Expired

Vigor 2135ax

High-Performance VPN SOHO Firewall Router

with 802.11ax Wi-Fi

Expired

FTTP Gigabit Ethernet Router
AX3000 – Wi-Fi 6 Dual Band Wireless
2 LAN-to-LAN & Remote Teleworker VPN Tunnels
DrayTek SSL and OpenVPN support
4 Gigabit RJ-45 LAN Ports
4 LAN Subnets with VLANs (Port-based / 802.1q)
IPv6 and IPv4 Compatible
SPI Firewall and Content Filtering
Optional VigorCare Available
Can be centrally Managed by VigorACS

Overview

Key Features & Benefits

Gigabit Ethernet WAN for Fibre Broadband

Make full use of Fibre Broadband with the Vigor 2135ax’s Gigabit WAN. Ideal performance for Home and Small Office applications, where Firewall, Content Filtering and Quality of Service can be managed.

Benefits: Unleash the full potential of Fibre broadband. High speed, Gigabit CPE with flexible application.

Wi-Fi 6 - AX3000 Performance

Wi-Fi 6 wireless provides gigabit Wi-Fi with reliable throughput. Ideal for time-sensitive video conferencing, low latency gaming and handling 4K Ultra-HD streaming, without buffering.

Benefits: Improve wireless performance. Built with the latest technologies.

Quality of Service with App QoS

Prioritise essential services easily with DrayTek's App QoS system and Auto-VoIP prioritisation. Customise QoS for your network with four QoS priority queues.

Benefits: Ensures the best quality and overall performance from your Internet connections.

High-Performance VPN Router for SMB

Securely connect remote sites at high speed, up to 2 VPN tunnels. Connect remote workers to network resources and secure connectivity, with DrayTek SSL VPN and OpenVPN support.

Benefits: Fast and Secure network access to enable working from home and remote work.

Feature Packed Router

Take advantage of DrayTek’s rich feature set and useful functionality such as Route Policy, Quality of Service, Firewall, VPN Matcher, DrayDDNS and more.

Benefits: Advanced DrayTek router functionality solves many complex networking issues.

Hardware NAT & Routing with Hardware QoS

The accelerator supports up to 4k NAT and routing connections. With acceleration enabled, Vigor2135’s firewall performance can reach 940Mbps, while still meeting high expectation of QoS quality. Easily prioritize critical apps, and always keep VoIP in 1st priority.

Benefits: Up to 940 Mbps throughput helps get the most out of your fibre broadband connection.

The Ideal SoHo VPN Router for Full Fibre Connections

The DrayTek Vigor 2135ax Ethernet VPN routers are ideal for Small Office and Home Office networks. Featuring powerful Firewall and Content Filtering, configurable Quality of Service and an array of VPN capabilities, with the performance to make full use of FTTP Fibre Broadband.

The inclusion of Wi-Fi 6 technology in the Vigor 2135ax model provides a reliable, highly integrated and reliable connectivity solution for SoHo networks.

Features

Full Fibre Ethernet Router

Reliable and fast Internet connectivity with Failover backup WAN and powerful Route Policy.

Wi-Fi 6 AX3000 Wireless Network

Featuring Wi-Fi 6 with up to 3 Gigabits link rate for real Gigabit wireless.

4 Gigabit LAN Ports with VLANs

4 LAN ports and 4 LAN subnets allow for implementation of complex & secure networks.

Firewall & Content Filtering

Manage Internet access with Firewall, App Enforcement & Category-based Web Filtering.

DrayDDNS with LetsEncrypt Certificates

Free DrayDDNS address for each router, with automated LetsEncrypt SSL/TLS Certificates.

Multi-Purpose USB Ports

Connect 4G modem, USB storage, USB thermometer and USB printers to share resources.

Powerful SoHo VPN Router

Connect up to 2 Remote Dial-In User tunnels, Site-to-Site or connect to VPN services.

VPN Matcher

Break through NAT and CG-NAT with DrayTek's VPN Matcher service for LAN to LAN and Teleworker VPNs.

DrayTek SSL VPN

Access the Vigor 2135ax's network remotely with a securely TLS encrypted VPN tunnel.

VigorACS Central Management

Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.

Quality of Service with App QoS

Prioritise latency-sensitive applications such as Teams and Zoom, quickly & easily with App QoS.

Centralised LAN Management

Manage and provision 2 DrayTek VigorAPs through the router.

Full Fibre Ethernet Router

The Vigor 2135ax is an Ethernet WAN router with Gigabit performance, allowing you to make full use of DrayTek's advanced feature set, with Quality of Service, VPN and Content Filtering. Connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN.

Either connection, or a 4G USB modem can be used as the primary or Failover connections, so that if the main Internet connection goes down, the Vigor 2135ax can use its backup connections to guarantee reliable Internet access and VPN connectivity.

