DrayTek Vigor 3910 High Capacity DrayOS Router

The DrayTek Vigor 3910 is not an upgraded 3900 so beware the product name which is deceptive. The 3910 is a not a Linux based router as was the 2960 or 3900, it is a DrayOS router which is the same OS DrayTek have been using since the 2600 series, which was definitely a great router, but the DrayOS has always been a SoHo OS. The new 3910 may have the throughput and port speeds to rival models well beyond it's price, but it no longer has the adapatability of the 3900 and does suffer from firmware glitches on the models we have examined.

If you are a fan of the 2926/2927 series then you will love this thing as that is essentially what it is - a very fast DrayTek Vigor 2927, and if you do not need fibre/SFP+ or 2.5g/10g services, then stick with the Vigor 2927 as it will do everything you need.

If you need a higly configurable DrayTek router that can support lots of VLAN/VPN/LAN set-ups then buy a second hand 3900. If you need 10gb ports and hundreds of VPN tunnels, then this may be the router for you, otherwise have a look at Checkpoint, Sonicwall or Watchguard.

• Key Specifications

  • Multi-WAN Router with 10Gb WAN
  • Ethernet and Fibre WAN Router(RJ-45 & SFP+)
  • High-performance VPN Concentrator
    • 500 LAN-to-LAN VPN Tunnels
    • 200 DrayTek SSL VPN Tunnels
  • 8x Switchable LAN or WAN Ports
  • Load Balance up to 8 WAN interfaces:
    • 2x 10GbE SFP+ LAN/WAN Ports
    • 2x 2.5GbE RJ-45 LAN/WAN Ports
    • 4x Gigabit RJ-45 LAN/WAN Ports
  • 4x Dedicated Gigabit RJ-45 LAN Ports
  • 50 LAN Subnets with VLANs (Port, 802.1q)
  • Quality of Service Assurance
  • Optional VigorCare Available
  • Can be centrally Managed by VigorACS (requires VigorACS version 2.5.4 for full support)

Internet Connection Features
IPv4	PPPoE, DHCP, Static IP
IPv6	PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
Load Balancing	IP-based, Session-based
WAN Active on Demand	Link Failure, Traffic Threshold
Connection Detection	PPP, Ping
Dynamic DNS
DrayDDNS	with LetsEncrypt Certificate support

LAN Management Features
VLAN	802.1q Tag-based, Port-based
Max. Number of VLAN	50
DHCP Server	Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias
IP Pool Count	Up to 4093 per LAN Subnet
PPPoE Server
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Port Mirroring / Packet Capturing
Hotspot Authentication	Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server

Networking Features
Routing	IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, OSPFv2, BGP
Policy-based Routing	Match via: Protocol, IP Address, Port, Domain Name, Country Direct Traffic via: WAN Interface, LAN Interface, NAT/Routing, LAN Gateway, VPN Tunnel Failover with optional Failback to: WAN/LAN, VPN, Route Policy, LAN Gateway
High Availability	Active-Standby, Hot-Standby
DNS Security (DNSSEC)
Multicast	IGMP Proxy, Bonjour
Local RADIUS server
SMB File Sharing	(Requires external storage)

VPN Features
LAN-to-LAN
Teleworker-to-LAN
Protocols	PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IPsec-XAuth, OpenVPN
User Authentication	Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication	Pre-Shared Key, X.509, XAuth, EAP
IPsec Authentication	SHA-1, SHA-256, MD5
Encryption	MPPE, DES, 3DES, AES
VPN Trunk (Redundancy)	Load Balancing, Failover
Single-Armed VPN
NAT-Traversal (NAT-T)

Firewall & Content Filtering Features
NAT	Port Redirection (520 rules) Open Ports (260 rules, 10 port ranges per rule) Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway)	SIP, RTSP, FTP, H.323
VPN Pass-Through	PPTP, L2TP, IPsec
IP-based Firewall Policy
User-based Firewall Policy	with Data and Time Quota Management
Content Filtering	App Enforcement - application based URL Content Filtering Web Category Filtering - Includes free 30-day trial DNS Keyword - URL or Category Web Features
DoS Attack Defense
Spoofing Defense

Bandwidth Management Features
IP-based Bandwidth Limit
IP-based Session Limit
QoS (Quality of Service)	TOS, DSCP, 802.1p, IP Address, Service Type, App QoS
VoIP Prioritization

Router Management Features
Local Service	HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
VigorACS Central Management	(requires firmware 3.9.2, available Q1'20) (requires VigorACS version 2.5.4 for full support)
Access Point Management	up to 50 DrayTek VigorAPs (requires firmware 3.9.2, available Q1'20)
Switch Management	up to 30 DrayTek VigorSwitches (requires firmware 3.9.2, available Q1'20)
Firmware Upgrade	TFTP, HTTP, TR-069
2-Level Administration Privilege
Access Control	Access List, Brute Force Protection
Syslog
Notification Alert	SMS, E-mail
SNMP	v1, v2c, v3

Operating Requirements
Rack Mountable	Mounting Kit Included, 1U Rack Height
Dimensions	Depth: 285mm Width: 443mm Height: 45mm
Weight	3.23 kg
Power	220-240VAC directly to unit
Max.Power Consumption	35 watts
Operating Temperature	0 to 45 °C
Storage Temperature	-10 to 55 °C
Operating Humidity (non-condensing)	10 to 90%

Box Contents
Vigor 3910 Router
Quick Start Guide
Cat-5e RJ-45 Cable
Rackmount Kit
RJ-45 to RS-232 Adapter
Silver RJ-45 Serial Cable
IEC C13 Power Cord