Download Firmware Draytek Vigor 2862 3.8.9

Draytek has for his Vigor 2862routers released new firmware. These vdsl2/adsl2+ routers have one gigabit ethernet lan port and four gigabit ethernet lan ports. In addition, the router can set up 32 VPN tunnels and, depending on the model, one or two USB ports are available to connect a printer, for example. Furthermore, there is the choice of taking the Vigor 2862 without wireless capabilities, or with 802.11n in the form of the Vigor 2862n, or with 802.11ac in the form of the Vigor 2862ac or 2862Vac, or with an LTE modem already built-in in the form of the Vigor 2862L, 2862Ln or 2860Lac, or as a last resort in the form of the Vigor 2862B or 2862Bn, where VDSL bonding is supported. The version number has landed at 3.8.9 and here are the changes:

New Features

• Support VigorACS 2 (firmware version:2.3.0).
• Support DrayOS IKEv1 IPSec XAuth for the security of network connection.
• Support certificate service offered by “Let’s Encrypt”.
• Add AP-assisted Client Roaming settings on Central Management>>AP>>WLAN Profile.
• Support SMS One Time Password (OTP) for VPN / Remote Management (2FA, two factor authentication).
• Support Full Bridge mode for WAN connection.

Improvement

• Improved: Support multi-gateway in LAN subnet.
• Improved: Support Country Object option in Firewall>>Edit Filter Set>>Edit Filter Rule.
• Improved: Support IKEv2 ECDH Group 19, 20 and 21 in VPN and Remote Access>>LAN to LAN.
• Improved: Support Diffie-Hellman group 19 as Proposal setting on VPN and Remote Access>>LAN to LAN VPN Profiles.
• Improved: Support SSL/TLS authentication for Local 802.1X (Applications>>Local 802.1X General Setup).
• Improved: Add country object which can be selected as route policy.
• Improved: Improvement for LTE dial up state mechanism.
• Improved: Allow setting Inter-LAN Routing between DMZ and LAN1 when DMZ is enabled.
• Improved: Modify firmware upgrade page for displaying firmware header information (System Maintenance>>Firmware Upgrade).
• Improved: Support to enable/disable Anti-Spoofing function on Firewall>>General Setup.
• Improved: Add options to specify WAN interface for firewall rule (Firewall>>Edit Filter Set>>Edit Filter Rule).
• Improved: Allow conditional Bind IP to MAC based upon network entry point.
• Improved: Allow using the same WAN interface for STUN and SIP traffic by default.
• Improved: Import X.509 certificate via SSH (mngt cert_import cmd).
• Improved: Add a sub telnet command related to “mngt” to change timeout setting.
• Improved: Support “Use Cycle in hours” for Custom setting in WAN>>WAN budget.
• Improved: Support Channel Width selections on Central Management >>AP >> WLAN Profile.
• Improved: Bandwidth Limit Improvement (combining to QoS).
• Improved: Increase X.509 Certificate import size.
• Improved: Extend the certificate size of Vigor router (for the Certificate Chain Issue).
• Improved: Add backup/restore buttons to VPN and Remote Access>>Remote Dial-in User.
• Improved: Remove ZenMate.
• Improved: The Router Name (set in System Maintenance>>Management) can be used as L2TP Client’s Host name.
• Improved: Modifications on DrayOS to meet the GDPR.
• Improved: Modifications on SWM function to meet GDPR.
• Improved: Modifications on Hotspot Web Portal function to meet GDPR.
• Improved: Add the option of “IPv6 Address Random Allocation” for DHCPv6 Server on LAN>>General.
• Improved: Remove the telnet commands, ‘ip dmz’ and ‘ip aux [Join to NAT pool]’.
• Improved: Enable WAN2 as factory default configuration.
• Corrected: The IKEv1/IKEv2 selection was visible even IPsec Tunnel was not selected.
• Corrected: Vigor router continued to send UDP connection request address when the STUN service was disabled.
• Corrected: Unable to pass the traffic to VPN when VPN Trunk Backup connection was resumed.
• Improved: Revise the words on System Maintenance >> Time and Date >> Daylight Saving Advanced page.
• Improved: Change the wording of “Advanced” button into “Advanced DHCP Client Option” on WAN >> Internet Access page.
• Improved: Modify the position of the note on LAN >> General Setup page.
• Corrected: Typo in VPN and Remote Access>>IPsec General Setup page.
• Add a message to notify the users when they try to turn off LAN port /USB port / LED / Buttons in System Maintenance>>Panel Control.
• Corrected: IPv6 address with the abbreviation “::” of 0 was note accepted by IPv6 object profile.
• Corrected: LTE status on dashboard changed the signal display (RSSI/RSRP->RSSI) after performing auto-refresh.
• Improved: Support subnet mask drop-down selection instead of typing it manually on web user interface.
• Improved: Use a unified term for the Active Status.
• Improved: Unify the format for enabling/disabling a profile in the profile settings.
• Corrected: The color of the menu item did not change from black to white if ever been clicked.
• Improved: Improve the web user interface of VPN status (VPN and Remote Access>>Connection Management).
• Improved: Add a Refresh button in VPN and Remote Access>>Connection Management for refreshing connection status.
• Improved: Re-arrange the hints on Central Management > AP > WLAN Profile > Edit page.
• Improved: Modify the page layout for CSM>>APP Enforcement Profile.
• Improved: Remove the asterisk mark
