+ Post New Thread
Results 1 to 8 of 8
General Chat Thread, VPN in General; Anyone got any useful guides for setting VPN up, or understanding it a bit more. Trying to setup VPN access ...
  1. #1
    ahuxham's Avatar
    Join Date
    Apr 2008
    Posts
    1,122
    Thank Post
    76
    Thanked 138 Times in 109 Posts
    Rep Power
    30

    VPN

    Anyone got any useful guides for setting VPN up, or understanding it a bit more.

    Trying to setup VPN access on our Vigor 3300 router, but haven't the foggiest how it all works and what to use.

    It supports PPTP L2TP and IPSEC.

  2. #2

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,476
    Thank Post
    1,305
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    198
    Ive only ever used OpenVPN.

    Its a doddle to set up IMO.

  3. #3


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,448
    Thank Post
    865
    Thanked 839 Times in 662 Posts
    Rep Power
    194
    What sort of VPN?
    Site-to-Site (use IPSEC)
    Point-to-site (use L2TP)

    Do *not* use PPTP. Ever. It sucks.

    I'm not familiar with the vigor routers, but I can probably help with general questions like "What do i need to put in setting X"

  4. #4
    ahuxham's Avatar
    Join Date
    Apr 2008
    Posts
    1,122
    Thank Post
    76
    Thanked 138 Times in 109 Posts
    Rep Power
    30
    Quote Originally Posted by tom_newton View Post
    What sort of VPN?
    Site-to-Site (use IPSEC)
    Point-to-site (use L2TP)

    Do *not* use PPTP. Ever. It sucks.

    I'm not familiar with the vigor routers, but I can probably help with general questions like "What do i need to put in setting X"
    L2TP at your estimate (PC-to-SITE or MobileDevice-to-SITE)

    Draytek actually have a Vigor 3300 demo site, where you can mess around with its exact configuration panel on the interweb.

    DrayTek V3300 Advanced Router :: Administration

    Which is always nice and dandy right? (Bit slow, its hosted in Taiwan)

  5. #5


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,448
    Thank Post
    865
    Thanked 839 Times in 662 Posts
    Rep Power
    194
    DrayTek V3300 Advanced Router :: Administration

    OK... would likely stick w/ chap as default, but then when it works, try MSCHAPv2
    Stick with local users.
    If you are ever going to have many (5+) users, ditch the draytek

    Cant quite see where to set up usernames though?

    Once you're done, you will need to get a windows box outside the draytek, and then create a new connection in network connections, of type VPN. It will auto-negotiate lt2p/pptp, but best set it manually. Looks like the draytek is PSK rather than certificate based, so should be no need for any of that.

  6. Thanks to tom_newton from:

    ahuxham (29th August 2008)

  7. #6
    ahuxham's Avatar
    Join Date
    Apr 2008
    Posts
    1,122
    Thank Post
    76
    Thanked 138 Times in 109 Posts
    Rep Power
    30
    Quote Originally Posted by tom_newton View Post
    DrayTek V3300 Advanced Router :: Administration

    OK... would likely stick w/ chap as default, but then when it works, try MSCHAPv2
    Stick with local users.
    If you are ever going to have many (5+) users, ditch the draytek

    Cant quite see where to set up usernames though?

    Once you're done, you will need to get a windows box outside the draytek, and then create a new connection in network connections, of type VPN. It will auto-negotiate lt2p/pptp, but best set it manually. Looks like the draytek is PSK rather than certificate based, so should be no need for any of that.

    Thanks for that Tom. Clear guidance! Just what I needed. It's unlikely to be more than 3 of us, with max 3 online at the same time, however I doubt it, the upload/download of that line is pants as its not leased.

  8. #7

    Join Date
    Jul 2005
    Location
    Rugby
    Posts
    432
    Thank Post
    17
    Thanked 66 Times in 61 Posts
    Rep Power
    34
    I set up a Vigor 3300V earlier this year using the guides available at Support Center -- Application Notes.

    If you're stuck with anything give me a shout, i've got it working nicely with various xp and vista clients.

    Matt

  9. #8


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,448
    Thank Post
    865
    Thanked 839 Times in 662 Posts
    Rep Power
    194
    L2TP is ok... not the worst for bandwidth wasting, you will find you can do remarkably well with a couple of users on a DSL line. Can easily get 5 or 6 VoIP conversations, for example.

    Just watch which protocols you use.

    L2TP has 2 options - "gateway mode" where the remote gateway is used, and ALL traffic goes down the tunnel, or "split" where only traffic destined for the private net is tunneled. The latter is less secure (you're effectively making the l2tp client part of the perimeter) but means extraneous activity doesn't swipe bandwidth. If your clients are in the hands of trustworthy, intelligent users not running as admin, the split mode may be the best option. It is a client-side parameter - i believe remote gw is the default.

SHARE:
+ Post New Thread

Similar Threads

  1. VPN
    By Edu-IT in forum Windows
    Replies: 1
    Last Post: 23rd July 2008, 02:39 PM
  2. Linux and VPN
    By Richie1972 in forum *nix
    Replies: 9
    Last Post: 19th May 2008, 09:58 PM
  3. SSL VPN
    By stevegwernyfed14 in forum Wireless Networks
    Replies: 12
    Last Post: 27th November 2007, 10:42 AM
  4. VPN in Vista
    By FN-GM in forum Windows Vista
    Replies: 2
    Last Post: 15th July 2007, 04:54 PM
  5. VPN +DHCP
    By Dos_Box in forum Wireless Networks
    Replies: 7
    Last Post: 30th September 2005, 01:14 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •