DrayTek routers are different to the rest of the router market in that they offer all manner of highly secure networking features and functions for SMBs. They can rival Cisco’s Meraki technologies for business features and management and even be used on remote worksites, including mines. As usual with DrayTek, there are several variants of this router, but ours is the top-of-the-line model with dual 5G Nano SIM sockets. It won’t be for everyone, but what can it do?
We actually reviewed the predecessor of this router, the Vigor2927ax, almost two years ago. That, too, was a dual-band, Wi-Fi 6 model with AX3000 (theoretical 3,000Mbps) speeds but no 5G. This new Vigor2927Lax-5G integrates 5G while its new quasi-identical sibling model, the Vigor2927L-5G, eschews the Wi-Fi.
In our tests it almost hit 600Mbps up close, dropping to 400Mbps at distance. However, we also used it in conjunction with Draytek’s VigorSwitch P1282 with a VigorAP 1062C, POE-connected access point. These can extend the network, at peak speeds, for multiple users, as far as you want.
It has two, fixed antennae and four, extendable, wired, LTE antennae (with magnetic bases) to maximise 5G reception through additional elevation. An integrated 4G/5G (CAT.19) modem (with two SIM slots) can be used to provide connectivity on a remote work site, with the second SIM providing failover support. The USB 2.0 port can add an additional (LTE) connection, or be used to attach USB storage or a temperature probe. Performance will, naturally, depend on the router location’s network congestion and signal strength.
The main benefits revolve around the features. It supports 50 (concurrent) VPN tunnels that can be managed remotely via Draytek’s, latest VigorACS 3 technology which offers enhanced monitoring and management capabilities. The new software also opens the door to the device being used for SD-WAN (Software Defined networking) – where you can send it out to a location and have a local Luddite plug it in without booking an engineer to visit the site to install new infrastructure.
As usual with Draytek, configuration involves getting your hands dirty with old-school web-browser-based firmware. This is responsive, but not for the faint of heart – most of the features are in network-engineer language (a phone app provides simpler access to primary monitoring and management features). Every core, SMB, professional feature is available including bandwidth management, content filtering and hotspot management. Much of this won’t be new to the Draytek community, beyond the VigorACS 3 software, it’s only wireless performance that’s changed, in terms of hardware.
The bulk of the target market for the Vigor2927Lax-5G will be existing Draytek customers who want the 5G and Wi-Fi 6 upgrades plus, the ACS 3-backed SD-WAN functionality. Those who want to buy into Draytek cheaper, can by the older series, which otherwise provide identical, wired-network functionality.
It’s overkill for anyone without network qualifications, but it may tempt engineers who want to jump ship from the likes of Cisco or seek additional hardware-based functionality than Synology can provide. For these buyers, the $1,399 price tag will barely tip the needle on a project rollout budget.
Products
Video: DrayTek Vigor2927L-5G router series overview
Overview
- 5G/4G LTE modem with dual nano SIM slots (SIM slot 2 for Failover) for SA and NSA 5G WAN
- Support 5G NR Sub-6 SA Band: n1, 3, 5, 7, 8, 20, 28, 38, 40, 77, 78; great coverage in Australia and New Zealand
- 5G Max. Data Rate NR SA: 2.4Gbps (DL) / 900Mbps (UL)**
- 5G Max. Data Rate NR NSA: 3.4Gbps (DL) / 550Mbps (UL)**
- Multi-WAN with 1 x fixed GbE WAN port, 1 x configurable GbE WAN/LAN port, 1 x USB port, 2 x 5G/4G LTE nano SIM slots, and 2 x Wi-Fi WANs for Lax-5G model
- 1 x fixed GbE WAN port and 1 x configurable GbE WAN/LAN port for Failover, Load Balancing and High Availability mode
- 1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
- 5 x Gigabit LAN ports with multiple subnets and 60,000 NAT sessions
- 50 x VPN tunnels (including 25 x OpenVPN/ SSL-VPN tunnels) with comprehensive secure protocols
- Fast VPN throughput, VPN Load Balancing and backup for site-to-site applications
- Hardware Acceleration and Hardware QoS for up to 8k NAT and routing connections, and 940Mbps (Single WAN) or 1.8Gbps (Multi-WAN) Firewall speed
- Integrated IEEE 802.11ax (WiFi 6, AX3000) wireless Access Point; dual band; up to 2402 Mbps throughput (Lax-5G model)
- 16 x VLANs for secure and efficient workgroup management
- IPv6 & IPv4
- Up to 1022 IP addresses and 8 IP subnets
- High Availability mode
- Object-based SPI Firewall and CSM (Content Security Management) for network security
