storage Temperature | -25 to 70°C | -25 to 70°C | -25 to 70°C |
| Operating Humidity (non-condensing) | 10 to 90% | 10 to 90% | 10 to 90% |
Note:
- * : Future Support
- The stated throughput performance figures are the maximum derived from DrayTek internal testing, conducted under optimal conditions, with Hardware Acceleration enabled where available. The actual performance may vary based on network conditions and activated applications.
Accessories
Resources
Firmware
Vigor2927 Firmware Version 4.5.2.2
Vigor2927 Firmware Version 4.5.2.2 Release Note
Live Demo
Manuals
Vigor2927 Quick Start Guide (Wireless)