Physical Interfaces
•WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
•LAN Ports: 5x Gigabit Ethernet (1G/100M/10M), RJ-45
•WAN/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
•1x USB 2.0 Port for an additional LTE Modem, thermometer or Printer
•2x Removable Wireless LAN antennas
•4x Removable 5G Wireless antennas
•Wireless On / Off / WPS button
•Recessed Factory Reset button

Performance
•NAT Performance:
–950 Mb/s NAT Throughput for Single WAN with Hardware Acceleration
–1.8Gb/s Total NAT Throughput for Dual WAN with Hardware Acceleration
–800 Mb/s NAT Throughput per WAN
–60,000 NAT Sessions
•VPN Performance:
–300 Mb/s IPsec (AES256) VPN Performance
–800 Mb/s Hardware Accelerated IPsec VPN Performance
–120 Mb/s SSL VPN Performance
–Max. 50 Concurrent VPN Tunnels
–Max. 25 Concurrent SSL VPN / OpenVPN Tunnels

WAN Interfaces
•WAN1: Gigabit Ethernet
•WAN2: Gigabit Ethernet
•5G-NR: Integrated 5G/LTE Modem
•WAN6: LTE USB Modem (not included)

Firewall & Content Filtering
•IP-based or User-based Firewall Policy
•User-based Time Quota
•DoS Attack Defence
•Spoofing Defence
•Content Filtering:
–Application Content Filter
–URL Content Filter
–DNS Keyword Filter
–Web Features
–Web Category Filter*

Internet Connection
•Load Balancing: IP-based, Session-based
•Hardware Acceleration
•802.1p/q Multi-VLAN Tagging
•Multi-VLAN/PVC
•2.4GHz & 5GHz Simultaneous Wireless WAN
•WAN Active on Demand: Link Failure, Traffic Threshold
•Connection Detection: PPP, ARP Detect, Ping Detect
•WAN Data Budget
•Dynamic DNS
•DrayDDNS – with automated LetsEncrypt Certificates
•Full Feature-set Hardware Acceleration:
–Hardware Accelerated Quality of Service
–Multi-WAN Data Budget
–Traffic Graph & Data Flow Monitor
–Bandwidth Limit
•IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
•IPv6 Connection Types:
–Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
–5G/4G LTE Modem & USB LTE Modem: TSPC, AICCU

Intergrated 5G Modem Features – NEW!
•Dual-SIM Failover
•5G LTE Category 19 (DL) Modem with fallback to 4G/LTE
•Unlocked to any network (EE, 3, O2, Vodafone, Eir)
•5G Max Data Rates:
–NR SA
–2.4Gbps Downlink (Category 19)
–900Mbps Uplink (Category 18)
–NR NSA
–2.8Gbps Downlink (Category 19)
–555Mbps Uplink (Category 18) 5G/4G LTE Modem & USB LTE Modem: TSPC, AICCU
•5G NR Sub-6 SA Bands: 1, 3, 7, 8, 20, 28, 38, 40, 77, 78
•5G NR Sub-6 NSA Bands: 1, 3, 7, 8, 20, 28, 38, 40, 77, 78
•4G LTE (FDD) Bands: 1, 3, 7, 8, 20, 28
•4G LTE (TDD) Bands: 38, 40
•3G (WCDMA) Bands: 1, 8
•4x 5G Antennas included with 1m extension cables
•Per-SIM-Card WAN Data Budget
•2x Standard-Size SIM-Card Slots
•Removable SIM slot cover
•SMS Inbox – Send & Receive SMS text messages
•SMS Router Commands – Status Report, Reboot via text message

Wireless Features
•AX3000 Wi-Fi 6 wireless:
–802.11ax 2×2 wireless access point
–Compatible with 802.11a/b/g/n/ac wireless
–Dual-band (2.4/5Ghz) simultaneous wireless
–Up to 2400Mbps PHY rate at 160MHz with 5GHz
–Up to 574Mbps PHY rate at 40MHz with 2.4GHz
–Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
–OFDMA
–MU-MIMO
–Tx Beamforming
–1024-QAM
•Mesh Root support with DrayTek VigorAP Mesh Nodes
•Up to 4 SSIDs per radio band
•Extended 5Ghz Band – Channels 36-48, 52-64, 100-140
•Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
•Bandwidth Management (Per Station / Per SSID)
•WMM (Wireless MultiMedia)
•WPS – WiFi Protected Setup
•Station Control – Time-limited wireless connectivity per Station (e.g. 1 hour)
•EAPOL Key Retry – Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
•Wireless Security:
–WPA2
–WPA3
–Pre-Shared Key authentication
–Enterprise 802.1x authentication
–WEP/WPA for Legacy Clients
–Access Control – Blacklist / Whitelist client MAC addresses per SSID

