DrayTek LAN-to-LAN VPN Configuration

peggiegreg used Ask the Experts™
Hi Experts,

I need to setup a VPN between to sites. on both sites we are using Draytek 2860 routers. I wanted to configure this as standard LAN-to-LAN.

the reason for the VPN is to connect our Avaya IP Phone system to a branch site down the road in order for 4/5 IP Phones to operate. they have only requested that it is a 'normal LAN-LAN'.

I have 3 questions:

1 - Main Mode or Aggressive Mode? - I have read the descriptions and I understand that it depends if you use a fixed IP or not. But how would I know if it was a fixed IP or not?
2 - Call direction, 'Both' 'Dial-Out' or 'Dial In'. I assumed it was 'Both'
3 - the configuration for the Dial-Out settings would surely be the same for the Dial-In settings? both need to be the other sites external IP, correct?

hope someone can help me with this.

Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®


Also something else to add, I have just found out that that at site 1 we have a dynamic IP and at site 2 we have a static IP.
I would set site one with the dynamic IP to dial out to site 2 with the static IP, that way in the dial out settings of site one's router you can use the static IP address of site two's router.

You'll need to configure the type of VPN, security and a username/password.  The TCP/IP settings can be configured with the network address of the subnet at each site, hopefully you have these set up as different subnets.

I have 2 Draytek routers set up like this and whenever they are both online I can access both networks as if they were wired together.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial