{"product_id":"draytek-vigor2928-multi-wan-router","title":"DrayTek Vigor2928 Multi-WAN VPN Security Router – 9.3Gbps NAT \u0026 10G Ports for High-Speed Business Networks","description":"\u003cp\u003eOur customers who need multi-gigabit internet without the usual bottlenecks choose the DrayTek Vigor2928. This multi-WAN VPN security router gives you flexible 10G options so you can take full advantage of fiber or high-speed broadband. It handles up to 9.3 Gbps NAT throughput and supports 50 VPN tunnels, making it practical for offices that rely on reliable failover and secure remote access. Built for small and medium businesses, it runs DrayOS 5 and includes identity-based security features that help control who gets access to what. If your network is outgrowing gigabit gear, this is the straightforward upgrade path.\u003c\/p\u003e\n\u003ch2\u003eThe Telecom Spot Take\u003c\/h2\u003e\n\u003cp\u003eThe Vigor2928 is a strong fit for customers who want real multi-gigabit headroom without jumping to enterprise chassis prices. The combination of a fixed 1GbE WAN, 10G SFP+ WAN, switchable 10GbE, and a 2.5GbE option lets you mix fiber and copper as needed. Only two of the three high-speed ports (P2–P4) can run at once, so plan your primary and secondary links carefully. With 60,000 NAT sessions, object-based firewall rules, URL\/IP reputation, and EasyVPN, it covers the core needs of most multi-site or hybrid teams. Pair it with VigorACS if you manage more than one location.\u003c\/p\u003e\n\u003ch2\u003eKey Features\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eFlexible 10G multi-WAN ports\u003c\/strong\u003e – Mix a 1GbE copper WAN with 10G SFP+ and switchable 10GbE\/2.5GbE ports so you can load-balance or fail over across fiber and Ethernet connections without buying extra hardware.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eUp to 9.3 Gbps NAT throughput and 60,000 sessions\u003c\/strong\u003e – Keeps traffic moving when many users stream, transfer files, or join cloud apps at the same time.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003e50 concurrent VPN tunnels\u003c\/strong\u003e – Supports IPsec (up to 540 Mbps AES-256 single-directional), OpenVPN, and WireGuard (up to 85 Mbps) plus EasyVPN for simpler teleworker setup.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eObject-based SPI firewall with IAM\u003c\/strong\u003e – Apply rules by user or group, add URL\/IP reputation filtering, and use port knocking for tighter control without constant manual changes.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBuilt-in virtual controllers\u003c\/strong\u003e – Manage up to 20 VigorAPs and 10 VigorSwitches from the same interface, reducing the number of separate management tools.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTwo USB 2.0 ports\u003c\/strong\u003e – Add a 4G\/LTE modem for backup WAN, share storage, or connect a printer or temperature sensor when needed.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eUp to 8 LAN subnets and 802.1q VLANs\u003c\/strong\u003e – Segment guest, voice, and internal traffic while keeping DHCP and routing simple.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eTechnical Specifications\u003c\/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCategory\u003c\/th\u003e\n\u003cth\u003eSpecification\u003c\/th\u003e\n\u003c\/tr\u003e\n\u003c\/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eModel\u003c\/td\u003e\n\u003ctd\u003eVigor2928 (wired, no built-in Wi-Fi)\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eWAN Ports\u003c\/td\u003e\n\u003ctd\u003eP1: 1× fixed 1GbE RJ-45\u003cbr\u003eP2: 1× fixed 10G SFP+\u003cbr\u003eP3: 1× switchable 10GbE RJ-45 (WAN or LAN)\u003cbr\u003eP5: 1× switchable 2.5GbE RJ-45 (WAN or LAN)\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eLAN Ports\u003c\/td\u003e\n\u003ctd\u003eP4: 1× fixed 10G SFP+\u003cbr\u003eP6–P8: 3× fixed 1GbE RJ-45\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003ePort Note\u003c\/td\u003e\n\u003ctd\u003eOnly two of P2, P3, P4 can be active at the same time; P2 and P3 cannot both act as WAN\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eUSB\u003c\/td\u003e\n\u003ctd\u003e2× USB 2.0 (LTE modem, storage, printer, temperature sensor)\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eNAT Throughput\u003c\/td\u003e\n\u003ctd\u003eUp to 9.3 Gbps\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eNAT Sessions\u003c\/td\u003e\n\u003ctd\u003e60,000\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eVPN Tunnels\u003c\/td\u003e\n\u003ctd\u003eUp to 50\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eIPsec Throughput\u003c\/td\u003e\n\u003ctd\u003eUp to 540 Mbps (AES-256, single-directional)\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eWireGuard Throughput\u003c\/td\u003e\n\u003ctd\u003eUp to 85 Mbps (single-directional)\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eVPN