Integrated with four-Gigabit LAN switch

  • Object-based firewall minimizing vulnerability
  • Comprehensive VPN facilities for remote data access
  • USB 2.0 for flash drive, printer and 3.5/4G USB mobile
  • Concurrent 2.4/5GHz WLAN



The Vigor2120 and Vigor2120n plus are broadband routers designed for super-fast broadband. The Vigor2120 series are equipped with Gigabit Ethernet WAN port and Gigabit Ethernet LAN switch for digital entertainment and fast data transmission. The concurrent 2.4/5GHz WLAN network allows you to have flexibility of using available bandwidth within non-congested spectrum. The 5GHz spectrum is also very ideal for home multimedia streaming. The Wireless LAN of Vigor2120n is with versatile secure management to ensure better security.  With the dashboard of Web User Interface, you can promptly know the status of broadband connection and relevant management mechanism. The Vigor2120 series's USB port can also be used to add storage memory to the unit in the form of a USB memory key or for higher capacity a USB hard drive (which may require its own power). The Vigor2120 then provides access to this memory by FTP from the WAN (remote Internet users) or users on your own LAN.

Secure Networking
With Object-based firewall, you can use pre-define objects or groups for IP, service type, key words, file extension, text, and mix these with the Time Scheduler or the VLAN groups as required. By adoption of the world-leading GlobalView Web Content Filtering, you can block whole categories of web sites (e.g. sports, online shopping), subject to an annual subscription to the GlobalView WCF, which is timely updated with changed or new site categorizations. A free 30-day trial can be activated via activation wizard of WUI. The Vigor2120 series support more than 120Mbps IPSec VPN performance through 2 VPN tunnels (including SSL VPN) which let you to establish remote data access from home or remote office. The DrayTek VPN functionalities are multi-protocol such as IPSec/PPTP/L2TP for most famous VPN servers. Even with 2 VPN tunnels, you still can make VPN connections via LAN-to-LAN or remote access along with brilliant Web-based applications.

DrayTek IPv6 solutions
We support Dual Stack (DHCPv6 Client, Static IPv6) and Tunnel Mode (6in4, 6rd, AICCU, TSPC) to let your business operation successfully be migrated to the era of IPv6.

Bandwidth management with intelligent VoIP QoS
The utilization of broadband bandwidth is very critical for business operations. With VoIP QoS, the VoIP calls will be automatically prioritized to let communications be smooth. You can manage the bandwidth consumption of every employee based on the individual IP via "Session Limit" and "Bandwidth Limit" settings.


Secured Wireless for Home or SOHO Networks
You can deploy a secured wireless LAN with WEP/WPA/WPA2 or a discreted guest wireless with Multiple SSID and Wireless LAN isolation to avoid from unauthorized access, hacking, and virus attachs. Addintionally, the WMM (Wi-Fi Multimedia) keeps the priority of voice, video and audio applications over the 2.4G/5G band. Whatever your planned use is, the Vigor2120 series has WMM standards that let you game a lot and spend much time enjoy streaming videos. 

Multi-task USB functionalities
Through mobility, brought by cellular networks, you can connect 3.5G/4G USB mobile to 2.0 version USB port on Vigor2120 series. This can be a backup broadband connection if the primary fixed line drops. You can connect USB disk or hard-drive to USB port for memory storage and file sharing. If you can not subscribe fixed line for Vigor2120 series, you can subscribe 3.5G/or 4G USB mobile to connect it to USB port for mobile broadband sharing.


Enterprise-level security for WLAN
You can deploy wireless LAN with security through WEP/WPA/WPA2, Mac Address Control, Multiple SSID, Wireless LAN isolation and Wireless VLAN. The WMM (Wi-Fi Multimedia) keeps the priority of voice, video and audio applications in a Wi-Fi network.  The Wireless Distribution System (WDS) function allows you to extend the wireless coverage easily.  The proper wireless access control and wireless isolation can let your employees and guests surf broadband with productivity. The "SSID VLAN grouping with LAN port" settings will allow each of the wireless SSIDs to be grouped within one of the VLANs.


