IPsec VPN between Netgear and DrayTek Router 

This note is going to demonstrate how to establish an IPsec VPN between a Netgear router and a DrayTek Vigor Router. In this example, the Netgear router will be the VPN initiator (VPN Client), and Vigor Router will act as a VPN server.

Configuring Netgear as VPN client (Dial-out)

1. Go to VPN >> IPsec VPN, create an IKE Policy as follows:

1. In the General box, set Direction / Type to "Initiator" and select "Main" for Exchange mode
2. In the Local box, set Identifier Type to "Local WAN IP"
3. In the Remote box, set Identifier to "Remote WAN IP"
4. Use "Pre-shared key" for Authentication Method, and enter a pre-shared key
5. Click Apply to save.

2. In VPN >> IPsec VPN, create a VPN Policy as follows:

1. Set Remote Endpoint to IP Address, and enter the WAN IP of Vigor Router
2. In Traffic Selection, specify the Local network (Netgear's LAN) and the Remote Network (Vigor Router's LAN)
3. In Auto Policy parameters, Select IKE Policy as the one created in the previous step.
4. Apply the settings.

Configuring Vigor Router as VPN server

1. On Vigor Router, go to VPN and Remote Access >> LAN to LAN, click on an available index number, and edit the profile as follows. In Common Settings,

1. Give it a profile name 
2. Check Enable this profile
3. Set Call Direction to "Dial-Out"

2. In Dial-In Settings,

1. Enable "IPsec Tunnel" for Allowed Dial-in Type
2. Enable Specify Remote VPN Gateway, and enter the Netgear's WAN IP in Peer VPN Server IP
3. Use "Pre-shared key" for IKE Authentication Method, and enter the same pre-shared key as which configured on Netgear

3. In TCP/IP Network Settings, enter the Remote Network IP and Remote Network Mask according to Netgear's LAN settings. Then, click OK to finish the settings.

4. Now, the Vigor Router is ready for VPN connections from the Netgear router. Network Administrator may check the connection status from VPN and Remote Access >> Connection Management.