DrayTek DV2767AX UFB/VDSL Router, 802.11ax WiFi 6, 1x 2.5GbE WAN/LAN, 3x GbE LAN, Firewall, CSM, QoS, 16 x VPN tunnels, Supports VigorACS 3 and Sentry

The Vigor2767 series supports VDSL2 35b (Supervectoring) connections, and one of its four Gigabit Ethernet LAN ports can be configured as a 2.5GbE WAN/LAN interface, enabling connectivity to any Ethernet-based broadband service.

With both integrated xDSL and a high-speed 2.5GbE Ethernet WAN port, the Vigor2767 series is compatible with all major internet technologies, including FTTP, FTTC, FTTB/N, HFC, Satellite, and Fixed Wireless services deployed by nbn™ in Australia and UFB in New Zealand.

Designed for both domestic and SMB environments, the router incorporates advanced security and networking features such as an object-oriented SPI Firewall, Content Security Management (CSM), URL/IP Reputation filtering, Port Knocking, support for up to 16 VPN tunnels, and dual USB ports for 4G LTE mobile broadband backup, printer sharing, or network storage.

The Vigor2767ax model features 802.11ax (Wi-Fi 6, AX3000) wireless technology, delivering combined speeds of up to 2976 Mbps (574 Mbps on 2.4 GHz and 2402 Mbps on 5 GHz). Business-grade wireless enhancements, including AirTime Fairness, Router-Assisted Roaming, and Band Steering, ensure reliable connectivity for bandwidth-intensive applications such as HD video streaming, online gaming, and VoIP.

• Ready to connect to UFB NTD (Network Termination Device)
• 1 x configurable 2.5 GbE WAN/LAN port (P1)
• 3 x Gigabit LAN ports with 50,000 NAT sessions
• 1 x VDSL2 35b/ADSL2+ WAN port
• 35b Supervectoring VDSL2
• NAT throughput with Hardware Acceleration over 2.3 Gbps
• IPsec VPN throughput up to 390 Mbps (AES 256 bits)
• Object-based SPI Firewall, Content Security Management (CSM), URL/IP Reputation and Port Knocking
• IAM (Identity and Access Management) to enhance security management and user experience
• IPv6 & IPv4
• 802.11ax (Wi-Fi 6, AX3000) Wi-Fi up to 574 + 2402Mbps speed
• 16 x VPN tunnels, including IPsec, OpenVPN, and WireGuard, with EasyVPN features that simplify VPN setup for effortless connectivity
• 2 x USB ports for 4G Backup, FTP server, network printer or thermometer
• Virtual AP Controller for the deployment of up to 20 wireless VigorAPs
• Wireless Mesh (ax model) up to 7 VigorAPs
• Virtual Switch Controller to manage up to 5 VigorSwitches
• Supports VigorACS 3 Central Management Software for remote management

Key Features

2.5GbE
Provides higher performance to Wi-Fi 6 AP and other Ethernet devices.

35b Supervectoring Modem
Integrated VDSL modem with 35b Supervectoring compatibility and VDSL2/ADSL2+ fallback.

Bandwidth Management
Prevent one device using all the bandwidth by bandwidth limit policy, session limit policy, and QoS settings.

DrayDDNS
Free DDNS service to access the router using a fixed hostname of your choice. 

VPN (Virtual Private Network)
Build a secure and private tunnel from the LAN of the Vigor2767 Series to remote offices and teleworkers over the Internet. 

EasyVPN
Secure VPN in Seconds: No Keys, No Configs, Just Login.

Port Knocking
Add a stealth security layer to protect ports from unauthorized access.

Firewall & Content Filter
Filter web pages by URL keywords or web category to block access to insecure or inappropriate content.

URL/IP Reputation
Improve network security by classifying URLs and IPs to control web access and protect against online threats. 

IAM
A solution that manages digital identities, authentication, and access control to ensure the right users or groups have appropriate access to critical resources. 

Hotspot Web Portal
Market your business and communicate with the guests while offering hospitality WLAN. 

