Quantcast
Channel: Draytek
Viewing all 401 articles
Browse latest View live
↧

Draytek router dropping all traffic for blocks of 10 minutes

September 19, 2017, 4:46 am
$
0
0

We're having a really strange issue with a Draytek Vigor 2860n router at one of our remote offices.

It's connected to a managed internet access which presents it's connection through a managed Cisco router.

Periodically we are seeing what at first looked like an internet outage for blocks of exactly 10 minutes at a time, e.g. 7.10am till 7.20am. During this time, if we connect a laptop directly to the managed Cisco router, i.e. bypassing the vigor, we get full internet, so we know the line is up and working.

we've also eliminated internal network issues by disconnecting everything from the vigor's lan ports during the "outage" - but it seems that the vigor is just ignoring all traffic for the 10 minute period.

the times seem fairly random, but mostly in the morning between 7am and 12.

It gets stranger.

Pinpointing the issue as the router, we...

↧
Search

Draytek Vigor 2860 - Monitor source/destination of packets

September 20, 2017, 3:03 pm
$
0
0

So I have had a scary letter from my ISP saying that they are seeing some behaviour on my network and unless I do something about it they are going to cut me off, just to give you an idea here is what they are sending:

So the parts I have crossed out are my static IP address. There are a bunch more of these, some going to what appear to be class A private network IP addresses, others to random internet addresses....

I have no idea what this is so I am taking the following precautions between now and the weekend...

- Running MBAM on all machines,
- Disconnecting wireless networks (it is a business so we have staff/guest networks)
- Windows updates on all servers and workstations
- Updating network devices such as NAS boxes etc
- Shut down RDP servers and stopped allowing the ports on the firewall
- Removed local admin rights for all users on...

↧
↧

VPN connection to Vigor router

October 2, 2017, 12:13 pm
$
0
0

I have a Draytek Vigor 2860N office router to which I am trying to setup a home-to-work remote dial-in user VPN connection. I am using the Draytek Smart VPN client.

Previously I set this up using Draytek's setup notes and it worked for me via SSL, allowing me to connect to the office network shares. Now I can't get it to work at all. It shows connected but won't let me access the network shares. Pinging a device on the office network returns this:

Pinging 192.168.1.222 with 32 bytes of data:
Reply from 192.168.1.222: bytes=32 time=23ms TTL=254
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 192.168.1.222:
Packets: Sent = 4, Received = 1, Lost = 3 (75% loss),
Approximate round trip times in milli-seconds:
Minimum = 23ms, Maximum = 23ms, Average = 23ms

On my home network I have a Win10 Pro PC (not the same domain)...

↧

IPSec VPN and devices with no default gateway

October 17, 2017, 12:44 pm
$
0
0

Hello everyone

We have successfully completed an IPSec VPN tunner between 2 2925 Vigor routers and everything works fine!
The only problem is that the main office is unable to ping or reach certain devices located at branch office, because the specific devices do not provide a default gateway option (so we guess they can't reach back main office network)
Of course, those devices can be pinged from any device inside branch office network.

Is there any way to make those devices reachable from the main office?

Thank you in advance

↧

Draytek Vigor 2925 snmp values for WAN1 interface spike on Icinga2 after reboot

October 19, 2017, 4:26 am
$
0
0

Hi All,

After experiencing a "You have reached the maximum number of permitted internet sessions" (although no limit was set) I installed the latest firmware ( 3.8.4.2) and just to be safe I scheduled a daily reboot.

I also implemented some SNMP checks on Icinga2 and I have noticed that after rebooting the router, the next check always returns a fery high TX/RX peak reaching the Critical state I have configured. The next check comes out clean and values go back to normal. This happens at nighttime when the business is closed and no significant activity occurs over the internet.

The SNMP pulled values don't resemble the ones I can see from the Data Flow menu in the Draytek admin page.

Could it be a matter of the Draytek that need some time to build significant statistics after reboot?

Any clues?

Thanks!

↧
↧

Dual ethernet dray tek router,problem making VPN

October 26, 2017, 1:59 am
$
0
0

Hi. I have got draytek router 2925 which supports dual ethernet. I want to make vpn but in such way that if wan1 drops.. vpn automatically picks wan2 and connect remote lan(ipsec) ... can anyone have idea how to do that

↧

Draytek Vigor 3900 VPN Load balancing

November 2, 2017, 4:48 am
$
0
0

Hi all,

I have tried talking to Draytek about this but they have cut me off twice on the phone now and havent responded to my support request via email. So i am hoping that someone might be able to help me (networking isnt my strongest area).

