UPDATE: Router error logs show:

LCP Time-out 0

I'm not sure how to correct this. The Lan-to-Lan profiles are set to -1 Idle Timeout (for the remote branch).

I have a PPTP VPN running between two Draytek 2820 routers. They are setup that one dials out to the other one.

Main Practice -
Branch        -

I have then set (on the Branch) router the following route:

If I then request a server running on from the Branch, it correctly routes through VPN tunnel. If I request the branch server at it correctly routes to the local server without using the VPN tunnel.

I have temporarily disabled the firewall on both routers, and made sure that QoS is disabled.

The Main Practice internet connection is ~30mb down / ~10mb up, and the Branch connection is ~5mb down / ~2mb up.

Anything over the VPN tunnel runs pretty slowly (VNC, Remote Desktop and Terminal Emulators). However, if I dial using the Windows VPN wizard, creating a connection from the laptop to the Main Practice - everything runs quickly.

I'm looking for possible causes, and/or ways of further diagnosing the issue. Any help would be greatly appreciated!

UPDATE: In summary, when I connect within the Branch and try and access a host that's within the Main Practice it works, but slowly. If I then dial the VPN on my Windows 7 laptop whilst still connected to the Branch network, it's fast.

Main Practice Main Practice Branch Practice Branch Practice

Routing Table from Branch Router

Key: C - connected, S - static, R - RIP, * - default, ~ - private
*            via   WAN2
C~  directly connected   VPN-1
S~    via     VPN-1
S~    via     VPN-1
C~    directly connected    LAN2
C  directly connected    WAN2

Routing Table from Main Practice

Key: C - connected, S - static, R - RIP, * - default, ~ - private
*    via,   WAN2
S via,   WAN2
* via,   WAN2
C~ is directly connected,    VPN
C~ is directly connected,    LAN
S~ via,    VPN
S~ via,    VPN

Connection Details (from Branch Router)

Connection details from Branch Router

Connection Details (from Main Practice Router)

Connection details from Main Practice Router

IPERF.exe Output IPERF.exe output

If it helps, here is the output from the IPERF.exe server

IPERF.exe server

  • I'm not understanding the question or the problem. Could you rephrase the question? – joeqwerty Nov 10 '11 at 15:46
  • Sorry, hopefully it's clearer now? – dannymcc Nov 10 '11 at 15:54
  • fyi you don't need to specify the route manually as VPN remote subnets are added to the routing table anyway – BoyMars Nov 10 '11 at 16:06
  • also can you detail the options used in your lan-to-lan profile – BoyMars Nov 10 '11 at 16:08
  • I've added some screenshots of the lan-to-lan setups. I didn't realise I didn't have to explicitly set the routes. – dannymcc Nov 10 '11 at 16:21

Your VPN connection uses MPPE encryption, but according to router's page http://www.draytek.co.uk/products/vigor2830.html - MPPE have no hardware support. Try to setup something else as encryption protocol (AES/DES/3DES). IMHO it is available only with L2TP protocol.

| improve this answer | |
  • 1
    agreed, in this case try using an IPSec (AES) lan-to-lan profile instead of PPTP (uncheck the box for this on inbound) – BoyMars Nov 14 '11 at 13:02
  • It's looking likely that you've hit the nail on the head, I'll test some more and get back to you. Thanks! – dannymcc Nov 14 '11 at 14:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.