Protocols\u003c\/td\u003e\n\u003ctd\u003eIPsec (IKEv1\/IKEv2), OpenVPN, WireGuard, EasyVPN\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eFirewall\u003c\/td\u003e\n\u003ctd\u003eObject-based SPI, Content Security Management, URL\/IP Reputation, Port Knocking, IAM\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eLAN Subnets \/ VLANs\u003c\/td\u003e\n\u003ctd\u003eUp to 8\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRouting\u003c\/td\u003e\n\u003ctd\u003eStatic, RIP, OSPF, BGP, Policy-based\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eManagement\u003c\/td\u003e\n\u003ctd\u003eWeb UI, CLI, SNMP v1\/v2c\/v3, Syslog, VigorACS, Virtual AP Controller (20), Virtual Switch Controller (10)\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003ePower\u003c\/td\u003e\n\u003ctd\u003eDC 12 V, max 18 W\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eDimensions\u003c\/td\u003e\n\u003ctd\u003e241 × 165 × 43 mm\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eWeight\u003c\/td\u003e\n\u003ctd\u003e590.6 g\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eOperating Temperature\u003c\/td\u003e\n\u003ctd\u003e0 to 45 °C\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eOperating System\u003c\/td\u003e\n\u003ctd\u003eDrayOS 5\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eIn the Box\u003c\/td\u003e\n\u003ctd\u003eRouter, RJ-45 cable, power adapter, Quick Start Guide\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003c\/tbody\u003e\n\u003c\/table\u003e\n\u003ch2\u003eComparison at a Glance\u003c\/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eFeature\u003c\/th\u003e\n\u003cth\u003eVigor2928\u003c\/th\u003e\n\u003cth\u003eVigor2927 (previous gen)\u003c\/th\u003e\n\u003cth\u003eTypical Gigabit Dual-WAN\u003c\/th\u003e\n\u003c\/tr\u003e\n\u003c\/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eMax NAT Throughput\u003c\/td\u003e\n\u003ctd\u003e9.3 Gbps\u003c\/td\u003e\n\u003ctd\u003e~1.8–2.2 Gbps class\u003c\/td\u003e\n\u003ctd\u003e1 Gbps or less\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e10G Ports\u003c\/td\u003e\n\u003ctd\u003eYes (SFP+ + RJ-45 options)\u003c\/td\u003e\n\u003ctd\u003eNo\u003c\/td\u003e\n\u003ctd\u003eRare\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eVPN Tunnels\u003c\/td\u003e\n\u003ctd\u003e50\u003c\/td\u003e\n\u003ctd\u003e50\u003c\/td\u003e\n\u003ctd\u003eOften 20–30\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eIPsec Throughput\u003c\/td\u003e\n\u003ctd\u003eUp to 540 Mbps\u003c\/td\u003e\n\u003ctd\u003eLower\u003c\/td\u003e\n\u003ctd\u003eVaries\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eBuilt-in Wi-Fi\u003c\/td\u003e\n\u003ctd\u003eNo (use external APs)\u003c\/td\u003e\n\u003ctd\u003eOptional on some SKUs\u003c\/td\u003e\n\u003ctd\u003eOften included\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eBest For\u003c\/td\u003e\n\u003ctd\u003eFiber \/ multi-gig primary + backup\u003c\/td\u003e\n\u003ctd\u003eSolid gigabit dual-WAN\u003c\/td\u003e\n\u003ctd\u003eBasic office internet\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003c\/tbody\u003e\n\u003c\/table\u003e\n\u003ch2\u003eFAQ\u003c\/h2\u003e\n\u003ch3\u003eCan I use both the 10G SFP+ WAN and the 10GbE RJ-45 at the same time?\u003c\/h3\u003e\n\u003cp\u003eOnly two of the three high-speed ports (P2, P3, P4) can be active together, and P2 and P3 cannot both be set as WAN. Plan your primary and secondary links accordingly.\u003c\/p\u003e\n\u003ch3\u003eDoes the base Vigor2928 include Wi-Fi?\u003c\/h3\u003e\n\u003cp\u003eNo. The wired Vigor2928 has no built-in wireless. Choose the Vigor2928be model if you need integrated Wi-Fi 7, or add VigorAPs that the router can manage.\u003c\/p\u003e\n\u003ch3\u003eHow many remote users can connect by VPN?\u003c\/h3\u003e\n\u003cp\u003eUp to 50 concurrent tunnels are supported across IPsec, OpenVPN, and WireGuard. EasyVPN simplifies setup for teleworkers.\u003c\/p\u003e\n\u003ch3\u003eWill this work with a 4G\/LTE backup modem?\u003c\/h3\u003e\n\u003cp\u003eYes. Connect a compatible USB LTE modem to one of the two USB 2.0 ports and configure it as a failover WAN.\u003c\/p\u003e\n\u003ch3\u003eWhat management tools are included?\u003c\/h3\u003e\n\u003cp\u003eLocal web UI and CLI, SNMP, Syslog, plus free virtual controllers for up to 20 VigorAPs and 10 VigorSwitches. Central management is available through VigorACS.\u003c\/p\u003e","brand":"DrayTek","offers":[{"title":"Default Title","offer_id":48676974526601,"sku":"Vigor2928","price":349.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0338\/6245\/1337\/files\/draytek-vigor2928-multi-wan-vpn-security-router-93gbps-nat-10g-ports-for-high-speed-business-networksvigor2928-6243344.png?v=1792041550","url":"https:\/\/www.thetelecomspot.com\/products\/draytek-vigor2928-multi-wan-router","provider":"The Telecom Spot","version":"1.0","type":"link"}