We have two offices, the main office has the vigor 3900 and 2x FTTC lines. Our secondary office has 1x Ethernet connection and a draytek 2830 router. Each office has their own subnet and currently one of the connections in the main office has a VPN link to the secondary.

Now we are hoping to use the second connection in the main office and create another VPN to the secondary office and then load balance between the two VPN connections to give us extra bandwidth. Because the 2nd vpn would be connecting to the same subnet it will just conflict and cause alot of issues, but has anyone done something...

↧

2 vpn ip from one router

November 3, 2017, 10:36 am
$
0
0

Hello, i have a subscription to a vpn provider and i want to have to 2 vpn ip from one router, how can i do this?

I have  Vigor2132ac, also is there any other router were i can do this?

↧
Search

Failed http traffic between vlans

January 30, 2018, 2:22 am
$
0
0

Hello, I have a big problem. On my Draytek 2952 is configured vlan10 for printer.P3 on the router is a trunk port with vlan1 and vlan10. P3 is connected to switch TP-LINK T2600G-52TS to port 4. Port 4 on the switch is configured a TRUNK.


My PC is connected to port 1 and has ip adress from draytek dhcp (192.168.1.30) and printer is connected to port 2 and has ip adress form fraytek dhcp (192.168.10.10). Ping is allow, can i print from PC to printer but I can't access to web site configuration my printer.

Please help me.

↧
↧

Vigor 3900 becomes unresponsive issue

February 26, 2018, 5:25 am
$
0
0

Hi all,

So we have a new Vigor 3900 to try to load balance our 2x FTTC circuits, from a previous topic we had planned to try to VPN trunk to our remote office but this has been abandoned. However we have had issues with this router from the get go.

At random intervals the router becomes unresponsive to WAN & LAN connections, we cannot get any reply from ping/http/ssh etc... the only way to get this router back online is with a physical reboot. Having spent many hours on the phone to Draytek support we are still without a solution, we have tried:

  • lowering the MTU on both WAN connections
  • Disabled all non used interfaces in WAN
  • Disabled flow control and 802.3az
  • Checked the Firewall for counters issues

We are running custom Beta firmware from Draytek and we had a period for over a week with no issues and now we get this issue almost on a...

↧

Single IP inter lan routing

February 28, 2018, 1:07 am
$
0
0

Hi,

Have a Draytek 2862 at a client with 1 LAN and 1 VLAN. LAN 1 is for all wired connections in the offices, VLAN is for Ubiquiti Wireless system. The server runs the UBQT Controller but cannot see the UBQT Switches or AP's on the VLAN as its using a different subnet. 

Anyone know how to let just the servers IP address of 192.168.0.* to see the IP addresses of the UBQT devices on 192.168.2.*

I can obviously enable inter LAN routing, but this isn't as secure so would rather not, just want to set up some sort of static route, but looking in the static route page I'm not sure how to configure it or even if that's the correct area.?

Any help gratefully appreciated.

Adam

↧

How do I block the pokerstars app?

February 28, 2018, 11:34 am
$
0
0

Hi everyone,

I own the Draytek Vigor 2860n-plus and am looking for some help please to block the pokerstars application from connecting to the internet.

I have set up a URL & DNS filter for "pokerstars" but when activated this only seems block access to the website - if the app is up-to-date then it will still work although I noticed that it won't connect to pokerstars for any updates.

That is not ideal (and in reality I'd like to block a number of similar apps).

Can anyone advise how to do it please?

Thanks very much

Lloyd

↧

VPN Broadcast address

March 7, 2018, 12:45 am
$
0
0

Hi All, I am not a network guy but as it stands I am the only guy with any networkexperience so to speak.

Ihave recentlytaken over a network and been asked to setup a vpntunnel using ipsec to another location which I have and it works.

the issue is we both use 192.168.2.x and this is causingissues with conflicting IP addresses.

So i spoke to there office and they asked me to come from10.225.5.x/24 so I presume this is them asking that if any of our local pc'sconnect to there network they need to have an address in this range.

I am using a Draytek Vigor 2860 and I cannot find anywhere to set this up, They asked us to NAT it but I thought nat for was for public ipnot private i.e. domain ip's.

