Working from Home VPN Solutions

Understanding Working from Home VPN Solutions 

in 5 Steps

Working from Home? Or on a Business Trip?

Suggested Built-in VPN Type

Built-in VPN Type is natively supported by the OS and no Smart VPN Client required.

OS Suggested VPN Type Matched VPN in Draytek Router Security Advisory FAQ
Windows For V2960 & V3900 IKEv2 IKEv2 EAP For IPsec, use AES-SHA256 security method for the highest security and best performance ! link
For DrayOS Models L2TP/IPsec L2TP/IPsec link
Android For All Vigor Router Models IPsec XAuth IPsec XAuth link
macOS Cisco IPsec IPsec XAuth link
iOS IPsec IPsec XAuth link

Broadband VPN Router

More Information

Don't Want to Change the Existing Office Network?

Keep your current office network, and simply put a Vigor Router in your LAN to work as VPN server.
  1. Connect Vigor Router’s WAN port to DMZ port on your company gateway router (or setup port forwarding for VPN to pass to Vigor Router, e.g., port 443 for SSL VPN).
  2. Download Smart VPN Client on your device. Select VPN type, and either add your office network to “more route” or enable  Change Default Route.
  3. Done! Start working from home!

It works for LAN-to-LAN VPN as well! See more at  Single-Arm VPN

DrayTek VPN Matcher

VPN Server Behind NAT Made Easy

Some ISPs assign private IP addresses for a multi-site company, and most 4G providers offer private IP, too.

VPN Server with private IP behind NAT makes branches unable to establish a LAN-to-LAN VPN tunnel.

To overcome the limitations, register all your VPN Vigor Routers to DrayTek VPN Matcher , then VPN Matcher will help exchanging the connection information between VPN Server and branches.

With the connection information, VPN tunnel can be established successfully.