Draytek Vigor2865 Series User manual

i

ii
Vigor 2865
VDSL 35b Security Firewall
Quick Start Guide
(Non-Wireless models)
Version: 1.1
Firmware Version: V4.0.5.1
Region: United Kingdom & Ireland
For updates and support, visit www.draytek.co.uk
Date: March 20, 2020
Note: Product specification is subject to continuous evolution which may
not always be reflected in current documentation. For the formal specification
and details of the supported features of your product, please refer
only to the web site at www.draytek.co.uk

iii
Safety Instructions and Approval
Safety
Instructions
⚫Read the installation guide thoroughly before you set up the router.
⚫The router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the
router yourself.
⚫Do not place the router in a damp or humid place, e.g. a bathroom.
⚫Do not stack the routers.
⚫The router should be used in a sheltered area, within a temperature
range of +5 to +40 Celsius.
⚫Do not expose the router to direct sunlight or other heat sources. The
housing and electronic components may be damaged by direct sunlight or
heat sources.
⚫Do not deploy the cable for LAN connection outdoor to prevent electronic
shock hazards.
⚫Keep the package out of reach of children.
⚫When you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free
from any defects in workmanship or materials for a period of two (2) years
from the date of purchase from a DrayTek authorized dealer in the
UK/Ireland. Please keep your purchase receipt in a safe place as it serves as
proof of date of purchase. During the warranty period, and upon proof of
purchase, should the product have indications of failure due to faulty
workmanship and/or materials, we will, at our discretion, repair or replace
the defective products or components, without charge for either parts or
labour, to whatever extent we deem necessary tore-store the product to
proper operating condition. Any replacement will consist of a new or
re-manufactured functionally equivalent product of equal value, and will be
offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by external factors, used with
unapproved accessories or subjected to abnormal working conditions.
Warranty applies to hardware only, not software or firmware. Defects which
do not significantly affect the usability of the product will not be covered by
the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof
without obligation to notify any person of such revision or changes.

iv
EU Declaration of Conformity
We DrayTek Corp. , office at No.26, Fu Shing Road, HuKou County, Hsin-Chu Industry Park, Hsinchu
300, Taiwan , R.O.C., declare under our sole responsibility that the product
⚫Product name: VDSL2 Security Firewall
⚫Model number: Vigor2865
⚫Manufacturer: DrayTek Corp.
⚫Address: No.26, Fu Shing Road, HuKou County, Hsin-Chu Industry Park,
Hsinchu 300, Taiwan , R.O.C.
⚫Importer: SEG, 11 Capital Business Park, Borehamwood, Herts, WD6 1GW
is in conformity with the relevant Union harmonisation legislation:
EMC Directive 2014/30/EU , Low Voltage Directive 2014/35/EU , ErP 2009/125/EC and RoHS
2011/65/EU with reference to the following standards
Standard
Version / Issue date
EN 55032
2012+AC:2013 class B
EN 61000-3-2
2014 Class A
EN 61000-3-3
2013
EN 55024
2010+A1:2015
EN 62368
2014+A11:2017
EC No. 1275/2008
2008
Hsinchu 2nd September, 2019Calvin Ma / President .
(place) (date) (Legal Signature)

v
Join the UK mailing list
Users in the UK & Ireland can sign up to our mailing list which goes out
approximately 4 times per year with products news, updates, hints & tips and
offers. For details, please visit www.draytek.co.uk/list
Firmware & Tools Updates
Due to the continuous evolution of DrayTek technology and emerging risks,
router firmware updates may be issued.
Please consult the DrayTek web site for more information on newest firmware,
tools and documents: www.draytek.co.uk (For UK/Ireland)
Regional and Network Compatibility
For all models, please check that you have been supplied with a device intended for your geographic region and
networks. Hardware and software varies by region, as well as local support and warranty services. To be sure of
compatibility and local support, ensure that you are buying the correct product through authorized channels.
The outside of the product’s box will state the region compatibility (e.g. “Applied Region: UK”). If you are unsure,
check with DrayTek or your supplier. The use of unofficial components (e.g. PSUs) or adapting interfaces or the
use of unauthorized software/firmware may cause malfunction, product damage or personal danger and
invalidates your warranty and access to support services.
*The external power supply used for each product will be model dependent.
1
2
3
4
5
6
7
8
9
A
Manufacturer
CWT
CWT
CWT
CWT
CWT
APD
APD
APD
APD
B
Address
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
C
Model identifier
2ABB012F UK
2ABB018F UK
2ABL024F UK
2ABL030F UK
2ABN036F UK
WA-12M12FG
WB-18D12FG
WA-24Q12FG
WA-36A12FG
2ABB012F EU
2ABB018F EU
2ABL024F EU
2ABL030F EU
2ABN036F EU
WA-12M12FK
WB-18D12FK
WA-24Q12FK
WA-36A12FK
D
Input voltage
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
E
Input AC frequency
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
Output voltage DC
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
F
Output current
1.0A
1.5A
2.0A
2.5A
3.0A
1.0A
1.5A
2.0A
3.0A
G
Output power
12.0W
18.0W
24.0W
30.0W
36.0W
12.0W
18.0W
24.0W
36.0W
H
Average active
efficiency
84.9%
86.2%
87.6%
87.8%
89.8%
83.7%
85.4%
88.6%
88.2%
I
Efficiency at low load
10%
73.6%
78.0%
81.3%
83.3%
83.7%
74.5%
80.5%
86.4%
85.4%
J
No-load power
consumption
0.07W
0.07W
0.07W
0.07W
0.07W
0.07W
0.10W
0.07W
0.10W
External power supply (Power Adapter) information. For more updates, please visit www.draytek.co.uk.

