Excellent cosmetic condition - looks like new and saves you money.
Save money
Enjoy significant savings without compromising on quality.
Reduce waste
Reduce electronic waste and lower your carbon footprint.
Extensively Tested
Every refurbished device is rigorously tested and repaired by certified technicians.
Warranty included
This device is protected with a warranty covering both parts and labour.
GRADE A1
High performance router with 2.5GbE WAN that’s ideal for connecting to FTTP modems. The DrayTek Vigor 2136ax Firewall VPN routers allow you to make the most of FTTP Fibre Broadband with future-proof 2.5 Gigabit WAN interfaces, extensive Firewall, Content Filtering, VPN client/server and Quality of Service controls.
2.5 Gigabit WAN Interfaces for Fibre Broadband
Make full use of Fibre Broadband with the Vigor 2136ax’s 2.3 Gigabit throughput. Additional Ethernet, Wireless or USB LTE WAN options are available.
Benefits: Unleash the full potential of fibre broadband: over 2 Gigabit CPE with flexible application.
Wi-Fi 6 - AX3000 Performance
Wi-Fi 6 wireless provides gigabit Wi-Fi with reliable throughput. Ideal for time-sensitive video conferencing, low latency gaming and handling 4K Ultra-HD streaming without buffering.
Benefits: Improved wireless performance. Built with the latest technologies
Identity and Access Management (IAM)
The new Identity and Access Management (IAM) feature enables the admin to control access to local resources (servers, NAS drives etc.) based on pre-defined policies, MFA, and external authentication methods. Benefits: Policy-based access to the local network resources. High-Performance VPN Router for SMB
Securely connect remote sites at high speed, up to 4 VPN tunnels. Connect remote workers to network resources and secure connectivity, with OpenVPN and WireGuard support.
Benefits: Provide secure, encrypted network access for remote workers.
3+1 Gigabit LAN Ports
Attach Computers, Servers and Network Attached Storage directly, with up to 4 LAN ports. Use VLANs to supply Broadband and VPN connectivity to as many as 4 separate networks.
Benefits: Improve the quality of service for private and guest data traffic. Mix fixed and virtual configurations.
Easily Manage Local APs/Switches with the Virtual Controller
Manage devices locally thanks to the router’s Virtual Controller feature. Automatic discovery allows the router to add connected DrayTek switches and APs to the management pool.
Benefits: Monitor, maintain, and provision directly on the Vigor router.
Physical Interfaces
• WAN Ports: 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45
• WAN/LAN Switchable Port: 1x 2.5Gigabit Ethernet (2.5G/1G/100M/10M), RJ-45
• LAN Ports: 3x Gigabit Ethernet (1G/100M/10M), RJ-45
• 2x USB 2.0 Ports for LTE Modem, Thermometer or Printer
• 2x Removable Wireless LAN antennas (wireless models)
• Wireless On / Off / WPS button
• Recessed Factory Reset button
Antenna Specifications
• Wireless Antennas; 2x External Dipole, 5GHz Gain: 2.7 dBi, 2.4GHz Gain: 2.6 dBi, RP-SMA fitting antenna connectors
Performance
• NAT Performance; 2.3 Gb/s NAT Throughput for Single WAN, 50,000 NAT Sessions
• VPN Performance; 390 Mb/s IPsec (AES256) VPN Performance, Max. 4 Concurrent VPN Tunnel
Internet Connection
• Hardware Acceleration (Always On)
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• 2.4GHz or 5GHz Wireless WAN
• WAN Active on Demand: Link Failure, Traffic Threshold
• Connection Detection: PPP, ARP Detect, Ping Detect
• WAN Data Budget
