Vigor2133 Series

Firewall VPN Router for Home/SOHO
  • Gigabit Ethernet WAN port
  • 2 USB ports for 3G/4G backup or network storage
  • 2 Simultaneous VPN Tunnels, including up to 2 SSL VPN 
  • SPI Firewall with content filtering by application, URL keyword, and web category
  • VoIP function with dual FXS port (Vac model)
  • Bandwidth Management & Intelligent VoIP QoS to optimize call quality
  • Central Management for VigorAP
  • Compliant with Central Management Software VigorACS 2

The DrayTek Vigor2133 Series high-performance router is developed in compliance with the super-fast broadband architecture. Vigor2133 Series features 1 Gigabit Ethernet WAN port that can connect to any type of Internet Access, you may also add 3G/4G backup via the 2 USB ports. The support of 802.1Q VLAN on WAN enables the router to provide triple-play services to your home network. Besides being a reliable Internet gateway, Vigor2133 Series offer abundant of business-grade features, such as Firewall, Content Filtering, VPN, Bandwidth Management, which makes it also a perfect solution for home office and teleworkers, it also comes with variants that have 2 FXS ports and supports VoIP gateway.







Built-in 11ac Wi-Fi (ac/Vac model)

Vigor2133 Series comes with the variants which have 802.11ac dual-band Wi-Fi integrated, delivers throughput up to 867 Mbps. Business-grade features are included, such as AirTime Fairness, Router-Assisted Roaming, and Band-Steering (for ac/Vac model) which ensure a smooth wireless connection for HD videos, gaming, and internet phones for home.



High-Performance VPN

The Vigor2133 Series has also integrated the VPN features, which allows up to 2 concurrent VPN connections. Vigor2133 Series can establish a LAN-to-LAN VPN connecting the local network to the main office, so that all the host on the local network can access the office network without dial-up a VPN individually. Vigor2133 Series can also be the VPN server, that allows access to its local network from a remote site.  A wide variety of VPN protocols are supported, including PPTP, L2TP, IPsec, IKEv2, L2TP over IPSec, and also SSL VPN - a type of VPN based on the very common encryption method which is used by all the HTTPS websites. While the traditional VPN protocols might be filtered by the firewall and NAT of public networks, SSL VPN will be passed as long as the HTTPS is allowed. DrayTek also offers free official client App for Windows, iOS, and Android.



Bandwidth Management with Intelligent VoIP QoS

The Vigor2133 Series has the "VoIP QoS" feature to guarantee the priority for VoIP calls, this will ensure good call quality even when the Internet bandwidth is limited. In addition, the bandwidth consumption of each LAN client can be managed via Session Limit and Bandwidth Limit feature. You may also set up the "Smart Bandwidth Limit" to apply bandwidth limit only to the PCs which are running inappropriate applications, such as P2P download.




  • 1 x GbE WAN port
  • 4 x GbE LAN port
  • 2 x USB 2.0 port
  • 2 x FXS port (Vac model)
  • Factory Reset Button
  • Power On/Off Switch



  • 12V @ 2A
  • Max. Power Consumption: 24 watts



  • Operating: 0°C ~ 45°C
  • Storage: -25°C ~ 70°C


Dimension (mm)

  • 207 (L) x 131 (W) x 42 (H) 
    (8.1" x 5.2" x 1.7")




  • PPPoE Client
  • DHCP Client
  • Static IP
  • 802.1Q VLAN Tagging
  • Triple-Play Applications
  • 3G/4G Backup



  • PPP
  • DHCPv6 Client
  • Static IPv6
  • TSPC
  • AICCU (AYIYA/Heartbeat)
  • 6rd
  • 6in4 Static Tunnel


Connectivity Detection

  • ARP
  • Ping Probe


LAN Managment


  • Up to 8 VLAN
  • 802.1Q Tag-based VLAN
  • Port-based VLAN


DHCP Server

  • Up to 4 IP Subnet
  • Bind-IP-to-MAC
  • Custom DHCP Option


DNS Control

  • Local Name Server
  • Conditional DNS Forwarding


Hotspot Portal

  • Authentication by Click-Through, Social Login, and SMS PIN
  • Custom Portal Page
  • URL Redirection
  • Walled-Garden



Static Route 

  • 30 IPv4 Static Routing Rules
  • 40 IPv6 Static Routing Rules


Dynamic Routing

  • RIP v2


Policy Routing

  • 10 Policy-based Routing Rules
  • Criteria: Protocol, Source IP, Destination IP, Destination Port
  • Failover options




