Vpn Tunnel Draytek
Configure the vpn profile as follows.
Vpn tunnel draytek. A vpn tunnel to draytek is going up with only one security association sa although there are many local destination networks so more sas should be created. Let s look at each of our vpn vendors to a lower place in more sapience. The draytek router will display the current vpn status so you can monitor traffic loads and activity as shown below.
In the basic tab enter profile name and enable this profile. The configuration of router a vpn server 1. Kb 5219 ipsec tunnel main mode between draytek routers client with static ip kb 5348 ipsec tunnel aggresive mode between draytek routers kb 5722 troubleshoot vpn is up but no traffic.
Select specify remote vpn gateway then input some strings for peer id. Select the wan interface that the vpn client will dial out the tunnel fromdial out through. Latest protocols compatibility draytek vpn router supports all industry standard protocols including gre pptp l2tp l2tp over ipsec ipsec ikev2 ssl vpn and openvpn.
After completing the configurations above the vpn tunnel should be dialed up now. Go to vpn and remote access connection management for checking its status. Keep in mind that this is an evolving list.
Go to vpn and remote access lan to lan to create a vpn profile as follows. It looks like draytek does not fully support multiple phase 2 security associations for a single vpn policy with the default settings. Create a policy rule to force all the traffics to go through the vpn trunk tunnel.
Enter vigor router s wan ip in ip or hostname. Draytek can t connect to ssl vpn tunnel server. Go to routing policy route then click add to add a new rule.