Wi-Fi 6
Feature OFDMA and MU-MIMO technology to improve Wi-Fi efficiency and deliver higher wireless speed.

Mesh
Easily link to other VigorAP to expand the wireless network. Learn more

Virtual AP/Switch controller
All-in-one management platform for Vigor2767 Series to maintain and monitor the VigorAPs and VigorSwitches.

NAT & Routing Performance
With hardware acceleration, Vigor2767 Series delivers up to 2.3 Gbps aggregate NAT throughput, meeting the demands of business-critical applications while keeping VoIP traffic as the top priority. Additionally, a single 1GbE client can reach up to 950 Mbps, and VDSL2 35b provides up to 300 Mbps to LAN.

Effortless and Secure VPN Access with EasyVPN
Setting up a VPN can often be complex, involving protocol selection, manual configurations, and troubleshooting, especially for non-technical users. While Vigor routers support advanced VPN protocols such as IPsec, WireGuard, and OpenVPN, traditional setup methods can be time-consuming and daunting.

EasyVPN simplifies this process by offering a streamlined, hassle-free solution for secure remote connectivity. With EasyVPN, users can quickly establish encrypted connections without the need to:

• Manually generate WireGuard keys
• Import OpenVPN configuration files
• Upload certificates

By automating these steps, EasyVPN delivers a fast, secure, and intuitive VPN experience, perfect for businesses and users who want robust protection without the technical complexity.

Stealth Security Protection with Port Knocking
DrayTek’s Port Knocking technology adds an advanced stealth security layer by keeping critical network services completely invisible to unauthorised users. Instead of exposing management ports or VPN services to the public internet, Port Knocking requires a predefined “knock” sequence before access is granted, ensuring that only trusted users can discover and use these services.

By integrating three powerful functions, Port Knocking provides robust protection against port scanning, brute-force attacks, and unauthorised access.

Port Redirection

Conceal real service ports from the public internet
Redirect unauthorised requests to non-existent services to prevent detection

Secure Router Management Access

Allow router management access only after a successful knock sequence or through a secure internal server
Completely eliminate direct exposure of the management interface to the open internet

VPN Service Control (WAN Binding)

Keep VPN services invisible until the correct knock sequence is received
Bind VPN availability to specific WAN interfaces and authorised IP addresses

How It Works

• By default, all protected ports remain closed and undetectable
• After the correct knock sequence is received, selected ports open temporarily for authorised access
• Once the configured time window expires, services automatically return to hidden mode
• With DrayTek Port Knocking, your network operates in stealth mode, invisible to attackers yet instantly accessible to authorised administrators and remote users. It is the ideal solution for organisations that demand high-level security without compromising accessibility.

2.5GbE Router with AX3000 (Wi-Fi 6) capacity

Vigor2767ax is a 2×2 dual-band Wi-Fi router that provides 160MHz bandwidth and 1024-QAM modulation to increase wireless data speed greatly. The theoretical speed is up to 3,000Mbps, of which 574Mbps is in the 2.4GHz band and 2,402Mbps in the 5GHz band, making it 2.5 times faster than an 802.11ac 2×2 dual-band router. Equipped with business-grade features, including URL Reputation, Route Policy, App-based QoS, and lots more, Vigor2767ax is perfect for professional smart homes/SOHO users who want to take full control of their network.

OFDMA (Orthogonal Frequency Division Multiple Access) is a core feature of the Wi-Fi 6 certification program. As part of the Wi-Fi 6 standard, OFDMA leverages advanced scheduling mechanisms to optimise performance in congested and complex network environments.

With Wi-Fi 6 gaining widespread adoption across manufacturers and the broader industry, it is increasingly important to evaluate and document the tangible benefits of effective OFDMA implementation,  as well as establish reliable methods to measure and quantify its real-world performance impact.

MU-MIMO works like multiple trucks delivering goods at the same time. Instead of serving one device after another, it allows the router to transmit data to multiple devices simultaneously, improving overall network capacity and delivering higher speeds for each user.

