Forget all the static routing nonsense. Here's what to do:

http://www.forum.draytek.co.uk/viewtopic.php?p=63989#63989

The instructions refer to accessing the Vigor 120 through a 2820 router, but the same applies to the 2920 and 2930.

Thanks but I've already tried that method but the PPPoE connection fails when connected like that.

So I think my only option is to setup the static route.

Westyfield2 wrote: Thank's for that Cam, looks intriguing!

I haven't changed any of the IPs/Subnets from default so in theory all I'd need to change is the Destination IP from your 192.168.2.0 to my 192.168.2.1 (any reason you change the Vigor 120's IP from default BTW?)

Now to find how to do this static route on the Draytek router...

First of all, Westyfield2, 192.168.2.0 is the entire subnet. That's the destination, not one particular IP.

Now, I just relocated the original site that I used to get this to work. If your router allows scripts, hopefully this will help you out.

http://www.geekzone.co.nz/forums.asp?forumid=66&topicid=57953
Third last post is the key (by "billgates")

Here's a summary:

Under INIT scripts

Code:

sleep 5 ip addr add 192.168.2.2/24 dev vlan1 brd +

Under FIREWALL scripts

Code:

/usr/sbin/iptables -I POSTROUTING -t nat -o vlan1 -d 192.168.2.0/24 -j MASQUERADE

If your router doesn't allow scripts, I have no idea what to do. If you have any questions, read the link above, it explains everything.

Hope this helps!

Cam

Oops, just realised I never replied to this thread! :oops: :o

Thanks Cam for the info, I understand how it should work now .

Unfortunately I'm having the same problem on my Draytek 2920n as pictor is with his Draytek 2930... both through the web GUI and telnet the router insists I enter a gateway for the static route. If you leave the gateway blank and select WAN1 as the interface it doesn't save the route, it will only save the route if you enter a gateway as well as selecting the interface.

Pictor, did you find a way of making it work?

No offence intended to Cam, but I'd like to think that if his Linksys WRT54GS running Tomato can do it there should be a way for our fancy Drayteks to do it!

If you dont use both WAN ports on the 2930/2920 it should also work like this:

assuming, the IP of the Vigor 120 is 192.168.10.254, and the Internal IP of the 2930 is 192.168.1.1,
and that the connection to the internet is made using PPPoE/PPPoA on WAN1 of the 2930 (using the Vigor 120 only as a modem).

add a switch, connect both WAN ports of the 2930 to the switch, connect the Vigor 120 to the switch.
on WAN2 of the 2930, add an internet connection using static IP with the IP of 192.168.10.1, and, default Gateway to 192.168.10.254

Now, add a load balancing rule on the 2930, that only traffic to 192.168.10.0/24 should go through WAN2,
add a load balancing rule so that forces all other traffic should through WAN1

Now, you will be able to access the Web-interface of the Vigor 120.

This should work, and as a difference to other solutions here which suggest to connect a LAN port of the draytek using a switch to the LAN of the Vigor 120, you dont compromise the security of your network behind the 2930.

What a brilliant suggestion! It works a treat!

I created a load balancing rule as suggested for traffic to the Vigor120 (although I'm not sure it's necessary, surely the routing table takes care of this?) but how do I create an equivalent rule to force all other traffic via WAN1? Entering 0.0.0.0 as the destination address gives an Invalid IP error.