Solutions >

Work from Home Solution with VPN & App QoS

  • VPN
  • App QoS

Understanding Working from Home VPN Solutions in 5 Steps

Work from Home VPN Solution in 5 steps

VPN Topology for Working from Home

VPN Topology

Working from Home? Or on a Business Trip?

Suggested Built-in VPN_Type
Suggested Built-in VPN Type

Built-in VPN type is natively supported by the OS and no Smart VPN Client required.

OS Suggested VPN Type Matched VPN in DrayTek Router Security Advisory FAQ
Windows For V2960 & V3900 IKEv2 IKEv2 EAP For IPsec, use AES-SHA256 security method for highest security and best performance! link
For DrayOS Models L2TP/IPsec L2TP/IPsec link
Android For All Vigor Router Models IPsec XAuth IPsec XAuth link
macOS Cisco IPsec IPsec XAuth link
iOS IPsec IPsec XAuth link
Alternative VPN Type

For all clients, download Smart VPN Client for alternative VPN type.

OS VPN Type in Vigor Router Note FAQ
Windows For All Vigor Router Models SSL VPN or OpenVPN Download Smart VPN Client for free to dial SSL VPN and OpenVPN link
Android link
macOS link
iOS link

Download Smart VPN Client from Here

Connecting Between HQ and Branches?

Branch offices dial LAN-to-LAN VPN to the HQ to have secure access to the company resources.

If HQ dials a LAN-to-LAN VPN to the cloud server, branches can also access to the cloud server via HQ.

LAN-to-LAN VPN
Suggested LAN-to-LAN VPN Protocol

IPsec tunnel with AES-SHA256 security method for highest security and best performance

Broadband VPN Router

Single WAN Dual WAN Multi WAN
Vigor2133 Series Vigor2133 Vigor2135 Series Vigor2135 Vigor2915 Series Vigor2915 Vigor2926 Series Vigor2926 Vigor2927 Series Vigor2927 Vigor2952 Vigor2952 Vigor2952P Vigor2952P Vigor2962 Vigor2962 Vigor3220 Vigor3220 Vigor3910 Vigor3910
WAN 1x Fixed GbE WAN
(or 1x SFP for F model)
1x Fixed GbE WAN
(or 1x SFP for F model)
2x GbE WAN 2x GbE WAN 2x GbE WAN 2x GbE WAN
(including 1 SFP WAN as option)
2x GbE WAN
(including 1 SFP WAN as option)
1x 2.5G WAN
+ 1x GbE/SFP Combo
+ 2x GbE, RJ-45
(up to 2 WANs)
4x GbE WAN 2x 10G SFP+
+ 2x 2.5G WAN
4x GbE
IPsec VPN Performance 70 Mbps 150 Mbps 200 Mbps 80 Mbps 290 Mbps 200 Mpps 200 Mpps 800 Mpps 200 Mpps 3.3 Gbps
SSL VPN Performance 40 Mbps 100 Mbps 150 Mbps 45 Mbps 120 Mbps 90 Mbps 90 Mbps 500 Mbps 90 Mbps 1.7 Gbps
Max.concurrent VPN Tunnels 2 2 16 50 50 200 200 200 200 500
Max.concurrent OpenVPN + SSL VPN 2 2 8 25 25 50 50 50 50 200

DSL VPN Router

Single WAN Dual WAN
Vigor2762 Series Vigor2762 Vigor2765 Series Vigor2765 Vigor2862 Series Vigor2862 Vigor2865 Series Vigor2865
WAN 1x RJ-11 DSL WAN (VDSL2 30a)
or
1x GbE WAN
1x RJ-11 DSL WAN (VDSL2 35b)
or
1x GbE WAN
1x RJ-11 DSL WAN (VDSL2 30a)
+
1x GbE WAN
1x RJ-11 DSL WAN (VDSL2 35b)
+
1x GbE WAN
IPsec VPN Performance 70 Mbps 200 Mbps 85 Mbps 300 Mbps
SSL VPN Performance 40 Mbps 80 Mbps 45 Mbps 130 Mbps
Max.concurrent VPN Tunnels 2 2 32 32
Max.concurrent OpenVPN + SSL VPN 2 2 16 16

More Information

Don’t Want to Change the Existing Office Network?

Keep your current office network, and simply put a Vigor Router in your LAN to work as VPN server.

1. Connect Vigor Router’s WAN port to DMZ port on your company gateway router (or setup port forwarding for VPN to pass to Vigor Rotuer, e,g., port 443 for SSL VPN).

2. Download Smart VPN Client on your device. Select VPN type, and either add your office network to “more route” or enable Change Default Route.

3. Done! Start working from home!

It works for LAN-to-LAN VPN as well! See more at Single-Arm VPN

dial vpn with current topology
VPN Matcher

DrayTek VPN Matcher

VPN Server Behind NAT Made Easy

Some ISPs assign private IP addresses for a multi-site company, and most 4G providers offer private IP, too.

VPN Server with private IP behind NAT makes branches unable to establish a LAN-to-LAN VPN tunnel.

To overcome the limitations, register all your VPN Vigor Routers to DrayTek VPN Matcher, then VPN Matcher will help exchanging the connection information between VPN Server and branches.

With the connection information, VPN tunnel can be established successfully.

Improving Experience for Business Critical Apps

VoIP First

VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.

Improve Experience for Business-Critical Apps

Select your business critical apps, and easily put them into QoS classes.

Flexible Bandwidth Allocation

Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.

Set Up QoS in 3 Steps

1

Define your WAN bandwidth and operational direction.

2

Specify the business critical apps and their QoS classes.

3

Reserve corresponding bandwidth ratio for business critical apps.

Real-time Bandwidth Allocation Monitoring

With simple settings, router starts to flexibly allocate bandwidth to the business critical apps.

QoS status

Compatible Router

Dual DSL WAN Dual Broadband WAN
Vigor2862 Series Vigor2862 Vigor2865 Series Vigor2865 Vigor2926 Series Vigor2926 Vigor2927 Series Vigor2927
WAN 1x RJ-11 DSL WAN (VDSL2 30a)
+
1x GbE WAN
1x RJ-11 DSL WAN (VDSL2 35b)
or
1x GbE WAN
2x GbE WAN 2x GbE WAN
NAT Throughput 500 Mbps 800 Mbps 500 Mbps 800 Mbps
Max. NAT Throughput with QoS enabled 300 Mbps 1.3 Gbps 300 Mbps 1.8 Mbps
Max. NAT Sessions 50k 60k 50k 60k
Firmware Supported Since f/w 3.9.4 Since f/w 4.2.2 Since f/w 3.9.4 Since f/w 4.2.2

Work from Home Solution
with VPN & App QoS

With the current effort to slow the spread of COVID-19, businesses are looking for ways to operate by having employees work from home. DrayTek provides a work from home solution with VPN and improved App QoS to meet your needs.