NAT Features
•NAT Port Redirection
•Open Ports
•Port Triggering
•DMZ Host
•UPnP
•ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
•VPN Pass-Through: PPTP, L2TP, IPsec

LAN Management
•802.1q Tag-based, Port-based VLAN
•Up to 8 LAN Subnets (NAT or Routing mode selectable per LAN interface)
•Up to 16 VLANs
•DMZ Port
•DHCP Server:
–Multiple IP Subnet
–Custom DHCP Options
–Bind-IP-to-MAC
–DHCP Pool Count up to 1022 addresses for LANs 1-3
–DHCP Pool Count up to 253 addresses for LANs 4-8
•LAN IP Alias
•Wired 802.1x Port Authentication
•Port Mirroring
•Local DNS Server
•Conditional DNS Forwarding
•Hotspot Web Portal
•Hotspot Authentication: Click-Through, Social Login, SMS PIN, Voucher PIN, RADIUS, External Portal Server

Networking features
•Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
•High Availability: Active-Standby, Hot-Standby
•DNS Security (DNSSEC)
•Local RADIUS server
•SMB File Sharing (Requires external storage)
•Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
•Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP VPN
•Up to 50 active VPN tunnels – including up to 25 SSL VPN or OpenVPN Tunnels
•Up to 16 Hardware Accelerated 800Mb/s IPsec tunnels
•LAN-to-LAN – Dial-In VPN Server & Dial-Out VPN Client
•Teleworker-to-LAN – Dial-In VPN Server
•User Authentication: Local, RADIUS, LDAP, TACACS+, mOTP, TOTP – New!
•IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
•Encryption: MPPE, DES, 3DES, AES (128/192/256)
•Authentication: SHA-256, SHA-1
•VPN Trunk (Redundancy): Load Balancing, Failover
•Dead Peer Detection (DPD)
•IPsec NAT-Traversal (NAT-T)
•Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
•DHCP over IPsec
•DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT
•VPN Protocols:
–IPsec IKEv1, IKEv2, IKEv2 EAP
–IPsec-XAuth
–DrayTek SSL VPN
–OpenVPN
–WireGuard – New!
–GRE over IPsec
–PPTP
–L2TP, L2TP over IPsec

Bandwidth Management
•IP-based Bandwidth Limit
•IP-based Session Limit
•User-based Data Quota
•QoS (Quality of Service):
–Classify via TOS, DSCP, 802.1p, IP Address, Service Type
–4 Priority Queues
–App QoS
–VoIP Prioritization

Management
•Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
•Config File Export & Import
•Import Config from Vigor 2926
•Auto Backup Config to USB Storage – New!
•Firmware Upgrade via TFTP, HTTP, TR-069
•2-Level Administration Privilege
•Access Control Features: Access List, Brute Force Protection
•Syslog
•SMS, E-mail Notification Alert
•SNMP: v1, v2c, v3
•Managed by VigorACS
•Router Central Management Features:
–AP Management: Up to 20 VigorAP access points
–Switch Management: Up to 10 VigorSwitch network switches
–VPN Management: Up to 8 Vigor routers
–DrayTek Mesh: Up to 7 VigorAP access points^

Operating Requirements
•Power Requirements: 100-240VAC
•Power Consumption (Watts, maximum): 31.2W
•Temperature Operating: 0 °C ~ 45 °C
•Storage: -25 °C ~ 70 °C
•Humidity 10% ~ 90% (non-condensing)
•Operating Power: DC 12V (via external PSU, supplied)
•Rack Mountable (Optional Vigor RM1 mounting bracket required)
•Wall Mountable

Physical Specifications
•Dimensions:
–241mm Width
–165mm Depth
–44mm Height
•Weight: 670g (‘LAX’ model)

Box Contents
•Vigor 2927Lax 5G router
•Quick Start Guide
•Screws & wall plugs for wall mounting
•2m Cat-5e RJ-45 Network Cable
•2x Detachable Wireless LAN Antennas
•4x Detachable LTE Antennas
•4x 1m LTE Extension Base
•DC 12V Power Supply with UK Plug
RoHS, UKCA & CE Compliant

Warranty:
•Standard: Two (2) Year, RTB
•VigorCare Extended Warranty
–VigorCare B3 3 Year Subscription: VCARE-B3
–VigorCare B5 5 Year Subscription: VCARE-B5

*Subscription required
^ – visit the DrayTek Mesh Model Compatibility page for mesh compatibility details

Customers also searched for v2927lax-5g-k / v2927lac-5g-k / EAN 714735999248