DrayTek V2766AX-K Vigor 2766ax WiFi 6 AX SoHo Firewall Triple-WAN VDSL/ADSL/G.FAST Modem Router

Key Specifications
G.Fast (Ultrafast Fibre) VDSL2 (Superfast Fibre) ADSL2+ and Ethernet Router with Failover
Up to 940Mbps Firewall Throughput for Ethernet WAN
4 Gigabit LAN Ports
AX3000 - 11ax Dual Band Wireless
4 LAN Subnets with VLANs (Port-based / 802.1q)
SPI Firewall and Content Filtering
Up to 150Mbps IPsec VPN Throughput
2 Dial-Out LAN-to-LAN or Remote Teleworker VPN Tunnels
DrayTek SSL VPN and OpenVPN support
Optional VigorCare Available
Can be centrally Managed by VigorACS

G.Fast VDSL and Ethernet Router
The Vigor 2766 is a G.Fast VDSL or Ethernet WAN router with Gigabit performance allowing you to make full use of DrayTek's advanced feature set with Quality of Service VPN and Content Filtering. Connect the Vigor 2766 to Superfast Fibre with its integrated G.Fast and VDSL modem. Or connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN.

Either connection or a 4G USB modem can be used as the primary or Failover connections so that if the main Internet connection goes down the Vigor 2766 can use its backup connections to guarantee reliable Internet access and VPN connectivity.

4 Gigabit LAN Ports with VLANs
The Vigor 2766ax provides 4 Gigabit LAN ports for wired links to Computers Servers and Network Attached Storage.

4 LAN subnets and VLANs allow the Vigor 2766 to provide a guest network fully separate from internal network data. Or any other configuration that can use 4 subnets whether that's 4 wireless networks with different IP ranges or a separate LAN subnet for printers and server. Each network can have its own Content Filtering Firewall Quality of Service and Route Policy configurations.

The router has full support for 802.1Q VLAN tagging so that these subnets can be passed to other devices that support VLAN tags such as the DrayTek VigorSwitch G1080 8-port switch for additional network ports.

The Wireless LAN also links to these VLANs making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point such as the VigorAP 906 to do the same spanning the router's own wireless and any connected wireless APs.

Powerful SoHo VPN Router
DrayTek's Vigor routers feature extensive VPN (Virtual Private Networking) capabilities. The Vigor 2766 series is no exception its VPN capabilities are well suited to SoHo (small office home office) environments. A VPN enables you to link remote offices and branch offices back to HQ or home-based/mobile teleworkers back to your office.

The Vigor 2766 allows you to make full use of Fibre broadband with VPN. Up to 150 Mbps of IPsec VPN throughput for fast and secure connections to VPN services and other offices.

Connect 2 VPN tunnels concurrently to access remote resources securely. Connect the Vigor 2766 in a branch office or home office to a head office for seamless access to network resources.

Connecting Remote Sites with LAN to LAN VPN
Supporting up to 2 concurrently active VPN tunnels and 150 Mbps of IPsec VPN throughput the Vigor 2766 series is ideal as a branch-office or home-office router to connect with a head office router such as the Vigor 3910.

Once connected they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop file sharing and seamless access to other resources and devices.

DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN
Connect up to 2 DrayTek SSL VPN tunnels. These encrypted tunnels securely link teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - similar to the HTTPS security that's used for most secure websites on the internet such as on-line banking and shopping services.

Teleworkers can connect with a secure SSL VPN tunnel to the DrayTek Vigor 2766 using the free DrayTek Smart VPN Client app. Available for Windows macOS Apple iOS (iPad iPhone) and Android devices.

Connect VPNs from behind NAT with DrayTek's VPN Matcher
A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public Internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT) connecting to that VPN server may be impossible.

DrayTek's new VPN Matcher service helps DrayTek routers behind NAT to allow Dial-In Teleworkers to connect or connect two DrayTek VPN routers that are behind NAT and could not normally establish a VPN tunnel.