- Supports VigorACS 3 Central Management Software for remote management
- SD-WAN capability when used with VigorACS 3
- Central VPN Management for up to 8 remote Vigor routers Learn more
- Central AP Management for up to 20 Vigor Access Points Learn more
- Central Switch Management for up to 10 VigorSwitches Learn more
- 2 years back to base warranty
**Typical 5G Downlink/Uplink speeds are 400Mbps/200Mbps, depending on the local conditions.
The Vigor2927L-5G series combines 4G LTE and 5G to provide excellent mobile coverage in Australia and New Zealand:
5G/LTE/WCDMA Specifications
5G & WiFi 6 for Next-Gen Connectivity
The Vigor2927L-5G series routers offer most of the features of the Vigor2927 series, with the addition of an integrated 5G/4G LTE mobile broadband Nano SIM module, supporting speeds up to 10 times faster than 4G. This enhanced LTE capability makes the Vigor2927L-5G series routers ideal for applications such as:
- Remote location with no fixed line or NBN/UFB coverage
- Quick setup for new branches waiting for xDSL/Ethernet WAN (e.g. NBN deployment)
- Load Balancing or Failover backup for an existing primary internet connection such as Cable/NBN/ UFB Ethernet broadband
- Temporary installations such as disaster recovery, emergency, exhibitions and sporting events where internet access is required for a short period
- Providing internet access on public transport such as coaches, buses, trains and freighters
The Vigor2927L-5G series includes one Gigabit Ethernet WAN port, one Gigabit Ethernet WAN/LAN configurable port, five Gigabit Ethernet LAN ports, and a dual Nano SIM card slot for 5G/4G LTE broadband connectivity, allowing for a second Nano SIM to be installed for failover. The WAN ports support NBN technologies including FTTP, FTTC, HFC, Satellite and Fixed Wireless. All WAN interfaces, including the 3G/4G USB WAN interfaces, can be configured to Load Balance mode or Failover mode.
|
5G Support SA and NSA mode |
AX3000 (Lax model) |
|
50 x VPN tunnels IPsec VPN throughput up to 250 Mbps |
60k NAT sessions Recommended for a network of up to 50+ devices |
Interface
- 2x Wireless Antenna (Lax model)
- Reset Button
- WLAN/WPS Button (Lax model)
- 1 x USB 2.0 port for connection of 3G/4G LTE USB modem, FTP server, network printer and thermometer
- Fixed WAN Port: 1x GbE RJ-45
- WAN/LAN Switchable Port: 1x GbE RJ-45
- Fixed LAN Port: 5x GbE RJ-45
- 4x LTE Antenna
- Power Input
- Power On/Off Switch
- 2 x Nano-Sized SIM Slot (SIM slot 2 for Failover)
5G Router with High Speed Mobile Connectivit
* Backward compatible to 4G LTE
- The integrated 5G/LTE modem with Category 19 supports carrier aggregation, providing high-speed mobile broadband connectivity for Internet access and VPN.
- The dual SIM slot accepts two SIM cards from different mobile network providers. This ensures that the router can seamlessly switch to the secondary SIM and cellular network if the primary mobile connectivity is broken.
- The four LTE antennas with 1-meter extension cables make it easy to place the router at locations that ensure the best possible signal coverage.
Multi-WAN 5G Gigabit Security Router with Load Balance
WAN Load Balancing
The Vigor2927L-5G Series supports high throughput from Gigabit Internet connectivity via Fibre to the Premises (FTTP) and 5G LTE mobile connections. All active WANs automatically join the WAN Load Balance pool to optimize bandwidth utilisation
Seamless Failover
If an Internet connection is lost, the router automatically switches to surviving WAN connections, seamlessly transferring traffic. This ensures reliable Internet connectivity and avoids the costs associated with network downtime
Policy-Based Routing
Routing policies can be used to designate specific WAN interfaces for traffic from or to certain IP ranges and for applications such as VoIP thus enhancing network efficiency and performance.