Is this even possiblewithout changing our network?

Any pointers would be appreciated, I have never worked with VIGOR routers either so there may be...

↧
↧

Draytek 2860 SSL VPN fails on Radius via Draytek Mac client

March 7, 2018, 10:02 am
$
0
0

I have the 2860 which is intended to be used for Mac user teleworkers with 2 factor access via the Excellent RSA Securid , I have the RSA appliance all setup with Hardware tokens with the Radius server setup and it works using the Windows Smart VPN Draytek client, works exactly as it should.

The problem is that my major user base are Macbook users and require the VPN service.

So I setup the SSL VPN and that parts works fine with just the local user and password on the Smart VPN Mac client, however if I try to login using the Radius authentication the connection fails everytime.

I have a case with Draytek support , I supplied them all the requested info and after 6 weeks they just said my VPN configuration is correct it could be a client issue, Well yes I agree but its Draytek's own Smart VPN Client that won't connect!!

Draytek promote...

↧

Vigor 2925 F/W 3.8.7 - Web Portal Page?

March 11, 2018, 12:18 am
$
0
0

Hello

Just upgraded to Latest Vigor 2925 firmware (3.8.7 from 3.8.4) and "Web Portal Page" is gone...

I can see a new feature called "Hotspot Web Portal" but it's not the same.

what I was doing, was to URL redirect a new connected user to a simple html page providing some info like: "Hello, this is Chris free WiFi" and an image at the bottom. The html page was hosted on my external website.

now, nothing for the "hotspot web portal" allow me to do this....

Any ideas?

Thanks

↧
Search

Does Draytek support Policy Based VPN (Avaya VPN Handset Connection)

March 27, 2018, 5:19 am
$
0
0

Hi Guys,

I am having problems connecting an Avaya 9608 VPN Handset to a customers Draytek router, I believe this may be due to the Draytek not supporting 'Policy Based' VPN Connections, is this a possibility.

Apologies as I am unable to confirm the Model of the Router as I am awaiting this information.

Any Feedback is greatly appreciated,

Cheers Guys

↧

VLANs based on MAC addresses ?

April 2, 2018, 10:11 am
$
0
0

Im about to setup a VLAN across multiple Netgear smart switches and a Draytek 2860 router.

Im concerned that the VLAN with physically be fragile for instance if someone swaps over one of the LAN cables on the switch and replaces it into port 17 rather than the original 16 the port tagging wont work.

Is there another way of setting up the VLANs by basing them on MAC addresses rather than on ports ?

↧
↧

Bridge IP address across different range

April 2, 2018, 10:12 am
$
0
0

ve got a piece of hardware (Lutron lighting system) that has a static IP of 192.168.1.201. I dont have the Lutron lighting software to hand so cant login and change the static IP or set it to use DHCP.

I the network range for the rest of the building is 192.168.22.xxx.

Is there a way in the router i could bridge 192.168.1.201 to 192.168.22.201 so that other devices on 192.168.22.xxx can speak to it ?

The router im using is a Draytek 2860.

↧

VPN security setup advice ?

April 2, 2018, 10:13 am
$
0
0

Ive setup a VPN on a 2860 router.

This is the first time ive setup a VPN and wondered if someone could look over my settings and advise if there is anything that could be done to make the connection more secure.

(Goes without saying all the passwords / keys are unique random generated strings, but wondered if anything could be changed in the settings to make it more secure).

Ive posted a redacted version of the setup page here : https://imgur.com/a/5f1ak

↧

VPN to VPN - LAN to LAN

April 4, 2018, 12:41 am
$
0
0

Hello

To cut a long story shorter (ish) I have a satellite office spinning up and my managed service has delayed the new firewall I have ordered by 3 weeks, so I am looking for an interim solution.

The site is up and running and I already have a dedicated internet link with static IP / gateway.

On our main site I have a M300 WatchGuard that has VPN enabled. I have SSL, IPsec and L2TP VPN’s working fine and I can connect the all 3 not a problem using my laptop or mobile phone.

I also have a spare Vigor 2920n router, I have set that up to enable WAN on WAN2 and that works and passes through the Internet fine, however I fall at the Lan to Lan settings.

I cant use SSL as the 2920 does not use that so its either IPsec or L2TP.

I think I have configured the details as best I can but it just wont dial the VPN no matter what protocol I use.

I...

↧
Viewing all 401 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>