DrayTek Vigor Setup Guide for Beginners: First-Time Configuration

DrayTek Vigor routers are a staple of the UK small business market. Reliable, feature-packed, and trusted by IT professionals, they are commonly found on FTTC, FTTP, and leased-line connections from businesses of every size. Walk into almost any professionally managed small office and there is a reasonable chance a Vigor is sitting in the comms cabinet or on a shelf quietly doing its job. The problem is that the web interface can feel daunting when you first power one up — VLAN tagging, QoS profiles, WAN load balancing, multiple WAN failover — when all you actually want is to get your internet connection working and your team online.

This guide is written for small business owners and office managers who have taken delivery of a DrayTek Vigor 2865 or 2866 series router and need to configure it from scratch. Both are popular dual-WAN capable DSL routers widely used on BT FTTC and FTTP connections across the UK. The 2866 adds VDSL2 35b support for faster FTTC speeds where available. We will walk through everything step by step, in plain English, covering the essentials to get you up and running safely and sensibly — without touching advanced features that can wait for another day.

What You Need Before You Start

Gather the following before touching the router:

• ISP connection details. Typically a username and password for PPPoE authentication if you are on BT or a reseller using FTTC/ADSL. If you are on Virgin Media Business or a FTTP service that does not require PPPoE (IPoE or DHCP-based), note that instead. If unsure, call your ISP and ask: “Do I need a PPPoE username and password, or does the connection authenticate automatically?”
• The physical line or ONT connection. For FTTC, you will have a VDSL microfilter and phone line going into the DSL port. For FTTP, you will have an ONT box on the wall with an ethernet cable running to the router’s WAN port.
• An ethernet cable. Connect your computer directly to a LAN port for initial setup. Do not rely on Wi-Fi — it will not be active until you configure it.
• A laptop or desktop with any modern browser (Chrome, Edge, Firefox).
• The default login credentials. Out of the box, DrayTek Vigor uses admin as both the username and password. You will change this immediately.

First Connection: Getting Into the Web Interface

Connect your computer to one of the four LAN ports on the back of the router via ethernet, then power on the Vigor. Wait approximately 60 seconds — you are ready once the ACT (activity) LED on the front panel is steady or blinking normally.

Open your browser and type the following into the address bar:

http://192.168.1.1

This is the default LAN IP address. You will see a login screen. Enter the default credentials:

Field	Default Value
Username	admin
Password	admin

Click Login. On newer firmware, the router may immediately prompt you to set a new admin password before proceeding — do not skip this.

Change the Admin Password Immediately

If you are not automatically prompted, navigate to System Maintenance → Administrator Password. Set a strong password of at least 12 characters, mixing upper and lower case letters, numbers, and a symbol. Store it somewhere secure. Do not reuse your Wi-Fi password or ISP account password — this credential controls your entire router configuration.

Using the Quick Start Wizard

DrayTek includes a Quick Start Wizard to guide you through the most important initial settings. You may be taken here automatically after first login. If not, look for Quick Start Wizard in the left-hand navigation menu.

Step 1 — Select Your WAN Type

Choose the connection type that matches your physical line:

• VDSL (FTTC) — For BT, Sky Business, Plusnet, TalkTalk Business, or similar services using a standard telephone line and green street cabinet. Uses the router’s built-in VDSL modem and the grey DSL port on the back.
• ADSL — Older broadband over a phone line, typically below 24Mbps. Select this only if your ISP has confirmed you are on ADSL rather than FTTC.
• Ethernet (WAN) — For FTTP (full fibre), leased lines, or any service coming in via ethernet from an ONT or media converter. Increasingly common with Openreach FTTP, Gigaclear, and Hyperoptic.

Step 2 — Enter ISP Credentials (PPPoE)

If your ISP uses PPPoE (most BT-based FTTC services do), enter your broadband username and password here. These are the authentication credentials your ISP issued — not your online account login — and are often in the format [email protected].

