Solved
Incorrect understanding of

"Peer ID/VPN Client IP" - which I sent to what I wanted the client ip on this (VPN server) network to be

Set to Client WAN ip and VPN OK

---

The log on the Vigor 2920 shows

incoming call failed wrong CLID 192.168.3.51(heart shape)dr1 for dr1
login failed

Have tried idea of adding 192.168.3.51 to user name on 2920
(to make 192.168.3.51\dr1) but field too short.

Thanks for any help