Product Overview
Key Features & Benefits
The Ideal Branch-Office 4G Networking Gateway
The DrayTek Vigor C410ax is a low-cost firewall VPN router with the 4G mobile Internet connection method. In addition, it can use any one of the three methods for its primary WAN (Internet) connectivity, falling back to one of the others in case of service interruption. It has a Dual-SIM cellular 4G modem, Ethernet (RJ45 – which can connect to many other WAN delivery sources), and wireless WAN (‘ax’ models can fall back to a wireless hotspot such as phone’s tethering, a web café, someone else’s office etc.).
The built-in Wi-Fi 6 module can provide Internet access and support local wireless LAN at the same time. The Vigor C410ax routers also offer extensive Firewall features, Content Filtering, VPN client/server and Quality of Service controls.
The latest DrayTek’s DrayOS 5 system enhance security-focused capabilities of the router thanks to the Identity and Access Management (IAM), a hotspot web portal, and more, making it ideal for businesses requiring robust and secure network solutions.
Integrated 4G LTE Modem
The Vigor C410ax router provides high speed mobile broadband connectivity for Internet access and VPN, with its built-in 4G modem. The Category 6 mobile module is an affective way of setting up the primary or failover connection.
DrayTek's LTE routers are not locked to any mobile network and are compatible with all major UK mobile providers, such as EE, Vodafone, O2 and Three, as well as any MVNOs on those networks. The Vigor C410ax router uses two LTE aerials. The external antennas can rotate and tilt for optimum reception.
Future-proof GbE Fibre Ethernet Router
The Vigor C410 is a versatile Ethernet WAN router with up to 940Mbps performance, allowing you to make full use of DrayTek's advanced feature set, with Quality of Service, VPN and Content Filtering. Connect to VirginMedia Cable and Ultrafast FTTP with Ethernet WAN.
Either connection, or the 4G built-in modem can be used as the primary or Failover connection, so that if the main Internet connection goes down, the Vigor C410 can use its backup connections to guarantee reliable Internet access and VPN connectivity.
The C410 adds 802.11ax wireless, providing fast wireless coverage to your network's computers and devices. Moreover, use Wi-Fi connection as its WAN (Internet) feed. For example, where you are in a location which provides Wi-Fi access (a hotel, a web café, someone else's office etc.) you can use that to provide the Vigor's Internet connection instead of a fixed line. Importantly, when using this feature, your own Wireless LAN still works - i.e. the wireless base facility provided to your laptops/phones/tablets by the Vigor router still works.
Route Policy - Routing Management for WAN & VPN
The Vigor C410 provides full policy-based control of where and how outbound traffic is routed with Route Policy, to send traffic through VPN services and alternative LAN gateways:
| Feature | Description |
|---|---|
VPN Routing |
Send all or select traffic through VPN services. |
Service Routing |
Push specific services or ports, such as DNS, through a set WAN, an alternative Gateway or VPN Tunnel. |
Failover & Failback |
Extensive control of Failover with multiple Failover rules and paths. Manage how connections are moved back to the primary connection, after a failover has occurred with Failback settings. |
Powerful SoHo VPN Router
DrayTek's Vigor routers feature extensive VPN (Virtual Private Networking) capabilities. The Vigor C410 is no exception, its VPN capabilities are well suited to SoHo (small office, home office) environments. A VPN enables you to link remote offices and branch offices back to HQ, or home-based/mobile teleworkers back to your office.
The Vigor C410 allows you to make full use of Fibre broadband with VPN. Up to 370Mbps of IPsec VPN throughput for fast and secure connections, to VPN services and other offices.
Connect up to 4 VPN tunnels concurrently to access remote resources securely. Connect the Vigor C410 in a branch office or home office to a head office for seamless access to network resources.
It supports all common industry standard VPN protocols, for it to connect to VPN services, link remote offices and handle connections from all types of VPN clients. Supporting IPsec IKEv1 & IKEv2 protocols with EAP and XAuth authentication, OpenVPN and WireGuard for both LAN to LAN and Dial-In teleworker VPNs.
User management for Dial-In Teleworkers is managed through the router's web interface, with mOTP 2-factor authentication, TOTP, Email or SMS available for IPsec, OpenVPN and WireGuard VPN Teleworker connections.
