Hi,

Anyone else got a pair of 2850's linked OK via an IPSEC VPN?

Setup as follows:

SITE A 2850 <---> BT Broadband <--Internet-> BT Infinity <---> 2850 SITE B (plugged straight into the BT socket - not using their modem)

I can get PPTP+MPPE to work, but not IPSEC.

As a test, I HAVE successfully got IPSEC working from SITE C (with a Draytek 2820) to SITE B, so I am wondering whether it's either a 2850-to-2850 specific issue or something up with the BT broadband at SITE A. I found some notes about switching off BT's DNS helper functionality via their web site and I did that last week.

The 2850's are on firmware 3.6.3_RC1, which was sent to me by Draytek to fix a reboot loop problem with HTC One-X phones on wifi.

does the VPN not work if you set it up as per this guide? http://www.draytek.com/user/SupportAppnotesDetail.php?ID=154

Nope!

Spent two days on this - going mad!

try deleting and remaking the profiles, also reboot the routers but I'm guessing you've tried that many times

Hi everyone,

Thanks for the suggestions. It turned out that IPSec passthrough had been enabled by accident on one of the routers!

A real forehead slapping moment.

ah I hate when that happens, at least it's sorted though

If you think it might be happening in future, get the output of "log -ct" and "lot -wt" through telnet, if you don't see anything ipsec related then you can tell it's not sending or receiving quite easily.