DrayTek 2927Lac Vigor Dual-WAN WiFi 5 Router is a powerful Dual-WAN, Load Balancing, Firewall and VPN Router. It comes packed with features, allowing you to make the most of FTTP Fibre Broadband, with Gigabit WAN throughput, extensive Firewall, Content Filtering, VPN client/server, and Quality of Service controls. 

DrayTek V2927LAC-K Vigor Dual-WAN 3G/4G LTE WiFi 5 Router (AC) is a powerful Dual-WAN, Load Balancing, Firewall and VPN Router. It comes packed with features, allowing you to make the most of FTTP Fibre Broadband, with Gigabit WAN throughput, extensive Firewall, Content Filtering, VPN client/server, and Quality of Service controls. It incorporates an integrated 4G/LTE modem so you can take advantage of mobile broadband, and with fast Dual-Band AC1300 WiFi the DrayTek V2927LAC-K Vigor Dual-WAN 3G/4G LTE WiFi 5 Router (AC) provides a reliable, flexible, and secure network solution that’s ideal for Small Business and Home Offices.

Powered by the DrayTek V2927LAC-K Vigor Dual-WAN 3G/4G LTE WiFi 5 Router (AC) central management platform built for scalability and growth of your networks, our VigorACS EssCloud service lets you harness the powerful features of ACS2 (Auto Configuration Servers) and enjoy additional benefits including pre-provisioning at amazing value. Now you'll have time to focus on your business and experience hassle-free solutions.

Taking advantage of VigorACS EssCloud, system integrator and admin’ personnel will have the agility and flexibility to centrally manage and access real-time network monitoring information, for effortless control, from a single intuitive platform. All this without the need to install any software.

Benefits of our VigorACS EssCloud Service

• One (1) year free VigorACS EssCloud Service with Tool Squad(info@toolsquad.co.uk)

• Customer Premise Equipment (CPE) is pre-provisioned before dispatch, for a zero-touch config!

• Tailor the configuration of your devices to your business's needs

• Free dedicated technical support (9 am-5 pm Mon to Fri)

• Cloud-based, responsive network portal, to remotely and simultaneously manage multiple devices and sites

• User-friendly, cross-platform HTML5 management interface

• Responsive Web Design adapts the interface to perfectly fit PCs, tablets and mobile devices

• Supports TR-069 Protocol for secure communication between the server and the CPE

• WAN management of networked CPE, supporting standard XML-based encoding, TCP/IP comms, and File Transfer for firmware upgrades

• Five (5) levels of user management from ‘View-only’ operator, right up to ‘System Administrator’

• Unlimited network level to group CPEs

• Site-wide visual topology with extensive monitoring and logging

• Ability to schedule periodic configuration backups, or to have firmware upgrades during non-business hours

• Monitor and share your network's statistics

• LAN/WAN traffic reporting

• Granular, device-based information & trouble-shooting tools

• Alarms and alert notifications

• Enhanced configuration and analysis

• Real-time status monitoring & management with history

• Flexible firmware management, globally or per device

... and by managing this router on our VigorACS EssCloud service:

• Wizard on the ACS map allows for super easy, drag-and-drop VPN tunnel creation between devices

• VPN off line alerts

• View connectivity of VPN links

• Easily change conflicting LAN IP subnets

• Mass firmware-upgrades of router estates or per device config’ changes

• Easy-access to any router's configuration

• Real-time and periodic (daily/weekly/monthly) traffic volume and activity reports

• Network dashboard and Health dashboard

Key Product Features and Information

• Gigabit Dual-WAN Load Balancer
  High throughput handles fast internet connections, with Load Balancing and Route Policy.

• 4G+ LTE Modem with Dual-SIM
  Fast Mobile Broadband connectivity with Dual-SIM failover and Carrier Aggregation.

• AC1300 Wireless with Mesh
  Dual-Band with 802.11ac (WiFi 5) 'Wave 2' wireless. Use the router as the Mesh Root with DrayTek Mesh.

• Ideal VPN Router for SMB
  Up to 50 active VPN tunnels, with up to 800Mbps IPsec Hardware Accelerated throughput.

• 5+1 Gigabit LAN Ports with VLANs
  Extensive LAN management features, use VLANs to manage up to 8 networks.

• Designed for Centralized Management
  Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.

• Firewall & Content Filtering
  Manage internet access with Firewall, App Enforcement & Category-based Web Filtering.

• High Availability
  Connect a pair of Vigor 2927Lac routers to provide a hardware backup solution.

• Dray DDNS with Lets Encrypt Certificates
  Free Dray DDNS address for each router, with automated Lets Encrypt SSL/TLS Certificates.

• Quality of Service with App QoS
  Easily priorities latency-sensitive applications on your network with App QoS.

• Hotspot Web Portal
  Provide internet access to guests and market your business with captive portal.

• Centralized LAN Management
  Easily manage and provision DrayTek VigorAP Access Points and VigorSwitch switches.

