DrayTek VC410AX-K Vigor C410ax 4G Mobile Broadband Wireless AX3000 SOHO Ethernet Router

The Ideal Branch-Office 4G Networking Gateway. The DrayTek Vigor C410ax is a low-cost firewall VPN router with the 4G mobile Internet connection method. In addition, it can use any one of the three methods for its primary WAN (Internet) connectivity, falling back to one of the others in case of service interruption. It has a Dual-SIM cellular 4G modem, Ethernet (RJ45 – which can connect to many other WAN delivery sources), and wireless WAN (ax models can fall back to a wireless hotspot such as phone’s tethering, a web café, someone else’s office etc.).

The Wi-Fi 6 module can provide Internet access and support local wireless LAN at the same time. The Vigor C410ax routers also offer extensive Firewall features, Content Filtering, VPN client/server and Quality of Service Controls. The latest DrayTek DrayOS 5 system enhance security-focused capabilities of the router.

Key Features

• Multi-WAN Router with Failover
• 4G built-in modem with dual SIM slot for second backup telco
• 1x Gigabit Ethernet WAN (RJ45)
• 1x Gigabit Ethernet WAN (RJ45) / LAN switchable
• 4x Gigabit RJ-45 LAN Ports
• Wireless WAN backup (ax models)
• Up to 940Mbps Firewall Throughput
• Up to 370Mbps IPsec VPN Throughput
• 4x LAN-to-LAN & Remote Teleworker VPN Tunnels
• AX3000 – Wi-Fi 6 Dual Band Wireless
• 4 LAN Subnets with VLANs (Port-based / 802.1q)
• SPI Firewall and Content Filtering
• Optional VigorCare Available
• Compatible with VigorACS central management platform

Technical Specification (UK Hardware Spec.)

Physical Interfaces

• WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
• WAN/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M),

RJ-45

• LAN Ports: 4x Gigabit Ethernet (1G/100M/10M), RJ-45
• 2x Removable Wireless LAN antennas
• 2x Removable 4G Cellular antennas
• Wireless On / Off / WPS button
• Recessed Factory Reset button
• SIM Slot: 2x Nano-SIM (1 Active SIM)

Performance

• NAT Performance:
• Up to 940 Mb/s NAT Throughput
• 50,000 NAT Sessions
• VPN Performance:
• 370 Mb/s IPsec VPN Performance
• Max. 4 Concurrent VPN Tunnels

WAN Interfaces

• WAN1: Gigabit Ethernet
• WAN2: Gigabit Ethernet (LAN switchable)
• WAN3: 2.4GHz Wireless WAN
• WAN4: 5GHz Wireless WAN
• WAN5: Integrated 5G/4G Modem

Internet Connection

• Hardware Acceleration (Always On)
• 802.1p/q Multi-VLAN Tagging
• Multi-VLAN/PVC
• 2.4GHz or 5GHz Wireless WAN
• WAN Active on Demand: Link Failure, Traffic Threshold
• Connection Detection: ARP Detect, Ping Detect
• WAN Data Budget
• Dynamic DNS
• DrayDDNS – with automated LetsEncrypt Certificates
• IPv4 Connection Types: PPPoE, DHCP, Static IP
• IPv6 Connection Types:
• Ethernet: PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel

Wireless Features

• AX3000 Wi-Fi 6 Wireless:
• 802.11ax 2x2 wireless access point
• Compatible with 802.11a/b/g/n/ac wireless
• Dual-band (2.4/5Ghz) simultaneous wireless
• Up to 2402Mbps PHY rate at 160MHz with 5GHz
• Up to 574Mbps PHY rate at 40MHz with 2.4GHz
• Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz

OFDMA

MU-MIMO

• Tx Beamforming
• 1024-QAM
• Mesh Root support with DrayTek VigorAP Mesh Nodes
• Up to 8 SSIDs per radio band
• Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
• Wireless Optimisation: Assisted Client Roaming, Band Steering
• WMM (Wireless MultiMedia)
• WPS - WiFi Protected Setup

WPA2/WPA

WPA3

• Pre-Shared Key authentication
• Enterprise 802.1x authentication
• Identity Access Policies (MAC address, Login, Guest Hotspot)

Antenna Specifications

• Wireless LAN Antennas:
• 2x External Dipole
• 5GHz Gain: 2.8 dBi
• 2.4GHz Gain: 2.1 dBi
• RP-SMA fitting antenna connectors
• 5G/4G Cellular Antennas:
• 2x External Dipole
• 2x Internal PIFA
• Gain: 4 dBi
• SMA fitting antenna connectors

