Hello there,

I am having a little problem and if anyone could help or point me in the right direction it would be greatly appreciated.

Basically I have 2 of the Vigor boxes out in satellite offices. They are configured with a LAN to LAN vpn profile that has the "Change default route to this VPN tunnel ( Only single WAN supports this )" option ticked so as to allow users to connect back to the file servers at my main head office.

But what I want to achieve is to be able to setup a guest-wifi which does not connect to the internet through this VPN connection and therefore avoid it having my firewall rules applied to it (which it currently does as all the traffic is put along the VPN).
So I am not even sure if what I want to achieve is possible.
I have tried ticking the "Isolate VPN" option when I setup the Wifi for the guest but that doesn't seem to work.

Any suggestions?

Create a separate subnet for the Wifi network

Hi Sicon,

Thanks, I tried that. But to do a seperate LAN subnet I have to enable Vlans right? When I do that and configure 2 seperate Vlans, things start to go a bit strange. DHCP on one subnet will work but not the other. I tried configuring it with one Vlan only on the 1 (2nd guest wifi) subnet and that seems ok. But then it stops anything from working being plugged into the Draytek box itself. Enable both Vlans and then 1 wifi may stop working with DHCP.

I saw somewhere on Drayteks website that they said to avoid doing this if possible as there may be issues. But surely if it gives me the option then I must be able to do it?

I am on the latest firmware.