BSS Colouring is a technique that enhances the coexistence of overlapping Basic Service Sets (BSSs) and enables better spatial reuse within a single channel. Simply put, BSS Colouring helps reduce the co-channel interference commonly seen in legacy Wi-Fi networks.

TWT (Target wake time)

Devices negotiate with the AP for a Target Wake Time (TWT), or joint a TWT broadcast session, and transmit data only when the TWT arrives, thereby reducing power consumption and increase network efficiency.

WPA3 (Wi-Fi Protected Access 3) enhances the security of Wi-Fi networks by addressing vulnerabilities in previous standards (WEP, WPA and WPS2) and introduces new features including stronger authentication, better encryption, and improved protection against attacks such as brute-force password guessing and man-in-the-middle exploits.

URL Reputation
URL Reputation is a cloud-based threat intelligence service that adds an extra layer of security to protect LAN clients during their online activities.

With a total of 82 content categories, including 10 security-focused ones, it provides comprehensive and up-to-date protection for both home and business networks.

These categories cover a wide range of areas—from malware, spyware, and adware, to parental controls, business productivity, and social networking—helping to create a safer online environment, enhance employee productivity, and support efficient bandwidth management.

IP Reputation
Every internet communication involves source and destination IP addresses. Cybercriminals often exploit known malicious IPs to launch attacks using various techniques, including:

• Botnets
• TOR nodes and anonymous proxies
• Command-and-Control (C2) servers
• Phishing servers
• Distributed Denial of Service (DDoS) attacks

IP Reputation helps identify and block traffic from these high-risk IP addresses, adding an essential layer of network protection against cyber threats.

Blocking communication with malicious IP addresses is critical for network security. However, relying on static blocklists is no longer effective, as they lack the real-time, predictive intelligence needed to combat evolving threats. The IP Reputation Service addresses this challenge by delivering dynamic, real-time scoring and classification of IP addresses. It enables the automatic blocking of:

• High-risk traffic
• Suspicious proxies
• Malware distributors
• IPs associated with recent malicious activity

The system evaluates IPs based on multiple factors, including infection history, protocol behaviour, and attack frequency. Each IP is assigned a reputation score, which determines whether it should be trusted, monitored, or blocked, ensuring proactive and intelligent network protection.

IAM (Identity and Access Management) 
The Vigor2767 Series, powered by the new DrayOS 5, is fully Zero Trust ready!

IAM (Identity and Access Management) is a cybersecurity system that controls user access by managing digital identities, authentication, and authorisation, to ensure correct access to network resources such as applications and devices.

With processes including identifying, authenticating, authorising users or groups, and assigning appropriate levels of access, IAM enhances both security management and the user experience and plays an important role in cloud-based services.

The IAM solution from Vigor2767 is Zero Trust Ready, and allows you to grant and categorize user privileges, create and manage access policies, and define large-scale group policies that integrate multiple filtering rules and traffic-shaping settings.

Users & Groups

•  User accounts and user groups allow flexible access level control.
•  Existing external authentication server is supported.
•  User and MFA protection can be easily configured.

Access Policies
System administrators can create access policies for the local users in this tab. The access policies can be configured based on:

• MAC address filter list
• The allowed / blocked user list
• The login sessions lifetime

Access policies can be combined to create a robust security framework for your system.

Group Policies
Group policies can be configured for predefined local resources such as employees, workstations, network printers, and local servers. Network Firewall and traffic shaping policies can be configured to enhance network security and optimise traffic flows.

Conditional Access Policy
Conditional access policies can be configured to request users to provide multiple forms of authentication before granting appropriate access to a resource.

• Specify a period for the user to re-authenticate
• Restrict access to specific source IP addresses or ranges of IP addresses
• Specify VLAN-based access level in your conditional policies
• Set up time schedules when users are allowed to log-in

Resources Tab
Configure local resources such as IP and Mac addresses for workstations, network printers, PBX systems, NVR systems, servers, etc.

Backup and Restore
Backup or restore router settings such as Users and Groups, Access and Group Policies, etc. A Password protection can be applied before backup or restore.

Seamless Wi-Fi Roaming

Fast & Smooth Handover
Seamlessly switch between access points with intelligent roaming support.
Supports both Over-the-DS (via wired backbone) and Over-the-Air handoffs, ensuring reliable connectivity for video calls, voice communications, and real-time applications.

Smarter Assisted Roaming
Configurable signal thresholds and AP steering guide devices to stronger access points and help balance network loads.
Enjoy stable, consistent performance across all devices everywhere.

Always Optimized for Business
From offices to campuses, seamless roaming delivers uninterrupted mobility. Built to provide reliable coverage for the demands of modern workplaces.

Mesh Wi-Fi 
Vigor2767ax supports up to 7 APs, which can form one or more Wireless Groups. Each group can form Mesh links automatically based on the optimum signal level among the APs and devices.

Unified Mesh & AP Management
The Virtual Controller offers two deployment modes, providing flexible and efficient network management.

Mesh Mode
Automatically forms a self-healing wireless mesh network, with the Vigor2767ax as the Root AP and up to 7 Node APs, delivering easy, scalable, and reliable Wi-Fi coverage.

AP Management Mode
For networks with more than 8 APs, the Virtual Controller switches to AP Management mode, allowing centralised control of up to 20 APs directly through the router’s interface.

Seamless Mesh Role Assignment
When powered on, devices automatically discover each other and assign roles as Root or Node Aps, no manual setup required. This streamlined process enables rapid mesh network formation with optimised coverage and self-healing reliability.

Central Switch Manager (SWM)
The Central Switch Manager (SWM) provides a comprehensive solution for simplifying network administration. It automatically detects and manages all compatible VigorSwitches from a single, centralised interface, eliminating the need to configure each device individually. Administrators can efficiently push configurations to multiple switches and monitor their real-time status to ensure network stability.

SWM also streamlines advanced management tasks, allowing easy implementation of VLAN segmentation and Quality of Service (QoS) policies. This consolidated approach reduces maintenance time and boosts the overall efficiency and reliability of your network infrastructure

SWM

The Vigor2767 Series can function as a master controller, managing and monitoring up to 5 switches. It also provides full visibility into powered devices (PDs) connected behind the switches, such as IP cameras and access points.

Device Management

Monitor the status, firmware version, and uptime of all managed switches in real time.

Port Profile

Create multiple port profiles to easily configure PoE, VLAN, QoS, and other settings across selected switches.

Maintenance

Easily perform configuration backups and restores, remote reboots, or factory resets.

• Software Management – VigorACS 3
• Zero Touch Deployment & Provisioning
• Auto VPN
• Interface Quality & SLA
• VoIP Optimization & Monitoring
• Application Visibility
• Application Based SD-WAN Policy
• Customized Hotspot Page with Multilingual
• Hotspot Clients Analytics
• ACS Server Load Balancing / Failover

In-the-Box

Vigor2767 Router
2 x Antennas
RJ-45 Cable
RJ-11 to RJ-11 Cable (Annex A)
Power Adaptor
Quick Start Guide

Quick Spec

NAT Session	50K
Max. NAT (Mbps)	2300
xDSL	1
Ethernet (2.5 GbE)	1
Ethernet - Switchable	Y
VDSL Standards	ITU-T G.993.1 VDSL,ITU-T G.993.2 VDSL2,ITU-T G.993.5 Vectoring,ITU-T G.997.1,ITU-T G.998.4 Retransmission,
VDSL2 Profile	8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a, 35b
ADSL Standards	ITU-T G.992.1 ADSL (G.dmt),ITU-T G.992.3 ADSL2,ITU-T G.992.5 ADSL2+,T1.413 Issue 2,
Annex Support	Annex A/B/J/M,
Band Plan	998, 997
Cellular (via USB)	2
IPv4	PPPoE,DHCP,Static IP,
IPv6	PPP,DHCPv6,Static IPv6,TSPC,6rd,6in4 Static Tunnel,
802.1p/q Multi-VLAN Tagging	Y
Failover	Y
Connection Detection	ARP, Ping
WAN Data Budget	Y
Dynamic DNS	Y
DrayDDNS	Y
Fixed LAN (RJ-45, GbE)	3
LAN Subnet	4
VLAN	802.1q Tag-based VLAN,
Max. Number of VLAN	8
DHCP Server	Multiple IP Subnet,Custom DHCP Options,Bind-IP-to-MAC,
Wired 802.1x Authentication	Y
Port Mirroring	Y
Local DNS Server	Y
Conditional DNS Forwarding	Y
Hotspot Web Portal (Profile No.)	2
Hotspot Authentication	Click-Through,Social Login,SMS PIN,RADIUS,External Portal Server,
USB	2
USB Type	2
USB Application	User Management,FTP File Sharing,Device Status, Printer Server,Temperature Sensor,USB WAN,
SMB File Sharing (Requires external storage)	Y
Routing	IPv4 Static Route,IPv6 Static Route,Policy Route,Inter-VLAN Route,RIP v1/v2, OSPF(V2/V3),BGP,
Policy-based Routing	Protocol,IP Address,Port,
DNS Security (DNSSEC)	Y
IGMP	IGMP v2/v3,IGMP Proxy,IGMP Snooping & Fast Leave,
Local RADIUS server	Y
Traffic Shaping Policy	Y
IP-based Bandwidth Limit	Y
IP-based Session Limit	Y
QoS (Quality of Service)	IP Address,Port,Application,
APP QoS	Y
Default Policy	Y
VoIP Prioritization	Y
Port Forwarding	Y
DMZ Host	Y
Port Trigger	Y
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
UPnP	Y
Local Service	HTTP,HTTPS,Telnet,SSH v2,FTP,TR-069,
Config Backup/Restore	Y
Firmware Upgrade	WUI, TFTP, TR069
Role-based Privilege	Y
Access Control	Access List, Brute Force Protection
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3
Syslog	Y
Virtual AP Controller	20
Switch Management (SWM)	5
Virtual Switch Controller	5
VigorACS Management (Since f/w)	V5.3.5
URL/IP Reputation	Y
Threat Protection	Y
Firewall Filter	Y
Port Knocking	IP, Content, Traffic
Defense Setup	ARP Spoofing, IP Spoofing
MAC Filtering Profile	Y
IPv6 Address Security	Y
Users & Groups	Y
Access Policies	Y
Group Policies	Y
Conditional Access Policy	Y
Resources	Y
Account Status	Y
Backup and Restore	Y
Site-to-Site VPN	Y
Teleworker VPN	Y
EasyVPN	Y
VPN Protocols	IPsec,IKEv1/IKEv2,IKEv2-EAP,IPsec-XAuth,OpenVPN,WireGuard,L2TP over IPsec,
Max. VPN Tunnels	16
IPsec VPN (AES 256 bits) (single-directional) (Mbps)	300
Wireguard VPN (single-directional) (Mbps)	50
User Authentication	Local,RADIUS,TACACS+,mOTP,TOTP,
IKE Authentication	Pre-Shared Key, X.509
IPsec Authentication	SHA-1, SHA-256
Encryption	DES, 3DES, AES
Single-Armed VPN	Y
NAT-Traversal (NAT-T)	Y
VPN Matcher	Y
VPN Connection Status	Y
Backup & Restore	Y
Clients List	Y
Log Center	Y
WAN	Y
ARP Table	Y
Route Table	Y
DHCP Table	Y
IPv6 TSPC Status	Y
IPv6 Neighbor Table	Y
LLDP Neighbors	Y
DNS Cache Table	Y
DSL Status	Y
Remote DSL Status	Y
SFP Information	Y
Monitoring PPPoE Pass-Through	Y
Session Table	Y
Running Table	Y
Power Input	DC 12V @ 1.15A
Max. Power Consumption (watts)	13.7
Dimension (mm)	207 x 131 x 42
Operating Temperature	0 to 45°C
Storage Temperature	-25 to 70°C
Operating Humidity (non-condensing)	10 to 90%