DrayTek Vigor 3910 10-Gigabit Firewall/Router

DrayTek Vigor 3910 High-Performance Router/Firewall Router with high capacity VPN Co-Processor
Manufacturer: DrayTek
£718.80 incl VAT
£598.80 incl VAT
excluding shipping

DrayTek Vigor 3910 High Capacity Router

The DrayTek Vigor 3910 improves upon the classic 3900, with a new, improved interface and faster interfaces and processors. The new version supports 10gig ethernet on both WAN & LAN with support for SFP/fiber on each. USB support remains with capacity for 5G devices and thermometers/storage too.

As always with a DrayTek business device, the remote connectivity support is outstanding. The VPN processor can pass 3Gb/s of traffic comfortably and so the 3910 is a great appliance for a dead office or data centre. 

The firewall can perform all sorts of operations with all sorts of braches of conditions, and with a bit of planning, will equal any Fortinet, Cisco, Juniper or Watchguard device. 

The VLAN support is also out of this world, allowing for sophisticated combinations of VLANs connected across WAN sites etc.

Traffic can be throttled using all sorts of prioritisation rules, based upon different traffic and application types. Web traffic is also monitored and can be filtered in many ways to protect various network segments from others.

New features include a firewall rule diagnosis system, a menu search feature and Border Gateway Protocol support.


  • Key Specifications

    • Multi-WAN Router with 10Gb WAN
    • Ethernet and Fibre WAN Router(RJ-45 & SFP+)
    • High-performance VPN Concentrator
      • 500 LAN-to-LAN VPN Tunnels
      • 200 DrayTek SSL VPN Tunnels
    • 8x Switchable LAN or WAN Ports
    • Load Balance up to 8 WAN interfaces:
      • 2x 10GbE SFP+ LAN/WAN Ports
      • 2x 2.5GbE RJ-45 LAN/WAN Ports
      • 4x Gigabit RJ-45 LAN/WAN Ports
    • 4x Dedicated Gigabit RJ-45 LAN Ports
    • 50 LAN Subnets with VLANs (Port, 802.1q)
    • Quality of Service Assurance
    • Optional VigorCare Available
    • Can be centrally Managed by VigorACS (requires VigorACS version 2.5.4 for full support)

Physical Interfaces

WAN/LAN Switchable Port 2x 10G/1G SFP+ Fiber Slot (P1-2)
2x 2.5G/1G/100M/10M Ethernet, RJ-45 (P3-4)
4x 1G/100M/10M Ethernet, RJ-45 (P5-8)
(requires firmware 3.9.2, available Q1'20)
Fixed LAN Port 4x 1G/100M/10M Ethernet, RJ-45 (P9-12)
USB Port 2x USB 3.0
Console Port 1x RJ-45 (RS-232)
Button 1x Factory Reset


NAT Throughput 9 Gb/s
VPN Performance 3300 Mb/s
SSL VPN Performance 1000Mb/s
NAT Sessions 150,000
Max. Concurrent VPN Tunnels 500
Max. Concurrent SSL VPN 200

Internet Connection Features

IPv4 PPPoE, DHCP, Static IP
IPv6 PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging Supported
Multi-VLAN/PVC Supported
Load Balancing IP-based, Session-based
WAN Active on Demand Link Failure, Traffic Threshold
Connection Detection PPP, Ping
Dynamic DNS Supported
DrayDDNS Supportedwith LetsEncrypt Certificate support

LAN Management Features

VLAN 802.1q Tag-based, Port-based
Max. Number of VLAN 50
DHCP Server Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias Supported
IP Pool Count Up to 4093 per LAN Subnet
PPPoE Server Supported
Local DNS Server Supported
Conditional DNS Forwarding Supported
Hotspot Web Portal Supported
Port Mirroring / Packet Capturing Supported
Hotspot Authentication Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server

Networking Features

Routing IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, OSPFv2, BGP
Policy-based Routing Match via: Protocol, IP Address, Port, Domain Name, Country
Direct Traffic via: WAN Interface, LAN Interface, NAT/Routing, LAN Gateway, VPN Tunnel
Failover with optional Failback to: WAN/LAN, VPN, Route Policy, LAN Gateway
High Availability Active-Standby, Hot-Standby
DNS Security (DNSSEC) Supported
Multicast IGMP Proxy, Bonjour
Local RADIUS server Supported
SMB File Sharing Supported(Requires external storage)

VPN Features

LAN-to-LAN Supported
Teleworker-to-LAN Supported
Protocols PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IPsec-XAuth, OpenVPN
User Authentication Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication Pre-Shared Key, X.509, XAuth, EAP
IPsec Authentication SHA-1, SHA-256, MD5
Encryption MPPE, DES, 3DES, AES
VPN Trunk (Redundancy) Load Balancing, Failover
Single-Armed VPN Supported
NAT-Traversal (NAT-T) Supported

Firewall & Content Filtering Features

NAT Port Redirection (520 rules)
Open Ports (260 rules, 10 port ranges per rule)
Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway) SIP, RTSP, FTP, H.323
VPN Pass-Through PPTP, L2TP, IPsec
IP-based Firewall Policy  Supported
User-based Firewall Policy  Supportedwith Data and Time Quota Management
Content Filtering App Enforcement - application based
URL Content Filtering
Web Category Filtering - Includes free 30-day trial
DNS Keyword - URL or Category
Web Features
DoS Attack Defense Supported
Spoofing Defense Supported

Bandwidth Management Features

IP-based Bandwidth Limit Supported
IP-based Session Limit Supported
QoS (Quality of Service) TOS, DSCP, 802.1p, IP Address, Service Type, App QoS
VoIP Prioritization Supported

Router Management Features

Local Service HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import Supported
VigorACS Central Management Supported (requires firmware 3.9.2, available Q1'20)
(requires VigorACS version 2.5.4 for full support)
Access Point Management up to 50 DrayTek VigorAPs (requires firmware 3.9.2, available Q1'20)
Switch Management up to 30 DrayTek VigorSwitches (requires firmware 3.9.2, available Q1'20)
Firmware Upgrade TFTP, HTTP, TR-069
2-Level Administration Privilege Supported
Access Control Access List, Brute Force Protection
Syslog Supported
Notification Alert SMS, E-mail
SNMP v1, v2c, v3

Operating Requirements

Rack Mountable Supported Mounting Kit Included, 1U Rack Height
Dimensions Depth: 285mm
Width: 443mm
Height: 45mm
Weight 3.23 kg
Power 220-240VAC directly to unit
Max.Power Consumption 35 watts
Operating Temperature 0 to 45 °C
Storage Temperature -10 to 55 °C
Operating Humidity (non-condensing) 10 to 90%

Box Contents

Vigor 3910 Router Supported
Quick Start Guide Supported
Cat-5e RJ-45 Cable Supported
Rackmount Kit Supported
RJ-45 to RS-232 Adapter Supported
Silver RJ-45 Serial Cable Supported
IEC C13 Power Cord Supported


Standard Warranty Two (2) Years, RTB
VigorCare Extended Warranty Three (3) Years, Advanced Replacement