vi
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1. Package Contents ................................................................................................ 1
2. Panel Explanation................................................................................................. 2
3. Hardware Installation ........................................................................................... 4
3.1 Network Connection................................................................................................................... 4
3.2 Wall-Mounted Installation........................................................................................................... 5
3.3 Rack Mount Kit Installation......................................................................................................... 6
4. Setup & Configuration.......................................................................................... 7
4.1 Accessing the Router Web Interface.......................................................................................... 7
4.2 WAN1 - ADSL and VDSL2 Connection Setup.......................................................................... 10
4.2.1 PPPoE connection with VDSL and 35b ...................................................................... 10
4.2.2 DHCP / Static IP connection with VDSL and 35b....................................................... 13
4.2.3 PPPoA connection with ADSL / ADSL2+.................................................................... 16
4.3 WAN2 –Ethernet Connection Setup........................................................................................ 17
4.3.1 PPPoE......................................................................................................................... 18
4.3.2 Static or Dynamic IP.................................................................................................... 19
4.4 WAN3 / WAN4 –4G LTE USB Modem Setup.......................................................................... 20
4.4.1 PPP Mode................................................................................................................... 20
4.4.2 DHCP Mode................................................................................................................ 22
5. Getting Further Help........................................................................................... 23
5.1 Additional Feature Setup.......................................................................................................... 23
5.2 Keep up to date with our mailing list ........................................................................................ 23
5.3 Firmware Updates.................................................................................................................... 24
5.4 Security & Router Best Practice............................................................................................... 24

1
1
1. . P Pa ac ck ka ag ge e C Co on nt te en nt ts s
Vigor router
Quick Start Guide
(This document)
RJ-45 Cable (Ethernet)
(Connects to your PC or Switch)
RJ-11 to RJ-11 Cable (Annex A)
(Connects to your DSL line)
UK Power Adapter
The maximum power consumption is 22 Watts.

2
2
2. . P Pa an ne el l E Ex xp pl la an na at ti io on n
LED
Status
Explanation
ACT (Activity)
Off
The router is powered off.
Blinking
The router is ready and operating normally.
WAN2
On
Internet connection is ready for use
Off
Internet connection is offline
Blinking
Data is being transmitted over WAN2
QoS
On
Quality of Service is active
Off
Quality of Service is inactive
USB1~2
On
USB device is connected and ready for use
Off
No USB device is connected
Blinking
Data is being transmitted over USB
DSL
On
DSL connection synchronised
Blinking
Slowly: DSL connection not currently
synchronising or not detected
Quickly: DSL connection is synchronising
WCF
On
Web Content Filter is active. (It is enabled
from [Firewall] > [General Setup]).
Off
Web Content Filter is inactive
VPN
On
At least one VPN tunnel is active
Off
VPN service disabled or no VPN tunnels active
Blinking
Traffic is passing through a VPN tunnel
DMZ
On
DMZ Port is enabled
Off
DMZ Port is not enabled
Blinking
Data is being transmitted through DMZ Port
LED on Connector
WAN2
/ P6
Left
LED
On
Ethernet WAN (RJ45) is connected
Off
Ethernet WAN is disconnected
Blinking
Data is transmitting (sending/receiving)
Right
LED
On
The port is connected with 1000Mbps
Off
The port is connected with 10/100Mbps
LAN
P1~P5
Left
LED
On
Ethernet LAN (RJ45) is connected
Off
Ethernet LAN is disconnected
Blinking
Data is transmitting (sending/receiving)
Right
LED
On
The port is connected with 1000Mbps
Off
The port is connected with 10/100Mbps

