Draytek - LAN-To-LAN

[cpjitservices]

Hi all,

 

Im looking for some help with someone who knows drayteks better than I do.

 

Heres the down low... I have 2 Drayteks... I have setup a LAN-TO-LAN PPTP VPN. Which is connected and up. From PPTP Server (Draytek 2830) the VPN has the IP of 192.168.1.13. Which I cant ping from either side. Both routers show each others networks in the routing table. The VPN Client (2925) shows that 192.168.1.1 is via .13. which should be all well and good but cant ping anything from client side to server side.

 

Client is set to NAT on VPN profile, Server side is set to Routed on VPN profile.

 

Why cant I route over the VPN and talk to anything ?

 

Thanks in advance

[FN-GM]

Not familiar with Draytek specifically, but I wouldn't have it natted for the client. Any particular reason you did that please?

[cpjitservices]

Yep, I found a guide that specifically said set the client to NAT

 

Can soon be changed I guess.

[cpjitservices]

CHanged to ROute instead of NAT on client and can ping a PC on the server side, but cant ping the Server side Routers LAN Address...

[FN-GM]

Is the PC you can ping and the router IP address in the same subnet?

[cpjitservices]

From the router that is the client side its on a 10.*.*.* network, from the router itself if I ping 192.168.1.10 (example IP of PC sat on VPN) I can ping it...

 

But I cant ping the VPN Servers IP (192.168.1.1)

[FN-GM]

Im struggling to image this. Can you knock-up a rough drawing please?

[cpjitservices]

Its like this

 

DRAYTEK 2830 (PPTP Server)

LAN= 192.168.1.0 /24

Routing Table:

C~ 192.168.1.11/ 255.255.255.255 directly connected VPN-1

C~ 192.168.1.0/ 255.255.255.0 directly connected LAN1

S~ 10.1.1.0/ 255.255.255.0 via 192.168.1.11 VPN-1

 

Draytek 2925 (PPTP Client)

LAN= 10.1.1.0 /24

Routing Table:

C~ 192.168.1.1/ 255.255.255.255 directly connected VPN-1

S~ 192.168.1.0/ 255.255.255.0 via 192.168.1.1 VPN-1

C~ 10.1.1.0/ 255.255.255.0 directly connected LAN1

 

I can ping 192.168.1.11 on both sides.

Edited August 11, 2016 by cpjitservices

[FN-GM]

You should use separate subnets on both sides. This will cause you issues.

[cpjitservices]

thats what Im doing ive changed the PPTP client IP side to 10.1.1.1 on 24 mask... PPTP server is 192.168.1.1 /24.

 

The VPN Server has created its own DHCP address for the VPN connection I think

[AndyB4rks]

@cpjitservices

 

Did you ever solve this and if so how as we have the same issue

[cpjitservices]

@cpjitservices

 

Did you ever solve this and if so how as we have the same issue

 

No I dont believe we did, after trying a manner of different firmware upgrades we could not get it working correctly.

[AndyB4rks]

Thanks for letting me know, atleast I know to not waste my time on it anymore.

 

Did you use something else in the end to do the job?

[cpjitservices]

Thanks for letting me know, atleast I know to not waste my time on it anymore.

 

Did you use something else in the end to do the job?

 

Yes, PfSense with OpenVPN.