Apart from the Gigabit Ethernet WAN port (P1) for broadband services that use an Ethernet interface (such as UFB in New Zealand or FTTP, FTTC, HFC, Satellite, and Fixed Wireless in Australia), all models feature a triple-combo port with two additional WAN options: a 10GbE SFP+ WAN slot (P2), a 10GbE Ethernet WAN/LAN port (P3), and a 10GbE SFP+ LAN slot (P4). Any two of these three ports can be used simultaneously, and port P3 can also be configured as a high-speed LAN port when not serving as the WAN. 4G LTE connectivity is also featured (via an attached 4G USB modem), and all WAN interfaces can be configured for use in Load Balance mode or Failover mode.

Equipped with an object-oriented SPI Firewall, IPv6, 50 simultaneous IPsec/OpenVPN/WireGuard VPN tunnels, Tag-based VLAN, multiple subnets and a set of traffic management features, these routers are an excellent choice for SOHO to business markets.

Central Management features provide a centralised console to manage networks, including Virtual AP Controller to configure and to manage up to 20 DrayTek wireless Access Points, and Virtual Switch Controller to configure and to manage up to 10 DrayTek switches.

These routers can be mounted using a 1RU rack mount bracket (DR101) on a standard 19¡± rack or cabinet.

Interface

WAN Load Balancing

Vigor2928 offers high throughput with load balancing, making it ideal for fibre and 10 Gigabit Internet. All active WAN interfaces join the Load Balance Pool to optimise bandwidth utilisation

Seamless Failover

Supports automatic WAN failover to maintain seamless internet connectivity during ISP outages, reducing downtime and associated costs.

Policy-Based Routing

Routing policies allows user to assign specific WAN interfaces to applications, VoIP, or traffic by source or destination, enhancing network efficiency and performance.

Precise Device Authentication

Leverages each device¡¯s unique IP and MAC address to establish accurate, reliable identification and authentication.

Role-Based Access Control

IAM assigns access permissions based on user roles, enabling IT teams to enforce secure access policies aligned with departments, authority levels, and responsibilities.

Holistic Security

Combines user, device, and session-based policies to deliver layered protection, strengthening security without reliance on a single factor.

Enhanced Incident Response

When a security incident occurs, you can quickly identify affected devices and take prompt, targeted action.

DrayTek¡¯s Port Knocking technology adds an advanced stealth security layer by keeping critical network services completely invisible to unauthorised users. Instead of exposing management ports or VPN services to the public internet, Port Knocking requires a predefined ¡°knock¡± sequence before access is granted, ensuring that only trusted users can discover and use these services.

By integrating three powerful functions, Port Knocking provides robust protection against port scanning, brute-force attacks, and unauthorised access.

Port Redirection

• Conceal real service ports from the public internet
• Redirect unauthorised requests to non-existent services to prevent detection

Secure Router Management Access

• Allow router management access only after a successful knock sequence or through a secure internal server
• Completely eliminate direct exposure of the management interface to the open internet

VPN Service Control (WAN Binding)

• Keep VPN services invisible until the correct knock sequence is received
• Bind VPN availability to specific WAN interfaces and authorised IP addresses

How It Works

• By default, all protected ports remain closed and undetectable
• After the correct knock sequence is received, selected ports open temporarily for authorised access
• Once the configured time window expires, services automatically return to hidden mode

With DrayTek Port Knocking, your network operates in stealth mode, invisible to attackers yet instantly accessible to authorised administrators and remote users. It is the ideal solution for organisations that demand high-level security without compromising accessibility.