DrayTek Vigor 3910 10Gb VPN DrayOS Firewall/Router

High Capacity VPN Router based upon the DrayOS made popular through the 2600, 2800, 2820, 2830, 2860 and 2862 routers. This is not a Linux router like the 2960 or 3900
Manufacturer: DrayTek
£718.80 incl VAT
£598.80 incl VAT
excluding shipping

DrayTek Vigor 3910 High Capacity DrayOS Router

The DrayTek Vigor 3910 is not an upgraded 3900 so beware the product name which is deceptive. The 3910 is a not a Linux based router as was the 2960 or 3900, it is a DrayOS router which is the same OS DrayTek have been using since the 2600 series, which was definitely a great router, but the DrayOS has always been a SoHo OS. The new 3910 may have the throughput and port speeds to rival models well beyond it's price, but it no longer has the adapatability of the 3900 and does suffer from firmware glitches on the models we have examined.

If you are a fan of the 2926/2927 series then you will love this thing as that is essentially what it is - a very fast DrayTek Vigor 2927, and if you do not need fibre/SFP+ or 2.5g/10g services, then stick with the Vigor 2927 as it will do everything you need.

If you need a higly configurable DrayTek router that can support lots of VLAN/VPN/LAN set-ups then buy a second hand 3900. If you need 10gb ports and hundreds of VPN tunnels, perhaps have a look at a Sonicwall oir Watchguard.

  • Key Specifications

    • Multi-WAN Router with 10Gb WAN
    • Ethernet and Fibre WAN Router(RJ-45 & SFP+)
    • High-performance VPN Concentrator
      • 500 LAN-to-LAN VPN Tunnels
      • 200 DrayTek SSL VPN Tunnels
    • 8x Switchable LAN or WAN Ports
    • Load Balance up to 8 WAN interfaces:
      • 2x 10GbE SFP+ LAN/WAN Ports
      • 2x 2.5GbE RJ-45 LAN/WAN Ports
      • 4x Gigabit RJ-45 LAN/WAN Ports
    • 4x Dedicated Gigabit RJ-45 LAN Ports
    • 50 LAN Subnets with VLANs (Port, 802.1q)
    • Quality of Service Assurance
    • Optional VigorCare Available
    • Can be centrally Managed by VigorACS (requires VigorACS version 2.5.4 for full support)

Physical Interfaces

WAN/LAN Switchable Port 2x 10G/1G SFP+ Fiber Slot (P1-2)
2x 2.5G/1G/100M/10M Ethernet, RJ-45 (P3-4)
4x 1G/100M/10M Ethernet, RJ-45 (P5-8)
(requires firmware 3.9.2, available Q1'20)
Fixed LAN Port 4x 1G/100M/10M Ethernet, RJ-45 (P9-12)
USB Port 2x USB 3.0
Console Port 1x RJ-45 (RS-232)
Button 1x Factory Reset


NAT Throughput 9 Gb/s
VPN Performance 3300 Mb/s
SSL VPN Performance 1000Mb/s
NAT Sessions 150,000
Max. Concurrent VPN Tunnels 500
Max. Concurrent SSL VPN 200

Internet Connection Features

IPv4 PPPoE, DHCP, Static IP
IPv6 PPP, DHCPv6, Static IPv6, TSPC, AICCU, 6rd, 6in4 Static Tunnel
802.1p/q Multi-VLAN Tagging Supported
Multi-VLAN/PVC Supported
Load Balancing IP-based, Session-based
WAN Active on Demand Link Failure, Traffic Threshold
Connection Detection PPP, Ping
Dynamic DNS Supported
DrayDDNS Supportedwith LetsEncrypt Certificate support

