1. IKEv2 VPN between Microsoft Azure and Vigor Router

This article introduces how to set up IPsec tunnel between Microsoft Azure Server and Vigor Router in Dynamic Routing mode.


2. IKEv2 between NordVPN and Vigor Router

DrayTek's PPTP and L2TP over IPsec VPN have always been compatible with NordVPN - a popular cloud VPN server. Since firmware version 3.9.0, Vigor Router also supports dialing out an IKEv2 EAP VPN tunnel to NordVPN server. This article introduces how to create IKEv2 EAP VPN tunnel from Vigor Router to NordVPN server in this document.


3. OpenVPN Setup on Vigor Router with XCA

In this article, we will use XCA, a free Certificate Authority (CA) software, to generate and manage the server and client certificate that required for OpenVPN configuration.


4. IPsec VPN between Google Cloud Platform and Vigor Router

This article demonstrates how to establish a VPN connection between Vigor Router and the Google platform.


5. L2TP over IPsec VPN from Ubuntu to Vigor Router

This article demonstrates how to set up Vigor Router as VPN server, especially for Ubuntu, and how to establish an L2TP over IPsec VPN from Ubuntu (16.04) to the private network of Vigor Router.


6. Prioritize VPN Traffic by QoS

This article demonstrates how to set up Quality of Service (QoS) to reserve an amount of bandwidth for the VPN traffic all the time, in order to ensure the VPN performance.


7. Choose the Best VPN Protocol

A list of the VPN protocols which Vigor Router offers and their relative security strength and performance, so you can decide which VPN protocol is best for your network.


8. IPsec Xauth from Android to Vigor Router

IPsec is very secure and delivers great performance, and since 2018, Vigor Router also provides IPsec Xauth. If you are not comfortable with every VPN client using the same pre-shared key, you can use IPsec Xauth instead. IPsec Xauth authenticates the VPN clients not only by a pre-shared key but also a unique username and password. This article demonstrates how to set up Vigor Router as a VPN server for IPsec Xauth clients, and the configuration required on an Android device to establish the VPN.


9. IPsec Xauth from macOS to Vigor Router

IPsec is very secure and delivers great performance, and since 2018, Vigor Router also provides IPsec Xauth. If you are not comfortable with every VPN client using the same pre-shared key, you can use IPsec Xauth instead. IPsec Xauth authenticates the VPN clients not only by a pre-shared key but also a unique username and password. This article demonstrates how to set up Vigor Router as a VPN server for IPsec Xauth clients, and the configuration required on macOS to establish the VPN


10. IPsec Xauth from iOS to Vigor Router

IPsec is very secure and delivers great performance, and since 2018, Vigor Router also provides IPsec Xauth. If you are not comfortable with every VPN client using the same pre-shared key, you can use IPsec Xauth instead. IPsec Xauth authenticates the VPN clients not only by a pre-shared key but also a unique username and password. This article demonstrates how to set up Vigor Router as a VPN server for IPsec Xauth clients, and the configuration required on iOS to establish the VPN


11. IKEv2 VPN with EAP authentication from iOS to Vigor Router

DrayOS support IKEv2 with EAP authentication since firmware version 3.9.0, Vigor3900 and Vigor2960 support it since firmware version 1.4.0. It can make IKEv2 VPN even more secure by additional username and password authentication and certificate verification. This article demonstrates how to create a self-signed certificate for server authentication, set up Vigor Router an IKEv2 VPN server, and how to establish a connection from iOS.


12. IKEv2 VPN with EAP Authentication from macOS to Vigor Router

13. Set Up Vigor3900 as an OpenVPN Server

Vigor3900 and Vigor2960 support OpenVPN since firmware version 1.4.0. This article demonstrates how to set up Vigor3900 and Vigor2960 as an OpenVPN server for remote dial-in clients


14. IPsec VPN between Zyxel VMG and Vigor Router

This application note demonstrates how to establish an IPsec VPN tunnel between a DrayTek Vigor router and a Zyxel VMG router.


