5G Embedded Dual-WAN VPN Firewall Router
Vigor2927L-5G Series is a Dual-WAN VPN Router with embedded 5G cellular connectivity. Embedded 2 SIM slots (1 SIM online at a time) to deliver an uninterrupted cellular network connection. This 5G Router supports both SA and NSA 5G architectures, and integrate 5G LTE with Category 19. Featuring VPN, QoS, route policy, web content filtering, hotspot web portal and more. It is designed for company that require 5G higher performance with high-efficient network connectivity. The series includes built-in 802.11ax model.
support SA and NSA mode
Delivers link rate up to 3 Gbps
Recommended for a network of 50 hosts
*ax model only


Model |
2927L-5G |
2927Lax-5G |
Performance |
||
| NAT Session | 60K | |
| Max. NAT (Mbps) | 700 | |
| Max. NAT with Hardware Acceleration : Single WAN (Mbps) | 940 | |
| Max. NAT with Hardware Acceleration : Dual WAN (Mbps) | 1800 | |
WAN |
||
| Ethernet (GbE) | 1 | |
| Switchable WAN/LAN (GbE) | 1 | |
| Cellular (via USB) | 1 | |
| Cellular (Built-in) | 5G | |
4G LTE |
||
| LTE Category | CAT.19 | |
| LTE Antenna (External Dipole) | 4 | |
| SIM Slot | 2 | |
| Max. Rx Link Rate (Mbps) | 1600 | |
| Max. Tx Link Rate (Mbps) | 200 | |
| FDD Band | 1(2100MHz), 3(1800MHz), 7(2600MHz), 8(900MHz), 20(800MHz), 28(700MHz) | |
| TDD Band | 38(2600MHz), 40(2300MHz) | |
| WCDMA (3G) Band | 1, 8 | |
| SMS Gateway | Learn More | |
5G |
||
| 5G Band | n1, n3, n7, n8, n20, n28, n38, n40, n77, n78 | |
| 5G Antenna Peak Gain (dBi) | 4.37 | |
| 5G NSA Max. Rx Link Rate (Mbps) | 3400 | |
| 5G NSA Max. Tx Link Rate (Mbps) | 550 | |
| 5G SA Max. Rx Link Rate (Mbps) | 2400 | |
| 5G SA Max. Tx Link Rate (Mbps) | 900 | |
| Note | *The estimated 5G maximum data rate is 600Mbps. | |
Internet Connection |
||
| IPv4 |
PPTP/L2TP
|
|
| IPv6 |
PPP
DHCPv6
Static IPv6
TSPC
AICCU
6rd
6in4 Static Tunnel
|
|
| LTE WAN Bridge | ||
| 802.1p/q Multi-VLAN Tagging | ||
| Multi-VLAN/PVC | ||
| Failover | ||
| Load Balancing | IP-based, Session-based | |
| WAN Active on Demand | Link Failure, Traffic Threshold | |
| Connection Detection | ARP, Strict ARP, Ping | |
| WAN Data Budget | ||
| Dynamic DNS | ||
| DrayDDNS | ||
LAN |
||
| Fixed LAN (RJ-45, GbE) | 5 | |
| LAN Subnet | 8 | |
| DMZ Port | 1 | |
| VLAN |
802.1q Tag-based VLAN
Port-based VLAN
|
|
| Max. Number of VLAN | 16 | |
| DHCP Server |
Multiple IP Subnet
Custom DHCP Options
Bind-IP-to-MAC
|
|
| LAN IP Alias | ||
| Wired 802.1x Authentication | ||
| Port Mirroring | ||
| Local DNS Server | ||
| Conditional DNS Forwarding | ||
| Hotspot Web Portal (Profile No.) | 4 | |
| Hotspot Authentication |
Click-Through
Social Login
SMS PIN
Voucher PIN
RADIUS
External Portal Server
|
|
Other Ports |
||
| USB | 1 | |
| USB Type | 2.0 | |
Networking |
||
| Routing |
IPv4 Static Route
IPv6 Static Route
Policy Route
Inter-VLAN Route
RIP v1/v2
BGP
|
|
| Policy-based Routing |
Port
Country
|
|
| High Availability | ||
| DNS Security (DNSSEC) | ||
| IGMP |
IGMP v2/v3
IGMP Proxy
|
|
| Local RADIUS server | ||