The 2135ax adds 802.11ax wireless, providing fast wireless coverage to your network's computers and devices.

Route Policy - Routing Management for WAN & VPN

The Vigor 2135ax provides full policy-based control of where and how outbound traffic is routed with Route Policy, to send traffic through VPN services and alternative LAN gateways:

VPN Routing	Send all or select traffic through VPN services.
Hostname Routing	Route access to individual websites, Internet domains (i.e. www.bbc.co.uk) and hostnames through a VPN tunnel or a specific WAN.
Service Routing	Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel.
Failover & Failback	Extensive control of Failover with multiple Failover rules and paths. Manage how connections are moved back to the primary connection, after a failover has occurred with Failback settings.

Powerful SoHo VPN Router

DrayTek's Vigor routers feature extensive VPN (Virtual Private Networking) capabilities. The Vigor 2135ax is no exception, its VPN capabilities are well suited to SoHo (small office, home office) environments. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office.

The Vigor 2135ax allows you to make full use of Fibre broadband with VPN. Up to 150 Mbps of IPsec VPN throughput for fast and secure connections, to VPN services and other offices.

Connect 2 VPN tunnels concurrently to access remote resources securely. Connect the Vigor 2135ax in a branch office or home office to a head office for seamless access to network resources.

It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients. Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, DrayTek's SSL VPN and L2TP for both LAN to LAN and Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with OpenVPN.

User management for Dial-In Teleworkers is managed through the router's web interface, with mOTP 2-factor authentication available for IPsec, L2TP and SSL VPN Teleworker connections.

Connecting Remote Sites with LAN to LAN VPN

Supporting up to 2 concurrently active VPN tunnels and 200 Mbps of IPsec VPN throughput, the Vigor 2135ax series is ideal as a branch-office or home-office router, to connect with a head office router such as the Vigor 3910.

Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.

DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN

Connect up to 2 DrayTek SSL VPN tunnels. These encrypted tunnels securely link teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - similar to the HTTPS security that's used for most secure websites on the internet such as on-line banking and shopping services.

Teleworkers can connect with a secure SSL VPN tunnel to the DrayTek Vigor 2135ax, using the free DrayTek Smart VPN Client app. Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices.

Download the SmartVPN client and learn more about DrayTek SSL VPNs here.

Connect VPNs from behind NAT with DrayTek's VPN Matcher

A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public Internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible.

DrayTek's new VPN Matcher service helps DrayTek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two DrayTek VPN routers that are behind NAT and could not normally establish a VPN tunnel.

Connect an OpenVPN Teleworker to a DrayTek router behind NAT

Connect two DrayTek router's behind NAT with a LAN-to-LAN VPN

AX3000 Wireless LAN

The Vigor 2135ax provides Wi-Fi 6 (802.11ax) simultaneous Dual-Band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its Antennas streaming data to different devices at once, improving efficiency over standard 802.11ax wireless and allowing the router to effectively serve more wireless clients.

With firmware 4.4.3, the Vigor 2135ax wireless router can be used as part of DrayTek's Mesh wireless system, allowing the router to work as the Mesh Root, providing Internet access and management of Mesh VigorAPs directly. For product compatibility, please visit our features compatibility page.

4 Gigabit LAN Ports with VLANs

The Vigor 2135ax provides 4 Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage.

Up to four LAN subnets and VLANs allow the Vigor 2135ax to manage guest networks that are fully separated from internal networks and data. Or any other configuration that can use up to four subnets, whether that's a separate LAN subnet to isolate printers, IoT and other smart devices from computers and servers, or simply providing multiple IP networks through the one router. Each network can have its own Content Filtering, Firewall, Quality of Service and Route Policy configurations.

Vigor 2135ax routers have full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support tagged VLANs. Such as the DrayTek VigorSwitch G2100 10-port switch, for additional network ports and features.

The Wireless LAN can also utilise VLANs, making the same Guest & Private networks possible simply by using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 906 to do the same, spanning the router's own wireless and any connected wireless APs.

Designed for Central Management

The Vigor 2135ax can be centrally managed along with VigorAP's and switches, with the VigorACS central management platform.

This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.

For full details of VigorACS, click here.

Robust & Comprehensive IPv4 / IPv6 Firewall

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.

The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.

The Vigor 2135ax supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.

Web Content Filtering with DNS Filter

GlobalView Categories

The content control features of the Vigor 2135ax allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.

Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).

Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.

DrayDDNS - DrayTek Dynamic DNS Address

DrayTek provides a free Dynamic DNS address to each Vigor 2135ax router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "vigor2135.drayddns.com".

DrayTek DrayDDNS with LetsEncrypt Certificate

This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2135ax router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.

