DrayTek 2135ac router

SKU: DRAY-Vigor-2135ac
DIMENSIONS: 8.1x5.1x1.6
Vigor2135ac is a broadband firewall and a VPN router. With hardware accelerator, it delivers up to 940 Mbps performance without sacrificing bandwidth control features. It's also equipped with business-grade features, including web content filtering, Route Policy, App-based QoS and lots more, and is perfect for professional smart homes/SOHO users who would like to take full control of their own network. The model includes built-in 11ac Wave 2 wireless standard and fiber WAN.
VPN (Virtual Private Network)

Build a secure and private tunnel from the LAN of Vigor2135 Series to the remote offices and teleworkers over the Internet. Learn more


The VPN works through firewalls providing secure remote access to any network environment. Learn more

VPN Matcher

Helps routers behind NAT to find each other and establish a LAN-to-LAN VPN. Learn more

VoIP Friendly

Vigor2135 Series can do port forwarding and reserve bandwidth for VoIP traffic automatically, making VoIP setup effortless. Setup Guide

Bandwidth Management

Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

Firewall & Content Filter

Filter web pages by URL keyword or web category to block access to insecure or inappropriate contents.

Hotspot Web Portal

Market your business and communicate with the guests while offering hospitality WLAN. Learn more


The free DDNS service for you to access the router by a fixed hostname of your choice. Learn more

Central AP Management

Use the Vigor2135 Series router as a wireless controller to maintain and monitor the VigorAPs. Learn more

Mesh (Wireless model only)

Easily link to other VigorAP to expand the wireless network. Learn more

Manufacturers Warranty - 24 Months from purchase date with proof of sale.


  • WAN Port: 1x Gigabit Ethernet or 1x 100/1000M Fiber SFP (F model)
  • LAN Port: 4x Gigabit Ethernet
  • USB Port : 2x USB 2.0 for 3G/4G/LTE USB modem, storage, printer or thermometer
  • Wireless Antenna: 2x External Dipole, Gain: 4 dBi for 5GHz, 2 dBi for 2.4GHz
  • 2.4G WLAN: 802.11n 2x2 MIMO, Up to 400Mbps Link Rate
  • 5G WLAN: 802.11ac Wave 2 2x2 MU-MIMO, Up to 867Mbps Link Rate



  • NAT Throughput: 600 Mbps
  • NAT Throughput w/ Hardware Acceleration: 940 Mbps
  • IPsec VPN Performance: 150 Mbps (AES 256 bits)
  • SSL VPN Performance: 100 Mbps
  • Max. Number of NAT Sessions: 50,000
  • Max. Concurrent VPN Tunnels: 2


Internet Connection

  • IPv4 PPPoE, DHCP, Static IP, PPTP/L2TP
  • IPv6 PPP, DHCPv6, Static IP, TSPC, AICCU, 6rd, 6in4 Static Tunnel
  • 802.1p/q Multi-VLAN Tagging
  • Multi-VLAN/PVC
  • 3G/4G/LTE WAN with USB modem
  • WAN Failover
  • Connection Detection: ARP, Strict ARP, Ping
  • WAN Data Budget
  • Dynamic DNS
  • DrayDDNS
  • LAN Management



  • 802.1q Tag-based, Port-based
  • Max. Number of VLAN: 8
  • Number of LAN Subnet: 4
  • DHCP Server Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
  • Wired 802.1x Authentication
  • Port Mirroring
  • Local DNS Server
  • Conditional DNS Forwarding
  • Hotspot Web Portal
  • Hotspot Authentication Click-Through, Social Login, SMS PIN, Mail PIN, RADIUS, External Portal Server



  • Routing: IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2
  • Policy-based Routing Protocol, IP Address, Port, Domain, Country
  • DNS Security (DNSSEC)
  • IGMP: IGMP v2/v3, IGMP Proxy, IGMP Snooping & Fast Leave
  • SMB File Sharing (Requires external storage)



  • LAN-to-LAN
  • Teleworker-to-LAN
  • Protocols: PPTP, L2TP, IPsec, L2TP over IPsec, SSL, IKEv2, IKEv2-EAP, IPsec XAuth, OpenVPN
  • User Authentication: Local, RADIUS, mOTP
  • IKE Authentication : Pre-Shared Key, X.509
  • IPsec Authentication: SHA-1, SHA-256
  • Encryption: MPPE, DES, 3DES, AES128, AES192, AES256
  • Single-Armed VPN
  • NAT-Traversal (NAT-T)
  • DrayTek VPN Matcher


Firewall & Content Filtering

  • NAT Port Redirection, Open Ports, Port Triggering, DMZ Host, UPnP
  • ALG (Application Layer Gateway): SIP, RTSP, FTP, H.323
  • VPN Pass-Through: PPTP, L2TP, IPsec
  • IP-based Firewall Policy
  • Content Filtering: Application, URL, DNS Keyword, Web Features, Web Category* (*: subscription required)
  • DoS Attack Defense
  • Spoofing Defense


Bandwidth Management

  • IP-based Bandwidth Limit
  • IP-based Session Limit
  • QoS (Quality of Service): TOS, DSCP, 802.1p, IP Address, Port, Application
  • VoIP Prioritization
  • APP QoS


Wireless LAN

  • Number of SSID: 4 per radio band
  • Security Mode: OWE, WEP, WPA, WPA2, Mixed(WPA+WPA2), WPA3
  • Authentication: Pre-Shared Key, 802.1X
  • WDS: Repeater (5GHz Only)
  • Access Control: Access List, Client Isolation, Hide SSID, WLAN Scheduling
  • AirTime Fairness
  • Band Steering
  • MU-MIMO: (5GHz Only)
  • WMM



  • Local Service : HTTP, HTTPS, Telnet, SSHv2, FTP, TR-069
  • Config File Export & Import
  • Config File Compatibility: Vigor2132 Series, Vigor2133 Series
  • Firmware Upgrade: TFTP, HTTP, TR-069
  • 2-Level Administration Privilege
  • Access Control: Access List, Brute Force Protection
  • Notification Alert: SMS, E-mail
  • Netflow: (v5, v9, IPFIX)
  • SNMP: v1, v2c, v3
  • Syslog
  • Managed by VigorACS
  • Central AP Management: 2 VigorAP
  • Mesh Network: 7 VigorAP



  • Power Supply: DC 12V @ 1-2A
  • Max. Power Consumption: 18 watts (Vac model)
  • Dimension: 207mm x 131mm x 42mm
  • Weight: 440g (Vac model)
  • Operating Temperature: 0 to 45°C
  • Storage Temperature: -25 to 70°C
  • Operating Humidity (non-condensing): 10 to 90%
  • Certificate: CE FCC NCC