Draytek Vigor2866ac User manual

i
d

ii
Vigor 2866
G.Fast Security Firewall
Quick Start Guide
(Wireless models)
Version: 1.0
Firmware Version: V4.2.0_RC1
Region: United Kingdom & Ireland
For updates and support, visit www.draytek.co.uk
Date: Jan. 12, 2021
Note: Product specification is subject to continuous evolution which may
not always be reflected in current documentation. For the formal specification
and details of the supported features of your product, please refer
only to the web site at www.draytek.co.uk

iii
Safety Instructions and Approval
Safety
Instructions
⚫Read the installation guide thoroughly before you set up the router.
⚫The router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the
router yourself.
⚫Do not place the router in a damp or humid place, e.g. a bathroom.
⚫Do not stack the routers.
⚫The router should be used in a sheltered area, within a temperature
range of +5 to +40 Celsius.
⚫Do not expose the router to direct sunlight or other heat sources. The
housing and electronic components may be damaged by direct sunlight or
heat sources.
⚫Do not deploy the cable for LAN connection outdoor to prevent electronic
shock hazards.
⚫Keep the package out of reach of children.
⚫When you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free
from any defects in workmanship or materials for a period of two (2) years
from the date of purchase from a DrayTek authorized dealer in the
UK/Ireland. Please keep your purchase receipt in a safe place as it serves as
proof of date of purchase. During the warranty period, and upon proof of
purchase, should the product have indications of failure due to faulty
workmanship and/or materials, we will, at our discretion, repair or replace
the defective products or components, without charge for either parts or
labour, to whatever extent we deem necessary tore-store the product to
proper operating condition. Any replacement will consist of a new or
re-manufactured functionally equivalent product of equal value, and will be
offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by external factors, used with
unapproved accessories or subjected to abnormal working conditions.
Warranty applies to hardware only, not software or firmware. Defects which
do not significantly affect the usability of the product will not be covered by
the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof
without obligation to notify any person of such revision or changes.

iv
Declaration of Conformity
Hereby, DrayTek Corporation declares that the radio equipment type Vigor2866 is in compliance with
Directive 2014/53/EU.
The full text of the EU Declaration of Conformity is available at the following internet address:
http://www.draytek.com.tw/ftp/Vigor2866/Document/CE/
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County,
Taiwan 303
Product: Vigor2866 Series
Importer: SEG, 11 Capital Business Park, Borehamwood, Herts, WD6 1GW
Frequency Information for Europe area:
2.4G WLAN
2412MHz - 2472 MHz, max. TX power: 19.98dBm *1
5G WLAN
5160MHz - 5340 MHz, max. TX power: 22 dBm *2
5480MHz - 5720 MHz, max. TX power: 27 dBm
LTE
B1[1920-1980 MHz (TX); 2110-2170 MHz (RX)]; B3[1710-1785 MHz (TX);
1805-1880 MHz (RX)]; B7[2500-2570 MHz (TX); 2620-2690 MHz (RX)];
B8[880-915 MHz (TX); 925-960 MHz (RX)]; B20[832-862 MHz (TX); 791-821
MHz (RX)]; *3
3G
B1[1920-1980 MHz (TX); 2110-2170 MHz (RX)]; B3[1710-1785 MHz (TX);
1805-1880 MHz (RX)]; B5[824-849 MHz (TX); 869-894 MHz (RX)]; B8[880-915
MHz (TX); 925-960 MHz (RX)] *3
Requirements in AT/BE/BG/CZ/DZ/DK/EE/FR/DE/IS/IE/IT/EL/ES/
CY/LV/LI/LT/LU/HU/MT/NL/NO/PL/PT/RO/SI/SK/TR/FI/SE/CH/
UK/HR. 5150MHz~5350MHz is for indoor use only.
(*1: for 2.4G WLAN model; *2: for 5G WLAN model; *3: for LTE model)
This product is designed for LTE, DSL and 2.4GHz /5GHz WLAN network use in the UK & Ireland.
*The external power supply used for each product will be model dependent.
1
2
3
4
5
6
7
8
9
A
Manufacturer
CWT
CWT
CWT
CWT
CWT
APD
APD
APD
APD
B
Address
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No. 222, Sec.
2, Nankan Rd.,
Lujhu
Township,
Taoyuan
County 338,
Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
No.5, Lane 83,
Lung-Sou St.,
Taoyuan City
330, Taiwan
C
Model identifier
2ABB012F UK
2ABB018F UK
2ABL024F UK
2ABL030F UK
2ABN036F UK
WA-12M12FG
WB-18D12FG
WA-24Q12FG
WA-36A12FG
2ABB012F EU
2ABB018F EU
2ABL024F EU
2ABL030F EU
2ABN036F EU
WA-12M12FK
WB-18D12FK
WA-24Q12FK
WA-36A12FK
D
Input voltage
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
100~240V
E
Input AC frequency
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
50/60Hz
Output voltage DC
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
12.0V
F
Output current
1.0A
1.5A
2.0A
2.5A
3.0A
1.0A
1.5A
2.0A
3.0A
G
Output power
12.0W
18.0W
24.0W
30.0W
36.0W
12.0W
18.0W
24.0W
36.0W
H
Average active
efficiency
84.9%
86.2%
87.6%
87.8%
89.8%
83.7%
85.4%
88.6%
88.2%
I
Efficiency at low load
10%
73.6%
78.0%
81.3%
83.3%
83.7%
74.5%
80.5%
86.4%
85.4%
J
No-load power
consumption
0.07W
0.07W
0.07W
0.07W
0.07W
0.07W
0.10W
0.07W
0.10W
External power supply (Power Adapter) information. For more updates, please visit www.draytek.co.uk.

