spec me an ADSL router that does Generic Routing Encapsulation (GRE) packets

mejinks · 20-03-2007, 23:07

As above really. I want to set up a VPN from home. Its fine going out to other VPNs but it never completes the authentication when the VPN server is on this side of the router. I can put it in the DMZ, but I really don't want it that unprotected.

Mark · 21-03-2007, 04:15

You could always get one that has a built-in VPN server.

The various Drayteks do, but I'll not promise you success as when I tried it I couldn't get it to work (later discovered the cause was work's firewall so I can't blame the router).

If I ever go VM I'd be up for selling the 2800VG, but that's not for a while so probably not soon enough for you.

Daz · 21-03-2007, 11:04

Every router I've bought in the past couple of years has supported it, and my current Draytek has VPN built in so I use that now.

The only common thing I've found is you have to use some built in PPTP/VPN forwarding option rather than just manually forwarding 1723 (because as you've found out, it's not enough). What router you using?

mejinks · 21-03-2007, 11:20

Quote:

Originally Posted by Daz

Every router I've bought in the past couple of years has supported it, and my current Draytek has VPN built in so I use that now.

The only common thing I've found is you have to use some built in PPTP/VPN forwarding option rather than just manually forwarding 1723 (because as you've found out, it's not enough). What router you using?

Im using a DSL-604+ from Dlink. It does have options for PPTP and other NAT ALGs but it appears it only works in one direction. I've had a good look around the web and other people seem to have had the same issues, so I think I may need to do some thinking on either retiring the router or creating a VPN box that can sit on the DMZ. I also forwarded UDP 500, 50, 1701 and one other that escapes me, but unless I put it in the DMZ, it doesn't work.

Daz · 21-03-2007, 11:24

It wont, GRE is an IP protocol (46 or 47, cant remember), it cant be trapped by just NAT port forwarding.

If the 604 is an old router you might just be out of luck dude.

mejinks · 21-03-2007, 11:45

Quote:

Originally Posted by Daz

It wont, GRE is an IP protocol (46 or 47, cant remember), it cant be trapped by just NAT port forwarding.

If the 604 is an old router you might just be out of luck dude.

47. I am thinking of retiring it anyway, but I need to know if there any good router (NOT netgear) thathandle it properly. I might push the boat out and get a cisco. Which one is another matter.

Daz · 21-03-2007, 12:15

If you get a Cisco you may as well let it handle the VPN anyway. In fact if you're spending that money I'd say just get a Draytek.

Mark · 21-03-2007, 15:22

Aye, so would I. It's a lot less grief than trying to learn how to configure Cisco kit. If my 2600 weren't capped out at 2MB/s then there might be options, but as it is.

mejinks · 21-03-2007, 23:02

Which one should I get then? Stick with Draytek but avoid the 2600?

Mark · 21-03-2007, 23:05

2800 series if you want ADSL. 2910 if cable/DSL.

+G = Wireless Super-G
+V = Built-in VoIP
+I = Built-in ISDN fallback

I have the 2800VG.

21-03-2007, 11:04	#3
Daz The Stig Join Date: Jun 2006 Location: Swad! Posts: 10,713	Every router I've bought in the past couple of years has supported it, and my current Draytek has VPN built in so I use that now. The only common thing I've found is you have to use some built in PPTP/VPN forwarding option rather than just manually forwarding 1723 (because as you've found out, it's not enough). What router you using? __________________ apt-get moo

21-03-2007, 11:24	#5
Daz The Stig Join Date: Jun 2006 Location: Swad! Posts: 10,713	It wont, GRE is an IP protocol (46 or 47, cant remember), it cant be trapped by just NAT port forwarding. If the 604 is an old router you might just be out of luck dude. __________________ apt-get moo

21-03-2007, 12:15	#7
Daz The Stig Join Date: Jun 2006 Location: Swad! Posts: 10,713	If you get a Cisco you may as well let it handle the VPN anyway. In fact if you're spending that money I'd say just get a Draytek. __________________ apt-get moo

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

21-03-2007, 04:15	#2
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	You could always get one that has a built-in VPN server. The various Drayteks do, but I'll not promise you success as when I tried it I couldn't get it to work (later discovered the cause was work's firewall so I can't blame the router). If I ever go VM I'd be up for selling the 2800VG, but that's not for a while so probably not soon enough for you.

21-03-2007, 15:22	#8
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	Aye, so would I. It's a lot less grief than trying to learn how to configure Cisco kit. If my 2600 weren't capped out at 2MB/s then there might be options, but as it is.

21-03-2007, 23:05	#10
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	2800 series if you want ADSL. 2910 if cable/DSL. +G = Wireless Super-G +V = Built-in VoIP +I = Built-in ISDN fallback I have the 2800VG.