3
The port “WAN2 / P6” is switchable. It can be used for LAN connection or WAN
connection according to the settings configured in WUI.
Switch on Rear Side
Interface
Description
Factory Reset
Restore the default settings. Usage: Turn on the router (ACT
LED is blinking). Press gently and hold for more than 5
seconds. When the ACT LED blinks rapidly, release the
button and the router will restart with its factory default
configuration.
USB1~2
Connector for a USB 3G/4G LTE modem, storage, printer or
USB Thermometer
WAN2 / P6
RJ-45 Gigabit Ethernet connector for WAN modem / router
or
RJ-45 Gigabit Ethernet connector for local network devices
LAN P1-P5
RJ-45 Gigabit Ethernet connectors for local network devices
DSL
RJ-11 connector for ADSL or VDSL line
PWR
Connector for the power adapter
ON/OFF
Power Switch. Turns the unit on or off

4
3
3. . H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
This section will guide you through installing the router’s port connections and
fitting the router securely, either to a wall using the supplied mounting hardware,
or into a 19”rack with the optional RM1 rack mounting kit.
Before starting to configure the router, you must first connect up the cables.
3
3. .1 1 N Ne et tw wo or rk k C Co on nn ne ec ct ti io on n
1. ADSL/VDSL Connections: Connect the VDSL/ADSL interface to the Modem
or DSL port of the external splitter/microfilter (not supplied) with the
RJ-11 line cable. In some cases, your RJ-11 DSL socket will be built-into
your phone line socket on the wall and you won’t have a separate
microfilter/splitter.
WAN2 Connections: Connect the cable Modem/DSL Modem/Media
Converter to the WAN port of router with Ethernet cable (RJ-45).
2. LAN Connections: Connect a LAN port of the router to your computer or
switch.
3. Power Supply: Connect the power adapter to the Vigor 2865’s PWR socket
on the rear and plug the power adapter into a suitable mains socket.
Turn the Vigor 2865 on using its power switch.
4. The router will start up. After completing the system test, the ACT LED will
light up and start blinking once per second to indicate that it is ready for
use. (For more detailed information of LED status, please refer to section 2.
Panel Explanation)

5
3
3. .2 2 W Wa al ll l- -M Mo ou un nt te ed d I In ns st ta al ll la at ti io on n
DrayTek Vigor 2865 series routers have keyhole type mounting slots on the
underside to hang the router on, using screws attached to a wall or other
surface.
1. A template is provided in the Vigor router packaging box to enable you to
space the screws correctly on the wall
2. Place the template on the wall in the desired position and drill holes through
the cardboard template at the marked points
3. Fit screws into the wall using the appropriate type of wall plug for the wall
material
Note
The recommended drill diameter is 6.5mm (1/4”).
4. With the screws installed, the router can be slotted into place

6
3
3. .3 3 R Ra ac ck k M Mo ou un nt t K Ki it t I In ns st ta al ll la at ti io on n
The DrayTek Vigor2865 series router can be fitted securely in a standard 19” 1U
rack mount space using the RM1 Rack Mount Plate (available separately). When
fitted, the router is held firmly and cannot be removed, pushed back or fall off
the bracket accidentally.
The router must be fitted into the bracket before you fix the bracket into your
rack.
To fit it correctly, locate the groove around the edge of the front panel of the
router. The front of the RM1 bracket slides into this groove, therefore
preventing the router from moving once fitted.
Once the router has been dropped into the groove, you can fit the bracket into
the rack using the screws supplied.

7
4
4. . S Se et tu up p & & C Co on nf fi ig gu ur ra at ti io on n
This section provides examples of how to initially access the router and configure
internet access for the most common types of Internet connection in the UK.
If the instructions in this quick start guide do not allow you to get online with
your ISP or type of Internet connection, there are additional guides available
from the Product Knowledgebase on www.draytek.co.uk.
Note
To access the router, your PC will need to either get its IP
address using DHCP or have an IP address in the 192.168.1.x
range.
For details on how to change this, please refer to the “Trouble
Shooting” section in the User Guide.
4
4. .1 1 A Ac cc ce es ss si in ng g t th he e R Ro ou ut te er r W We eb b I In nt te er rf fa ac ce e
Open a web browser on your PC and type https://192.168.1.1.
The https:// prefix ensures that your connection is encrypted using SSL so that
your session data cannot be intercepted. Without that prefix, your data passes in
clear text.
You may get a warning from your browser (IE, Chrome, Edge, Safari etc.) about
your server (the router) having an invalid certificate. Your browser will demand
further confirmation or exception before allowing access. The warnings will look
something like these examples.
An example of how to access the router via HTTPS with Mozilla Firefox:

8
An example from Microsoft Edge, click “Continue to this webpage”to proceed:
Most other browsers will present equivalent warnings. In each case, following the
prompts/links will allow you to access the router's web interface. It is still
encrypted with SSL/TLS.
Note
This warning appears because the router's default certificate is
'self-signed' rather than issued to you by a certificate authority
who has verified your identity.
A self-signed certificate means that you cannot verify the
identity of the server, but as it's your own local router, that
shouldn't be an issue - your connection is still encrypted.
The router login prompt will then request a username and password to allow
access.
The factory default login details are:
Username: admin
Password: admin

