Hi all just to let you know about a funny one I have had....

Recieved a new router with the above firmware on it.
(we have 180 sites using draytek 2xxx routers with ipsec vpns back to a watchguard firewall at our headoffice)

We configured it as normal and everything connected up as normal (ADSL + VPN)
from head office we can ping/connect to the router on its LAN address 10.186.38.1
but we cant ping any ip from 10.186.2-10.186.38.15 range
This is down to an erronous static route entry on the router (the top one below)
S 10.186.38.0/ 255.255.255.240 via 194.159.169.245, WAN1
C~ 10.186.38.0/ 255.255.255.0 is directly connected, LAN

I have no idea where it has come from as the 194.159.169.245 is not defined anywhere on the draytek (or one I recognise). this one line is blocking connections to the 10.186.2-10.186.38.15 addresses.

As the draytek DHCP server by default gives out addresses starting at 10.186.38.10 you can see why it had me scratching my head for some time...
once I set DHCP to start giving addresses out at 10.186.38.20 all routing was working correctly.

I did not fix it but had to use a workaround.

Hope it helps others out if they see the same thing