Bookmark this page Print this page

Appendix 8 – Setting-up a WAN or LAN-to LAN Network

The following notes show how to permanently link the LANs (or “Local Area Networks”) at two separate offices using Draytek Vigor 2600 routers (one at each office) operating over ISDN or ADSL lines. When two or more LANs are joined together they are called a WAN (or “Wide Area Network”). With a WAN in place users can connect to the shared printers and hard drives at the other office. The following instructions have to be completed on both routers…

Starting from the Main Menu, shown above…

  • Click “VPN and Remote Access Setup”
  • Click “LAN-to-LAN Profile Setup”, as shown above
  • Click “1” to edit or create the first profile
  • In section “1. Common Settings”, shown above…

  • Give the profile a name (e.g. for London to Glasgow you might enter “LON2GLA”, then as “GLA2LON” at the other end)
  • Tick and thereby enable the profile
  • Set call direction to “Both”
  • Set idle timeout to –1, which means it will always be on
  • In section “2. Dial-Out Settings”, shown above…

  • Set “Type of Server” to “IPSec Tunnel”
  • Enter the static IP address of the OTHER office in the “Server IP” field (e.g. 212.126.148.44)
  • Click the “IKE Pre-Shared Key” button and enter an agreed word (e.g. “porcupine”)
  • Click the “Medium (AH)” security method
  • Enter “1” in the first “Scheduler” box, to schedule an initial switch-on (described later)
  • In section “3. Dial-In Settings”, shown above…

  • Set “Allowed Dial-In Type” to “IPSec Tunnel”
  • Enter the static IP address of the OTHER office in the “Specify Remote VPN Gateway” field (e.g. 212.126.148.44)
  • Click the “IKE Pre-Shared Key” button and enter an agreed word (e.g. “porcupine”)
  • Click the “Medium (AH)” security method
  • In section “4. TCP/IP Network Settings”, shown above…

  • Set “Allowed Dial-In Type” to “IPSec Tunnel”
  • Ignore “My WAN IP” and the “Remote Gateway IP” (i.e. set both to 0.0.0.0)
  • Enter the starting number (i.e. “0”) of the OTHER office’s “Remote Network IP” range (e.g. 192.168.1.0)
  • Enter the “Remote Network Mask” or sub-net of the OTHER office (e.g. 225.225.225.0)
  • Set the “RIP Direction” to “Disable”
  • For “NAT operation” treat the remote sub-net as a “Private IP”
  • Click “OK” to save your settings
  • Click “Main Menu” at the top right of the screen to return there
  • On the Main Menu, click “Call Schedule Setup”
  • On the “Call Schedule Setup” screen click “1” to edit or create a call schedule
  • On the “Call Schedule Setup” screen, shown below…
  • Click “Enable”
  • Set the “Action” to “Force On”
  • Set “How Often” to “Once”
  • Click “OK”, which will then force the WAN to start
  • Click “Main Menu” at the top right of the screen to return there
  • To check whether the WAN is running, starting from the “Main Menu”…

  • Click “Online Status”
  • Check the “WAN Status” figures
  • Use the “Dial PPPoA” or “Drop PPPoA” buttons to re-start or stop the WAN