DrayTek UK Users' Community Forum
Help, Advice and Solutions from DrayTek Users
Smart VPN client - SSL VPN problem
- calibre74
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 10
- Thank you received: 0
06 Sep 2018 22:31 #1
by calibre74
Smart VPN client - SSL VPN problem was created by calibre74
Hi,
I have 2 Draytek Vigor 2860s, almost identical configuration and same firmware (3.8.9.1). I am trying to dial in using the Smart VPN Client 4.3.4, again with the same settings. One of them connects successfully, the other doesn't. Both only have TLS 1.2 selected in the TLS/SSL Encryption Setup under the Management page. The one that fails will only work if all TLS options are selected (i.e. TLS 1.0, 1.1. and 1.2). I have tried using different SSL ports to no avail. Help!
I have 2 Draytek Vigor 2860s, almost identical configuration and same firmware (3.8.9.1). I am trying to dial in using the Smart VPN Client 4.3.4, again with the same settings. One of them connects successfully, the other doesn't. Both only have TLS 1.2 selected in the TLS/SSL Encryption Setup under the Management page. The one that fails will only work if all TLS options are selected (i.e. TLS 1.0, 1.1. and 1.2). I have tried using different SSL ports to no avail. Help!
Please Log in or Create an account to join the conversation.
- hornbyp
- Offline
- Big Contributor
-
Less
More
- Posts: 1323
- Thank you received: 0
07 Sep 2018 00:40 #2
by hornbyp
Replied by hornbyp on topic Re: Smart VPN client - SSL VPN problem
You could try Smart VPN Client V4.3.3.3 - see
here
for discussion of problems encountered with V4.3.4 ...
Are both 2860s "Remote" to you? The 2860 doesn't allow you to 'loopback' on its WAN port (even to a different LAN).
Failing that, my 'lack of detailed knowledge' approach, would be to examine the SYSLOG output of the two 2860s and see what is different during the session negotiations...
Are both 2860s "Remote" to you? The 2860 doesn't allow you to 'loopback' on its WAN port (even to a different LAN).
Failing that, my 'lack of detailed knowledge' approach, would be to examine the SYSLOG output of the two 2860s and see what is different during the session negotiations...
Please Log in or Create an account to join the conversation.
- calibre74
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 10
- Thank you received: 0
07 Sep 2018 07:37 #3
by calibre74
Replied by calibre74 on topic Re: Smart VPN client - SSL VPN problem
Thanks. Syslog shows nothing. The failing one doesn't even begin to negotiate a connection.
Both 2860s are remote, yes.
I have found version 5.0.0 of the Smart VPN client on Draytek's FTP site so will try that. I don't really want to go back to 4.3.3.3 due to the admin rights issue.
Both 2860s are remote, yes.
I have found version 5.0.0 of the Smart VPN client on Draytek's FTP site so will try that. I don't really want to go back to 4.3.3.3 due to the admin rights issue.
Please Log in or Create an account to join the conversation.
- anaglypta
- Offline
- Junior Member
-
Less
More
- Posts: 64
- Thank you received: 0
07 Sep 2018 09:50 #4
by anaglypta
Replied by anaglypta on topic Re: Smart VPN client - SSL VPN problem
I know this is really basic but, are you sure you have the SSL VPN service enabled on the router that isn't connecting:-
VPN and Remote Access > Remote access control > Enable SSL VPN Service.
SSL VPN requires this, and it's in a different menu to the SSL VPN settings.
John.
VPN and Remote Access > Remote access control > Enable SSL VPN Service.
SSL VPN requires this, and it's in a different menu to the SSL VPN settings.
John.
Please Log in or Create an account to join the conversation.
- calibre74
- Topic Author
- Offline
- Junior Member
-
Less
More
- Posts: 10
- Thank you received: 0
07 Sep 2018 09:52 #5
by calibre74
Replied by calibre74 on topic Re: Smart VPN client - SSL VPN problem
The SSL VPN is definitely enabled but only works if TLS 1.0 is enabled.
Please Log in or Create an account to join the conversation.
Moderators: Sami
Copyright © 2024 DrayTek