v
Join the UK mailing list
Users in the UK & Ireland can sign up to our mailing list which goes
out approximately 4 times per year with products news, updates,
hints & tips and offers.
For details, please visit www.draytek.co.uk/list
Firmware & Tools Updates
Due to the continuous evolution of DrayTek technology and
emerging risks, router firmware updates may be issued.
Please consult the DrayTek web site for more information on newest
firmware, tools and documents: www.draytek.co.uk (For
UK/Ireland)
Regional and Network Compatibility
For all models, please check that you have been supplied with a device intended for your geographic region and
networks. Hardware and software varies by region, as well as local support and warranty services. To be sure of
compatibility and local support, ensure that you are buying the correct product through authorized channels.
The outside of the product’s box will state the region compatibility (e.g. “Applied Region: UK”). If you are unsure,
check with DrayTek or your supplier. The use of unofficial components (e.g. PSUs) or adapting interfaces or the
use of unauthorized software/firmware may cause malfunction, product damage or personal danger and
invalidates your warranty and access to support services.

vi
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1. Package Contents................................................................................................. 1
2. Panel Explanation................................................................................................. 2
2.1 Vigor2866ac / Vigor2866Lac / Vigor2866ax ............................................................................2
2.2 Vigor2866Vac.........................................................................................................................6
3. Hardware Installation ........................................................................................... 8
3.1 Network Connection...............................................................................................................8
3.2 LTEAntenna & SIM Card Installation (LTE models only).........................................................9
3.3 Wall-Mounted Installation .....................................................................................................11
3.4 Rack Mount Kit Installation...................................................................................................12
4. Setup & Configuration........................................................................................ 13
4.1 Accessing the Router Web Interface.....................................................................................13
4.2 WAN1 –xDSL & G.fast Connection Setup............................................................................16
4.2.1 PPPoE connection with VDSL and G.Fast ...............................................................16
4.2.2 DHCP / Static IP connection with VDSL and G.Fast.................................................19
4.2.3 PPPoA connection with ADSL / ADSL2+..................................................................22
4.3 WAN2 –Ethernet Connection Setup.....................................................................................23
4.3.1 PPPoE ....................................................................................................................24
4.3.2 Static or Dynamic IP................................................................................................25
4.4 LTE Modem Setup (LTE models only)...................................................................................26
5. Getting Further Help........................................................................................... 30
5.1 Additional Feature Setup......................................................................................................30
5.2 Keep up to date with our mailing list .....................................................................................30
5.3 Firmware Updates................................................................................................................31
5.4 Security & Router Best Practice............................................................................................31

1
1
1. . P Pa ac ck ka ag ge e C Co on nt te en nt ts s
Vigor router
Quick Start Guide
(This document)
RJ-11 to RJ-11 Cable (Annex A)
(Connects to your DSL line)
RJ-45 Cable (Ethernet)
(Connects to your PC or Switch)
or
Antenna + Magnetic Base (L models)
Antenna (ac/ax models)
UK-type Power Adapter
The maximum power consumption is 28 Watts.

