< Knowledge Base

IPsec VPN from Windows to Vigor Router by Smart VPN Client

Published On: Jan 17, 2019 

Smart VPN Client is the official DrayTek VPN Client software. It supports a variety of VPN protocols. This document introduces how to set up the router as an IPsec VPN server, set up Windows Smart VPN Client in IPsec mode, and how to start the IPsec connection.

Vigor Router Setup

1. Go to VPN and Remote Access >> IPsec General Setup, enter Pre-shared Key and confirm it again, then click OK.

a screenshot of DrayOS IPsec General Setup

2. Go to VPN and Remote Access >> Remote Dial-in User, and click an available Index.

a screenshot of DrayOS Remote Dial-In VPN client list

3. Set up IPsec profile for the remote dial-in user:

  1. Enable this account
  2. Make sure IPsec Tunnel is enabled at Allowed Dial-in Type
  3. Click OK to save.
a screenshot of DrayOS Remote Dial-In VPN client setup

4. (Optional) Use Specify Remote Node to increase security by letting allow the connection from only the specified IP address and using a customized IKE Pre-Shared Key for this account (instead of general pre-shared key)

a screenshot of DrayOS Remote Dial-In VPN client setup

VPN Client Setup

5. Open Smart VPN Client on the VPN client, and click Profiles >> Add

a screenshot of Windows Smart VPN Client profile list

6. Set up VPN profile as follows

  1. Enter Profile Name
  2. Select IPSec Tunnel for Type
  3. Enter VPN Server's IP (the router's WAN IP) at Server Information
  4. At IP Property, input VPN server's LAN subnet at Remote Subnet and Remote Subnet Mask
  5. Choose Pre-shared Key at Authentication Method and input the same Pre-shared key as step 1.
  6. Click OK to save
a screenshot of Windows Smart VPN Client profile setup

Active the IPsec connection

7. Select the profile we just created at Active Profile, and switch on Active.

a screenshot of Windows Smart VPN Client Connection Status

8. Click OK to start dialing.

a screenshot of Windows Smart VPN Client Connection Status

9. Due to IPSec's settings, we need to initiate the IPsec connection by generating some traffic to the VPN side. Pinging the router's LAN IP address is a simple way to do this.

a screenshot of command prompt windows running ping

Network Administrator may also check the online VPN clients by going to VPN and Remote Access >> Connection Management.

a screenshot of DrayOS VPN Connection Management

Was this helpful?     


Related Articles