The Vigor 2135ax can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages and automates the certificate process. Keeping the certificate up to date and ready for use with SSL VPN and other services.

Quality of Service with App QoS

Prioritise latency-sensitive applications on your network with Quality of Service.

App QoS simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom and Skype.

Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support

Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.

Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.

Multi-Purpose USB Ports

The Vigor 2135ax has two USB ports which can be used for 4G/LTE modem, USB temperature sensor, storage, or a printer for shared access.

Connect a USB 4G/LTE modem to the Vigor 2135ax and use mobile broadband as your Internet connectivity. That can be your primary connection or the router can switch over to 4G, in the case of ADSL/VDSL outage so that you're always connected.

Use your Vigor 2135ax as a network attached storage (NAS) by connecting a USB flash drive or hard drive. With Windows networking (SMB) & FTP connectivity to allow Windows, Apple, Android and Linux devices to access the router's storage, locally and through VPN.

Central AP Management

The DrayTek Vigor 2135ax series routers can manage 2 DrayTek VigorAP access points with Central AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network.

This enables you to centrally control, manage and administer a full DrayTek network installed around the home or office, through the router's web interface. Ideal for local or remote management.

For further details of the central management feature, click here.

Screenshots

Vigor 2135ax Web Interface

Dashboard

View the status of the Vigor 2135ax in one place from the router's Dashboard.

Quality of Service

Ensure efficient use of your Internet connections with QoS. Prioritise important traffic over bulk traffic and allocate bandwidth to services:

Advanced App QoS

Easily prioritise or de-prioritise specific services with DrayTek's App QoS system, which detects an application's 'signature' network traffic:

CSM - Web Content Filtering, URL Filtering & App Enforcement

Control access to the Internet, either for all users or specific networks / clients only. Category based filtering greatly simplifies the task of filtering Internet access:

Policy-based Routing

Configure Route Policy rules to control how outbound traffic is routed. Send traffic from specified LAN IPs, to Internet domains (i.e. www.bbc.co.uk) through a specific WAN interface, VPN or LAN Gateway:

Data Flow Monitor

Live view of Internet bandwidth usage, showing both WAN usage and which users are using bandwidth. Use the Block button to temporarily stop Internet access to disruptive clients:

Firewall Diagnostics

Quickly check how traffic is handled by the firewall to troubleshoot issues:

Specifications

Vigor 2135ax Router

Key Specifications

Gigabit Ethernet WAN Router with Failover
Up to 940Mbps Firewall Throughput for Ethernet WAN
4 Gigabit LAN Ports
AX3000 - 11ax Dual Band Wireless
4 LAN Subnets with VLANs (Port-based / 802.1q)
SPI Firewall and Content Filtering
Up to 150Mbps IPsec VPN Throughput
2 LAN-to-LAN or Remote Teleworker VPN Tunnels
DrayTek SSL VPN and OpenVPN support
Optional VigorCare Available
Can be centrally Managed by VigorACS

UK Product Code	EAN	Product Name	Product Description
V2135AX-K	4710484745835	Vigor 2135ax (UK/IE)	Vigor 2135ax Ethernet Router with Wi-Fi 6 AX3000 Wireless

The EAN is a barcode number which identifies the unique specific product type. It is separate to the product serial number which is unique to each product. The EAN will also appear on your product box when you receive it so you can double check that you have been sent the right product.

These product codes are for UK/Irish products only. Please check with your local DrayTek office for the correct part nos. for your region if you are not in the UK/IE to ensure that you get the correct hardware and local support/warranty.

Technical Specification (UK Hardware Spec.)

Physical Interfaces

WAN1 Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
LAN Ports: 4x Gigabit Ethernet (1G/100M/10M), RJ-45
2x USB 2.0 Port for 3G/4G Modem (not included), USB storage, thermometer or Printer
Wireless On / Off / WPS button
Recessed Factory Reset button

Antenna Specifications

Wireless Antennas:
- 2x External Dipole Antennas
- 5GHz Gain: 2.5 dBi
- 2.4GHz Gain: 2.7 dBi

Performance

Router Performance:
- 940 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
- 600 Mb/s NAT Throughput per Ethernet WAN without Hardware Acceleration
- 50,000 NAT Sessions
VPN Performance:
- 150 Mb/s IPsec (AES256) VPN Throughput
- 100 Mb/s SSL VPN Throughput
- Max. 2 Concurrent VPN Tunnels

Internet Connection

Hardware Acceleration
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Connection Detection: PPP, ARP Detect, Ping Detect
WAN Data Budget
Dynamic DNS
DrayDDNS – with automated LetsEncrypt Certificates
Full Feature-set Hardware Acceleration:
- Hardware Accelerated Quality of Service
- WAN Data Budget
- Traffic Graph & Data Flow Monitor
- Bandwidth Limit
IPv4 Connection Types: PPPoE, DHCP, Static IP, PPTP/L2TP
IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
- USB 4G/LTE Modem: TSPC, AICCU, DHCPv6, Static IPv6