2
2
2. . P Pa an ne el l E Ex xp pl la an na at ti io on n
2
2. .1 1 V Vi ig go or r2 28 86 66 6a ac c / / V Vi ig go or r2 28 86 66 6L La ac c / / V Vi ig go or r2 28 86 66 6a ax x
No
.
LED
Status
Explanation
(1)
ACT
Off
The router is powered off
Blinking
The router is ready and operating normally
WAN2
On
Internet connection is ready for use
Off
Internet connection is offline
Blinking
Data is being transmitted over WAN2
QoS
On
Quality of Service is active
Off
Quality of Service is inactive
USB
On
USB device is connected and ready for use
Off
No USB device is connected
Blinking
Data is being transmitted over USB
LTE
(LTE models only)
On
LTE internet is connected and ready for use
Off
LTE modem is not detected, or has serious
problem (e.g., no SIM card, SIM pin error, SIM
deactivated, etc.)
Blinking
Slowly: LTE modem is connecting
Quickly: Data is being transmitted over LTE
DSL
On
DSL connection synchronised
Blinking
Slowly: DSL connection not currently
synchronising or not detected
Quickly: DSL connection is synchronising
WCF
On
Web Content Filter is active (It is enabled from

3
[Firewall] > [General Setup])
Off
Web Content Filter is inactive
2.4G / 5G
(Wireless LAN)
On
2.4G: 2.4GHz Access Point is active
5G: 5GHz Access Point is active
Off
Wireless Access point is inactive
Blinking
2.4GHz/5GHz LED will blink slowly when
transmitting over that interface
ACT & WLAN LEDs blink rapidly when WPS is
ready for WPS clients to connect. After 2
minutes, the router will disable WPS pairing
mode
DMZ
On
DMZ Port is enabled
Off
DMZ Port is not enabled
Blinking
Data is being transmitted through DMZ Port
LED on Connector
(2)
WAN2 / P6
Left LED
On
Ethernet WAN (RJ45) is connected
Off
Ethernet WAN is disconnected
Blinking
Data is transmitting (sending/receiving)
Right LED
On
The port is connected with 1000Mbps
Off
The port is connected with 10/100Mbps
LAN P1~P5
Left LED
On
Ethernet LAN (RJ45) is connected
Off
Ethernet LAN is disconnected
Blinking
Data is transmitting (sending/receiving)
Right LED
On
The port is connected with 1000Mbps
Off
The port is connected with 10/100Mbps
The port “WAN2 / P6” is switchable. It can be used for LAN connection or WAN
connection according to the settings configured in WUI.

4
No.
Interface
Description
(3)
Wireless LAN
ON/OFF/WPS
Wireless band will be switched on/off in a
cycle:
⚫2.4G (On) and 5G (On) –Default state.
⚫2.4G (Off) and 5G (On) –press and release
the button once.
⚫2.4G (On) and 5G (Off) –press and release
the button twice.
⚫2.4G (Off) and 5G (Off) –press and release
the button three times.
When WPS is enabled in the router’s web
interface, press this button for more than
2seconds to enable WPS pairing mode.
Factory Reset
Restore the default settings. Usage: Turn on the
router (ACT LED is blinking). Press gently and
hold for more than 5 seconds. When the ACT
LED blinks rapidly, release the button and the
router will restart with its factory default
configuration.
(4)
USB1~2 / USB
Connector for a USB 3G/4G modem, storage,
printer or USB Thermometer

5
(5)
WAN2 / P6
RJ-45 Gigabit Ethernet connector for WAN
modem / router
LAN P1-P5
RJ-45 Gigabit Ethernet connectors for local
network devices
DSL
RJ-11 connector for ADSL or VDSL line
(6)
RP-SMA Connector for installing WLAN antennas
(7)
PWR
Connector for the power adapter
ON/OFF
Power Switch. Turns the unit on or off
(8)
SMA Antenna Connector for installing LTE
antennas
(LTE models only)
(9)
Dual SIM Slot
SIM1 & SIM2 (LTE models only):
Standard size SIM card slot - Mini or Micro SIMs
will require a SIM card adapter (not included) to
fit.
See Section 3.2 for more information on fitting
a SIM card.

