DrayTek VC410AX-K Vigor C410ax 4G Mobile Broadband Wireless AX3000 SOHO Ethernet Router

DrayTek VC410AX-K Vigor C410ax 4G Mobile Broadband Wireless AX3000 SOHO Ethernet RouterThe Ideal Branch Office 4G Networking Gateway. The DrayTek Vigor C410ax is a low cost firewall VPN router with the 4G mobile Internet connection method. In addition, it can use any one of the three methods for its primary WAN (Internet) connectivity, falling back to one of the others in case of service interruption. It has a Dual SIM cellular 4G modem, Ethernet (RJ45 which can connect to many other WAN delivery sources), and wireless WAN (ax models

The Ideal Branch-Office 4G Networking Gateway. The DrayTek Vigor C410ax is a low-cost firewall VPN router with the 4G mobile Internet connection method. In addition, it can use any one of the three methods for its primary WAN (Internet) connectivity, falling back to one of the others in case of service interruption. It has a Dual-SIM cellular 4G modem, Ethernet (RJ45 – which can connect to many other WAN delivery sources), and wireless WAN (ax models can fall back to a wireless hotspot such as phone’s tethering, a web café, someone else’s office etc.).

The Wi-Fi 6 module can provide Internet access and support local wireless LAN at the same time. The Vigor C410ax routers also offer extensive Firewall features, Content Filtering, VPN client/server and Quality of Service Controls. The latest DrayTek DrayOS 5 system enhance security-focused capabilities of the router.

Key Features

Multi-WAN Router with Failover
4G built-in modem with dual SIM slot for second backup telco
1x Gigabit Ethernet WAN (RJ45)
1x Gigabit Ethernet WAN (RJ45) / LAN switchable
4x Gigabit RJ-45 LAN Ports
Wireless WAN backup (ax models)
Up to 940Mbps Firewall Throughput
Up to 370Mbps IPsec VPN Throughput
4x LAN-to-LAN & Remote Teleworker VPN Tunnels
AX3000 – Wi-Fi 6 Dual Band Wireless
4 LAN Subnets with VLANs (Port-based / 802.1q)
SPI Firewall and Content Filtering
Optional VigorCare Available
Compatible with VigorACS central management platform

Technical Specification (UK Hardware Spec.)

Physical Interfaces

WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
WAN/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M),
RJ-45
LAN Ports: 4x Gigabit Ethernet (1G/100M/10M), RJ-45
2x Removable Wireless LAN antennas
2x Removable 4G Cellular antennas
Wireless On / Off / WPS button
Recessed Factory Reset button
SIM Slot: 2x Nano-SIM (1 Active SIM)

Performance

NAT Performance:

Up to 940 Mb/s NAT Throughput
50,000 NAT Sessions
VPN Performance:
370 Mb/s IPsec VPN Performance
Max. 4 Concurrent VPN Tunnels

WAN Interfaces

WAN1: Gigabit Ethernet
WAN2: Gigabit Ethernet (LAN switchable)
WAN3: 2.4GHz Wireless WAN
WAN4: 5GHz Wireless WAN
WAN5: Integrated 5G/4G Modem

Internet Connection

Hardware Acceleration (Always On)
802.1p/q Multi-VLAN Tagging
Multi-VLAN/PVC
2.4GHz or 5GHz Wireless WAN
WAN Active on Demand: Link Failure, Traffic Threshold
Connection Detection: ARP Detect, Ping Detect
WAN Data Budget
Dynamic DNS
DrayDDNS – with automated LetsEncrypt Certificates
IPv4 Connection Types: PPPoE, DHCP, Static IP
IPv6 Connection Types:
Ethernet: PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel

Wireless Features

AX3000 Wi-Fi 6 Wireless:

802.11ax 2x2 wireless access point
Compatible with 802.11a/b/g/n/ac wireless
Dual-band (2.4/5Ghz) simultaneous wireless
Up to 2402Mbps PHY rate at 160MHz with 5GHz
Up to 574Mbps PHY rate at 40MHz with 2.4GHz
Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
OFDMA
MU-MIMO
Tx Beamforming
1024-QAM
Mesh Root support with DrayTek VigorAP Mesh Nodes
Up to 8 SSIDs per radio band
Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
Wireless Optimisation: Assisted Client Roaming, Band Steering
WMM (Wireless MultiMedia)
WPS - WiFi Protected Setup

Wireless Security

OWE
WEP
WPA
WPA2/WPA
WPA3
Pre-Shared Key authentication
Enterprise 802.1x authentication
Identity Access Policies (MAC address, Login, Guest Hotspot)