AX3000 Wireless LAN
The Vigor 2766ax provides Wi-Fi 6 (802.11ax) simultaneous Dual-Band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time with each of its Antennas streaming data to different devices at once improving efficiency over standard 802.11ax wireless and allowing the router to effectively serve more wireless clients.

Designed for Central Management
The Vigor 2766 series can be centrally managed along with VigorAP's and switches with the VigorACS central management platform.

This scalable solution provides visibility control and reporting of your entire DrayTek product estate ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates VPN management and alarms for connectivity or other issues.



Physical Interfaces
WAN1: G.Fast / VDSL2 / VDSL2 35b / ADSL2+ RJ-11
WAN2/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M) RJ-45
WAN3: USB 2.0 Port for 3G/4G Modem (not included)
LAN Ports: 4x Gigabit Ethernet (1G/100M/10M) RJ-45 (3x with WAN2 enabled)
2x USB 2.0 Port for USB storage thermometer or Printer
2x External Dipole Wireless antennas
Wireless On / Off / WPS button
Recessed Factory Reset button

Antenna Specifications
Wireless Antennas
2x External Dipole
5GHz Gain: 2.5 dBi
2.4GHz Gain: 2.7 dBi

Performance
Router Performance:
1.3Gb/s Max Sync Rate with G.Fast (dependant on ISP & Exchange equipment)
100 Mb/s Max Sync Rate with VDSL2
300 Mb/s Max Sync Rate with VDSL2 35b
950 Mb/s NAT Throughput for Ethernet WAN with Hardware Acceleration
700 Mb/s NAT Throughput per WAN without Hardware Acceleration
50 000 NAT Sessions

VPN Performance:
150 Mb/s IPsec (AES256) VPN Throughput
80 Mb/s SSL VPN Throughput
Max. 2 Concurrent VPN Tunnels

Internet Connection
Failover / Backup WAN
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Connection Detection: PPP ARP Detect Ping Detect
WAN Data Budget
Dynamic DNS
DrayDDNS – with automated LetsEncrypt Certificates

Full Feature-set Hardware Acceleration:
Hardware Accelerated Quality of Service
Multi-WAN Data Budget
Traffic Graph & Data Flow Monitor
Bandwidth Limit

G.Fast VDSL & ADSL2+ Features
BT Infinity Option 1 & Option 2 Compatible
Compliant with Openreach SIN 527 & SIN 498
Auto Detection of G.Fast VDSL and ADSL line modes
Support for G.INP & Vectoring

G.Fast Standards:
ITU-T G.9700 G.9701 G.Fast
Profile: 212MHz & 106MHz

VDSL Standards:
ITU-T G.993.1 VDSL
ITU-T G.993.2 G.997.1 VDSL2
Band Plan: G.998 G.997
Annex A Annex B Annex C
VDSL2 Profile: 8a 8b 8c 8d 12a 12b 17a 35b
OLR UPBO DPBO Supported
US0 Supported
Loop Diagnostic Mode
DSL Forum WT-114

ADSL2 Standards:
ITU-T G.992.3 ADSL2
ITU-T G.992.5 ADSL2+
ATM Protocols:
RFC-2684/RFC-1483 Multiple Protocol over AAL5
RFC-2516 PPP over Ethernet
RFC-2364 PPP over AAL5
Support for RFC4638 for MTU up to 1500

Wireless Features
AX3000 - 11ax MU-MIMO Wireless:
802.11ax 2x2 wireless access point
2.4GHz: 2x2 MIMO with 2.7 dBi Antenna Gain
5GHz: 2x2 MU-MIMO with 2.5 dBi Antenna Gain
Backwards Compatible with 802.11a/b/g/n/ac wireless
Dual-band (2.4/5Ghz) simultaneous wireless
Up to 2402Mbps PHY rate with 5GHz
Up to 574Mbps PHY rate with 2.4GHz (256-QAM)
Channel Bandwidth: 20/40MHz for 2.4GHz 20/40/80/160MHz for 5GHz
Up to 4 SSIDs per radio band
Extended 5Ghz Band - Channels 36-48 52-64 100-140
Wireless Optimisation: Airtime Fairness AP-Assisted Mobility Band Steering
Bandwidth Management (Per Station / Per SSID)
WMM (Wireless MultiMedia)
WPS - WiFi Protected Setup
Station Control - Time limited wireless connectivity per Station (e.g. 1 hour)
EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK

