Hi,

I have 2 Draytek Vigor 2860s, almost identical configuration and same firmware (3.8.9.1). I am trying to dial in using the Smart VPN Client 4.3.4, again with the same settings. One of them connects successfully, the other doesn't. Both only have TLS 1.2 selected in the TLS/SSL Encryption Setup under the Management page. The one that fails will only work if all TLS options are selected (i.e. TLS 1.0, 1.1. and 1.2). I have tried using different SSL ports to no avail. Help!

You could try Smart VPN Client V4.3.3.3 - see here for discussion of problems encountered with V4.3.4...

Are both 2860s "Remote" to you? The 2860 doesn't allow you to 'loopback' on its WAN port (even to a different LAN).

Failing that, my 'lack of detailed knowledge' approach, would be to examine the SYSLOG output of the two 2860s and see what is different during the session negotiations...

Thanks. Syslog shows nothing. The failing one doesn't even begin to negotiate a connection.
Both 2860s are remote, yes.
I have found version 5.0.0 of the Smart VPN client on Draytek's FTP site so will try that. I don't really want to go back to 4.3.3.3 due to the admin rights issue.

I know this is really basic but, are you sure you have the SSL VPN service enabled on the router that isn't connecting:-

VPN and Remote Access > Remote access control > Enable SSL VPN Service.

SSL VPN requires this, and it's in a different menu to the SSL VPN settings.

John.

The SSL VPN is definitely enabled but only works if TLS 1.0 is enabled.