What do I have to do, that all traffic of a via IP-Sec connected teleworker is going through the VPN? Also surfing the www should work via the remote network (Vigor 2820). Any ideas?

in the vpn profile there is a "change to default route" towards the bottom of the profile

Surely this routes all 2820 internet traffic via the teleworker's internet connection?

If the teleworker is using Windoze IPSec, there is an option somewhere on the PC. For the life of me I cannot remember where. Try googling for "split tunnel XP VPN" or Vista or whatever, and then make sure you disallow split tunnelling.

doh! teleworker!!!!! my mistake!

Thank you for your answers so far.

I am using the Shrew VPN-client to connect via IP-Sec VPN to my Vigor2820. In the Shrew client under Policy the option "Obtain Topology Automatically or Tunnel All" is activated this normally should do the job, but I still can't surf the www via the remote network. While this option is activated I actually can't surf the web at all. Is there anything else to configure in The Vigor (Firewall etc).

Finally I found the solution and as always it is very simple after
you know how it works.

In the Shrew client configuration go to the tab "Name Resolution",
tick the box "Enable DNS" and enter a DNS Server Adress of
the provider used with the remote router into "DNS Server Address".
Now all host names will be resolved via the VPN-connection.