Static Router - EdgeRouter Lite

[Jason]

Can the VPN not advertise the routes, so you don't have to do it statically on each client?

[JaredBusch]

@Jason said:

Can the VPN not advertise the routes, so you don't have to do it statically on each client?

Depends on the VPN technology in use. But yes it can be specified in the ERL GUI for IPSEC or command line for OpenVPN

[hobbit666]

So I've setup the draytek and ERL VPN adding the main IPs to the Local/Remote boxes.
As default from whs I can ping the Core switch and everything on the "HO LAN", but nothing on the VLAN15 side even the VLAN IP on the Cisco Switch.

I've tried a few ways of adding the static route to the ERL but nothing seems to help.

The draytek can ping all addresses.

[hobbit666]

Here is the ERL GUI

I have tried added the VLAN lan to that but still no go.

[dafyre]

@hobbit666 said:

So I've setup the draytek and ERL VPN adding the main IPs to the Local/Remote boxes.
As default from whs I can ping the Core switch and everything on the "HO LAN", but nothing on the VLAN15 side even the VLAN IP on the Cisco Switch.

I've tried a few ways of adding the static route to the ERL but nothing seems to help.

The draytek can ping all addresses.

Can we get a screenshot of the Static Routes page on the ERL, and the show route command on the Cisco?

[dafyre]

@hobbit666 said:

Here is the ERL GUI

I have tried added the VLAN lan to that but still no go.

Is this screen shot the page of the VPN setup?

[hobbit666]

[hobbit666]

I've tried adding the route here via 10.0.1.220 and 10.0.1.242 but doesn't do anything

[dafyre]

@hobbit666 said:

I've tried adding the route here via 10.0.1.220 and 10.0.1.242 but doesn't do anything

Is the Draytek a router, or a VPN appliance?

[hobbit666]

@dafyre VDSL Router

[hobbit666]

[hobbit666]

Vlan setup

[dafyre]

When the WHS system connects to the draytek, does it get a 10.0.1.x IP ?

[hobbit666]

@dafyre said:

When the WHS system connects to the draytek, does it get a 10.0.1.x IP ?

???? No it's an IPSEC Site to Site VPN

[dafyre]

@dafyre said:

@hobbit666 said:

Here is the ERL GUI

I have tried added the VLAN lan to that but still no go.

Is this screen shot the page of the VPN setup?

What if you choose the "Add Subnets" button in this image?

And add the other subnets?

[JaredBusch]

@dafyre said:

@dafyre said:

@hobbit666 said:

Here is the ERL GUI

I have tried added the VLAN lan to that but still no go.

Is this screen shot the page of the VPN setup?

What if you choose the "Add Subnets" button in this image?

And add the other subnets?

He said he tried that.

[JaredBusch]

You definitely need the additional subnets listed in the ERL config.

You also need to add them to the other end. Not familiart with the Draytek IPSEC settings, so hard to help there.

[hobbit666]

Draytek config

ERL

[hobbit666]

Do I maybe need to create them as separate Phase2 SA ??

[dafyre]

@hobbit666 said:

Do I maybe need to create them as separate Phase2 SA ??

That may be worth looking into.