Digital Transformation with SaaS/Cloud
Why SD-WAN
Traditionally most business applications were running on private servers in a company's Head Quarters, and MPLS that routes all traffic to the center site made this model quite efficient.
However, with adopting more and more SaaS and private/public cloud applications, we need new technologies that can efficiently and dynamically route different types of traffic, either to the center site, or to the cloud directly.
SD-WAN is the solution to make the complex routing schemes simple and intuitive.
Based on traditional load balancing and failover functions, SD-WAN further improves user experience by focusing on interface and application quality.
Interface Quality At a Glance
Interface MOS
Wired WAN, Wireless WAN (including wireless 2.4G/5G WAN, LTE WAN, and USB WAN), and VPN quality are monitored 24/7.
With “Average” MOS, Network Admin will be able to understand the stability of quality over past period.
“Active” Interface Quality, on the other hand, shows the interface quality right at the moment.
MOS Compliance
This percentage number shows the reliability of the connections. Ideally the connections should always be higher than the target MOS threshold.
Interface Quality - From Macro to Micro
For every Interface on every CPE
From the Dashboard, any suspicious Interface quality results can be easily spotted, Network Administrators can easily dive into the details.
For each Interface on each CPE; Data usage, latency, Jitter, and Packet Loss are recorded.

Auto VPN
DrayTek's SD-WAN solution provides the easiest way to setup VPN tunnels from scratch.
Hub-and-Spoke
1. Select the Hub device
2. Done! VigorACS will automatically create one IPSec tunnel from each Spoke to the Hub.

Full Mesh
1. Done! VigorACS will automatically design and create one IPSec tunnel between each router.

Intelligent VoIP Optimisation
From the start of each VoIP call to the end, SD-WAN provides intelligent VoIP optimisation.

Auto VoIP WAN
Based on the Interface quality, SD-WAN intelligently assigns the best-quality WAN for VoIP calls. So whenever making a new call, SD-WAN makes sure you are calling via the best WAN.
VoIP Live Failover
Although already sending via best-quality WAN, SD-WAN will continue to monitor the quality of each live call, and can failover to a secondary VoIP WAN if call quality is poor.
Every call is logged with MOS score and sent Interface for Network Admin’s reference.
Application Visibility
Gain insights into the data usage across the entire network.
Usage Ranking
In-depth application insights with ranking by application and user ranking.
Full Traffic Control with SD-WAN Route Policy
Application/Domain Route Policy
SD-WAN provides complete routing control by allowing Network Administrators to specify the preferred route for selected applications/domains, to ensure their specific routing scenarios can be achieved.


Failover/Failback
Failover to another interface when original interface offline, and failback when possible.
Application Route Policy
Full Control of NAT and Routing
Sessions matching the criteria can be NATed or Routed, all under your control. It's especially useful if you have a mix of private/MPLS WAN (requires routing) and direct Internet access (required NATting) at the same time.
In the following scenario, by creating 2 policies to different destinations, VoIP (SIP/RTP) from the same IP phone in a branch office can be routed via MPLS WAN when calling an IP phone in the company HQ, and NATed via 2nd WAN to the Internet directly for all other calls.

Components and Topology
Edge Routers Providing Edge Computing
- Edge routers are physical routers installed in HQ and Branches.
- There are a range of DrayTek Vigor Router models to suit different WAN types, including DSL and LTE.
- Establishing VPN tunnels (IPSec by default) from branches to HQ to form Hub-n-Spoke or Mesh topology.
- Receiving SD-WAN configurations from VigorACS 3, performing edge computing according to SD-WAN policies, and uploading data to VigorACS3 for monitoring.
VigorACS 3 Server as Orchestrator
- VigorACS 3 is the central software where network administrators perform configurations, provisioning, and monitoring activity.
- Multitenant capability makes xSP services easy.

Edge Router Models
For VDSL, ADSL, Cable, LTE and Fibre | For G.fast, VDSL, ADSL, LTE and Fibre | For Cable, LTE and Fibre |
Vigor 2865 seriesAn ADSL/VDSL router with integrated DSL modem, Gigabit performance and up to 32 VPN tunnels with secondary Ethernet WAN. Flexible connectivity for use in any environment. The Vigor 2865Lac adds an LTE modem with Dual-SIM for a third WAN interface. |
Vigor 2866 seriesAn G.fast/ADSL/VDSL router with integrated G.fast / DSL modem, Gigabit performance and up to 32 VPN tunnels with secondary Ethernet WAN. Flexible connectivity for use in any environment. The Vigor 2866Lac adds an LTE modem with Dual-SIM for a third WAN interface. |
Vigor 2927 seriesA Dual-Ethernet WAN router with Gigabit performance and up to 50 VPN tunnels. The Vigor 2927Lac adds an LTE modem with Dual-SIM for a third WAN interface. |
![]() |
![]() |
![]() |
Firmware for SD-WAN: DrayOS 4.2.0 or later - available now.