15. DHCP Relay over VPN

Vigor router can act as a DHCP Relay Agent forward the DHCP requests to the existing DHCP server, even if the DHCP server is on the remote network connecting to the router by the VPN. Below are the necessary configurations.


16. IKEv2 VPN from iOS to Vigor Router

This article demonstrates how to set up Vigor Router as a VPN server for IKEv2 VPN and how to start the VPN from an iOS device.


17. IKEv2 VPN from macOS to Vigor Router

This article demonstrates how to set up the Vigor router as a VPN gateway for Remote Dial-in IKEv2 VPN connections, especially from macOS. We will show the necessary configuration of the router and the IKEv2 VPN setup on macOS as well.


18. GRE Tunnel between Teltonika RUT950 and DrayTek

Generic Routing Encapsulation is a simple IP packet encapsulation protocol. A GRE tunnel is used to send IP packets from one network to another, without being parsed by any routers in between. This article demonstrates how to set up a GRE tunnel between Teltonika RUT950 router and a Vigor Router.


19. Set Up IKEv2 VPN between DrayTek Routers

Developed from IKEv1, IKEv2 is a new VPN protocol and has lots of improvements than the previous version. Compare to IKEv1, IKEv2 is more stable, it supports the latest cipher which makes the connection more secure, and takes a shorter time to establish, and by removing the point-to-point protocol, IKEv2 takes a shorter time to establish the connection.

This article demonstrates how to establish an IKEv2 VPN between two Vigor Routers.


20. IPsec VPN between Cisco RV Series and DrayTek

This is an instruction of how to establish IPsec LAN-to-LAN VPN between a Cisco RV router and a DrayTek router.


21. PPTP VPN from Ubuntu to Vigor Router

This article demonstrates how to set up Vigor Router as a PPTP VPN server for Ubuntu, and how to establish a PPTP VPN from Ubuntu to the private network of Vigor Router.


22. Enable Server Authentication for SSL VPN

23. SSL VPN from iOS to Vigor Router

This article demonstrates how to set up the Vigor Router as an SSL VPN gateway to allow Internet clients, especially iPhones and iPads, to access the local network by an SSL VPN tunnel. In the article, we show the configuration required for the router, as well as how to start the SSL VPN connection from iOS using SmartVPN, the free VPN client app provided by DrayTek.


24. Establish 2 IPsec VPNs for Load Balancing

For routers with multiple WAN interface, VPN trunk allows two VPN connections destined to the same remote network and VPN traffic to be balanced across the two connections. This article is going to demonstrate how to establish two IPsec VPN between two Vigor Routers and set up VPN trunk for load balancing.


25. SSL VPN from macOS to Vigor Rouer

26. L2TP over IPsec VPN from macOS to Vigor Router

This article demonstrates how to set up Vigor Router as a VPN server for L2TP over IPsec VPN and how to start the VPN from macOS.


27. IPsec Tunnel between Cyberoam and DrayTek

This article demonstrates how to establish IPsec VPN tunnel between Cyberoam router and Vigor router.


28. IPsec VPN between SonicWALL and Vigor Router

This article demonstrates how to configure Site-to-Site IPsec VPN between a SonicWALL NSA250 and Vigor Router.


29. Assign a Fixed IP Address to Remote Dial-in VPN Clients

By default, Vigor Router will dynamically assign an IP address from its LAN DHCP IP pool to the remote dial-in VPN clients. To take more control of the client activities, the network administrator may use a static IP address for the VPN clients. The configuration below shows how to assign a fixed IP address to remote dial-in VPN clients.


30. IPsec Tunnel between two Vigor Routers Using the Same IP Subnet

This article shows how to configure LAN-to-LAN VPN between two Vigor Routers which use the same local IP range. The problem of building VPN tunnels to another router that uses the same IP range is that there will be two routes to the same IP subnet that conflicts with each other. If neither of them can change the IP subnet, the solution is to translate the local IP to a un-used range for the VPN connection. Below describes how to do that on Vigor Routers.


