This has been asked before here:

http://www.forum.draytek.co.uk/viewtopic.php?f=14&t=17700&p=73698&sid=d2465c06cc03da5f0a34dba9b056e121#p73698

and here

http://www.forum.draytek.co.uk/viewtopic.php?f=14&t=17759&p=73876&sid=d2465c06cc03da5f0a34dba9b056e121#p73876

and I never really got an answer.

Without the remote VPN it's been working fine until I flashed the firmware to 3.6.4.1_sb_232201 and now it's all gone pear shaped.

What I want is this:

All devices to use the WAN2 connection (Fibre, fast, no static IP) but VPN to use WAN1 (ADSL, slow, static IP)

Before the firmware upgrade I used a Policy Route as follows:

WAN2 SRC Any 192.168.xx.20 - 192.168.xx.200
WAN1 SRC Any 192.168.xx.1 - 192.168.xx.19

This forced the servery stuff to use WAN1 where static IP was needed and performance wasn't an issue. All the LAN - LAN VPNs use WAN1. Everything worked fine and anything on the network could access servers, VPN, Internet via WAN2.

Since the Firmware upgrade any device in the WAN2 range couldn't access anything on the WAN1 connection, ie, the VPN subnets. DIsabling the Policy Route allows everything to work but the WAN2 connection is basically ignored.

So to summarise. I want everything to use WAN2 absolutely and exclusively except where the subnet required is on WAN1. How do I do this?

Sorry i 've seen in the past your post but did not reply because never use of vpn ... i am only posting of the firmware update part ... latest is 3.6.6.2 ... it may helps ... file *rst* is recommended because will avoid previous bugs to the new firmware & all settings back from the begin because will delete all current settings back to factory defaults
if you have the SB model here
ftp://ftp.draytek.com/Vigor2830/Firmware/Single%20band/v3.6.6.2_SB/Vigor2830_sb_v3.6.6.2_Annex_A/
for the db model (with 5G) here
ftp://ftp.draytek.com/Vigor2830/Firmware/Dual%20band/v3.6.6.2_DB/Vigor2830_db_v3.6.6.2_AnnexA/

For load balance take a look what is possible to set
http://www.draytek.com/index.php?option=com_k2&view=item&id=5181&Itemid=293&lang=en
vpn load balance
http://www.draytek.com/index.php?option=com_k2&view=item&id=2045&Itemid=293&lang=en
&
http://www.draytek.com/index.php?option=com_k2&view=itemlist&task=category&id=128:vpn-trunk&Itemid=293&lang=en

Right, I've been at this for a week and I'm getting mightily p*ssed off.

From having a Router that was working to having to spend considerable time to not even get back to where I was is not acceptable. Resets, factory resets, manual config reloads, nothing. Not a happy bunny right now.

I can quite categorically say either I'm stupid or that latest version of the firmware has broken policy routing and I don't think I'm stupid.

What I want is simple. Use WAN2 unless you're a VPN.

Policy routes.

1. WAN2 Source: Local IP pool. Destination: Any.
2. WAN1 Source: Local IP pool. Destination: VPN IP pool.

Yes I've tried it both ways round and no matter what I do the VPN IP range is unavailable to the local IP range. The only way to get it to work is disable the policy route and then the router effectively ignores the WAN2 connection.

This worked for months before the firmware upgrade.

Update:

Adding any Policy Route renders all VPN IP Ranges inaccessible. Even if I define a Policy over WAN1 to a VPN IP Range it kills it.

This is becoming a serious problem. Currently I have nothing to control which WAN connection is used and the ultra slow ADSL on WAN1 seems to be getting priority. I have high bandwidth applications that I need to make use of WAN2 consistently and low bandwidth applications that must, must, must use the VPN connections on WAN1.

If this isn't solved quickly I'm going to have to find an alternative router that works.

This was working before upgrading the firmware to 3.6.4.1_sb_232201.

Thanks for the updates ... try contact the support
http://www.draytek.co.uk/support/techquery
also if older firmware is working ... do you really need the latest firmware?

Good point. No!