Draytek smart VPN – configure router

Draytek refer to users who use VPN’s to connect to folders on a remote server as tellyworkers.

Prerequisites

Before starting, get a list of user names of the people who need remote access. Create very secure passwords for them and store securely.

Ensure the shared resource is available for the tellyworker. Once connected, the end users computer username and password is used to access the shared resource.

The same username the telly worker uses to log on to their computer (if it is not a PIN or Microsoft account) may be used but this is not recommended.

Please note that some Draytek models may have a slightly different menu options.

Please ensure the router has that the router is a currently supported model and it is updated with the most recent version of its firmware.

Create the user and set the SSL Tunnel

Log into the Router and go to ‘VPN and Remote Access’ > Remote Dial-In User’.

Select the next available index (in this case it is Index 1).

Enter the tellyworks Username and Password.

Under ‘Allowed Dial-In Type only select SSL tunnel’ as shown in the pic below.

Click ‘OK’ to save this profile.

If you are asked by your web browser to save your password say ‘No‘.

Next, go to ‘VPN and Remote Access‘ > ‘Remote Access Control‘ and select ‘Enable SSL VPN Service‘ as in the pic below.

Next, go to your SSL VPN setup. This link may be in different locations on your Draytek router but in this sample router it is in ‘VPN and Remote Access‘ > ‘SSL General Setup‘. It may however be in ‘SSL VPN‘ > ‘General Setup‘. Essentially, it’s the same thing.

Please note, we have changed the port number from the default ‘443‘ to ‘444‘.

Remember, when configuring the client software – set the port number to 444. We use port 444 to avoid clashing with HTTPS access to the router. That’s the router configured.

Some Draytek routers have a built in DDNS service but this service is beyond the scope of this web page.