The Draytek Vigor3910 is a feature rich multi-WAN security router aimed at higher-level business use. The key areas of focus are high bandwidth connections, with 10Gb SFP+ and 2.5GbE ports, multiple WAN support for internet connection redundancy, remote VPN connections and the ability to manage a wider network of Draytek devices. In other words, it’s designed to be the center of your large, varied network, that might extend across multiple sites and have many remote workers or offices.
In the space available in a review like this, it’s honestly a little hard to do justice to all the ins and outs of the Vigor3910. To better understand it, we’d highly recommend checking out the excellent DrayTek online demo, where you can investigate and test the interface and features up front. You can also do the same for other DrayTek devices.
The product page is also a good point of call, and makes it easy to check out the manual, guides and even a video overview.
While we tested it on a bench, the Vigor3910 is most at home when rack-mounted, and comes with a mounting kit. (Image credit: Future)
Design and specifications
The Vigor3910 is a router, so is all about connecting your business to the internet. It has two 10G/1G SFP+ ports, which can be used for LAN or WAN. This means you can connect to ultra-fast fibre internet, or link into a 10GbE network for high local throughput, or of course both. You also get two, 2.5GbE RJ45 network LAN/WAN ports, four 1GbE RJ-45 LAN/WAN ports, and then finally four standard 1GbE LAN ports. You also get two USB 3.0 connections that can be used to attach external storage – though only one at a time.
So all up, you can configure up to eight WAN ports and if needed, enable massive internet throughput and connection redundancy. The Vigor3910 includes comprehensive load balancing and failover control, and supports High Availability so you can run a second router that steps in if the first has a hardware problem.
Eight WAN connections might be overkill for most businesses, but for certain setups, multiple internet connections are very useful. For example, one SFP+ port could handle a super fast 10Gbps fibre internet connection (or the maximum speed available), while a 2.5GbE or 1GbE port connects into a secondary 1Gbps connection, or other high speed internet. Or you could combine multiple available fibre, cable, VDSL connections together to provide better bandwidth. One or more Ethernet ports could be configured to link to a separate 4G modem equipped router (of which DrayTek has many) for wireless backup. The fixed line connections could be aggregated together for performance, while the 4G might be kept as a backup, or only used during times of very high load.
The two 10G SFP+ ports on the Vigor3910 enable ultra fast 10Gbps connections. (Image credit: Future)
The remaining SFP+ and 2.5G /1G ports could then be used to link to other sections of the business, for example an SFP+ fibre connection to maintain high throughput to a remote part of the business. They can also be used to give excellent performance for data heavy needs, such as network attached storage.
While the Vigor3910 can enable extremely fast internet connections, it also needs to handle all that data. Thanks to a 1.2GHz quad-core CPU and hardware acceleration, the NAT throughput is a huge 9.4Gbps, and 1 million NAT sessions.
One use for all this bandwidth is VPN connections, for a business with many remote workers or offices. The Vigor3910 can handle up to 500 concurrent VPN connections, with 3.3 Gbps of throughput. 200 of those can be encrypted SSL VPN connections, with 1.6 Gbps of throughput. The Vigor3910 supports all the industry standards for VPNs, and can also do VPN trunking, where multiple WAN connections can be used to link to the remote device, giving extra bandwidth and failover support.
The Vigor3910 is well equipped to handle multiple networks, with support for 50 VLANs and subnets. It has very in-depth bandwidth management and a comprehensive inbuilt firewall and content filtering capabilities. When connected to wireless access points, it can also manage a Hotspot web portal for users to log in and access Wi-Fi.
The Vigor3910 web interface is very functional, with loads of in-depth configuration and management options. (Image credit: Future)
Interface and testing
The Vigor3910 can be configured via the web browser interface, which is fairly straightforward. It is of course quite dense, but that’s a reflection of the depth of features. The manual (all 627 pages of it) is a very comprehensive how-to guide in itself, and there are extra support and knowledge options available on the Draytek website.
We set up a test network with a variety of DrayTek wireless access points, switches and routers, as well as a range of other NAS, IP cameras, smart devices, and computers. While we didn’t have a 10Gbps WAN connection available for testing, we pushed the router as far as possible. We fell short of the full 9.4Gbps NAT throughput, but only because the router easily handled the loads we provided. It did so with aplomb, and the CPU utilisation left plenty of extra headroom.
It’s no surprise that getting everything configured correctly at first is a decently in-depth task, but from that point on it was smooth sailing. VPN links, bandwidth allocation, WAN failover all worked as described. The router will happily auto discover existing LAN subnets, as well as DrayTek switches and APs on the network.
What’s not to love about being able to configure octuple WANs for the ultimate performance and redundancy. (Image credit: Future)
One of the key features of the Vigor3910 is the ability to manage a wider network made up of DrayTek devices. It can handle 50 wireless access points, and 30 switches right from the interface.