31. SSL VPN from Android Phones to Vigor Router

This article demonstrates how to set up the Vigor Router as an SSL VPN gateway to allow Internet clients, especially Android Smartphones, to access the local network by an SSL VPN tunnel. In the article, we show the configuration required for the router, as well as how to start the SSL VPN connection from Android using SmartVPN, the free VPN client app provided by DrayTek.


32. IPsec Tunnel in Main Mode between DrayTek Routers

This article introduces how to set up IPsec Tunnel in Main Mode between two Vigor Routers. Main Mode requires both the VPN peers have a static IP address because it uses the IP address as well for authentication. Before the VPN setup, make sure the routers are connected to the Internet and find out the WAN IP address they have. The following instruction shows the configuration necessary for VPN Server The router awaits connection requests) and VPN Client (the router initiates the connection) to build an IPsec VPN.


33. IPsec Tunnel in Aggresive Mode between DrayTek Routers

IPsec VPN in Main mode use the IP address as peer identity (ID) for Peer authentication; therefore, it's not a solution if both the VPN peers don't have static IP addresses. In such cases, can establish the IPsec VPN in Aggressive mode instead. This document introduces how to set up IPsec Tunnel in Aggressive mode between two Vigor Routers.


34. Troubleshoot Unstable VPN

If the VPN tunnel disconnects frequently, you may take the following steps to troubleshoot.


35. L2TP over IPsec from Windows 10 to Vigor Router

This document introduces how to set up Vigor Router as a VPN server for L2TP over IPsec, as well as how to use Windows 10 built-in VPN feature to establish a VPN to Vigor Router and access the Vigor Router's LAN network.


36. Authenticate Remote Dial-In VPN Clients with AD/LDAP Server

This article explains the configuration of using an external LDAP/AD server for VPN authentication.


37. IPsec VPN between FortiGate and DrayTek

This article shows how to establish an iPsec VPN tunnel between FortiGate Router and Vigor Router.


38. Back Up a Leased Line by VPN

If both ends of the leased line have a VPN router and are connecting to the Internet, we can create a VPN tunnel between them to add a failover connection. This article shows how to set up a VPN for the routing LAN subnet and make it active only when the primary line fails.


39. SSL VPN from Windows to Vigor Router

This article demonstrates how to set up the Vigor Router as an SSL VPN gateway to allow Internet clients, especially Windows PC, to access the local network by an SSL VPN tunnel. In the article, we show the configuration required for the router, as well as how to start the SSL VPN connection from a PC using Smart VPN Client, the free VPN client app provided by DrayTek.


40. GRE Tunnel between Cisco and DrayTek Router

This document introduces how to set up a GRE tunnel between a Cisco and a Vigor Router


41. VPN Troubleshooting by Syslog

Some message you might see in Syslog when VPN is not connecting and their cause.


42. Access Multiple Subnets Through the Same VPN Tunnel

This article demonstrates how to configure LAN-to-LAN VPN profile to access more LAN subnets on the remote router from the same tunnel. Suppose there is already a LAN-to-LAN VPN tunnel established between the local network and one of the LAN subnets on the remote router, to access a second LAN subnet via the same VPN tunnel, we only need to add another remote network IP and Mask in the VPN profile.


43. Authenticate Remote Dial-In VPN Clients with RADIUS Server

If you already have a RADIUS server on your network, instead of using the router's local user database, you may also authenticate the Remote Dial-In PPTP/SSL VPN clients by the external server. This article explains how to configure Vigor Router to use an external RADIUS server for VPN authentication.


44. Add a Failover VPN Connection

This article demonstrates how to use VPN trunk in backup mode. With this feature, we may add a backup VPN profile to the remote site's secondary WAN, and when remote site's primary WAN goes down, the router can establish a VPN to the secondary WAN automatically.