Integrated 4G Modem Features

• Dual-SIM Failover
• 4G Modem / LTE Category 6 Modem
• Unlocked to any network (EE, 3, O2, Vodafone, Eircom)
• 4G Max Data Rates:
• 300Mbps Downlink
• 50Mbps Uplink
• 4G LTE (FDD) Bands: 1, 3, 7, 8, 20, 28
• 4G LTE (TDD) Bands: 38, 40
• 3G (WCDMA) Bands: 1, 8
• 2x 4G External Antennas included
• Per-SIM-Card WAN Data Budget
• 2x Nano-Size SIM-Card Slots
• Removable SIM slot cover
• SMS Inbox - Send & Receive SMS text messages

Firewall & Content Filtering

• IP-based Firewall Policy
• DoS Attack Defence
• Spoofing Defence
• Content Filtering:
• Application Content Filter
• URL Content Filter
• DNS Keyword Filter
• Web Features
• Web Category Filter

NAT Features

• NAT Port Redirection
• Open Ports
• Port Triggering
• DMZ Host
• UPnP
• ALG (Application Layer Gateway): SIP, RTSP

LAN Management

• 802.1q Tag-based, Port-based VLAN
• Up to 4 LAN Subnets (NAT or Routing mode selectable per LANinterface)

Up to 8 VLANs

DHCP Server:

Multiple IP Subnet

Custom DHCP Options

Bind-IP-to-MAC

DHCP Pool Count up to 253 addresses for LANs 1-4

DHCP Relay per LAN

Wired 802.1x Port Authentication

Local DNS Server

Conditional DNS Forwarding

Hotspot Web Portal

Hotspot Authentication: Click-Through, External Portal Server

Networking Features

• Policy-based Routing: Protocol, IP Address, Port
• DNS Security (DNSSEC)
• Local RADIUS server
• Multicast: IGMP Proxy, IGMP Snooping & Fast Leave
• Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN
• Routing, RIP v1/v2/ng, BGP, OSPF

VPN Features

• Up to 4 active VPN tunnels
• Up to 370Mb/s IPsec
• LAN-to-LAN - Dial-In VPN Server & Dial-Out VPN Client
• Teleworker-to-LAN – Dial-In VPN Server
• User Authentication: Local, RADIUS, TACACS+, mOTP, TOTP
• KE Authentication: Pre-Shared Key and Digital Signature (X.509)
• Encryption: DES, 3DES, AES (128/192/256)
• Authentication: SHA-256, SHA-1
• Dead Peer Detection (DPD)
• IPsec NAT-Traversal (NAT-T)
• VPN Protocols:
• IPsec IKEv1, IKEv2, IKEv2 EAP
• IPsec-XAuth
• OpenVPN
• WireGuard

Bandwidth Management

• IP-based Bandwidth Limit
• IP-based Session Limit
• QoS (Quality of Service):
• 4 Priority Queues
• App QoS
• VoIP Prioritization

Management

• Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
• Config File Export & Import
• Firmware Upgrade via TFTP, HTTP, TR-069
• Access Control Features: Access List, Brute Force Protection
• Syslog
• SMS, E-mail Notification Alert
• SNMP: v1, v2c, v3
• Managed by VigorACS

Router-based Central Management Features

• AP Management: Up to 20 VigorAP access points
• Switch Management: Up to 5 VigorSwitch network switches
• DrayTek Mesh: Up to 7 VigorAP access points^

Operating Requirements

• Power Requirements: 100-240VAC
• Power Consumption (Watts, maximum): 16W
• Temperature Operating: 0 °C ~ 45 °C
• Storage: -25 °C ~ 70 °C
• Humidity 10% ~ 90% (non-condensing)
• Operating Power: DC 12V @ 1.4A (via external PSU, supplied)
• Wall Mountable

Physical Specifications

Dimensions

• 207mm Width
• 131mm Depth
• 42mm Height
• Weight: 840g

Box Contents

• Vigor C410ax series router
• Quick Start Guide
• Cat-5e RJ-45 Network Cable
• 2x Detachable Wireless LAN Antennas
• 2x Detachable Cellular Antennas
• DC 12V Power Supply with UK Plug

Warranty

Standard: Two (2) Year, RTB

Software security updates

5 years after the EOL notification. Please note that this only

• applies to products sold in the UK
• VigorCare Extended Warranty
• VigorCare A3 3 Year Subscription: VCARE-A3
• VigorCare A5 5 Year Subscription: VCARE-A5