• besides the options in WAN >> Internet Access >> Details Page.
• Improved: Remove the unnecessary word, “setup” in WAN >> General Setup.
• Improved: Improve the layout for WAN VLAN Tag Insertion in WAN>>General Setup>>WAN#.
• Corrected: Syslog displayed the password setting for WAN DHCP Client Identifier.
• Corrected: Got incorrect result for the allowed site when WCF firewall was enabled.
• Corrected: Overnight schedule profile did not work.
• Corrected: Unable to make network connection with AES encryption for WLAN 5GHz.
• Corrected: Unable to set TX power for 5GHz using APM (Central AP Management>>WLAN Profile).
• Corrected: The character “ used for Pre-Shared Key(PSK) on Wireless LAN>>Security would cause abnormal page display.
• Corrected: The user accessed into USB disk connected to Vigor router through FTP server. While reading the data, if the user unplugged the USB disk, it would result in a system reboot.
• Improved: Support an easier way to clear space on USB drive by System Maintenance>>SysLog / Mail Alert Setup.
• After clicking Disconnect button in USB Application>>USB Device Status and unplugging USB disk, the router could not access USB disk if the USB disk inserted again.
• Corrected: UBDDNS didn’t work.
• Corrected: In Applications >> Dynamic DNS Setup, “freedns.afraid.org” did not work. And the message of “Send HTTP request error” would be shown on the DDNS log.
• Corrected: Unable to get the domain name after registering and activating the DrayDDNS license.
• Corrected: Unable to show log of DtDNS in Applications>>Dynamic DNS Setup.
• Corrected: WAN PPP IPv6 did not work after upgrading firmware from 3.8.4.5/6 to 3.8.5/1.
• Corrected: Port redirection configured via telnet took no effect until disabling and then enabling it.
• Corrected: NAT Port Redirection rule with TCP protocol could not be enabled (yet, UDP protocol could).
• Corrected: Vigor router sent strange DNS query when Syslog / Mail Alert was enabled.
• Corrected: Session limit blocked dial-in VPN users.
• Corrected: DHCP relay did not work for VPN dial-in User.
• Improved: Display the characters input limitation (for username, password, pre-shared key, and etc.) on web user interface.
• Corrected: The enabled Allow Management option for IPv4 would enable the option for IPv6 automatically.
• Corrected: Traffic for the LAN Ports without host connected still counted.
• Corrected: Vigor router ignored the flag of “Don’t fragment” in IP header. [H.323] Corrected: Could not register Avaya phone
• to IPPBX server through router’s NAT.
• Improved: Add “Next” and “Previous” links on each object profile editing page. Allow selecting multiple objects when configuring the object group.
• Corrected: WAN2 could not obtain the IP due to the DHCP broadcast packets from LAN client were sent out of the WAN2.
• Improved: Support to choose schedule setting profile by drop-down menu.
• Improved: Apply QoS VoIP function to routing subnet.
• Corrected: The dashboard overview showed wrong DHCP status.
• Corrected: Internal wireless client could not ping to the wired client in same VLAN with tag.
• Corrected: Unable to authenticate incoming RDP traffic by User-Based firewall.
• Corrected: Unable to limit the bandwidth speed in Bandwidth Management>>Quality of Service>>WAN1 General Setup.
• Corrected: QoS LED on router’s front panel kept lighting up after enabling and then disable QoS.
• Improved: Remove the reboot mechanism after enabling/disabling the Internal Radius Server in the Applications>>RADIUS/TACACS+>>Internal Radius Server.
• Improved: Remove the reboot mechanism after configuring the Authentication List in the Applications>>RADIUS/TACACS+>>Internal Radius Server.
• Improved: Remove the asterisk mark [ddns.net] besides the options in WAN >> Internet Access >> Details Page.
• Corrected: Domain extension
• disappeared from no-ip.com.
• Corrected: VPN remote dial-in user could not access Internet if Hardware Acceleration was enabled.
• Corrected: IPv6 packet was blocked even if IP filter was set to pass it.
• Corrected: The behavior of Bind IP to MAC enable toggle switch on router’s WUI could not be displayed correctly in VigorACS 2.
• Improved: Support to display “Host ID / Comment” or “Comment / Host ID” in the Interface field on Dashboard.
• Improved: The User Management >>User Online Status page will display only the login event for online users.
• Improved: Add a new service provider selection, EntryDNS (entrydns.net) for DDNS (Applications>>Dynamic DNS).
• Corrected: Typo in the Routing>>Load-Balance/Route Policy.
• Corrected: NAT did not work after pressing OK button on Port Redirection page.
• Improved: Pop-up a warning message, “The UDP Limited_bandwidth Ratio can not exceed 100%” while QoS UDP Limit Bandwidth Ratio is not enabled.
• Corrected: Bind IP to MAC did not allow setting up more than 300 entries.
• Improve: Increase the total number of characters used in Terms and Conditions Content field of Hotspot Web Portal.
• Corrected: Firewall did not work with schedule profile well.
• Corrected: The teleworker got an IP from external DHCP on DrayOS.
• Corrected: Idle timeout in remote dial-in user did not work on SSL VPN.
• Corrected: ARP Table displayed comments for IP xxx10 and IP xxx101 wrongly (IP Bind MAC Enabled).

License typeFreeware