  • Up to 2 concurrent tunnels
  • Max. 2 concurrent SSL VPN



  • PPTP, L2TP, IPsec, L2TP over IPsec, IKEv2
  • LAN-to-LAN VPN
  • Teleworker-to-LAN VPN



  • MPPE 40/128 bit
  • Hardware-based AES/DES/3DES



  • MD5, SHA-1
  • Pre-Shared Key, Digital Signature (X.509)
  • mOTP



  • Hub-and-Spoke Topology support
  • NAT-Traversal (NAT-T)
  • Dead Peer Detection (DPD)
  • DHCP over IPsec
  • Single-Armed VPN




  • One-to-One Port Redirection
  • Range-to-Range Port Redirection
  • Open Ports
  • Port Triggering
  • DMZ Host
  • ALG: SIP, RTSP, FTP, TFTP, H.323
  • VPN Pass-Through: PPTP, L2TP, IPsec
  • UPnP


Firewall Filter

  • IP-based Firewall Policy
  • Object-based Configuration
  • Schedule Enable/Disable


Content Filtering

  • URL Keyword Filtering
  • Category Filtering (subscription required)
  • DNS Keyword Filtering
  • Web Features Filtering


Attack Protection

  • DoS Defense


Bandwidth Management

Bandwidth Policy 

  • Session Limit
  • Bandwidth Limit
  • IP-Based Policy
  • Scheduled Enable/Disable


Quality of Service

  • Layer 3 QoS (TOS/DSCP)
  • Layer 2 QoS (802.1p)
  • 4-Level Priority with user-defined classification
  • Bandwidth Borrowing
  • Guaranteed bandwidth for VoIP traffic
  • APP QoS


Network Features 

  • Dynamic DNS
  • DNS Security
  • RADIUS Client
  • Bonjour
  • IGMP Proxy
  • IGMP Snooping
  • SMB File Sharing


Wireless LAN (n/ac/Vac model)


  • 802.11 b/g/n (2.4G)
  • 802.11 a/n/ac (5G) 



  • Up to 4 per radio
  • SSID-based 802.1Q VLAN


Radio Management

  • Auto Channel Selection
  • Auto Channel Width (2.4G)
  • Wi-Fi Scheduling



  • WEP, WEP-802.1x, WPA-PSK, WPA-802.1x, WPA2-PSK, WPA2-802.1x
  • Hidden SSID
  • Client Isolation
  • Access Control per SSID
  • WPS



  • AirTime Fairness
  • Band Steering
    (ac/Vac model)
  • WMM



  • Bridge
  • Repeater


VoIP (Vac model)


  • Protocol: SIP, RTP/RTCP
  • 12 SIP Registrars
  • Jitter Buffer: 180 ms
  • G.168 line echo-cancellation


Call Services

  • Call Hold/Retrieve
  • Call Waiting
  • Call Waiting with Caller ID
  • Call Transfer
  • Call Forwarding (Always, Busy, No Answer, Busy or No Answer)
  • Call Barring (Incoming / Outgoing)
  • DND (Do Not Disturb)
  • MWI (Message Waiting Indicator) (RFC-3842)
  • Hotline
  • ZRTP


Dial Plan

  • Phone Book
  • Digit Map
  • Call Barring
  • Regional


Voice Codec

  • G.711 a/u law
  • G.726 32Kbps
  • G.729 A/B



  • In band (default)
  • Out band (RFC-2833)
  • SIP Info




  • Web Interface: HTTP, HTTPS
  • Command-Line Interface: Telnet, SSH
  • TR-069 via VigorACS
  • Configuration File Export & Import
  • Compliant with the configuration file exported from Vigor2132


F/W Upgrade

  •  TFTP, HTTP, TR-069


Admin Access Control

  • 2-level Administration Privilege
  • Access from the Internet
  • Access List



  • Dashboard
  • Syslog
  • SMS/E-mail Alert
  • TR-069 via VigorACS
  • SNMP v2, v2c, v3


Central Management

  • Wireless Controller for up to 2 VigorAP
Model Vigor2133 Vigor2133n Vigor2133ac Vigor2133Vac
2.4G WLAN -      
5G WLAN - -    
Antenna - 2 2 2
VoIP - - -  
FXS - - - 2