LAN Management Features

VLAN 802.1q Tag-based, Port-based
Max. Number of VLAN 50
DHCP Server Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC
LAN IP Alias Supported
IP Pool Count Up to 4093 per LAN Subnet
PPPoE Server Supported
Local DNS Server Supported
Conditional DNS Forwarding Supported
Hotspot Web Portal Supported
Port Mirroring / Packet Capturing Supported
Hotspot Authentication Click-Through, Social Login, SMS PIN, RADIUS, External Portal Server

Networking Features

Routing IPv4 Static Routing, IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, OSPFv2, BGP
Policy-based Routing Match via: Protocol, IP Address, Port, Domain Name, Country
Direct Traffic via: WAN Interface, LAN Interface, NAT/Routing, LAN Gateway, VPN Tunnel
Failover with optional Failback to: WAN/LAN, VPN, Route Policy, LAN Gateway
High Availability Active-Standby, Hot-Standby
DNS Security (DNSSEC) Supported
Multicast IGMP Proxy, Bonjour
Local RADIUS server Supported
SMB File Sharing Supported(Requires external storage)

VPN Features

LAN-to-LAN Supported
Teleworker-to-LAN Supported
Protocols PPTP, L2TP, IPsec, L2TP over IPsec, SSL, GRE, IKEv2, IPsec-XAuth, OpenVPN
User Authentication Local, RADIUS, LDAP, TACACS+, mOTP
IKE Authentication Pre-Shared Key, X.509, XAuth, EAP
IPsec Authentication SHA-1, SHA-256, MD5
Encryption MPPE, DES, 3DES, AES
VPN Trunk (Redundancy) Load Balancing, Failover
Single-Armed VPN Supported
NAT-Traversal (NAT-T) Supported

Firewall & Content Filtering Features

NAT Port Redirection (520 rules)
Open Ports (260 rules, 10 port ranges per rule)
Port Triggering, DMZ Host, UPnP
ALG (Application Layer Gateway) SIP, RTSP, FTP, H.323
VPN Pass-Through PPTP, L2TP, IPsec
IP-based Firewall Policy  Supported
User-based Firewall Policy  Supportedwith Data and Time Quota Management
Content Filtering App Enforcement - application based
URL Content Filtering
Web Category Filtering - Includes free 30-day trial
DNS Keyword - URL or Category
Web Features
DoS Attack Defense Supported
Spoofing Defense Supported

Bandwidth Management Features

IP-based Bandwidth Limit Supported
IP-based Session Limit Supported
QoS (Quality of Service) TOS, DSCP, 802.1p, IP Address, Service Type, App QoS
VoIP Prioritization Supported

Router Management Features

Local Service HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import Supported
VigorACS Central Management Supported (requires firmware 3.9.2, available Q1'20)
(requires VigorACS version 2.5.4 for full support)
Access Point Management up to 50 DrayTek VigorAPs (requires firmware 3.9.2, available Q1'20)
Switch Management up to 30 DrayTek VigorSwitches (requires firmware 3.9.2, available Q1'20)
Firmware Upgrade TFTP, HTTP, TR-069
2-Level Administration Privilege Supported
Access Control Access List, Brute Force Protection
Syslog Supported
Notification Alert SMS, E-mail
SNMP v1, v2c, v3

Operating Requirements

Rack Mountable Supported Mounting Kit Included, 1U Rack Height
Dimensions Depth: 285mm
Width: 443mm
Height: 45mm
Weight 3.23 kg
Power 220-240VAC directly to unit
Max.Power Consumption 35 watts
Operating Temperature 0 to 45 °C
Storage Temperature -10 to 55 °C
Operating Humidity (non-condensing) 10 to 90%

Box Contents

Vigor 3910 Router Supported
Quick Start Guide Supported
Cat-5e RJ-45 Cable Supported
Rackmount Kit Supported
RJ-45 to RS-232 Adapter Supported
Silver RJ-45 Serial Cable Supported
IEC C13 Power Cord Supported


Standard Warranty Two (2) Years, RTB
VigorCare Extended Warranty Three (3) Years, Advanced Replacement