6
2
2. .2 2 V Vi ig go or r2 28 86 66 6V Va ac c
LED
Status
Explanation
ACT
Off
The router is powered off
Blinking
The router is ready and operating normally
WAN2
On
Internet connection is ready for use
Off
Internet connection is offline
Blinking
Data is being transmitted over WAN2
QoS
On
Quality of Service is active
Off
Quality of Service is inactive
USB
On
USB device is connected and ready for use
Off
No USB device is connected
Blinking
Data is being transmitted over USB
DSL
On
DSL connection synchronised
Blinking
Slowly: DSL connection not currently
synchronising or not detected
Quickly: DSL connection is synchronising
Phone1/2
On
The phone connected to this port is off-hook
Off
The phone connected to this port is on-hook
Blinking
A phone call is incoming
2.4G/5G
(Wireless LAN)
On
2.4G: 2.4GHz Access Point is active
5G: 5GHz Access Point is active
Off
Wireless Access point is inactive
Blinking
2.4GHz/5GHz LED will blink slowly when
transmitting over that interface
ACT & WLAN LEDs blink rapidly when WPS is
ready for WPS clients to connect. After 2
minutes, the router will disable WPS pairing
mode
LED on Connector
WAN2
/ P6
Left
LED
On
Ethernet WAN (RJ45) is connected
Off
Ethernet WAN is disconnected
Blinking
Data is transmitting (sending/receiving)
Right
LED
On
The port is connected with 1000Mbps
Off
The port is connected with 10/100Mbps
LAN
P1~P5
Left
LED
On
Ethernet LAN (RJ45) is connected
Off
Ethernet LAN is disconnected
Blinking
Data is transmitting (sending/receiving)
Right
On
The port is connected with 1000Mbps

7
LED
Off
The port is connected with 10/100Mbps
The port “WAN2 / P6”is switchable. It can be used for LAN connection or WAN
connection according to the settings configured in WUI.
Interface
Description
Wireless LAN
ON/OFF/WPS
Wireless band will be switched on/off in a cycle:
⚫2.4G (On) and 5G (On) –Default state.
⚫2.4G (Off) and 5G (On) –press and release the button
once.
⚫2.4G (On) and 5G (Off) –press and release the button
twice.
⚫2.4G (Off) and 5G (Off) –press and release the button
three times.
When WPS is enabled in the router’s web interface, press
this button for more than 2seconds to enable WPS pairing
mode.
Factory Reset
Restore the default settings. Usage: Turn on the router (ACT
LED is blinking). Press gently and hold for more than 5
seconds. When the ACT LED blinks rapidly, release the
button and the router will restart with its factory default
configuration.
USB1~2
Connector for a USB 3G/4G modem, storage, printer or USB
Thermometer
WAN2 / P6
RJ-45 Gigabit Ethernet connector for WAN modem / router
LAN P1-P5
RJ-45 Gigabit Ethernet connectors for local network devices
Phone 1/2
RJ-11 connectors for VoIP usage with analogue telephones
DSL
RJ-11 connector for ADSL or VDSL line
RP-SMA Connector for installing WLAN antennas
PWR
Connector for the power adapter
ON/OFF
Power Switch. Turns the unit on or off

8
3
3. . H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
This section will guide you through installing the router’s port connections and
fitting the router securely, either to a wall using the supplied mounting hardware,
or into a 19” rack with the optional RM1 rack mounting kit.
Before starting to configure the router, you must first connect up the cables.
3
3. .1 1 N Ne et tw wo or rk k C Co on nn ne ec ct ti io on n
1. ADSL/VDSL Connections: Connect the VDSL/ADSL interface to the Modem
or DSL port of the external splitter/microfilter (not supplied) with the
RJ-11 line cable. In some cases, your RJ-11 DSL socket will be built-into
your phone line socket on the wall and you won’t have a separate
microfilter/splitter.
WAN2 Connections: Connect the cable Modem/DSL Modem/Media
Converter to the WAN port of router with Ethernet cable (RJ-45).
2. LAN Connections: Connect a LAN port of the router to your computer or
switch.
3. Wireless Antennas: Screw the supplied wireless antennas on to the
antenna connectors on the back of the router.
4. Power Supply: Connect the power adapter to the Vigor 2866’s PWR socket
on the rear and plug the power adapter into a suitable mains socket.
Turn the Vigor 2866 on using its power switch.
5. The router will start up. After completing the system test, the ACT LED will
light up and start blinking once per second to indicate that it is ready for
use. (For more detailed information of LED status, please refer to section 3.
Panel Explanation)

