draytek vigor help

[wjwren]

trying to setup a vpn into the office using a vigor. Called draytek today but the technical team were not much cop. Anyone used one of these? Should I be using Ipsec or PPTP?

[mattley]

Vigor at the office end as VPN server with a windows vpn client PPTP should be fine.

[RoadRailer]

LAN to LAN VPN I'd use IPsec between two Draytek devices, as above PPTP for single client is easiest to setup. Newer Draytek models and firmwares support SSL VPN too.

[cornet]

If you use PPTP then make sure you enable MPPE (Microsoft Point-to-Point Encryption) as PPTP is not encrypted by default.

Personally I would always opt for IPSEC.

[e320dave]

There are configuration examples on the Draytek site. I have usually found them quite good.
There are a number of different types of configuration, user to Draytek (using the Draytek VPN Client), Draytek at home/remote site to VPN Server in the office and VPN Server to Draytek (other probably available as well). Draytek have some config examples of each on their site.
Look at this section of their site.

[RobCrezz]

If you are just wanting to "dial in" from your windows computer somewhere else use PPTP.

Bear in mind you wont be able to test it without connecting via another connection, and also you will need to know the public IP address of the draytek router.

[wjwren]

will give it a go, if i get stuck any piston headers willing to help me remotely? will pay for your time.

[wjwren]

[wjwren]

and when i connect with the draytek vpn i get "unknown error"

[lestag]

Not a draytek user, but.. It looks like you have encryption setup on the server for the pptp link , but not on the client? (set to no encryption)
ETA , also on the client you have no authentication set, but on the server you do PAP/CHAP

[RobCrezz]

Just use the built in Windows VPN client, set to PPTP.


You are trying to connect to it from a different internet connection, arent you?

[wjwren]

yes, my house to the office. Tried using pptp and also ipsec - on ipsec i get the error the l2tp connection attempt failed becuase the security layer encountered an error.

Any help please!

[wjwren]

draytek said it wont work unless i have a public ip address?

[e320dave]

wjwren said:

draytek said it wont work unless i have a public ip address?

The 172 address that you are using does not seem to be an Internet address. Therefore if the router is in the office plugged into the Internet and you are at home, it is unlikely they will ever talk. You will need to find out the Draytek's external address. If you have access to a PC behind it, you can go to www.whatismyip.com to find that out. Unfortunately Draytek do not do a Mac client so I cannot set mine up and share the config.

[e320dave]

wjwren said:

draytek said it wont work unless i have a public ip address?

The 172 address that you are using does not seem to be an Internet address. Therefore if the router is in the office plugged into the Internet and you are at home, it is unlikely they will ever talk. You will need to find out the Draytek's external address. If you have access to a PC behind it, you can go to www.whatismyip.com to find that out. Unfortunately Draytek do not do a Mac client so I cannot set mine up and share the config.

[e320dave]

wjwren said:

draytek said it wont work unless i have a public ip address?

The 172 address that you are using does not seem to be an Internet address. Therefore if the router is in the office plugged into the Internet and you are at home, it is unlikely they will ever talk. You will need to find out the Draytek's external address. If you have access to a PC behind it, you can go to www.whatismyip.com to find that out. Unfortunately Draytek do not do a Mac client so I cannot set mine up and share the config.

[Magic919]

Looks like am Internet address to me.

What's set under Remote Access Control?

[mattley]

That 172. address traces to Atlanta so I'd say that address is definitely incorrect.

[wjwren]

this is confusing. just spoke to my adsl provider who assures me that my 172. address is public and draytek dont no what they are talking about.

if i go to google and type in 'what is my ip address' i get the results 176.35.197.204

Edited by wjwren on Tuesday 18th June 17:23

[Magic919]

That is a different address.