Hi forum,

yesterday I tried the Smart VPN Client and got really sad. This peace of software is so unsexy and erroneous that it gives me the feeling of having buyed a really cheap consumer device for my customer. At least it is able to connect to Vigor 2860 over the internet. But I cannot RDP to server, ping is neither possible. Obviously this is a routing and/or gateway problem, but how to fix it?

In detail:

Corporate Network:
Subnet 192.168.0.x, file server 192.168.0.1, Vigor 192.168.0.10

Home office PC (W7 Prof):
IP address PC 192.168.178.10, IP address of VPN device after connect 192.168.0.200

The problem: From home office PC I can ping 192.168.0.10, when connected, but not 192.168.0.1. So I cannot RDP to server.

On VPN client I tried to set "use remote gateway" without luck. I tried it with PPTP and SSL VPN, both connect, but no ping to server. Additionally I entered the following on the command line:

route ADD 192.168.0.0 MASK 255.255.255.0 192.168.0.200 METRIC 1 IF 48 as well as
route ADD 192.168.0.0 MASK 255.255.255.0 192.168.0.10 METRIC 1 IF 48

To me it's strange that there is absolutely nothing to find in Draytek manuals. Can someone please point me into direction?

Thanks and regards,
Stefano

Hi never used VPN but seen maybe first your post just to point some guides from draytek if helps you
http://www.draytek.com/index.php?option=com_k2&view=itemlist&task=category&id=90:vpn&Itemid=293&lang=en
Also latest firmware is here if you have time to load it because it needs the *RST* file (will delete all previous settings
ftp://ftp.draytek.com/Vigor2860/v3.7.3.3/

Hi,

thanks a lot for input, but latest firmware was already installed and these documents I've already worked through, they don't deal with this problem. There is one which seems to point in that direction - "Change default route to specified VPN tunnel" - but it does not help, beside the fact that I need standard split tunnel.

Any other idea?

Thanks again,
Stefano

Since I can ping Vigor itself (on 192.168.0.10), is it possible that I have to set any additional firewall rule on the router to let pass VPN traffic into the rest of corporate network? Could it be that Vigor blocks traffic on it's own VPN?