Ideal VPN Router for SMB
Ideal VPN Router for SMB
- Up to 800 Mbps hardware-accelerated IPsec VPN performance
- Up to 50 active VPN tunnels concurrently
All common VPN standards are supported
- WireGuard VPN (from firmware v4.4.3)
- IKEv1/IKEv2 EAP/ SSL VPN/ L2TPoverIPsec/ PPTP/OpenVPN
Advanced Authentication for Teleworker
- Two-factor authentication for teleworker VPN connections
- Authentication can be integrated with Active Directory (LDAP), RADIUS, or TACACS+ servers in the network as required
- Network administrators can be notified via SMS/Email when a teleworker VPN is online, preventing VPN credential loss or misuse by others
Hotspot Web Portal
Market your business while offering free Wi-Fi
Wi-Fi Marketing
Redirect hotspot guests to the company homepage, online surveys, or display a promotion message.
Grow Customer Mailing List
Require guests to leave contact info or social media accounts before they can use the Internet services.
Various Authentication Types
A variety of login methods are supported to meet your business needs, including Facebook Login, Google Login, SMS PIN, Voucher PIN, and RADIUS.
3rd-Party Service Compliant
Supports external captive portal authentication so you can keep using the Wi-Fi marketing solution you prefer.
Data Quota Management
Bandwidth management is integrated into the Hotspot features to control the bandwidth and session usage of the Hotspot guests.
Comprehensive Firewall
Object-based Firewall
IPs and services can be grouped into objects before being applied to firewall rules. This feature simplifies the organisation of network activities.
Blocking Apps & DoH servers
APP Enforcement (APPE) allows the blocking of applications (IM, P2P, streaming, tunnelling, etc.) on a LAN network quickly and easily. For example, by blocking DoH servers in browsers, LAN clients can only use standard DNS queries and filtering.
Manage Traffic Beyond LAN to WAN
DrayTek Firewall manages not only traffic between LAN and WAN, but also those between LAN subnets, remote VPN subnets, and from WAN to the Vigor router itself. Internet IPs can be predefined for accessing the Vigor routers’ services, enhancing security and control.
Web Content Filtering with DNS Filter
The Web Content Filtering Service uses cloud-based technology to provide comprehensive and up-to-date protection for LAN clients for online activities, with 82 categories in total, 10 of which are security-focused.
Edge Router for SD-WAN
Edge Router for SD-WAN
The quality of every WAN/VPN interface is measured by latency, loss, and jitter. Based on these metrics, the Vigor2927L-5G can dynamically self-adjust to use the best-quality interface for VoIP and business-critical applications.
Application Visibility and SD-WAN Policy
Application Visibility enables the network administrator to monitor data usage sorted by client, WAN interface, application, and time.
With data usage details, SD-WAN policies can be created to route business-critical applications through the best-quality interfaces to improve the user experience.
App QoS
Application QoS allows prioritisation of applications and services on DrayTek routers to improve and enhance critical applications such as VoIP, conferencing and video streaming, etc. It also allow flexible bandwidth allocation to suit business requirements.
VoIP First
VoIP is always a top priority! The default VoIP port, UDP 5060 (configurable) has priority out-of-box with QoS.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.
| Learn More |
Key Features
Embedded SIM Slot
Provide 4G LTE/5G Internet access to where fixed lines are (temporarily) not available without the need for a USB dongle.
Load Balancing
Maximize throughput and reliability by using multiple Internet connections. Learn more
VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of Vigor2927L-5G series to the remote offices and teleworkers over the Internet. Learn more
SSL VPN
The VPN works through firewalls providing secure remote access to any network environment. Learn more
VPN Matcher
Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more.
Firewall & Content Filter
Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.
VoIP Friendly
Vigor2927L-5G Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide
Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.
Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. Learn more
Wireless WAN (Lax model only)
Get Internet access wirelessly from a wireless network, a mobile hotspot, or a personal hotspot set up on smartphones. Learn more
DrayDDNS
The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more
Central AP Management
Use the Vigor2927L-5G Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more
Mesh (Lax model only)
Easily link to other VigorAP to expand the wireless network. Learn more.
Central Switch Management
Set up VLAN easily from the router and get a centralized hierarchy view of the switches. Learn more
All-in-One Management
Mesh Management |
| Mesh (Vigor2927Lax-5G only) Up to 7 APs |
|
Vigor Router SWM |
| Central Switch Management Up to 10 switches |
|
Vigor Router APM |
 Vigor Router APMUp to 20 APs |
|
All-in-One Management
VigorACS 3 |
 VigorACS 3 |
|
In-the-box
Note :
The throughput figures are maximum, based on DrayTek internal testing with optimal conditions. The actual performance may vary depending on the different network conditions and applications activated.
Models
Vigor2927Lax-5G |
|||||||
|
|||||||
|
ConfigDemo