9
Note
If you cannot access the web interface, please go to the “Trouble
Shooting” section in the User Guide to determine the cause of and solve
your problem.
Upon successful login, the router will display the Dashboard, which shows a
summary of the router model, WAN status, front panel port status and other
information:
Note
We recommend configuring a secure password when first logging in to
the router’s administration interface.
The router’s administration password can be changed from
[System Maintenance] > [Administrator Password]

10
4
4. .2 2 W WA AN N1 1 - - A AD DS SL L a an nd d V VD DS SL L2 2 C Co on nn ne ec ct ti io on n S Se et tu up p
The WAN1 interface of the Vigor 2865 router can connect to either an ADSL / ADSL2+
connection or a VDSL2 / 35b Supervectoring connection.
If your Internet connection uses VDSL2 or 35b and your ISP has supplied you with a
Username and Password to connect to the Internet, go to section 4.2.1 PPPoE
connection with VDSL and 35b
If your Internet connection uses VDSL2 and your ISP does not supply or require a
Username and Password to connect to the Internet, go to section 4.2.2 DHCP /
Static IP connection with VDSL and 35b
If your Internet connection uses ADSL or ADSL2+ and your ISP has supplied you with a
Username and Password to connect to the Internet, go to section 4.2.3 PPPoA
connection with ADSL / ADSL2+
4
4. .2 2. .1 1 P PP PP Po oE E c co on nn ne ec ct ti io on n w wi it th h V VD DS SL L a an nd d 3 35 5b b
1. Go to [WAN] > [General Setup] and click on the WAN1 link:
2. On the settings page, Enable the Service –VLAN Tag insertion:

11
Set the Service - Tag value to 101 if you’re in the UK.
Set the Service - Tag value to 10 if you’re in Ireland.
Note
These VLAN tag values are required to connect to ISPs that operate on
the Openreach or OpenEir VDSL2 networks, if your ISP operates on a
different VDSL2 network, this tag value may differ.
Please check with your ISP or the DrayTek UK Knowledgebase for ISP
specific guides.
The DSL mode can be set to “VDSL2 only” but this is not required.
Click OK on that page to apply the changes.
3. Go to [WAN] > [Internet Access]
Set the WAN1 Access Mode to PPPoE / PPPoA, then click the Details Page button to
proceed:
4. On the PPPoE / PPPoA settings tab:
Select the Enable radio button at the top of the page to ensure that the PPPoE
interface is enabled.

12
Input the username into the Username field and password in the Password field, as
required.
The Service Name does not need to be specified.
If your ISP has provided a static IP address, that can be specified by setting the Fixed
IP setting to Yes and entering the IP in the Fixed IP Address field.
Click OK on this page to apply the changes and the router will then prompt to
restart.
Click OK to restart the router.
5. Once the router has restarted, the [Online Status] > [Physical Connection] page
will display the VDSL information and PPP connection status.
If the WAN1 section shows an IP address, it has connected to the internet
successfully:
Note
If the WAN 1 IP address displayed begins with 172.16.x.x, it’s possible
that the ISP has not accepted the supplied Username and Password for
the Internet connection.
Check that the ISP Access Setup - Username and Password match the
details supplied by your ISP.

13
4
4. .2 2. .2 2 D DH HC CP P / / S St ta at ti ic c I IP P c co on nn ne ec ct ti io on n w wi it th h V VD DS SL L a an nd d 3 35 5b b
1. Go to [WAN] > [General Setup] and click on the WAN1 link:
2. On the settings page, Enable the Service –VLAN Tag insertion.
Set the Tag value setting to 101 if you’re in the UK.
Set the Tag value setting to 10 if you’re in Ireland.
The DSL mode can be set to "VDSL2 only" but this is not required.
Click OK on that page to apply the changes.
Note
These VLAN tag values are required to connect to ISPs that operate on
the Openreach or OpenEir VDSL2 networks, if your ISP operates on a
different VDSL2 network, this tag value may differ.
Please check with your ISP or the DrayTek UK Knowledgebase for ISP
specific guides.

14
3. Go to [WAN] > [Internet Access]
Set the WAN1 Access Mode to MPoA / Static or Dynamic IP, then click the
Details Page button to proceed:
4. In the MPoA / Static or Dynamic IP settings:
Select the Enable option and select Obtain an IP address automatically which
will obtain an IP from the ISP using DHCP.
If your ISP has provided a static IP range, with a Network address and a Subnet
Mask, specify that with the Specify an IP address option.
Click OK on this page to apply the changes and the router will then prompt to
restart. Click OK to restart the router.