Skip to content

WireGuard VPN Service on DrayTek Vigor 2927

According to Gemini

Check Firmware Version

Where to Find & How to Update Firmware:

  • Official Downloads: The most reliable source is the DrayTek UK Support section for the Vigor 2927,
    which provides the latest .all or .rst files.
  • Web Interface (Online): Log in to your router's management page (default IP: 192.168.1.1)
    and navigate to System Maintenance >> Firmware Upgrade. You can click "Check the Latest Firmware" to find and apply updates directly.
  • Manual Update: Download the firmware file to your computer, then select "Browse" in the Firmware Upgrade menu to upload it.

Setup the VPN

To set up WireGuard on a DrayTek Vigor 2927, ensure you are running firmware 4.4.3 or later, as this version introduced native WireGuard support.

1. Enable WireGuard Service

Before configuring users or tunnels, the global service must be active.

  • Navigate to VPN and Remote Access >> Remote Access Control.
  • Check the box for Enable WireGuard VPN Service.
  • Go to VPN and Remote Access >> WireGuard.
  • Click Generate to create the router's Private Key and Public Key.
  • Set the WireGuard Interface IP (typically the router's LAN IP, e.g., 192.168.1.1) and click OK.

2. Configure Remote Dial-In User (Teleworker)

Use this for connecting individual devices (phones, laptops).

  • Go to VPN and Remote Access >> Remote Dial-in User and click an available index.
  • Settings:
  • Check Enable this account and enter a Username.
  • Under Allowed Dial-In Type, check WireGuard.
  • Assign a Static IP Address (required for WireGuard).
  • Client Configuration:
  • Click Client Config Generator.
  • Click Generate for both Key Pairs and Pre-Shared Key (PSK).
  • Enter your WAN IP or DDNS Domain in the VPN Server field.
  • Click Download Client Config to save the .conf file.
  • Click Apply to Profile & Close, then OK on the main profile page.