If your ISP uses DHCP instead (common on some FTTP services and Virgin Media Business), select DHCP or Dynamic IP and the router will obtain its address automatically.

For most FTTC connections on the BT Openreach network, set the VLAN ID to 101. If the connection does not establish after completing the wizard, check this value with your ISP.

Step 3 — Set Your Wi-Fi SSID and Password

Enter a network name (SSID) your team will recognise. Avoid including your full business name, address, or any identifying information. Set a strong Wi-Fi password — WPA2-PSK is the minimum standard; WPA3 is preferable if your firmware and devices support it. Aim for at least 12 characters.

Once you apply the wizard settings, the WAN LED should turn solid within one to three minutes if the connection details are correct.

Setting Your LAN IP Range

The default subnet is 192.168.1.0/24 — the router sits at 192.168.1.1 and hands out addresses from 192.168.1.2 to 192.168.1.254. For most small businesses this is perfectly adequate. You may want to change it if:

• You are connecting via VPN to another network also using 192.168.1.x, which would cause a routing conflict.
• Your IT support provider has a preferred IP scheme.

To change it, go to LAN → General Setup, update the router’s IP address (for example to 192.168.10.1), save and apply. Your computer will briefly lose connectivity and you will need to reconnect using the new IP address.

Configuring DNS Servers

DNS translates website addresses into IP addresses. By default the Vigor uses your ISP’s DNS servers, which is generally fine. Many businesses switch to a third-party provider for speed, reliability, or content filtering:

Provider	Primary DNS	Secondary DNS
Cloudflare	1.1.1.1	1.0.0.1
Google	8.8.8.8	8.8.4.4
OpenDNS	208.67.222.222	208.67.220.220

To set custom DNS, go to WAN → Internet Access, select your WAN interface, and update the DNS fields. Alternatively, configure DNS under LAN → General Setup to push servers to DHCP clients directly.

If you have a Windows Server running Active Directory, clients should use the internal server as DNS rather than external resolvers. Ask your IT support provider if unsure.

Updating the Firmware

Check for and install firmware updates as soon as the router is online. Outdated firmware can contain known security vulnerabilities — this step is not optional.

1. Go to System Maintenance → Firmware Upgrade and note the current version shown on screen.
2. In a separate browser tab, visit www.draytek.co.uk, go to Support → Downloads, and search for your model (Vigor 2865 or 2866).
3. If a newer version is available, download the firmware file to your computer.
4. Back in the router interface, browse to the downloaded file on the Firmware Upgrade page and click Upgrade.

The router will apply the update and reboot — allow two to three minutes and do not cut the power during this process. Some Vigor models also offer an Online Firmware Upgrade button that checks for and downloads updates automatically from within the interface.

Firewall Basics

The DrayTek Vigor includes a stateful firewall that is active by default. For most small businesses, the defaults are sensible — inbound traffic from the internet is blocked unless it is a response to an outbound request from your network. Two settings are worth reviewing early on:

Enable DoS Protection

Navigate to Firewall → Defence Setup (labelled “DoS Defence” or similar depending on firmware version) and enable DoS (Denial of Service) protection. This helps the router detect and discard flood attacks before they saturate your connection or destabilise devices on the network.

Keep SPI Enabled

Verify that SPI (Stateful Packet Inspection) is enabled under Firewall → General Setup. Do not disable it without a specific, understood technical reason. Also avoid opening firewall ports (port forwarding) unless you have a clear requirement — every open port is a potential attack surface.

Wi-Fi Settings in Detail

Navigate to Wireless LAN → General Setup. The Vigor 2865 and 2866 are dual-band routers broadcasting on both 2.4GHz and 5GHz.

2.4GHz vs 5GHz

• 2.4GHz — Better range and wall penetration but slower and more susceptible to interference from neighbouring networks.
• 5GHz — Faster and less congested but shorter range. Best for devices close to the router that need good throughput.