| SMB File Sharing (Requires external storage) | ||
VPN |
||
| LAN-to-LAN | ||
| Teleworker-to-LAN | ||
| Protocols |
PPTP
L2TP
IPsec
L2TP over IPsec
GRE
IKEv2
IKEv2-EAP
IPsec-XAuth
OpenVPN
Wireguard
|
|
| Max. VPN Tunnels | 50 | |
| Max. OpenVPN + SSL VPN Tunnels | 25 | |
| IPsec VPN Throughput (AES 256 bits) (single-directional) (Mbps) | 250 | |
| SSL VPN Throughput (single-directional) (Mbps) | 120 | |
| Wireguard VPN Throughput (single-directional) (Mbps) | 80 | |
| User Authentication |
Local
RADIUS
LDAP
TACACS+
mOTP
|
|
| IKE Authentication | Pre-Shared Key, X.509 | |
| IPsec Authentication | SHA-1, SHA-256 | |
| Encryption |
MPPE
DES
3DES
AES
|
|
| VPN Trunk (Redundancy) | Load Balancing, Failover | |
| Single-Armed VPN | ||
| NAT-Traversal (NAT-T) | ||
| VPN Matcher | ||
Firewall & Content Filtering |
||
| NAT |
Port Redirection
Open Ports
Port Triggering
DMZ Host
|
|
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323 | |
| VPN Pass-Through | PPTP, L2TP, IPsec | |
| IP-based Firewall Policy | ||
| Content Filtering |
URL Keyword
DNS Keyword
Web Category*(*subscription required)
|
|
| DoS Attack Defense | ||
| Spoofing Defense | ||
Bandwidth Management |
||
| IP-based Bandwidth Limit | ||
| IP-based Session Limit | ||
| QoS (Quality of Service) |
TOS
DSCP
802.1p
IP Address
Port
Application
|
|
| VoIP Prioritization | ||
| APP QoS | ||
WLAN |
||
| 2.4GHz WLAN | 802.11ax 2×2 MIMO | |
| 5GHz WLAN | 802.11ax 2×2 MU-MIMO | |
| Antennas | 2 | |
| Antenna Type | External Dipole | |
| 2.4GHz Antenna Gain (dBi) | 2.5 | |
| 5GHz Antenna Gain (dBi) | 3 | |
| 2.4GHz Max. Link Rate (Mbps) | 574 | |
| 5GHz Max. Link Rate (Mbps) | 2402 | |
| Max. Number of SSIDs per band | 4 | |
| Security Mode |
OWE
Mixed(WPA+WPA2)
WPA3
|
|
| Authentication | Pre-Shared Key, 802.1X | |
| WiFi 6 | ||
| OFDMA | ||
| WPS | PIN, PBC | |
| WDS | Repeater (5GHz only) | |
| Access Control |
Access List
Client Isolation
Hide SSID
WLAN Scheduling
|
|
| AirTime Fairness | ||
| Band Steering | ||
| WMM | ||
| Mesh (5GHz Only) | Root | |
Management |
||
| Local Service |
SSH v2
FTP
TR-069
|
|
| Config Backup/Restore | ||
| Config File Compatibility | Vigor2926 LTE | |
| Firmware Upgrade | TFTP, HTTP, TR-069 | |
| 2-Level Administration Privilege | ||
| Access Control | Access List, Brute Force Protection | |
| Notification Alert | SMS, E-mail | |
| Netflow | v5, v9, IPFIX | |
| SNMP | v1, v2c, v3 | |
| Syslog | ||
| VPN Managment | 8 | |
| AP Managment (APM) | 20 | |
| Mesh (Number of manageable APs) | 7 | |
| Switch Management (SWM) | 10 | |
| VigorACS Management (Since f/w) | V4.4.5 | |
Physical |
||
| Power Input | DC 12V @ 2.1A | DC 12V @ 2.6A |
| Max. Power Consumption (watts) | 25.2 | 31.2 |
| Dimension (mm) | 241 x 165 x 44 | |
| Operating Temperature | 0 to 45°C | |
| Storage Temperature | -25 to 70°C | |
| Operating Humidity (non-condensing) | 10 to 90% | |
USB |
1 |
|---|---|
USB Type |
2.0 |
Fixed LAN (RJ-45, GbE) |
5 |
LAN Subnet |
8 |
Switchable WAN/LAN (GbE) |
1 |



