DrayTek Vigor2865 Series VDSL2 Gigabit Ethernet WAN Router Owner’s Manual

: June 12, 2024
: DrayTek

Table of Contents

DrayTek Vigor2865 Series VDSL2 Gigabit Ethernet WAN Router
Product Information
New Features
Improvement
File and Modem Code
Known Issue
Read User Manual Online (PDF format)
Download This Manual (PDF format)

DrayTek Vigor2865 Series VDSL2 Gigabit Ethernet WAN Router

Product Information

Model	Vigor2865 Series
Firmware Version	4.4.2
Release Type	Normal
Applied Models	Vigor2865 / Vigor2865ac / Vigor2865Vac

Vigor2865L / Vigor2865Lac / Vigor2865ax

New Features

Support TR-069 over IPv6.
Support Cyren Zero-Day WCF.
Support 2FA authentication for VPN.
Support AES-GCM for L2TP/IPsec VPN.
Support Google Authenticator APP for VPN.

Improvements

Improved Mesh network stability.
Support to upload certificate chain by PKC12 file.
Support static route session for hardware acceleration.
Increase the APM and SWM password length up to 128
characters.
When Mesh Root is enabled, the WAN TCP port number 9608 will be
closed.
Support WANx First (WAN Interfaces) for DrayDDNS, and Dynamic
DNS Account.
Allow wireless WAN mode on both bands (2.4GHz/5GHz) to connect
to the wireless root automatically when the root changes to other
channels.
Change the default SSID name (2.4GHz/5GHz) to DrayTek-xxxxxx /
DrayTek5G-xxxxxx ( xxxxxx, the last 6 digits of the product’s MAC
address).

Corrections

An issue of connecting to GenieACS.
An issue with the SNMP VPN status OIDs not working.
An issue of WPA Enterprise security mechanism not working.
An issue that incorrect DNS answers when the router was the DNS server.
An issue that a policy route stopped working when the hardware accelerated was enabled.
An issue with config saving of IPsec multiple local SA saved as 0.0.0.0/0 wrongly.
An issue with blocking the L2TP traffic (WAN to Localhost) by the firewall default rule.
An issue with the DNS resolve with the Windows OpvenVPN client dialing up the VPN to the Vigor router.
An issue that only five Remote Dial-In User profiles could be restored if they were backup from other routers.
An issue that OpenVPN remote users could not access to LAN side of the Vigor router (when using the WAN2 / LTE interface).
An issue with the TR-069 SDWAN data not displayed on the ACS server due to one extra / in the Authorization URI in the Bulkdata packet.
An issue that there was no response message displayed when the router failed to connect to the secondary TR-069 server via the WAN2 interface.

File and Modem Code

File Name	Annex A Modem Code	Annex B Modem Code
Vigor2865_v4.4.2_STD.zip	8B0F07_8B0701 and 8B2607_8B0B01	8B2607_8B0B02 and

Vigor2865 Series is a VDSL2/ADSL2+ Security Firewall router integrating a DSL modem which is compatible with variants of ADSL and VDSL, including profile 35b Super Vectoring.

New Features

Support TR-069 over IPv6.
Support Cyren Zero-Day WCF.
Support 2FA authentication for VPN.
Support AES-GCM for L2TP/IPsec VPN.
Support Google Authenticator APP for VPN.

Improvement

Improved: Improvement of Mesh network stability.
Improved: Support to upload certificate chain by PKC12 file.
Improved: Support static route session for hardware acceleration.
Improved: Increase the APM and SWM password length up to 128 characters.
Improved: When Mesh Root is enabled, the WAN TCP port number 9608 will be closed.
Improved: Support WANx First (WAN Interfaces) for DrayDDNS, and Dynamic DNS Account.
Improved: Allow wireless WAN mode on both bands (2.4GHz/5GHz) to connect to the wireless root automatically when the root changes to other channels.
Improved: Change the default SSID name (2.4GHz/5GHz) to DrayTek-xxxxxx /DrayTek5G-xxxxxx ( “xxxxxx”, the last 6 digits of the product’s MAC address).
Corrected: An issue of connecting to GenieACS.
Corrected: An issue with the SNMP VPN status OIDs not working.
Corrected: An issue of WPA Enterprise security mechanism not working.
Corrected: An issue that incorrect DNS answers when the router was the DNS server.
Corrected: An issue that a policy route stopped working when the hardware accelerated was enabled.
Corrected: An issue with config saving of IPsec multiple local SA saved as 0.0.0.0/0 wrongly.
Corrected: An issue with blocking the L2TP traffic (WAN to Localhost) by the firewall default rule.
Corrected: An issue with the DNS resolve with the Windows OpvenVPN client dialing up the VPN to the Vigor router.
Corrected: An issue that only five Remote Dial-In User profiles could be restored if they were backup from other routers.
Corrected: An issue that OpenVPN remote users could not access to LAN side of the Vigor router (when using the WAN2 / LTE interface).
Corrected: An issue with the TR-069 SDWAN data not displayed on the ACS server due to one extra “/” in the Authorization URI in the Bulkdata packet.
Corrected: An issue that there was no response message displayed when the router failed to connect to the secondary TR-069 server via the WAN2 interface.

File and Modem Code

“Vigor2865_v4.4.2_STD.zip” provides Annex A modem code 8B0F07_8B0701 and 8B2607_8B0B01, and Annex B modem code 8B2607_8B0B02 and 8B2817_8B0812.
“Vigor2865_v4.4.2_MDM1.zip” provides Annex A modem code 8B1117_8B0701 and 8B0F07_8B0701, and Annex B modem code 8B2817_8B0812 and 8B2607_8B0B02.
“Vigor2865_v4.4.2_MDM2.zip” provides Annex A modem code 8D1917_8D0C11 and 8D1507_8D0901, and Annex B modem code 8D1917_8D0C12 and 8B2817_8B0812. Recommended for Australia.
“Vigor2865_v4.4.2_MDM3.zip” provides Annex A modem code 77C717_8D0C11 and 8D1507_8D0901, and Annex B modem code 77C717_8D0C12 and 8B2607_8B0B02.
“Vigor2865_v4.4.2_MDM4.zip” provides Annex A modem code 8D1C17_8D0E11 and 8D1B17_8D0E11, and Annex B modem code 8D1C17_8D0E12 and 8D1917_8D0C12.

Known Issue

A firewall can restrict/drop unwanted inbound WAN traffic such as VPN requests. The router’s firewall block rules can stop remote management and VPN access. It is recommended to review the firewall settings before upgrading.

Note