DrayTek Vigor2927 Dual-WAN VPN Firewall Router User Manual

DrayTek Vigor2927 Dual-WAN VPN Firewall Router

Product Information

• Product Name: Vigor2927 Series
• Firmware Version: 4.4.2
• Release Type: Normal
• Applied Models: Vigor2927, Vigor2927ac, Vigor2927Vac, Vigor2927L, Vigor2927Lac, Vigor2927ax
• Description: The Vigor2927 series is a broadband router that integrates IP layer QoS, NAT session/bandwidth management to help users control large bandwidth effectively. It offers state-of-the-art routing features, VPN security, and Dual-WAN functionality, making it ideal for professional users and small offices.

New Features

• Support for the second NTP server (as a backup server)
• Two-Factor authentication mechanism for VPN
• AES-GCM algorithm support for IPsec/L2TP Dial-In connection
• VPN random password by TOTP/Google Authenticator APP

Improvements

• Support for Cyren Zero-Day WCF
• Improved mesh network stability
• Foolproof mechanism for LAN VLAN configuration
• Support for static route session in hardware acceleration
• Automatic closure of WAN TCP port number 9608 when Mesh Root is enabled
• WANx First (WAN Interfaces) support for DrayDDNS and Dynamic DNS Account
• Wireless WAN mode can connect to wireless root automatically when the root changes to another channel
• Character limitation increased from 23 to 64 for Encrypt Password on Certification Management>>Certificate Backup
• Various bug fixes related to GenieACS, SNMP OID, VigorSMS APP, firewall configuration, Hardware Acceleration, IKEv2 EAP VPN connection, DNS resolve issue with Windows OpenVPN client, ARP table display issue, and SMS/Mail service Object Mail Server

Known Issue

A firewall can restrict/drop unwanted inbound WAN traffic such as VPN requests. The router’s firewall block rules can stop remote management and VPN access. It is recommended to review the firewall settings before upgrading.

Note

IPsec HMAC (MD5) is no longer supported.

Product Usage Instructions

• Before upgrading the firmware, review the firewall settings to avoid any potential restrictions on remote management and VPN access.
• To utilize the new features and improvements introduced in the firmware version 4.4.2, follow the steps below:
  • Make sure you have one of the following models: Vigor2927, Vigor2927ac, Vigor2927Vac, Vigor2927L, Vigor2927Lac, or Vigor2927ax.
  • Download the firmware version 4.4.2 from the official website of the product manufacturer.
  • Access the router’s web interface by entering the default IP address (usually 192.168.1.1) in your web browser.
  • Login using your administrator credentials.
  • Navigate to the firmware upgrade section in the router’s settings.
  • Select the downloaded firmware file (4.4.2) and initiate the upgrade process.
  • Wait for the firmware upgrade to complete. Do not interrupt the process.
  • After the upgrade, the new features and improvements will be available for use.

Note : If you encounter any issues during the upgrade process or while using the new features, refer to the product manual or contact the manufacturer’s support for assistance.

Release Note for Vigor2927 Series

• Firmware Version: 4.4.2
• Release Type : Normal
• Applied Models: Vigor2927, Vigor2927ac, Vigor2927Vac, Vigor2927L, Vigor2927Lac, Vigor2927ax

Vigor2927 series is a broadband router that integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. The state-of-art routing feature, VPN security, and Dual-WAN provide integrated benefits for professional users and small offices.

New Features

• Support the second NTP server (as a backup server).
• Support Two-Factor authentication mechanism for VPN.
• Support AES-GCM algorithm for IPsec/L2TP Dial-In connection.
• Support VPN random password by TOTP/Google Authenticator APP.

Improvement

• Improved: Support Cyren Zero-Day WCF.
• Improved: Improve the mesh network stability.
• Improved: Add a foolproof mechanism for LAN VLAN configuration.
• Improved: Support the static route session for the hardware acceleration.
• Improved: The WAN TCP port number 9608 will be closed when Mesh Root is enabled.
• Improved: Support WANx First (WAN Interfaces) for DrayDDNS and Dynamic DNS Account.
• Improved: Allow wireless WAN mode to connect to wireless root automatically when the root changes to another channel.
• Improved: Modify the character limitation from 23 to 64 for the Encrypt Password on Certification Management>>Certificate Backup.
• Corrected: An issue of connecting to GenieACS.
• Corrected: An issue with SNMP OID not working on VPN status.
• Corrected: An issue with the system reboot while using VigorSMS APP.
• Corrected: An issue with failure to restore the firewall configuration completely.
• Corrected: An issue of Hardware Acceleration didn’t work when enabling Data Flow Monitor.
• Corrected: An issue with failure to establish IKEv2 EAP VPN connection from Windows OS.
• Corrected: A DNS resolve issue with Windows OpenVPN client dials up the VPN to Vigor Router.
• Corrected: A display issue on the ARP table when the Strict Bind was enabled and all subnets selected.
• Corrected: An issue with SMS/Mail service Object Mail Server failed to send a Test E-mail after configuring the SMTP server.
• Corrected: An issue with the OpenVPN remote user not accessing to LAN side of the Vigor router (when using the WAN2 / LTE interface).
• Corrected: An issue with configuration change (from customized address into 0.0.0.0/00) for VPN profile #2 after ticking “Create a unique SA for each subnet(IPsec)”.

Known Issue
A firewall can restrict/drop unwanted inbound WAN traffic such as VPN requests. The router’s firewall block rules can stop remote management and VPN access. It is recommended to review the firewall settings before upgrading.

Note
IPsec HMAC (MD5) is no longer supported.

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>