Hi - just installed a 2820n at a remote location. Can VPN to it fine (as teleworker), and then ping all addresses on remote subnet. However I am unable to open up the web mgmt GUI for the 2820n (even tho I can ping it on its LAN IP 192.168.1.1).

Remote mgmt of the router is also not working (I guess I haven't checked remote mgmt). Does this option control access to web GUI for VPN users also? Now I'm stuck cos I have to go back to site to be able to set remote mgmt option.

Also when I telnet to 192.168.1.1 (while VPN connected) I get password prompt but it doesn't accept the web GUI password!

Any suggestions?

Hi the remote management should not affect you trying to connect into the GUI via VPN, when you type in the LAN IP address of the router does it just time out? also have you tried https://192.168.1.1

cheers,

pthornhill wrote:
Also when I telnet to 192.168.1.1 (while VPN connected) I get password prompt but it doesn't accept the web GUI password!

They are the same.

FWIW, what is your teleworker's normal LAN IP/subnet?

Normal subnet is 192.168.0.x so source/destination subnets are different. I had changed the router GUI http port to 59999 and if I'm plugged in locally on Draytek's subnet (192.168.1.x) I can access GUI on http://192.168.1.1:59999 and it works perfectly.

Web mgmt is now enabled and I can access the router via http://dyndnsname:59999 and it works fine.

But if I VPN to Draytek I still can't access on http://192.168.1.1:59999 - get page cannot be displayed. Access to web GUI's for WAPs etc all work fine while VPN'd.

I'm stumped! Telnet still not accepting GUI password while connected on VPN either

I am curious. How is your teleworker connecting to the internet? Is it via a router then an ADSL or Cable modem.

Normally when setting up a VPN I suggest keeping the Draytek LAN clear of the following subnets:
192.168.0.0/24
192.168.1.0/24
192.168.10.0/24
192.168.100.0/24
as I've see these used by other routers or modems for their LAN connections. I've also seen mentioned 192.168.2.0/24 (which would knacker me!) but its not been a problem to me yet.

Are you able to change your LAN subnet at all, avoiding the ones I have mentioned above?