Description
Our customers who need multi-gigabit internet without the usual bottlenecks choose the DrayTek Vigor2928. This multi-WAN VPN security router gives you flexible 10G options so you can take full advantage of fiber or high-speed broadband. It handles up to 9.3 Gbps NAT throughput and supports 50 VPN tunnels, making it practical for offices that rely on reliable failover and secure remote access. Built for small and medium businesses, it runs DrayOS 5 and includes identity-based security features that help control who gets access to what. If your network is outgrowing gigabit gear, this is the straightforward upgrade path.
The Telecom Spot Take
The Vigor2928 is a strong fit for customers who want real multi-gigabit headroom without jumping to enterprise chassis prices. The combination of a fixed 1GbE WAN, 10G SFP+ WAN, switchable 10GbE, and a 2.5GbE option lets you mix fiber and copper as needed. Only two of the three high-speed ports (P2–P4) can run at once, so plan your primary and secondary links carefully. With 60,000 NAT sessions, object-based firewall rules, URL/IP reputation, and EasyVPN, it covers the core needs of most multi-site or hybrid teams. Pair it with VigorACS if you manage more than one location.
Key Features
- Flexible 10G multi-WAN ports – Mix a 1GbE copper WAN with 10G SFP+ and switchable 10GbE/2.5GbE ports so you can load-balance or fail over across fiber and Ethernet connections without buying extra hardware.
- Up to 9.3 Gbps NAT throughput and 60,000 sessions – Keeps traffic moving when many users stream, transfer files, or join cloud apps at the same time.
- 50 concurrent VPN tunnels – Supports IPsec (up to 540 Mbps AES-256 single-directional), OpenVPN, and WireGuard (up to 85 Mbps) plus EasyVPN for simpler teleworker setup.
- Object-based SPI firewall with IAM – Apply rules by user or group, add URL/IP reputation filtering, and use port knocking for tighter control without constant manual changes.
- Built-in virtual controllers – Manage up to 20 VigorAPs and 10 VigorSwitches from the same interface, reducing the number of separate management tools.
- Two USB 2.0 ports – Add a 4G/LTE modem for backup WAN, share storage, or connect a printer or temperature sensor when needed.
- Up to 8 LAN subnets and 802.1q VLANs – Segment guest, voice, and internal traffic while keeping DHCP and routing simple.
Technical Specifications
| Category | Specification |
|---|---|
| Model | Vigor2928 (wired, no built-in Wi-Fi) |
| WAN Ports | P1: 1× fixed 1GbE RJ-45 P2: 1× fixed 10G SFP+ P3: 1× switchable 10GbE RJ-45 (WAN or LAN) P5: 1× switchable 2.5GbE RJ-45 (WAN or LAN) |
| LAN Ports | P4: 1× fixed 10G SFP+ P6–P8: 3× fixed 1GbE RJ-45 |
| Port Note | Only two of P2, P3, P4 can be active at the same time; P2 and P3 cannot both act as WAN |
| USB | 2× USB 2.0 (LTE modem, storage, printer, temperature sensor) |
| NAT Throughput | Up to 9.3 Gbps |
| NAT Sessions | 60,000 |
| VPN Tunnels | Up to 50 |
| IPsec Throughput | Up to 540 Mbps (AES-256, single-directional) |
| WireGuard Throughput | Up to 85 Mbps (single-directional) |
| VPN Protocols | IPsec (IKEv1/IKEv2), OpenVPN, WireGuard, EasyVPN |
| Firewall | Object-based SPI, Content Security Management, URL/IP Reputation, Port Knocking, IAM |
| LAN Subnets / VLANs | Up to 8 |
| Routing | Static, RIP, OSPF, BGP, Policy-based |
| Management | Web UI, CLI, SNMP v1/v2c/v3, Syslog, VigorACS, Virtual AP Controller (20), Virtual Switch Controller (10) |
| Power | DC 12 V, max 18 W |
| Dimensions | 241 × 165 × 43 mm |
| Weight | 590.6 g |
| Operating Temperature | 0 to 45 °C |
| Operating System | DrayOS 5 |
| In the Box | Router, RJ-45 cable, power adapter, Quick Start Guide |
Comparison at a Glance
| Feature | Vigor2928 | Vigor2927 (previous gen) | Typical Gigabit Dual-WAN |
|---|---|---|---|
| Max NAT Throughput | 9.3 Gbps | ~1.8–2.2 Gbps class | 1 Gbps or less |
| 10G Ports | Yes (SFP+ + RJ-45 options) | No | Rare |
| VPN Tunnels | 50 | 50 | Often 20–30 |
| IPsec Throughput | Up to 540 Mbps | Lower | Varies |
| Built-in Wi-Fi | No (use external APs) | Optional on some SKUs | Often included |
| Best For | Fiber / multi-gig primary + backup | Solid gigabit dual-WAN | Basic office internet |
FAQ
Can I use both the 10G SFP+ WAN and the 10GbE RJ-45 at the same time?
Only two of the three high-speed ports (P2, P3, P4) can be active together, and P2 and P3 cannot both be set as WAN. Plan your primary and secondary links accordingly.
Does the base Vigor2928 include Wi-Fi?
No. The wired Vigor2928 has no built-in wireless. Choose the Vigor2928be model if you need integrated Wi-Fi 7, or add VigorAPs that the router can manage.
How many remote users can connect by VPN?
Up to 50 concurrent tunnels are supported across IPsec, OpenVPN, and WireGuard. EasyVPN simplifies setup for teleworkers.
Will this work with a 4G/LTE backup modem?
Yes. Connect a compatible USB LTE modem to one of the two USB 2.0 ports and configure it as a failover WAN.
What management tools are included?
Local web UI and CLI, SNMP, Syslog, plus free virtual controllers for up to 20 VigorAPs and 10 VigorSwitches. Central management is available through VigorACS.