Give the two bands different SSIDs (e.g. YourOffice-WiFi and YourOffice-WiFi-5G) so you can connect devices to the appropriate band intentionally.

Channel Selection

For 2.4GHz, use channels 1, 6, or 11 — these are the only non-overlapping channels in the UK. Auto channel selection lets the router pick the least congested option at boot time, which is a reasonable starting point. For 5GHz, Auto is generally fine; DFS channels (100–140) are often less congested if you experience interference.

Security Standard

Set security to WPA3-SAE if all devices support it, or WPA2/WPA3 Mixed for older hardware. Never use WEP or original WPA — both are trivially broken and offer no meaningful protection.

DHCP Reservations: Fixed IPs for Key Devices

The router assigns IP addresses dynamically by default — a device may receive a different address each time it connects, or after a reboot. For most laptops and mobile phones this is perfectly fine. However, for printers, NAS drives, CCTV recorders, or servers that other machines on the network need to reach reliably, a changing IP address causes problems. DHCP reservations (also called static DHCP bindings) ensure a device always receives the same address without requiring it to be manually configured with a static IP on the device itself.

To create a reservation on a DrayTek Vigor:

1. Go to LAN → General Setup and scroll down to the DHCP Server section.
2. Find the IP Bind List or Static DHCP table.
3. Enter the MAC address of the device and the IP address you want it to receive.
4. Save. The device will get the reserved address on its next DHCP renewal, or immediately if you reconnect it.

To find a device’s MAC address on Windows, open a command prompt and run ipconfig /all — look for the Physical Address. On most network printers it is printed on a label on the underside of the unit.

Backing Up Your Configuration

Back up your configuration as soon as setup is complete. If the router ever needs to be factory reset to recover from a problem, or if the unit itself fails and needs replacing, a backup saves hours of reconfiguration work and means you do not have to rely on memory for all the settings you have carefully put in place.

1. Go to System Maintenance → Configuration Backup.
2. Click Backup to download the configuration file.
3. Store it somewhere safe — cloud storage or a network drive rather than a local machine only. Name it clearly, for example: Vigor2866_config_2026-03-28.cfg.

Repeat this after any significant change. To restore, use the same page and select the Restore option.

Common First-Time Mistakes to Avoid

• Not changing the default admin password. Leaving the password as admin is a serious risk even on an internal network. Change it on first login.
• Skipping firmware updates. Always update before going live — older firmware can carry known, publicly documented vulnerabilities.
• Opening unnecessary firewall ports. Only forward ports you specifically need and understand. Document any rules you add and review them periodically.
• Connecting DSL to the wrong port. For FTTC, use the DSL port. For FTTP via an ONT, use the WAN ethernet port. A phone line plugged into an ethernet port will not work.
• Ignoring IP range conflicts. The 192.168.1.x range is extremely common. If you plan to connect a VPN to another office or cloud service, check both ends use different subnets — collisions are a frequent cause of VPN problems.
• Leaving remote management enabled. Check under System Maintenance → Management and ensure WAN-side remote access is disabled unless you have specifically secured it.
• Not taking a configuration backup. Routers occasionally need factory resets. Without a backup, you start from scratch.

Next Steps

With these steps complete, you have a DrayTek Vigor connected to the internet, secured with a strong admin password, running current firmware, and with Wi-Fi properly configured. Key devices have fixed IP addresses and you have a configuration backup stored safely.

As your needs grow, DrayTek offers a broad range of advanced features: site-to-site VPNs for connecting multiple offices, SSL VPN for remote workers, VLAN segmentation to isolate a guest Wi-Fi network from your internal systems, and Quality of Service rules to prioritise VoIP traffic. DrayTek’s support documentation at www.draytek.co.uk/support is thorough, and the DrayTek UK community forum is an excellent resource for specific configuration questions.

The guiding principle for anything you are unsure about: if you do not know what a setting does, leave it at the default and research it before making changes. DrayTek’s defaults are well considered for a business environment — confidence comes with familiarity.