Understanding Working from Home VPN Solutions in 5 Steps
VPN Topology for Working from Home
Working from Home? Or on a Business Trip?
Suggested Built-in VPN Type
Built-in VPN type is natively supported by the OS and no Smart VPN Client required.
| OS | Suggested VPN Type | Matched VPN in DrayTek Router | Security Advisory | KB Article | |
|---|---|---|---|---|---|
| Windows | For V2960 & V3900 | IKEv2 | IKEv2 EAP | For IPsec, use AES-SHA256 security method for highest security and best performance! |
|
| For DrayOS Models | L2TP/IPsec | L2TP/IPsec |
|
||
| Android | For All Vigor Router Models | IPsec XAuth | IPsec XAuth |
|
|
| macOS | Cisco IPsec | IPsec XAuth |
|
||
| iOS | IPsec | IPsec XAuth |
|
||
Alternative VPN Type
For all clients, download Smart VPN Client for alternative VPN type.
| OS | VPN Type in Vigor Router | Note | KB Article | |
|---|---|---|---|---|
| Windows | For All Vigor Router Models | SSL VPN or OpenVPN | Download Smart VPN Client for free to dial SSL VPN and OpenVPN |
|
| Android |
|
|||
| macOS |
|
|||
| iOS |
|
|||
Connecting Between HQ and Branches?
Branch offices dial LAN-to-LAN VPN to the HQ to have secure access to the company resources.
If HQ dials a LAN-to-LAN VPN to the cloud server, branches can also access to the cloud server via HQ.
Suggested LAN-to-LAN VPN Protocol
IPsec tunnel with AES-SHA256 security method for highest security and best performance
Broadband VPN Router
| Single WAN | Dual WAN | Multi WAN | ||||
|---|---|---|---|---|---|---|
Vigor2135 Series
|
Vigor2915 Series
|
Vigor2927 Series
|
Vigor2962
|
Vigor3910
|
Vigor3912
|
|
| WAN |
1x Fixed GbE WAN (or 1x SFP for F model) |
2x GbE WAN | 2x GbE WAN |
1x 2.5G WAN + 1x GbE/SFP Combo + 2x GbE, RJ-45 (up to 2 WANs) |
2x 10G SFP+ + 2x 2.5G WAN 4x GbE |
2x 10G SFP+ + 2x 2.5G WAN 4x GbE |
| IPsec VPN Performance | 150 Mbps | 200 Mbps | 290 Mbps | 1 Gpps | 2.5 Gbps | 3.3 Gbps |
| SSL VPN Performance | 100 Mbps | 150 Mbps | 120 Mbps | 800 Mbps | 1.3 Gbps | 3.3 Gbps |
| Max.concurrent VPN Tunnels | 2 | 16 | 50 | 200 | 500 | 500 |
| Max.concurrent OpenVPN + SSL VPN | 2 | 8 | 25 | 50 | 200 | 200 |
DSL VPN Router
| Single WAN | Dual WAN | |||||
|---|---|---|---|---|---|---|
Vigor2763 Series
|
Vigor2765 Series
|
Vigor2766 Series
|
Vigor2862 Series
|
Vigor2865 Series
|
Vigor2866 Series
|
|
| WAN |
1x RJ-11 DSL WAN (VDSL2 30a) or 1x GbE WAN |
1x RJ-11 DSL WAN (VDSL2 35b) or 1x GbE WAN |
1x RJ-11 DSL WAN (G.Fast) or 1x GbE WAN |
1x RJ-11 DSL WAN (VDSL2 30a) + 1x GbE WAN |
1x RJ-11 DSL WAN (VDSL2 35b) + 1x GbE WAN |
1x RJ-11 DSL WAN (G.Fast) + 1x GbE WAN |
| IPsec VPN Performance | 150 Mbps | 200 Mbps | 200 Mbps | 85 Mbps | 300 Mbps | 300 Mbps |
| SSL VPN Performance | 100 Mbps | 80 Mbps | 80 Mbps | 45 Mbps | 130 Mbps | 150 Mbps |
| Max.concurrent VPN Tunnels | 2 | 2 | 2 | 32 | 32 | 32 |
| Max.concurrent OpenVPN + SSL VPN | 2 | 2 | 2 | 16 | 16 | 16 |
More Information
Don’t Want to Change the Existing Office Network?
Keep your current office network, and simply put a Vigor Router in your LAN to work as VPN server.
DrayTek VPN Matcher
VPN Server Behind NAT Made Easy
Some ISPs assign private IP addresses for a multi-site company, and most 4G providers offer private IP, too.
VPN Server with private IP behind NAT makes branches unable to establish a LAN-to-LAN VPN tunnel.
To overcome the limitations, register all your VPN Vigor Routers to DrayTek VPN Matcher, then VPN Matcher will help exchanging the connection information between VPN Server and branches.
With the connection information, VPN tunnel can be established successfully.
Improving Experience for Business Critical Apps
VoIP First
VoIP is always with top priority! With default UDP 5060 port (configurable), VoIP QoS is out-of-box ready.
Improve Experience for Business-Critical Apps
Select your business critical apps, and easily put them into QoS classes.
Flexible Bandwidth Allocation
Bandwidth will be reserved for high-priority classes, and can be used by low-priority classes when available.
Set Up QoS in 3 Steps
1Define your WAN bandwidth and operational direction.
2 Specify the business critical apps and their QoS classes.
3 Reserve corresponding bandwidth ratio for business critical apps.
Real-time Bandwidth Allocation Monitoring
With simple settings, router starts to flexibly allocate bandwidth to the business critical apps.
Compatible Router
| Single DSL WAN | Dual DSL WAN | Dual Broadband WAN | |||||
|---|---|---|---|---|---|---|---|
|
Vigor2765 Series
|
Vigor2766 Series
|
Vigor2862 Series
|
Vigor2865 Series
|
Vigor2866 Series
|
Vigor2926 Series
|
Vigor2927 Series
|
|
| WAN |
1x RJ-11 DSL WAN (VDSL2 35b) or 1x GbE WAN |
1x RJ-11 DSL WAN (G.Fast) or 1x GbE WAN |
1x RJ-11 DSL WAN (VDSL2 30a) + 1x GbE WAN |
1x RJ-11 DSL WAN (VDSL2 35b) + 1x GbE WAN |
1x RJ-11 DSL WAN (G.Fast) + 1x GbE WAN |
2x GbE WAN | 2x GbE WAN |
| NAT Throughput | 600 Mbps | 600 Mbps | 500 Mbps | 800 Mbps | 800 Mbps | 500 Mbps | 800 Mbps |
| Max. NAT Throughput with QoS enabled | TBD | TBD | 300 Mbps | 1.3 Gbps | 1.8 Gbps | 300 Mbps | 1.8 Mbps |
| Max. NAT Sessions | 50k | 50k | 50k | 60k | 60k | 50k | 60k |
| Firmware Supported | Since f/w 4.2.1.1 | Since f/w 4.3.1.2 | Since f/w 3.9.4 | Since f/w 4.2.2 | Since f/w 4.3.2 | Since f/w 3.9.4 | Since f/w 4.2.2 |
Work from Home Solution with VPN & App QoS
With the current effort to slow the spread of COVID-19, businesses are looking for ways to operate by having employees work from home. DrayTek provides a work from home solution with VPN and improved App QoS to meet your needs.
