How to establish Host to LAN VPN with VPN matcher

Vigor router supports VPN matcher to establish VPN connection between VPN peers behind NAT since firmware version 3.9.2. The method is introduced in What is VPN Matcher and how to use it. The feature can be used not only on LAN-to-LAN VPN connections but also on Host-to-LAN VPN connections. This article is going to demonstrate how to build a Host-to-LAN VPN with VPN matcher and Smart VPN client(v5.3.0).

Go to https://vpn-matcher.draytek.com and login

1. Add router and PC to VPN matcher by their LAN MAC address.

add device

2. Copy the Router List Key

key

3. VPN matcher uses OpenVPN as VPN protocol for Host-to-LAN connection, therefore certificates for router and PC are required, please refer to part1~5 of this article to set up the OpenVPN server.

h2l profile server cert

4. Go to VPN and Remote Access>VPN Matcher Setup, enable it and enter VPN matcher username and Router List Key, then click OK.

matcher setup

5. Run Smart VPN Client, and Add a profile

  • Enable VPN matcher and enter Router List Key.
  • Click Get List to select the VPN server.
  • Enter OpenVPN username and password, and choose the certificates
  • svc setup svc setup svc setup

    6. Click Connect on Smart VPN client, then we can see the VPN status on both router and PC

    svc up vpn up

    Note: There is a network requirement, that the NAT type should be Cone NAT, such as Full cone NAT(one-to-one), Address-Restricted cone NAT or Port-Restricted cone NAT. Symmetric NAT is not supported, Vigor Router and Smart VPN client also provide detection function in VPN Matcher Setup.

    svc detect router detect

    Published On: Dec 31, 2019 

    Was this helpful?     


    Related Articles