Dual Gigabit WAN Load Balancer

The Vigor 2927Lac is a Dual-Ethernet WAN router featuring VPN, advanced routing features, firewall, content filtering, bandwidth management and more. It offers high throughput with Load Balancing and Fail over connectivity, suitable for handling Fibre to the Premises (FTTP) and Gigabit internet connections. Offering up to 950Mbps per-WAN of Hardware Accelerated throughput while retaining its full feature set.

With 802.11ac (WiFi 5) Dual-Band wireless, it provides fast wireless coverage to your network's computers and devices. In addition, the router can connect to wireless networks for internet access, allowing it to make use of Mobile Hotspot wireless connections and nearby wireless networks, where for instance a neighbor's wireless network could provide an emergency backup connection.

The integrated 4G/LTE modem provides fast 4G+ Mobile Broadband with Carrier Aggregation to get the best performance out of 4G Broadband, for use as a backup connection or primary internet connection.

Route Policy - Powerful Routing Management

The Vigor 2927Lac provides full policy-based control of where and how outbound traffic is routed with Route Policy:

• VPN Routing
  Send all or select traffic through VPN services.

• Host name Routing
  Route access to individual websites, internet domains (e.g. www.bbc.co.uk) and host names through a VPN tunnel or a specific WAN.

• Service Routing
  Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel.

• Failover & Failback
  Extensive control of Failover with multiple Failover rules and paths. Manage how connections are moved back to the primary connection, after a failover has occurred with Failback settings.

Integrated LTE 4G/3G Modem

The Vigor 2927Lac router provides high speed mobile broadband connectivity for internet access and VPN, with its built-in LTE-A 4G+ modem. LTE Category 6 uses carrier aggregation to improve 4G speeds, allowing you to get the best performance out of 4G Broadband. This LTE router is not locked to any mobile network and is compatible with all major UK mobile networks, such as EE, Vodafone, O2 and Three, as well as any MVNOs on those networks.

The Vigor 2927Lac can even be used as an LTE modem for other devices. With LTE Bridge mode, the Vigor 2927Lac provides 4G connectivity directly to a connected router or firewall, without any additional network translation (NAT).

The Vigor 2927Lac router uses two (2) LTE antennas which can rotate and tilt for optimum reception. The included extension bases provide a 1M extension cable to allow optimum positioning, avoiding obstructions, cabinets or equipment.

Constant Connectivity - Dual-SIM LTE

Where connectivity is mission critical, a single cellular network can become a single point of failure, in the event of a mobile network outage. The Vigor 2927Lac has two (2) SIM slots, so that in the event of one mobile network not providing internet connectivity, the router will switch to a secondary SIM and cellular network connection.

It intelligently monitors for internet connectivity and latency. If the primary 4G SIM's network can't access a required location, or is too slow, it switches over to the backup SIM to resume connectivity. For resilience in the event of mobile network outages, each SIM should be on a different cellular network (e.g. Vodafone and EE) and not 'virtual' networks which piggyback on the first (e.g. not Virgin Mobile and EE, as the former uses the latter's network).

Wireless LAN

The 2927Lac provides 802.11ac (WiFi 5) simultaneous Dual-Band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its antennas streaming data to different devices at once, improving efficiency over standard 802.11ac (WiFi 5) wireless and allowing the router to effectively serve more wireless clients.

With firmware 4.3.0, the Vigor 2927Lac wireless router can be used as part of DrayTek's Mesh wireless system, allowing the router to work as the Mesh Root, providing internet access and management of Mesh VigorAPs directly.

Ideal VPN router for SMB

A feature central to DrayTek routers is its VPN (Virtual Private Networking) capabilities. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office. The Vigor 2927Lac is an ideal VPN router, with 300 Mbps standard IPsec VPN throughput and up to 50 concurrently active VPN tunnels. With IPsec Hardware Acceleration available from firmware 4.2.2, performance increases up to 800 Mbps for 16 VPN tunnels, allowing securely encrypted tunnels between sites to make full use of high speed internet connections.

It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients. Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, DrayTek's SSL VPN and L2TP for both LAN to LAN and Dial-In teleworker VPNs. In addition, teleworkers can connect to the router with OpenVPN.

User management for Dial-In Teleworkers is managed through the router's web interface, with mOTP 2-factor authentication available for IPsec, L2TP and SSL VPN Teleworker connections. Alternatively, authentication for Dial-In Teleworker connections can be forwarded to your Active Directory (LDAP) or RADIUS or TACACS+ server.

Connect VPNs from behind NAT with DrayTek's VPN Matcher

A typical requirement for connecting a VPN tunnel between two points is that the VPN server must be directly accessible on the public internet. Sometimes this can be achieved with NAT Port Forwarding if the router is located behind another router, but if the router is connected to 4G Mobile Broadband or is behind Carrier-Grade NAT (CG-NAT), connecting to that VPN server may be impossible.

DrayTek's VPN Matcher service helps DrayTek routers behind NAT to allow Dial-In Teleworkers to connect, or connect two DrayTek VPN routers that are behind NAT and could not normally establish a VPN tunnel.

Connecting Remote Sites with LAN to LAN VPN

Supporting up to 50 concurrently active VPN tunnels, the Vigor 2927Lac is ideal for connecting multiple sites or home offices together with fast and secure IPsec VPN tunnels. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.

DrayTek SSL VPN for Dial-In Teleworkers & LAN to LAN

The Vigor 2927Lac supports up to 25 active DrayTek SSL VPN tunnel connections. These are encrypted tunnels linking your teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - the same encryption that you use for secure web sites such as your bank.

Teleworkers can easily create a secure SSL VPN tunnel to the DrayTek Vigor 2927Lac using the free DrayTek Smart VPN Client app. Available for Windows, MacOS, Apple iOS (iPad, iPhone) and Android devices.

5+1 Gigabit LAN Ports with VLANs

The Vigor 2927Lac provides up to six (6) Gigabit LAN ports for wired links to Computers, Servers and Network Attached Storage. With five (5) dedicated LAN ports and one flexible LAN/WAN port, the Vigor 2927Lac can connect up to six (6) devices directly with a single Ethernet WAN configuration, or five (5) devices with a dual Ethernet WAN configuration.

With Multiple LAN subnets and VLANs, the Vigor 2927Lac can manage up to eight (8) separate networks. For instance, an internal network with a separate network for guests to use, completely separate from the private network. Each network with its own Content Filtering, Firewall, Quality of Service and Route Policy applied.

The router has full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support VLAN tags, such as the DrayTek VigorSwitch G1080 8-port switch (sold separately), for additional network ports.

The wireless LAN also links to these VLANs, making the same Guest & Private networks possible simply using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 903 (sold separately) to do the same, spanning the router's own wireless and any connected wireless APs.

Robust & Comprehensive IPv4 / IPv6 Firewall

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorized remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.

The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.

The Vigor 2927Lac supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.

Web Content Filtering with DNS Filter

The content control features of the Vigor 2927Lac allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules. Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).

Using the Global View service you can block whole categories of web sites, subject to an annual subscription, which is continuously updated with new or changed site categorizations or sites which have become compromised (such as infected with malware). A free 30-day trial is included with this router, see accessories tab for compatible license

DrayDDNS - DrayTek Dynamic DNS Address

DrayTek provides a free Dynamic DNS address to each Vigor 2927Lac router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "vigor2927lac.drayddns.com".

This address automatically updates whenever the internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor 2927Lac router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.

The Vigor 2927Lac can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt. The router manages and automates the certificate process to keep the certificate up to date and ready for use with SSL VPN and other services.

High Availability - Hardware Failover

For even greater resilience, the Vigor 2927Lac provides High Availability (HA), with both a primary and secondary router (sold separately) able to provide connectivity to your network and subnets.

In the event of the primary unit failing, the secondary unit will take its place on the network, automatically switching over to resume internet, routing and VPN connectivity with no intervention required. This can remove the possibility of a single point of failure within your routers. With Config Sync, the two routers are managed as a single unit, so that any changes made to the primary router will automatically propagate to the secondary router, ensuring it’s ready to take over at any time.

Manage Guest WiFi with Hotspot Web Portal

DrayTek routers make it easy to manage Guest Wireless with Hotspot Web Portal. The fully customization captive portal can apply to both the router's wireless networks and LAN interfaces, for use with wireless access points. Authentication can be handled by Google/Facebook or an external web Portal service such as Purple WiFi with RADIUS.

Upon connecting to the wireless network, users are presented with your company's branding and information. From there, depending on what you've set, they can simply click-through, provide their details or enter a PIN with a voucher generated by the router. Once connected, the router can allow access until a user reaches their quota limit of time connected or bandwidth used.

Quality of Service & Bandwidth Control

Priorities latency-sensitive applications on your network with Quality of Service. App QoS simplifies setting up Quality of Service significantly - simply select which applications or services to priorities, such as Zoom and Skype. Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support.

Auto Voice VLAN allows the router to automatically priorities VoIP calls as they pass through the router without additional configuration. Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a guest network.

Central AP & Switch Management

The Vigor 2927Lac manages DrayTek VigorAP access points and VigorSwitch switches connected locally to the router. This enables you to centrally control, manage and administer multiple AP and switch devices installed around your building/campus from just the one router.

Central AP Management

The DrayTek router operating as the wireless controller can provision up to 20 DrayTek VigorAP access points with Central AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network.

Central Switch Management

DrayTek VigorSwitch switches can be provisioned and managed through the router with DrayTek’s Central Switch Management system, which allows you to:

• Easily provision VLAN configuration and other port settings directly from the router.

• Set bandwidth rate limits and schedules for individual ports.

• Log switch events for alert notifications if network problems occur.

• At a glance see the devices connected on your network with a virtual topology.

Renewal Information

At the end of the first year, we will contact you to ask if you would like to continue to use our cloud service in line with DrayTek’s licensing renewal costs. Alternatively, you can choose to manage the devices yourself with your own cloud service. For more information, please give our sales team a call on (+44) 20 4534 3618 or email us at info@toolsquad.co.uk

• Note: The VigorACS EssCloud service licensing pertains to each device, rather than your site. Therefore, devices purchased at different times will have different service expiry dates in line with their purchase date. Where you have multiple devices, we can work with you to keep your service renewals simple.

Standard Warranty: 2-Years