Multi-gig wired routing with business VPN controls
2.5GbE WANConfigurable 2.5GbE P116 VPN tunnelsWired base model
The DrayTek Vigor2136 is a wired broadband VPN router for a configured home-office or small-business network. This v2136-DE-AT-CH base version combines a 2.5GbE WAN interface, a 2.5GbE P1 LAN port and three Gigabit LAN ports, plus two USB 2.0 connections. P1 can be used as a second WAN with compatible firmware. Firewall, VLAN, routing-policy and QoS controls let an administrator organize the network.
Best For: Wired offices and demanding home networks that need multi-gig Ethernet routing and compatible remote-access or site-to-site VPN, using separate Wi-Fi access points when required.
Before you order: This exact model has no built-in Wi-Fi, DSL modem, cellular modem or SFP slot. Connect a suitable Ethernet modem/ONT or Internet handoff. P1 LAN/WAN configuration and advanced features require compatible regional firmware; verify support before deployment. The DE/AT/CH retail package includes a regional power adapter, so confirm its plug suits the installation. VPN and security services may require compatible clients, setup and separate subscriptions.
What's in the Box
- Vigor2136 wired base router, regional SKU v2136-DE-AT-CH.
- Regional power adapter, RJ45 Ethernet cable and Quick Start Guide.
- German regional package lists two wall screws, two anchors and a drilling template. Antennas belong to ax models; modem/ONT, Wi-Fi access point and USB peripherals are separate.
What It Means in Practice
- Connect the fixed 2.5GbE WAN to an appropriate Ethernet Internet source and configure the ISP connection parameters.
- Use P1 at up to 2.5Gbps for LAN, or configure its second-WAN role with supported firmware; the three other LAN ports are Gigabit.
- Design VLANs, DHCP subnets, routing policies and QoS around the devices and services on the network.
- Choose supported VPN clients, protocols and authentication settings. Throughput depends on encryption, configuration and traffic.
- Use compatible USB modems, storage or printers only after checking the device support list. USB ports do not imply a built-in cellular radio.
What Will Not Work
- No integrated wireless coverage; the ax model is a different product.
- No direct DSL telephone-line or fibre-SFP termination, and no SIM slot on this base router.
- Five RJ45 sockets do not mean five 2.5GbE ports: there are two 2.5GbE and three Gigabit interfaces.
- Published NAT/VPN figures are manufacturer test maxima, rather than a guaranteed Internet or encrypted-data rate.
Key Features
A multi-gig Ethernet path
A fixed 2.5GbE WAN and a 2.5GbE P1 port support suitable Internet and LAN equipment.
Configurable VPN connectivity
Up to 16 VPN tunnels with supported IPsec, OpenVPN and WireGuard workflows; firmware and client compatibility apply.
Traffic and network organization
VLANs, multiple LAN subnets, routing policy and application-based QoS provide practical configuration controls.
Peripheral flexibility
Two USB 2.0 ports support listed compatible devices, while separate access points provide Wi-Fi when needed.
Technical Specifications
| Exact model / regional SKU |
Vigor2136 wired base / v2136-DE-AT-CH |
| Fixed WAN |
1× 2.5GbE RJ45 |
| Configurable P1 interface |
1× 2.5GbE LAN/WAN; compatible firmware required |
| Additional LAN |
3× Gigabit Ethernet RJ45 |
| RJ45 total |
5 sockets: two 2.5GbE and three Gigabit |
| USB |
2× USB 2.0 for supported peripherals |
| Built-in Wi-Fi / DSL / cellular |
None on this base model |
| VPN capacity / protocols |
Up to 16 tunnels; IPsec, OpenVPN, WireGuard, compatible firmware/clients |
| NAT performance reference |
Up to 2.3Gbps with hardware acceleration in manufacturer testing |
| IPsec performance reference |
Up to 390Mbps; manufacturer maximum, configuration dependent |
| LAN subnets / VLANs |
Up to 4 LAN subnets / 8 VLANs |
| Network controls |
DHCP, firewall filters, routing policy, bandwidth management and application QoS |
| Management |
Web interface, configuration backup/restore, SNMP v1/v2c/v3; firmware support applies |
| Power / maximum consumption |
DC 12V, 0.9A base model / 10W maximum |
| Dimensions |
207×131×42mm W×D×H |
| Operating environment |
0–45°C, 10–90% RH non-condensing |
| Supply / condition |
DE/AT/CH retail configuration / New |
| Colour |
White |
Frequently Asked Questions
Does this router include Wi-Fi 6?
No. Wi-Fi belongs to the distinct Vigor2136ax version. This base model is wired.
Can I plug a DSL line directly into it?
No. Use a compatible Ethernet modem/ONT or Internet handoff; this router has no built-in DSL modem.
Can P1 become a second WAN?
The current regional specification lists configurable P1 LAN/WAN. This requires compatible firmware, so check the correct regional firmware and configuration guidance.
Are all Ethernet ports 2.5Gbps?
No. The fixed WAN and P1 support 2.5GbE; the other three LAN ports are Gigabit.
Are 2.3Gbps NAT and 390Mbps IPsec guaranteed?
No. These are manufacturer test maxima. Actual throughput depends on traffic, enabled features, firmware and network conditions.
Singular Expert Insight
Match the router to the Internet handoff and the network topology first. The wired Vigor2136 can sit behind a suitable modem/ONT and serve a separate access-point network. Decide whether P1 is more useful for a multi-gig LAN device or an additional WAN, and check the supported regional firmware before relying on that role.
Buyer’s Guide
✓ Buy it if You need a configurable wired VPN router with a 2.5GbE Internet path and separate wireless infrastructure.
✕ Skip it if You need built-in Wi-Fi, direct DSL/fibre-SFP termination, an integrated cellular modem or 2.5GbE on every LAN port.
→ Also consider ISP handoff, firmware, P1 role, VPN clients, subscription needs, local power plug and access points.