Wireless Security:
WPA2
WPA3
Pre-Shared Key authentication
WEP/WPA for Legacy Clients
Access Control – Blacklist / Whitelist client MAC addresses per SSID

Firewall & Content Filtering
IP-based Firewall Policy
DoS Attack Defence
Spoofing Defence

Content Filtering:
Application Content Filter
URL Content Filter
DNS Keyword Filter
Web Features
Web Category Filter (requires GlobalView subscription)

NAT Features
NAT Port Redirection
Open Ports
Port Triggering
DMZ Host
UPnP
ALG (Application Layer Gateway): SIP (configurable) RTSP (configurable) FTP H.323
VPN Pass-Through: PPTP L2TP IPsec

LAN Management
802.1q Tag-based Port-based VLAN
Up to 4 LAN Subnets
Up to 8 VLANs

DHCP Server:
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
DHCP Pool Count up to 253 addresses per subnet
Wired 802.1x Port Authentication
Port Mirroring
Local DNS Server
Conditional DNS Forwarding

Networking Features
Policy-based Routing: Protocol IP Address Port Domain/Hostname Country
DNS Security (DNSSEC)
Local RADIUS server
SMB File Sharing (Requires external USB storage)
Multicast: IGMP Proxy IGMP Snooping & Fast Leave Bonjour
Compatible with IPTV and ISP Video on Demand services (YouView Sky Q)
Routing Features: IPv4 & IPv6 Static Routing Inter-VLAN Routing

VPN Features
2 Concurrent active VPN Tunnels
LAN-to-LAN - Dial-Out VPN Client
Teleworker-to-LAN – Dial-In VPN Server
User Authentication: Local mOTP
IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
Encryption: MPPE DES 3DES AES (128/192/256)
Authentication: SHA-256 SHA-1
Dead Peer Detection (DPD)
IPsec NAT-Traversal (NAT-T)
Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
DHCP over IPsec
DrayTek VPN Matcher – Connect to a VPN router that’s behind NAT/CG-NAT - New!
VPN Protocols:
IPsec IKEv1 IKEv2 IKEv2 EAP
IPsec-XAuth
DrayTek SSL VPN
OpenVPN
PPTP for legacy applications
L2TP L2TP over IPsec

User Authentication:
Local
RADIUS
mOTP - Mobile One Time Password
TOTP - Time-based One Time Password compatible with Google Authenticator - New!

Bandwidth Management
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service):
Classify via TOS DSCP 802.1p IP Address Service Type
4 Priority Queues
App QoS
VoIP Prioritization

Management
Local Service: HTTP HTTPS Telnet SSH FTP TR-069
Config File Export & Import
Auto Backup Config to USB Storage – New!
Firmware Upgrade via TFTP HTTP TR-069
2-Level Administration Privilege
Access Control Features: Access List Brute Force Protection
Syslog
SMS E-mail Notification Alert
SNMP: v1 v2c v3
Managed by VigorACS

Router Central Management Features:
AP Management: Up to 2 VigorAP access points

Operating Requirements
Wall or Shelf Mountable
Temperature Operating: 0 oC ~ 45 oC
Storage: -25 oC ~ 70 oC
Humidity 10% ~ 90% (non-condensing)
Power Consumption: 24 Watts maximum
Dimensions: 194 x 155 x 50
Operating Power: DC 12V (via external PSU supplied)
Warranty : Two (2) Years RTB
Power Requirements: 220-240VAC

Box Contents
Vigor 2766ax router
Quick Start Guide
Screws & wall plugs for wall mounting
2m Cat-5e RJ-45 Network Cable
DC 12V Po