• Dynamic DNS
• DrayDDNS – with automated LetsEncrypt Certificates
Wireless Features
• AX3000 Wi-Fi 6 Wireless; 802.11ax 2x2 wireless access point, Compatible with 802.11a/b/g/n/ac wireless, Dual-band (2.4/5Ghz) simultaneous wireless, Up to 2400Mbps PHY rate at 160MHz with 5GHz, Up to 574Mbps PHY rate at 40MHz with 2.4GHz, Channel Bandwidth; 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz, OFDMA, MU-MIMO, Tx Beamforming, 1024-QAM
• Mesh Root support with DrayTek VigorAP Mesh Nodes
• Up to 8 SSIDs per radio band
• Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
• Wireless Optimisation: AP-Assisted Mobility, Band Steering
• Bandwidth Management (Per Station / Per SSID)
• WMM (Wireless MultiMedia)
• WPS - WiFi Protected Setup
• Station Control - Time-limited wireless connectivity per Station (e.g. 1 hour)
• EAPOL Key Retry - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK
• Wireless Security; WPA2, WPA3, Pre-Shared Key authentication, Enterprise 802.1x authentication, WEP/WPA for Legacy Clients, Access Control – Blacklist / Whitelist client MAC addresses per SSID
WAN Interfaces
• WAN1: 2.5 Gigabit Ethernet
• WAN2: 2.5 Gigabit Ethernet (LAN switchable)
• WAN3: 2.4GHz Wireless WAN
• WAN4: 5GHz Wireless WAN
• WAN5: LTE USB Modem (not included)
• WAN6: LTE USB Modem (not included)
Firewall & Content Filtering
• IP-based Firewall Policy
• User-based Time Quota
• DoS Attack Defence
• Spoofing Defence
• Content Filtering; Application Content Filter, URL Content Filter, DNS Keyword Filter, Web Features, Web Category Filter
NAT Features
• NAT Port Redirection
• Open Ports
• Port Triggering
• DMZ Host
• UPnP
• ALG (Application Layer Gateway): SIP, RTSP
LAN Management
• 802.1q Tag-based, Port-based VLAN
• Up to 4 LAN Subnets (NAT or Routing mode selectable per LAN interface)
• Up to 8 VLANs
• DMZ Port
• DHCP Server; Multiple IP Subnet, Custom DHCP Options, Bind-IP-to-MAC, DHCP Pool Count up to 253 addresses for LANs 1-4, DHCP Relay per LAN
• LAN IP Alias
• Wired 802.1x Port Authentication
• Local DNS Server
• Conditional DNS Forwarding
• Hotspot Web Portal
• Hotspot Authentication: Click-Through, External Portal Server
Networking Features
• Policy-based Routing: Protocol, IP Address, Port, Domain/Host¤name, Country
• High Availability: Active-Standby, Hot-Standby
• DNS Security (DNSSEC)
• Local RADIUS server
• SMB File Sharing (Requires external storage)
• Multicast: IGMP Proxy, IGMP Snooping & Fast Leave, Bonjour
• Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Rout¤ing, RIP v1/v2/ng, BGP
VPN Features
• Up to 4 active VPN tunnels
• Up to 4 Hardware Accelerated 390Mb/s IPsec tunnels
• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
• Teleworker-to-LAN – Dial-In VPN Server
• User Authentication: Local, RADIUS, TACACS+, mOTP, TOTP
• IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
• Encryption: MPPE, DES, 3DES, AES (128/192/256)
• Authentication: SHA-256, SHA-1
• VPN Trunk (Redundancy): Load Balancing, Failover
• Dead Peer Detection (DPD)
• IPsec NAT-Traversal (NAT-T)
• Virtual IP Mapping – Resolve VPN IP subnet/range conflicts
• DHCP over IPsec
• DrayTek VPN Matcher – Connect to a VPN router behind NAT/CG-NAT
• VPN Protocols; IPsec IKEv1, IKEv2, IKEv2 EAP, IPsec-XAuth, OpenVPN, WireGuard - New
Bandwidth Management
• IP-based Bandwidth Limit
• IP-based Session Limit
• User-based Data Quota
• QoS (Quality of Service); Classify via TOS, DSCP, 802.1p, IP Address, Service Type, 4 Priority Queues, App QoS, VoIP Prioritization
Management