Wireless Features

AX3000 Wi-Fi 6 Wireless:
- 802.11ax 2x2 wireless access point
- Compatible with 802.11a/b/g/n/ac wireless
- Dual-band (2.4/5Ghz) simultaneous wireless
- Up to 2402Mbps PHY rate with 5GHz
- Up to 574Mbps PHY rate with 2.4GHz (256-QAM)
- Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
- MU-MIMO
Up to 4 SSIDs per radio band
Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
Wireless Optimisation: Airtime Fairness, AP-Assisted Mobility, Band Steering
Bandwidth Management (Per Station / Per SSID)
WMM (Wireless MultiMedia)
WPS - WiFi Protected Setup
Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
Wireless Security:
- WPA2
- WPA3 – New!
- Pre-Shared Key authentication
- WEP/WPA for Legacy Clients
- Access Control – Blacklist / Whitelist client MAC addresses per SSID

Firewall & Content Filtering

IP-based Firewall Policy
User-based Time Quota
DoS Attack Defence
Spoofing Defence
Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter (requires GlobalView subscription)
- DoH (DNS over HTTP) & DoT (DNS over TLS) Filtering - New!

NAT Features

NAT Port Redirection
Open Ports
Port Triggering
DMZ Host
UPnP
ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
VPN Pass-Through: PPTP, L2TP, IPsec

LAN Management

802.1q Tag-based, Port-based VLAN
Up to 4 LAN Subnets
Up to 4 VLANs
DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 253 addresses per subnet
Wired 802.1x Port Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding

Networking Features

Policy-based Routing: Protocol, IP Address, Port, Domain/Hostname, Country
DNS Security (DNSSEC)
Local RADIUS server
SMB File Sharing (Requires external USB storage)
Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
Compatible with IPTV and ISP Video on Demand services (YouView, Sky Q)
Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing

VPN Features

2 Concurrent active VPN Tunnels
LAN-to-LAN - Dial-Out VPN Client / Dial-In VPN Server
Teleworker-to-LAN – Dial-In VPN Server
IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
Encryption: MPPE, DES, 3DES, AES (128/192/256)
Authentication: SHA-256, SHA-1
Dead Peer Detection (DPD)
IPsec NAT-Traversal (NAT-T)
Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
DHCP over IPsec
DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- DrayTek SSL VPN
- OpenVPN
- PPTP for legacy applications
- L2TP, L2TP over IPsec
User Authentication:
- Local
- RADIUS
- mOTP - Mobile One Time Password
- TOTP - Time-based One Time Password, compatible with Google Authenticator - New!

Bandwidth Management

IP-based (IPv4 & IPv6) Bandwidth Limit
App-based Bandwidth Limit - New!
IP-based (IPv4 & IPv6) Session Limit

Quality of Service (QoS)

Classify via TOS, DSCP, 802.1p, IP Address, Service Type
4 Priority Queues
App QoS
VoIP Prioritization
Class-based Outbound Traffic Tagging: DSCP & IP Precedence

Management

Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
Auto Backup Config to USB Storage – New!
Firmware Upgrade via TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control Features: Access List, Brute Force Protection
Syslog
SMS, E-mail Notification Alert
SNMP: v1, v2c, v3
Managed by VigorACS

Router Central Management Features

AP Management: 2 VigorAP access points

Operating Requirements

Wall or Shelf Mountable with included fittings
Temperature Operating: 0 °C ~ 45 °C
Storage: -25 °C ~ 70 °C
Humidity 10% ~ 90% (non-condensing)
Power Consumption: 23.6 Watts maximum
Operating Power: DC 12V (via external PSU, supplied)
Power Requirements : 100-240VAC
Dimensions:
- 155mm Width
- 50mm Depth
- 194mm Height

Warranty

Two (2) Years RTB
Optional VigorCare Enhanced Warranty Available
- VigorCare A3 3 Year Subscription: VCARE-A3
- VigorCare A5 5 Year Subscription: VCARE-A5

Box Contents

Vigor 2135ax router
Quick Start Guide
Screws & wall plugs for wall mounting
2m Cat-5e RJ-45 Network Cable
DC 12V Power Supply with UK Plug

* - visit the DrayTek Mesh Model Compatibility page for details.

Share this link

Overview

Key Features & Benefits

Gigabit Ethernet WAN for Fibre Broadband

Wi-Fi 6 - AX3000 Performance

Quality of Service with App QoS

High-Performance VPN Router for SMB

Feature Packed Router

Hardware NAT & Routing with Hardware QoS

The Ideal SoHo VPN Router for Full Fibre Connections