Working with DrayTek TR-069  Central Management
 If your main office self-hosts VigorACS SI central management, your Vigor2120 series can be remotely managed for firmware upgrade, alarm of disconnection, VPN establishment and other settings.



1. WAN Feature

  • Ethernet WANUSB WAN
    • IPv4- DHCP Client, Static IP, PPPoE, PPTP, L2TP, 802.1p/q Multi-VLAN Tagging
    • IPv6- Tunnel Mode: TSPC, AICCU, 6in4, 6rd
      Dual Stack: PPP, DHCPv6 Client, Static IPv6

  • WAN Connection Failover

2. VPN 

  • 2 VPN Tunnels (including SSL VPN)
  • Protocol : PPTP, IPSec, L2TP, L2TP over IPSec

  • Encryption : MPPE and Hardware-based AES/DES/3DES
  • Authentication : MD5, SHA-1
  • IKE Authentication : Pre-shared key and Digital Signature (X.509)

  • LAN-to-LAN, Host-to-LAN
  • IPsec NAT-traversal (NAT-T)
  • Dead Peer Detection (DPD)
  • DHCP over IPSec
  • VPN Pass-through
  • VPN Wizard

3. Firewall

  • Multi-NAT, DMZ Host, Port-Redirection and Open Port
  • Object-based Firewall
  • MAC Address Filter
  • SPI (Stateful Packet Inspection) (Flow Track)

  • DoS/DDoS Prevention
  • IP Address Anti-spoofing
  • E-mail Alert and Logging via Syslog

  • Bind IP to MAC Address
  • Time Schedule Control

4. Content Security Management

  • IM/P2P Application
  • URL Content Filter :

    • URL Keyword Blocking (White List and Black List)

    • Java Applet, Cookies, Active X, Compressed, Executable, Multimedia File Blocking
    • Excepting Subnets
  • GlobalView Web Content Filter ( Powered by CYREN-90 ) 

5. Bandwidth Management

  • QoS : 
    • Class-based Bandwidth Guarantee by User-defined Traffic Categories
    • DiffServ Code Point Classifying
    • 4-level Priority for Each Direction (Inbound/Outbound)

    • Bandwidth Borrowed

  • Smart Bandwidth Limitation (Triggered by Traffic/Session)
  • APP QoS

6. Network Feature

  • Packet Forwarding Acceleration
  • DHCP Client/Relay/Server

  • IGMP Proxy V2/V3
  • IGMP Snooping

  • Dynamic DNS
  • NTP Client
  • RADIUS Client

  • DNS Cache/Proxy and LAN DNS
  • UPnP

  • Bonjour service

  • Multi-Subnet LAN

  • Routing Protocol:

    • Static Routing

    • RIPv2

7. USB

  • Printer Sharing
  • File Sharing:
    • Support FAT32 File System

    • Support FTP Function for File Sharing

    • Support Network File Sharing (Firmware Upgradeable)

  • Support 3.5G / 4G LTE as USB WAN (for back-up only)

    note: LTE USB mobile Support List Please Contact This email address is being protected from spambots. You need JavaScript enabled to view it.

8. Network Management

  • Web-based User Interface (HTTP/HTTPS)

  • Quick Start Wizard
  • CLI (Command Line Interface, Telnet / SSH)
  • Administration Access Control
  • Configuration Backup / Restroe
  • Built-in Diagnostic Function
  • Firmware Upgrade via TFTP/FTP/HTTP/TR-069
  • Logging via Syslog
  • SNMP V2/V3
  • Management Session Time Out
  • External Device (Client Mode)

  • TR-069 (Compliant with VigorACS SI)

9. Wireless AP


  • 802.11n WLAN with Concurrent 2.4/5 GHz Frequency

  • IEEE802.11a/b/g/n Compliant
  • Wireless Client List
  • Wireless Isolation

  • Wireless Security

    • WEP 64/128 bit/WPA/WPA2/RADIUS
  • Hidden SSID

  • Multiple SSIDs
  • Wireless MAC Address Filter
  • Access Point Discovery

  • WDS (Wireless Distribution System)

  • SSID VLAN Grouping with LAN Port

  • Wireless Rate-control
  • WMM

  • WPS