Connecting Remote Sites with LAN to LAN VPN
Supporting up to 4 concurrently active VPN tunnels and 370Mbps of IPsec VPN throughput, the Vigor C410 series is ideal as a branch-office or home-office router, to connect with a head office router such as the Vigor 3912S.
Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.
Encrypted VPN for Dial-In Teleworkers & LAN to LAN
Connect up to 4 VPN tunnels. These encrypted tunnels securely link teleworkers or remote DrayTek Vigor routers back to your main office using SSL/TLS technology - similar to the HTTPS security that's used for most secure websites on the internet such as on-line banking and shopping services.
Teleworkers can connect with the secure IPsec, OpenVPN, or WireGuard VPN tunnels to the DrayTek Vigor C410, using the free DrayTek Smart VPN Client app. Available for Windows, macOS, Apple iOS (iPad, iPhone) and Android devices. The latter two protocols may need additional native software installed on your mobile devices.
Download the SmartVPN client and learn more about DrayTek VPN here.
Identity and Access Control Security Framework
Identity and Access Control (IAM) framework is designed to meet network security requirements. The network administrator can define access policies, control user privileges, and coordinate group policies with the firewall and traffic shaping settings.
| Feature | Description |
|---|---|
Device Authentication |
Using each device’s unique IP and MAC address provides a strong basis for device identification and authentication. |
Reduced False Positives |
Using IP and MAC addresses reduces the likelihood of legitimate devices being blocked due to other potential factors. |
Holistic Security |
Combining user, device, and session-based policies enhances overall security without relying solely on one aspect. |
Enhanced Incident Response |
When security incidents occurs, you can quickly pinpoint the devices involved and take appropriate actions. |
AX3000 Wireless LAN
Vigor C410ax provides Wi-Fi 6 (802.11ax) simultaneous Dual-Band wireless for fast and efficient wireless connectivity. Multi-User MIMO allows the router to send to more than one device at a time, with each of its antennas streaming data to different devices at once, improving efficiency over standard 802.11ax wireless and allowing the router to effectively serve more wireless clients.
The Vigor C410ax wireless router can be used as part of DrayTek's Mesh wireless system, allowing the router to work as the Mesh Root, providing Internet access and management of Mesh VigorAPs directly. For product compatibility, please visit our features compatibility page.
Gigabit LAN Ports with VLANs
The Vigor C410 provides 5 LAN ports: 1x switchable GbE LAN/WAN and 4x 1GbE for wired links to Computers, Servers and Network Attached Storage.
Up to four LAN subnets and VLANs allow the Vigor C410 to manage guest networks that are fully separated from internal networks and data. Or any other configuration that can use up to four subnets, whether that's a separate LAN subnet to isolate printers, IoT and other smart devices from computers and servers, or simply providing multiple IP networks through the one router. Each network can have its own Content Filtering, Firewall, Quality of Service and Route Policy configurations.
Vigor C410 routers have full support for 802.1Q VLAN tagging, so that these subnets can be passed to other devices that support tagged VLANs. Such as the DrayTek VigorSwitch P2100 10-port switch, for additional network ports and features.
The Wireless LAN can also utilise VLANs, making the same Guest & Private networks possible simply by using different wireless SSIDs. Or connect up a DrayTek VigorAP wireless access point, such as the VigorAP 805 to do the same, spanning the router's own wireless and any connected wireless APs.
Designed for Central Management
The Vigor C410 can be centrally managed along with VigorAP's and switches, with the VigorACS central management platform.
This scalable solution provides visibility, control and reporting of your entire DrayTek product estate, ideal for dealers/SIs managing customers' devices or any user who wants to know what's going on with their devices. VigorACS also provides features like automated/bulk firmware updates, VPN management and alarms for connectivity or other issues.
For full details of VigorACS, click here.
Robust & Comprehensive IPv4 / IPv6 Firewall
Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.
The DrayTek object-based firewall enables you to create combinations of Firewall rules and Content Filtering to suit a home or small office environment, applying Content Filtering to the whole network, only specified devices or just the network that guests can connect to.
The Vigor C410 supports both IPv4 and IPv6 with Dual-Stack IPv4/IPv6. Advanced networking features, such as the object-based Firewall, Quality of Service, Content Filtering and VLANs support both IPv4 and IPv6 networks.
