EdgeRouterX - Draytek - Draytek VPN issues

hobbit666

@Dashrender How do you mean "Allowing" all I've done with the "shop" network is set-up the VPN and it worked. Tried to do the same with the WHS Site and it doesn't

Dashrender

I haven't setup a VPN tunnel on my EdgeRouter stuff yet, but by default, when you setup tunnels, you have to explicitly say what traffic exists on the other side of the tunnel so it knows to route it over the tunnel, otherwise it routes the traffic to the internet interface.

Your Draytek's might have some type of autoconfig that takes care of that for you, some type of routing protocol. I'm guessing you could set that up on the EdgeRouter as well, but it's probably not there by default.

hobbit666

@Dashrender any idea how to check the config?

That was what I was hoping to happen when I added the subnet to the VPN on EdgeRouter like the DrayTek

hobbit666

Downloaded the Config file of the EdgeRouter and it has this :-

peer OFFICEIP{
                authentication {
                    mode pre-shared-secret
                    pre-shared-secret MySecert
                }
                connection-type initiate
                description LSF
                ike-group FOO1
                local-address WHS-IP
                tunnel 1 {
                    allow-nat-networks disable
                    allow-public-networks disable
                    esp-group FOO1
                    local {
                        prefix 192.168.123.0/24
                    }
                    remote {
                        prefix 10.0.1.0/24
                    }
                }
                tunnel 2 {
                    allow-nat-networks disable
                    allow-public-networks disable
                    esp-group FOO1
                    local {
                        prefix 192.168.123.0/24
                    }
                    remote {
                        prefix 172.20.0.0/24
                    }
                }
            }

Dashrender

You should sanitize your post

hobbit666

@Dashrender is that better

JaredBusch

From my driving on the road point of view that configuration looks correct

hobbit666

@JaredBusch stop reading your phone while driving!

JaredBusch

@hobbit666 said in EdgeRouterX - Draytek - Draytek VPN issues:

@JaredBusch stop reading your phone while driving!

Why?

JaredBusch

I used to read books while driving

Mike Davis

@hobbit666 He means change your pre-shared-secret in your config.

Dashrender

@Mike-Davis said in EdgeRouterX - Draytek - Draytek VPN issues:

@hobbit666 He means change your pre-shared-secret in your config.

Right - you don't want the world to know the password for your VPN.

JaredBusch

@Dashrender said in EdgeRouterX - Draytek - Draytek VPN issues:

@Mike-Davis said in EdgeRouterX - Draytek - Draytek VPN issues:

@hobbit666 He means change your pre-shared-secret in your config.

Right - you don't want the world to know the password for your VPN.

12345

hobbit666

@Dashrender @Mike-Davis oops but that's not the final one it's only while I test it'll be a random one once I got it working
*Changed anyway

Dashrender

@hobbit666 said in EdgeRouterX - Draytek - Draytek VPN issues:

@Dashrender @Mike-Davis oops but that's not the final one it's only while I test it'll be a random one once I got it working
*Changed anyway

Ok, at least there was an understanding to your post.

Dashrender

So what happens when you try to ping the main network VLAN? do a tracert and tell us the results.

hobbit666

Ping and tracert from the working Shop site

hobbit666

Ping and tracert from not working WHS Site

JaredBusch

Did you set up the VPN in the GUI? Did you check the box to create the firewall rules?

hobbit666

@JaredBusch Yeah did it in the GUI and the "Automatically open firewall and exclude from NAT" was ticked. This is what i'm wondering maybe I should remove it and try adding it from the CLI instead in case something hasn't been applied correctly from the GUI.
I have posted this on UBNT site but got nothing from that.

Unsolved EdgeRouterX - Draytek - Draytek VPN issues