Antenna Specifications

Wireless LAN Antennas:
2x External Dipole
5GHz Gain: 2.8 dBi
2.4GHz Gain: 2.1 dBi
RP-SMA fitting antenna connectors
5G/4G Cellular Antennas:
2x External Dipole
2x Internal PIFA
Gain: 4 dBi
SMA fitting antenna connectors

Integrated 4G Modem Features

Dual-SIM Failover
4G Modem / LTE Category 6 Modem
Unlocked to any network (EE, 3, O2, Vodafone, Eircom)
4G Max Data Rates:
300Mbps Downlink
50Mbps Uplink
4G LTE (FDD) Bands: 1, 3, 7, 8, 20, 28
4G LTE (TDD) Bands: 38, 40
3G (WCDMA) Bands: 1, 8
2x 4G External Antennas included
Per-SIM-Card WAN Data Budget
2x Nano-Size SIM-Card Slots
Removable SIM slot cover
SMS Inbox - Send & Receive SMS text messages

Firewall & Content Filtering

IP-based Firewall Policy
DoS Attack Defence
Spoofing Defence
Content Filtering:
Application Content Filter
URL Content Filter
DNS Keyword Filter
Web Features
Web Category Filter

NAT Features

NAT Port Redirection
Open Ports
Port Triggering
DMZ Host
UPnP
ALG (Application Layer Gateway): SIP, RTSP


LAN Management

802.1q Tag-based, Port-based VLAN
Up to 4 LAN Subnets (NAT or Routing mode selectable per LANinterface)
Up to 8 VLANs
DHCP Server:
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
DHCP Pool Count up to 253 addresses for LANs 1-4
DHCP Relay per LAN
Wired 802.1x Port Authentication
Local DNS Server
Conditional DNS Forwarding
Hotspot Web Portal
Hotspot Authentication: Click-Through, External Portal Server

Networking Features

Policy-based Routing: Protocol, IP Address, Port
DNS Security (DNSSEC)
Local RADIUS server
Multicast: IGMP Proxy, IGMP Snooping & Fast Leave
Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN
Routing, RIP v1/v2/ng, BGP, OSPF

VPN Features

Up to 4 active VPN tunnels
Up to 370Mb/s IPsec
LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
Teleworker-to-LAN – Dial-In VPN Server
User Authentication: Local, RADIUS, TACACS+, mOTP, TOTP
KE Authentication: Pre-Shared Key and Digital Signature (X.509)
Encryption: DES, 3DES, AES (128/192/256)
Authentication: SHA-256, SHA-1
Dead Peer Detection (DPD)
IPsec NAT-Traversal (NAT-T)

VPN Protocols:

IPsec IKEv1, IKEv2, IKEv2 EAP
IPsec-XAuth
OpenVPN
WireGuard

Bandwidth Management

IP-based Bandwidth Limit
IP-based Session Limit

QoS (Quality of Service):

4 Priority Queues
App QoS
VoIP Prioritization

Management

Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
Config File Export & Import
Firmware Upgrade via TFTP, HTTP, TR-069
Access Control Features: Access List, Brute Force Protection
Syslog
SMS, E-mail Notification Alert
SNMP: v1, v2c, v3
Managed by VigorACS

Router-based Central Management Features

AP Management: Up to 20 VigorAP access points
Switch Management: Up to 5 VigorSwitch network switches
DrayTek Mesh: Up to 7 VigorAP access points^

Operating Requirements

Power Requirements: 100-240VAC
Power Consumption (Watts, maximum): 16W
Temperature Operating: 0 °C ~ 45 °C
Storage: -25 °C ~ 70 °C
Humidity 10% ~ 90% (non-condensing)
Operating Power: DC 12V @ 1.4A (via external PSU, supplied)
Wall Mountable

Physical Specifications

Dimensions

207mm Width
131mm Depth
42mm Height

Weight: 840g

Box Contents

Vigor C410ax series router
Quick Start Guide
Cat-5e RJ-45 Network Cable
2x Detachable Wireless LAN Antennas
2x Detachable Cellular Antennas
DC 12V Power Supply with UK Plug

Warranty

Standard: Two (2) Year, RTB
Software security updates:
5 years after the EOL notification. Please note that this only
applies to products sold in the UK
VigorCare Extended Warranty
VigorCare A3 3 Year Subscription: VCARE-A3
VigorCare A5 5 Year Subscription: VCARE-A5