Web Content Filtering with DNS Filter
The content control features of the Vigor C410 allow you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal and according to time schedules.
Content filtering can also block sites using HTTPS/SSL where URLs are encrypted (and normal routers cannot block).
Using the GlobalView service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial is included with your new router.
Quality of Service with App QoS
Prioritise latency-sensitive applications on your network with Quality of Service.
App QoS simplifies setting up Quality of Service significantly, simply select which applications or services to prioritise, such as Zoom and Skype.
Use 4 separate queues to give priority to servers & PCs (IP address), services such as VoIP or DNS, or packet tagging used by IP phones with 802.1p and DSCP support
Auto Voice VLAN allows the router to automatically prioritise VoIP calls as they pass through the router without additional configuration.
Control throughput with Bandwidth Limit, by setting speed limits for all clients individually, groups of IPs, or a shared bandwidth limit for a whole subnet, such as a Guest network.
DrayDDNS - DrayTek Dynamic DNS Address
DrayTek provides a free Dynamic DNS address to each Vigor C410 router, allowing you to link the router's current IP address to a memorable "drayddns.com" hostname, such as "vigorc410.drayddns.com".
This address automatically updates whenever the Internet connection's IP changes, so if one WAN’s IP address allocation is dynamic, or the IP changes when switching from the primary WAN connection to a backup, you can easily locate and access your Vigor C410 router. Just use the hostname to access the router's VPN services, management and any other services you have made accessible through the router.
The Vigor C410 can also authenticate your DrayDDNS hostname with free SSL/TLS certificates provided by LetsEncrypt, the router manages and automates the certificate process. Keeping the certificate up to date and ready for use with SSL VPN and other services.
Virtual Controller
Virtual Controller is a management feature that helps with deployment and monitoring of DrayTek VigorAPs and VigorSwitches. The system can auto detect access points and switches. For smaller setups with fewer than 8 APs, it seamlessly enables Mesh mode where 1 root AP and up to 7 nodes can be linked together. In larger wired deployments, it activates AP management mode for up to 20 APs, while switch management supports up to 5 switches, ensuring enhanced control and scalability.
Wireless Management
DrayTek Vigor C410ax series routers can manage up to 20 DrayTek VigorAP access points with Vitrual Controller AP Management profiles, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network. This enables you to centrally control, manage and administer a full DrayTek network installed around the home or office, through the router's web interface. Ideal for local or remote management.
Switch Management
DrayTek DrayOS 5 SOHO routers such as the Vigor C410ax series can also manage up to 5 VigorSwitches. The Vitrual Controller helps with finding devices on the network, auto configuration of newly added VigorSwitches, monitoring of the devices, port control and maintenance.
Vigor C410ax Web Interface
Dashboard
View the status of the Vigor C410ax in one place from the router's Dashboard.
CSM - Web Content Filtering, URL Filtering & App Enforcement
Control access to the Internet, either for all users or specific networks / clients only. Category based filtering greatly simplifies the task of filtering Internet access:
Virtual Controller
Discover, adopt, synch configuration, maintain and monitor your DrayTek wireless access points and switches thanks to the Virtual Controller management system
IAM - Identity and Access Control
Configure IAM users and groups and apply network security policies
Vigor C410ax Router
Key Specifications
- Multi-WAN Router with Failover
- 4G built-in modem with dual SIM slot for second backup telco
- 1x Gigabit Ethernet WAN (RJ45)
- 1x Gigabit Ethernet WAN (RJ45) / LAN switchable
- 4x Gigabit RJ-45 LAN Ports
- Wireless WAN backup (‘ax’ models)
- Up to 940Mbps Firewall Throughput
- Up to 370Mbps IPsec VPN Throughput
- 4x LAN-to-LAN & Remote Teleworker VPN Tunnels
- AX3000 – Wi-Fi 6 Dual Band Wireless
- 4 LAN Subnets with VLANs (Port-based / 802.1q)
- SPI Firewall and Content Filtering
- Optional VigorCare Available
- Compatible with VigorACS central management platform
| UK Product Code | EAN | Product Name | Product Description |
|---|---|---|---|
| VC410AX-K | 4710484748713 | Vigor C410ax (UK/IE) | Vigor C410ax 4G Mobile Broadband Wireless AX3000 Ethernet Router with integrated sim slot, VPN and Firewall |
The EAN is a barcode number which identifies the unique specific product type. It is separate to the product serial number which is unique to each product. The EAN will also appear on your product box when you receive it so you can double check that you have been sent the right product.