9
3
3. .2 2 L LT TE E A An nt te en nn na a & & S SI IM M C Ca ar rd d I In ns st ta al ll la at ti io on n ( (L LT TE E m mo od de el ls s
o
on nl ly y) )
The supplied LTE antenna should be fitted to the magnetic antenna base before
connecting the antenna to the router.
There are two LTE antenna connectors on the unit; if only a single antenna can
be installed, use the LTE antenna connector adjacent to the power switch
(highlighted below).
Before installing the SIM card, turn the router off. It should not be fitted while
the router is powered on.
When installing a SIM card into the router, un-screw and remove the SIM card slot
cover. When inserted, the SIM card contacts should be facing downwards with
the notch on the left side pointing towards back of the router.
Extension
Base
SIM Card
Slot
Primary LTE
Antenna Connector
Extension
Base

10
The SIM card slot is designed for Standard size SIM cards only, fitting a Mini or
Micro SIM without a Standard size SIM card adapter could result in damage to the
SIM card slot.
Push the SIM card into either slot until it ‘clicks’into place, with the SIM card’s
contacts facing downwards like so:
Vigor2866 LTE routers have two types of antenna connector; the LTE modem
(black antennas) use the inner SMA antenna connectors. The Wireless LAN (white
antennas) use the outer RP-SMA antenna connectors.
These must be installed onto the correct antenna connectors for normal LTE
signal and normal Wireless LAN functionality.
The supplied antennas should be installed to the connectors as shown:
SMA jack for WLAN
Antenna
SMA jack for LTE Antenna
(with extension base)

11
3
3. .3 3 W Wa al ll l- -M Mo ou un nt te ed d I In ns st ta al ll la at ti io on n
DrayTek Vigor 2866 series routers have keyhole type mounting slots on the
underside to hang the router on, using screws attached to a wall or other
surface.
1. A template is provided in the Vigor router packaging box to enable you
to space the screws correctly on the wall
2. Place the template on the wall in the desired position and drill holes
through the cardboard template at the marked points
3. Fit screws into the wall using the appropriate type of wall plug for the
wall material
Note
The recommended drill diameter is 6.5mm (1/4”).
4. With the screws installed, the router can be slotted into place

12
3
3. .4 4 R Ra ac ck k M Mo ou un nt t K Ki it t I In ns st ta al ll la at ti io on n
The DrayTek Vigor2866 series router can be fitted securely in a standard 19” 1U
rack mount space using the RM1 Rack Mount Plate (available separately). When
fitted, the router is held firmly and cannot be removed, pushed back or fall off
the bracket accidentally.
The router must be fitted into the bracket before you fix the bracket into your
rack.
To fit it correctly, locate the groove around the edge of the front panel of the
router. The front of the RM1 bracket slides into this groove, therefore preventing
the router from moving once fitted.
Once the router has been dropped into the groove, you can fit the bracket into
the rack using the screws supplied.

13
4
4. . S Se et tu up p & & C Co on nf fi ig gu ur ra at ti io on n
This section provides examples of how to initially access the router and configure
internet access for the most common types of Internet connection in the UK.
If the instructions in this quick start guide do not allow you to get online with
your ISP or type of Internet connection, there are additional guides available
from the Product Knowledgebase on www.draytek.co.uk.
Note
To access the router, your PC will need to either get its IP
address using DHCP or have an IP address in the 192.168.1.x
range.
For details on how to change this, please refer to the “Trouble
Shooting” section in the User Guide.
4
4. .1 1 A Ac cc ce es ss si in ng g t th he e R Ro ou ut te er r W We eb b I In nt te er rf fa ac ce e
Open a web browser on your PC and type https://192.168.1.1.
The https:// prefix ensures that your connection is encrypted using SSL so that
your session data cannot be intercepted. Without that prefix, your data passes in
clear text.
You may get a warning from your browser (IE, Chrome, Edge, Safari etc.) about
your server (the router) having an invalid certificate. Your browser will demand
further confirmation or exception before allowing access. The warnings will look
something like these examples.
An example of how to access the router via HTTPS with Mozilla Firefox:

14
An example from Microsoft Edge, click “Continue to this webpage” to proceed:
Most other browsers will present equivalent warnings. In each case, following the
prompts/links will allow you to access the router's web interface. It is still
encrypted with SSL/TLS.
Note
This warning appears because the router's default certificate is
'self-signed' rather than issued to you by a certificate authority
who has verified your identity.
A self-signed certificate means that you cannot verify the
identity of the server, but as it's your own local router, that
shouldn't be an issue - your connection is still encrypted.
The router login prompt will then request a username and password to allow
access.
The factory default login details are:
Username: admin
Password: admin