Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm currently installing a DrayTek Vigor 2920n router in a new office. This router is to be used for 2 seperate companies. For one of these companies, the router has a LAN-2-LAN (VPN) connection to a datacenter configured. The other company should not be able to access this other (VPN-)network. I'm aware of the capability of this router to have VLAN's, but I cannot figure out how to configure the VPN-connection to only be accessible for VLAN0 and not for VLAN1. I know I can also add another router to physically split both networks, but we bought the DrayTek with the idea that it could easily have the VPN-connection available for VLAN0 and not for VLAN1. VLAN1 can easily be in another subnet, that's fine, although, I don't know how to configure that on this DrayTek.

Can anyone point me in the right direction?

Thanks in advance, Dirk

share|improve this question

migrated from Feb 7 '11 at 14:16

This question came from our site for professional and enthusiast programmers.

haha! I must still be sleepy (it's early) I was reading "StarTrek Voyager 2920" :) ... stupid dyslexia! – Yanick Rochon Feb 7 '11 at 13:23
:D nah that's something else... – Dirk Feb 7 '11 at 13:54

You can set the LAN to LAN tunnels using differing IP addresses as you note, and as long as you do not add a route between the subnets they will not be able to communicate. Under your dial in settings, disable RIP, and do not add a static route.

The user guide section 4.96 gives a good start.

You cannot, add a WAN port to a VLAN using the GUI. However, you can set up your VLANs internally and then add port redirection from the WAN ports to forward to your VLAN'ed ports. This will ensure that the connections on your LAN to LAN profiles stay internal to the expected subnets. This is in section 4.3.1

Look at the sections I noted above in this document:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.