These product codes are for UK/Irish products only. Please check with your local DrayTek office for the correct part nos. for your region if you are not in the UK/IE to ensure that you get the correct hardware and local support/warranty.
Technical Specification (UK Hardware Spec.)
Physical Interfaces
- WAN Ports: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- WAN/LAN Switchable Port: 1x Gigabit Ethernet (1G/100M/10M), RJ-45
- LAN Ports: 4x Gigabit Ethernet (1G/100M/10M), RJ-45
- 2x Removable Wireless LAN antennas
- 2x Removable 4G Cellular antennas
- Wireless On / Off / WPS button
- Recessed Factory Reset button
- SIM Slot: 2x Nano-Size (1 Active SIM)
Performance
- NAT Performance:
- Up to 940Mb/s NAT Throughput
- 50,000 NAT Sessions
- VPN Performance:
- 370 Mb/s IPsec VPN Performance
- Max. 4 Concurrent VPN Tunnels
WAN Interfaces
- WAN1: Gigabit Ethernet
- WAN2: Gigabit Ethernet (LAN switchable)
- WAN3: 2.4GHz Wireless WAN
- WAN4: 5GHz Wireless WAN
- WAN5: Integrated 4G Modem
Internet Connection
- Hardware Acceleration (Always On)
- 802.1p/q Multi-VLAN Tagging
- Multi-VLAN/PVC
- 2.4GHz or 5GHz Wireless WAN
- WAN Active on Demand: Link Failure, Traffic Threshold
- Connection Detection: PPP, ARP Detect, Ping Detect
- WAN Data Budget
- Dynamic DNS
- DrayDDNS – with automated LetsEncrypt Certificates
- IPv4 Connection Types:
- PPPoE, DHCP, Static IP
- IPv6 Connection Types:
- Ethernet: PPP, DHCPv6, Static IPv6, TSPC, 6rd, 6in4 Static Tunnel
Integrated 4G Modem Features
- Dual-SIM Failover
- 4G Modem / LTE Category 6 Modem
- Unlocked to any network (EE, 3, O2, Vodafone, Eircom)
- 4G LTE (FDD) Bands: 1, 3, 7, 8, 20, 28
- 4G LTE (TDD) Bands: 38, 40
- 3G (WCDMA) Bands: 1, 8
- 2x External 4G Antennas included
- Per-SIM-Card WAN Data Budget
- 2x Nano-Size SIM-Card Slots
- Removable SIM slot cover
- SMS Inbox - Send & Receive SMS text messages
Wireless Features
- AX3000 Wi-Fi 6 Wireless:
- 802.11ax 2x2 wireless access point
- Compatible with 802.11a/b/g/n/ac wireless
- Dual-band (2.4/5Ghz) simultaneous wireless
- Up to 2402Mbps PHY rate at 160MHz with 5GHz
- Up to 574Mbps PHY rate at 40MHz with 2.4GHz
- Channel Bandwidth: 20/40MHz for 2.4GHz, 20/40/80/160MHz for 5GHz
- OFDMA
- MU-MIMO
- Tx Beamforming
- 1024-QAM
- Mesh Root support with DrayTek VigorAP Mesh Nodes^
- Up to 8 SSIDs per radio band
- Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
- Wireless Optimisation: Assisted Client Roaming, Band Steering
- WMM (Wireless MultiMedia)
- WPS - WiFi Protected Setup
- Station Control - Time-limited wireless connectivity per Station (e.g. 1 hour)
- Wireless Security:
- OWE
- WEP
- WPA
- WPA2/WPA
- WPA3
- Pre-Shared Key authentication
- Enterprise 802.1x authentication
- Identity Access Policies (MAC address, Login, Guest Hotspot)
Antenna Specifications
- Wireless Antennas:
- 2x External Dipole
- 5GHz Gain: 2.8 dBi
- 2.4GHz Gain: 2.1 dBi
- RP-SMA fitting antenna connectors
- 4G Cellular Antennas:
- 2x External Dipole
- 2x Internal PIFA
- Gain: 3.68 dBi
- SMA fitting antenna connectors
Firewall & Content Filtering
- IP-based or User-based Firewall Policy
- User-based Time Quota
- DoS Attack Defence
- Spoofing Defence
- Content Filtering:
- Application Content Filter
- URL Content Filter
- DNS Keyword Filter
- Web Features
- Web Category Filter*
NAT Features
- NAT Port Redirection
- Open Ports
- Port Triggering
- DMZ Host
- UPnP
- ALG (Application Layer Gateway): SIP, RTSP
LAN Management
- 802.1q Tag-based, Port-based VLAN
- Up to 4 LAN Subnets (NAT or Routing mode selectable per LAN interface)
- Up to 8 VLANs
- DHCP Server:
- Multiple IP Subnet
- Custom DHCP Options
- Bind-IP-to-MAC
- DHCP Pool Count up to 253 addresses for LANs 1-4
- DHCP Relay per LAN
- Wired 802.1x Port Authentication
- Local DNS Server
- Conditional DNS Forwarding
- Hotspot Web Portal
- Hotspot Authentication: Click-Through, External Portal Server
Networking Features
- Policy-based Routing: Protocol, IP Address, Port
- DNS Security (DNSSEC)
- Local RADIUS server
- Multicast: IGMP Proxy, IGMP Snooping & Fast Leave
- Routing Features: IPv4 & IPv6 Static Routing, Inter-VLAN Routing, RIP v1/v2/ng, BGP, OSPF
VPN Features
- Up to 4 active VPN tunnels
- Up to 370Mb/s IPsec
- LAN-to-LAN - Dial-Out VPN Client / Dial-In VPN Server
- Teleworker-to-LAN – Dial-In VPN Server
- User Authentication: Local, RADIUS, TACACS+, mOTP, TOTP
- IKE Authentication: Pre-Shared Key and Digital Signature (X.509)
- Encryption: DES, 3DES, AES (128/192/256)
- Authentication: SHA-256, SHA-1
- Dead Peer Detection (DPD)
- IPsec NAT-Traversal (NAT-T)
- DHCP over IPsec
- VPN Protocols:
- IPsec IKEv1, IKEv2, IKEv2 EAP
- IPsec-XAuth
- OpenVPN
- WireGuard
Bandwidth Management
- IP-based Bandwidth Limit
- IP-based Session Limit
- User-based Data Quota
- QoS (Quality of Service):
- 4 Priority Queues
- App QoS
- VoIP Prioritization
Management
- Local Service: HTTP, HTTPS, Telnet, SSH, FTP, TR-069
- Config File Export & Import
- Firmware Upgrade via TFTP, HTTP, TR-069
- Access Control Features: Access List, Brute Force Protection
- Syslog
- SMS, E-mail Notification Alert
- SNMP: v1, v2c, v3
- Managed by VigorACS
Router Central Management Features
- AP Management: Up to 20 VigorAP access points
- Switch Management: Up to 5 VigorSwitch network switches
- DrayTek Mesh: Up to 7 VigorAP access points^
Operating Requirements
- Power Requirements: 100-240VAC
- Power Consumption (Watts, maximum): 16.2W
- Temperature Operating: 0 °C ~ 45 °C
- Storage: -25 °C ~ 70 °C
- Humidity 10% ~ 90% (non-condensing)
- Operating Power: DC 12V @ 1.4A (via external PSU, supplied)
- Wall Mountable
Physical Specifications
- Dimensions:
- 207mm Width
- 131mm Depth
- 42mm Height
- Weight: 840g
Box Contents
- Vigor C410ax series router
- Quick Start Guide
- Cat-5e RJ-45 Network Cable
- 2x Detachable Wireless LAN Antennas
- 2x Detachable Cellular Antennas
- DC 12V Power Supply with UK Plug
ROHS, UKCA & CE Compliant
Warranty:
- Standard: Two (2) Year, RTB
- Software security updates:
5 years after the EOL notification. Please note that this only applies to products sold in the UK - Optional VigorCare Extended Warranty
- VigorCare A3 3 Year Subscription: VCARE-A3
- VigorCare A5 5 Year Subscription: VCARE-A5
* - subscription required: Group B, URLR-B (includes free 30-day trial)
^ - visit the DrayTek Mesh Model Compatibility page for mesh compatibility details
