This series of posts describe how VPNs using various routers can be implemented quickly and easily. It covers both dial-up and site-to-site (S2S) VPNs, and includes walk-throughs, configuration notes and troubleshooting steps. It describes the simplest way of deploying and
Anatomy of a certificate
As we go about our daily lives we use our devices (computers or smartphones) for things like web browsing, online banking, shopping, emailing and connecting VPNs. Our devices connect to the servers that provide these services and we trust them
IPsec authentication – Certificates or PSK?
[An Interesting discussion on relative merits here.] A router that is responding to an incoming VPN connection needs to authenticate that connection to ensure is from a legitimate source, and not from a hacker. The IPsec protocol uses either a
Windows to pfSense VPN using L2TP with PSK
L2TP is not enabled on pfSense by default, and configuring it requires several steps and may be prone to error. If it does not work, do see my troubleshooting guide below. I can do no better than NetGate (the pfSense
Which is best: IKEv2 or L2TP/IPsec?
Both give excellent data encryption once the VPN is established. But how well does each protect against malicious attempts to connect by guessing usernames and passwords? If the username, password, or both or known by the attacker can he then
Working with 4G
Working with dynamic IP addresses
Sometimes, one of the WAN interfaces involved in a VPN has a dynamic IP address – that is an IP addresses that changes every so often. This causes a problem for VPNs because the DNS name or IP address is
Windows to Draytek VPN using IKEv2
IkEv2 is the latest IPsec protocol. It addresses many of the technical problems of IPsec IKEv1, and in a dial-up scenario improves the user experience. It connects very quickly, is tolerant of variable Internet connection quality, offers more flexible authentication
Windows to Draytek VPN using PPTP
The good news here is that a Draytek, out-the-box, is already setup for PPTP. Just add your usernames/passwords, and you are good to go. The other good news is that Windows also supports PPTP out-of-box. Just add a VPN with
Windows-Draytek IPsec negotiation
When a Windows IPsec-based VPN (eg L2TP or IKEv2) connects to the Draytek, a whole load of negotiations take place to ensure the data is secured. We will not go into great detail about IPsec here, but will give a
Draytek – PPP General
This page applies to those VPNs that use PPP – that is, PPTP and L2TP. The security settings (authentication and encryption) are irrelevant with L2TP, which uses IPsec for security. So for L2TP only the ‘IP address assignment’ section is