Of course this starts to become unwieldy before you actually hit that many network devices. To make life easier, DrayTek has a paid, server-based TR-069 management solution called VigorACS. It’s based on a yearly licence, with keys that cover up to a certain number of devices available for purchase. The exact price varies depending on how many nodes you need to handle, it starts from around $250 / £200 / AU$349 per year for 25. The licence keys are available via your local Draytek distributor, rather than Draytek itself.
VigorACS can be installed on a Windows or Linux server, locally or in the cloud, and doesn’t need particularly demanding specs unless you run thousands of nodes. Getting it up and running is a pretty normal process from an IT administrator perspective, but still fairly involved compared to consumer products. Once VigorACS is configured it can provide huge time savings that make it well worth the cost. Of course, there are other paid, free and open source TR-069 management software solutions available, but VigorACS is designed to work well with Draytek hardware.
A key advantage is auto provisioning, where a new device can be added to the network and then automatically configured and updated by the VigorACS server. It also makes it easy to remotely control and schedule updates to your network. There’s also a host of data collection, from real-time status monitoring (and alerts if equipment goes down) through to stats such as performance logging and report creation. VigorACS also has a VPN wizard, which helps make it easy to create and backup configurations, and make sure your remote workers can stay connected.
DrayTek makes it pretty easy to give VigorACS a try, and buying a compatible device means you get a free 30-day trial. While it’s not the only option for TR-069 management, VigorACS is a great match for Draytek hardware, and well worth the cost for the time savings alone. There’s also a large VigorACS knowledge base of articles.
VigorACS is a powerful TR-069 management solution that helps make complex networking faster and easier. (Image credit: Future)
The Vigor3910 is a class above even most business routers, and has the performance and capabilities to provide key multi-WAN functionality on a very large scale. Hardware acceleration means no bandwidth bottlenecks, and it can handle a very large number of VPNs. It’s still quite affordable, all things considered, and even if overkill now, gives room for future growth.
To get the best out of the Vigor3910 you do need to pair it with other Draytek devices, as well as the VigorACS software. While the hardware is excellent, it is also important to note that there is a wealth of support options and articles available. While we had a few minor complaints, the software side is also top notch.
It’s hard to fault the Vigor3910 from a technical perspective. That’s not to say it’s perfect in every situation, and many businesses don’t need the high end capabilities it provides. But for those that do, the Vigor 3910 is a great choice.
- 2 x 10G/1G SFP+ Fibre configurable WAN/LAN Slots
- 2 x 2.5G/1G/100M/10M Ethernet configurable WAN/LAN ports
- 4 x 1G/100M/10M Ethernet Configurable WAN/LAN ports
- Multi-WAN Load Balancing & Failover
- 4 x 1G/100M/10M Ethernet LAN ports with 1 million NAT sessions
- Quad-Core CPU with 9.4 Gbps NAT throughput
- 500 x VPN tunnels (including 200 x OpenVPN/ SSL-VPN tunnels) with most security protocols
- Fast VPN throughput, VPN Load Balancing, Failover, and backup for site-to-site applications
- 1 x RJ-45 console port
- 2 x USB 3.0 ports for external storage (one USB flash drive is supported at any one time)
- High-Availability (with CARP) ensuring 24/7 system uptime
- Object-oriented SPI Firewall
- Multi-subnet WAN/LAN through 802.1Q
- IPv6 & IPv4
- Bandwidth management
- Supports VigorACS 2 & VigorACS 3 Central Management System for remote management Learn more
- Supports Central AP Management (up to 50 Vigor Access Points)
- Supports Central Switch Management (up to 30 Vigor Switches)
- 2 years back to base warranty
Fibre to the Building/Home
Vigor3910 is an ideal choice to work with tier 2/3 ISPs and co-working spaces
High Performance with 10G SFP+
For both NAT and routing network, and for both 10G-WAN and 10G-LAN, Vigor3910 is ready to deliver high throughput to your business.
Layer 3 Routing with BGP and OSPF
With the most popular Exterior and Interior Gateway Protocols, Vigor3910 is ideal for ISP deployment.
Layer 2 Security with PPPoE Server and VLAN
With 200 PPPoE user accounts and 50 VLAN/LAN subnets, Vigor3910 provides 9.2 Gbps NAT throughput, and makes subletting network infrastructure secure and easy.
Vigor router provides a management platform for your Vigor devices on the LAN
Automatically discover LAN subnets and add detected VigorSwitch/AP into managed list.
Most-frequent used settings can be pre-defined on the Vigor Router, and provision to the managed VigorSwitch/AP.
Vigor Router provides a centralized view of managing devices, you may always check if the managed Vigor Switch/AP is online.
Support basic maintenance remotely via Vigor Router. Such as remote reboot, factory reset, configuration backup/restore, etc.
VPN Load Balancing and Failover functions for businesses
DrayTek Vigor3910 Octuple WAN Enterprise Level Broadband Router
Whether your network has 50 users or 500. DrayTek’s new Vigor3910 has you covered.
The Draytek Vigor3910 is a high-performance enterprise level broadband router featuring a powerful quad-core processor and a massive 15 interfaces, which can be configured to allow up to eight Internet connections at once!