DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Vigor 2860 Router - SSL VPN Setup Problems.

  • megga.richard
  • Topic Author
  • Offline
  • New Member
  • New Member
More
19 Sep 2013 09:58 #77723 by megga.richard
Vigor 2860 Router - SSL VPN Setup Problems. was created by megga.richard
Hi, currently i have setup Vigor 2860 to allow PPTP VPN access and this works perfectly. But what i am struggling to set up is the SSL VPN access via the web browser.

As an attempt to set this up i have used the link below as a guide, although it is for a different model of router i thought it would be worth using as a guide.

The current issue i am having is that if i go to the router (via web browser) it takes me to the login screen, which is good, i want that to happen. But according to the guide below i as supposed to be able to go to the same external IP address of the router using SSL ("https://") to access a different webpage to be able to start the SSL VPN Tunnel from the browser. This is what i cannot access, i feel like i have missed out one simple setting or i am supposed to go to a specific URL not just the IP address.

http://www.draytek.com/index.php?option=com_k2&view=item&id=2035&Itemid=293&lang=en

NOTE: I'm accessing the router remotely (by using the static external IP address of the router)

If anyone as any ideas on any settings that need to be configured for this work work please let me know.

Thanks in advanced,

Richard.

Please Log in or Create an account to join the conversation.

More
19 Sep 2013 15:00 #77730 by fryr
You need to use a different port number to support both Remote Management on the default https (port 443) and SSL VPN Tunnel - this article suggests changing the SSL VPN to port 444 but you can chose anything you want. If the SSL VPN is on a different port, i.e. port 444, then you would access it using https://xxx.xxx.xxx.xxx:444

http://www.draytek.co.uk/support/kb/kb_sslvpn_troubleshooting.html

I would be interested to know whether you can do this the other way round i.e. leave SSL VPN on port 443 and change management port to another port instead.

Please Log in or Create an account to join the conversation.

  • megga.richard
  • Topic Author
  • Offline
  • New Member
  • New Member
More
19 Sep 2013 15:32 #77732 by megga.richard
Replied by megga.richard on topic Re: Vigor 2860 Router - SSL VPN Setup Problems.
Sorry, i forgot to mention i had already tried that.

Currently the setting are:

Management access port: 4430
SSL Tunnel port: 443

This is what happens when i use the different ports:
- https://xxx.xxx.xxx.xxx directs me to https://xxx.xxx.xxx.xxx/weblogin.htm
- https://xxx.xxx.xxx.xxx:4430 directs me to https://xxx.xxx.xxx.xxx:4430/weblogin.htm
- https://xxx.xxx.xxx.xxx:443 directs me to https://xxx.xxx.xxx.xxx/weblogin.htm
- http://xxx.xxx.xxx.xxx directs me to http://xxx.xxx.xxx.xxx/weblogin.htm
- http://xxx.xxx.xxx.xxx:443 & http://xxx.xxx.xxx.xxx:4430/ Gives me the page cannot be displayed error

As a guess I feel like i need to go to a specific URL like “https://xxx.xxx.xxx.xxx/<VPNDirectoryName>”, but I don’t know.

Please Log in or Create an account to join the conversation.

More
19 Sep 2013 17:32 #77733 by fryr
This video is interesting, all be it in German.

http://www.youtube.com/watch?v=m77Gmacf0Mo

Around 10:52 he shows accessing the SSL and it looks like he gets the weblogin.htm and after he logs in with the SSLClient user he sees the SSL Options - so maybe you need to setup an account for the SSL user and test it that way. It also looks like he is using 443 for both management and SSL VPN although Draytek say uses a different one.

Let me know how you get on.

Please Log in or Create an account to join the conversation.

  • megga.richard
  • Topic Author
  • Offline
  • New Member
  • New Member
More
20 Sep 2013 10:56 #77742 by megga.richard
Replied by megga.richard on topic Re: Vigor 2860 Router - SSL VPN Setup Problems.
I appreciate you help, but i have worked out the issue.

There were 2 things i was doing wrong:
1. The the users must in a "User Group" to be able to login to the "SSL VPN Web Portal"
2. The Username and Password is Case Sensitive, that's why i could not login before when i tried using a "User Group"

Thanks again

Richard.

Please Log in or Create an account to join the conversation.

Moderators: Sami