I have set up a LAN to LAN IPSEC VPN for VOIP use between two sites using Draytek routers. One end is a 2860 (Set to dial out, always on) and the other is a 2830 (Dial in, timeout = 0). I set it up using the excellent Draytek guide and it worked straight away, and connects reliably, and keeps connected.

Now, at the 2860 end, there is a second WAN connection available. What is the best or correct way to take advantage of this second connection? Obviously it will have a different IP address from the first. But simply adding a second Dial-out connection for the additional WAN and adding another Dial-in connection at the other end won't do it, as there isn't a need for both to be up at the same time. What I need is some way of telling the routers that one or the other WAN connection can be used, but not necessarily both. Is the best way to do this to set up a VPN trunk? Or is there another/better way? Or should I just get both connections to be up and be happy with that?

The main concern is that if one of the WAN connections should drop, the other should be used to establish the VPN link. And vice versa.

All suggestions gratefully received.

Richard

The easy way to do that is to configure Dial IN VPN profiles for each WAN on the Vigor 2830, so that it will accept the VPN tunnel from either IP address that the 2860 can use.

In the 2860's VPN profile, set the VPN Dial-Out Through setting to WANx First, that way it will use that WAN if available and use the backup WAN if that main WAN interface drops.

Brilliant, thanks. I'll give that a go. So simple when you know!

Richard