Vigor 2865 DrayTeK Routers – Official Thread

[UK Sentinel]

Latest Vigor 2865 / Vigor 2865L Firmware Version 4.4.2

Released; 2023-03-22

Vigor2865 Series is a VDSL2/ADSL2+ Security Firewall router integrating a DSL modem which is
compatible with variants of ADSL and VDSL, including profile 35b Super Vectoring.

Applied Models: Vigor2865 / Vigor2865ac / Vigor2865Vac
Vigor2865L / Vigor2865Lac / Vigor2865ax

New Features
 Support TR-069 over IPv6.
 Support 2FA authentication for VPN.
 Support AES-GCM for L2TP/IPsec VPN.
 Support Google Authenticator APP for VPN.

 

Improvement
 Improved: Improvement of Mesh network stability.
 Improved: Support to upload certificate chain by PKC12 file.
 Improved: Support static route session for hardware acceleration.
 Improved: Increase the APM and SWM password length up to 128 characters.
 Improved: When Mesh Root is enabled, the WAN TCP port number 9608 will be closed.
 Improved: Support WANx First (WAN Interfaces) for DrayDDNS, and Dynamic DNS
Account.
 Improved: Allow wireless WAN mode on both bands (2.4GHz/5GHz) to connect to the
wireless root automatically when the root changes to other channels.
 Improved: Change the default SSID name (2.4GHz/5GHz) to DrayTek-xxxxxx /
DrayTek5G-xxxxxx ( “xxxxxx”, the last 6 digits of the product’s MAC address).
 Corrected: An issue of connecting to GenieACS.
 Corrected: An issue with the SNMP VPN status OIDs not working.
 Corrected: An issue of WPA Enterprise security mechanism not working.
 Corrected: An issue that incorrect DNS answers when the router was the DNS server.
 Corrected: An issue that a policy route stopped working when the hardware accelerated
was enabled.
 Corrected: An issue with config saving of IPsec multiple local SA saved as 0.0.0.0/0
wrongly.
– 2 –
 Corrected: An issue with blocking the L2TP traffic (WAN to Localhost) by the firewall
default rule.
 Corrected: An issue with the DNS resolve with the Windows OpvenVPN client dialing up
the VPN to the Vigor router.
 Corrected: An issue that only five Remote Dial-In User profiles could be restored if they
were backup from other routers.
 Corrected: An issue that OpenVPN remote users could not access to LAN side of the
Vigor router (when using the WAN2 / LTE interface).
 Corrected: An issue with the TR-069 SDWAN data not displayed on the ACS server due
to one extra “/” in the Authorization URI in the Bulkdata packet.
 Corrected: An issue that there was no response message displayed when the router failed
to connect to the secondary TR-069 server via the WAN2 interface.

 

Known Issue
 A firewall can restrict/drop unwanted inbound WAN traffic such as VPN requests. The
router’s firewall block rules can stop remote management and VPN access. It is
recommended to review the firewall settings before upgrading

https://www.draytek.com/support/latest-firmwares/

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[UK Sentinel]

Latest Vigor 2865 / Vigor 2865L Firmware Version 4.4.5

Released; 2024-04-24

Vigor2865 Series is a VDSL2/ADSL2+ Security Firewall router integrating a DSL modem which is
compatible with variants of ADSL and VDSL, including profile 35b Super Vectoring.

Applied Models: Vigor2865 / Vigor2865ac / Vigor2865Vac
Vigor2865L / Vigor2865Lac / Vigor2865ax

 

New Features
 Support PPPoE WAN MTU auto negotiation.
 Support a new option – Discord on CSM>>APP Enforcement Profile.

Improvement
 Improved: Improve Web GUI Security (CVE-2024-23721).
 Improved: Add LTE OID for RSCP.
 Improved: Add a new Service Provider – SMSala.
 Improved: Support to display more information via Webhook.
 Improved: Improve Management/SNMP WUI in order to not require router reboot.
 Corrected: An issue with Hotspot Web Portal loop.
 Corrected: An issue with no IPsec VPN traffic when connecting using IKEv2.
 Corrected: An issue with failure to open MyVigor page via Product Registration.
 Corrected: An issue with failure to show WAN IP information on CPE Notify page.
 Corrected: An issue with a WCF/DNSF not working when the domain name length was
over 63 signs.
 Corrected: An issue with failure to apply a static IP in remote dial in profile if the selected
interface was a routed LAN.
 Corrected: An issue with failure to build the OpenVPN connection by dialing up
OpenVPN account sometimes.
 Corrected: An issue with the VPN continuing to use the failover WAN interface even
when the primary WAN had been restored.
 Corrected: An issue with failure to reboot the router when CPE set parameter
configuration contained WAN1 username/password.

https://www.draytek.com/support/latest-firmwares/

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[Author]

Posts