I have a Vigor2860n and would like to set up VPN for occasional checking (not teleworking) of all my home devices remotely via any modern web browser.
My intention is use use a friend’s router (which is a very basic one without VPN features) and my 2860n with VPN enabled, if such a connection is even possible?

My ADSL has a static IP address. My friend’s ADSL is dynamic.
All of my devices (PCs, IPCams, etc.) use internal static IP addresses in the form 192.168.1.xxx.
All my PCs run Linux O/S. My friend’s PC runs Windows10.

I am completely new to VPN. Reading through the 2860n manual is am confused as to which method of VPN that I need to configure for my simple remote access needs: LAN-to-LAN, Remote-Dial-in, SSL-VPN, etc. and whether it should be set as Route Mode/NAT Mode and so on, L2TP over Ipsec, other, etc.

I need recommendations and advice. I do not have high speed/throughput needs, but high security is essential.

Thanks for any help.

You mean you want to VPN from your friend's house?
This sounds fairly simple, especially as you have a fixed IP address.

You can prove the concept using PPTP and MS-windows built-in client as it's very simple, but that is NOT secure, so switch to using IPSec/L2TP for real usage.

For your application, you want to use Remote-dialin not LAN-to-LAN as it's just a single remote client.

See the online guides - they may be more useful than the manual.

Thanks for help. I shall look into this further.
As a follow-up question, is it possible to test the setup from within my own network (out via Internet and then back in using VPN)? From other posts I've seen I have been unable to dertemine definitely if it is possible.

I normally set up a mobile phone as a Hotspot... and test it that way.

I have discovered that my friend's internal network uses a different IP range and subnet (192.168.0.1, 255.255.255.0) to my home network (192.168.1.10, 255.255.255.0). Will this present a problem when using Remote-dialin with IPSec/L2TP ?
(sorry, same subnet as you can see)

GaryDrew wrote:
I have discovered that my friend's internal network uses a different IP range and subnet (192.168.0.1, 255.255.255.0) to my home network (192.168.1.10, 255.255.255.0). Will this present a problem when using Remote-dialin with IPSec/L2TP ?
(sorry, same subnet as you can see)

Different IP range is good - things get very confusing otherwise - though not insurmountably so.

However the numbers you have given are a little odd...
192.168.0.1 is an IP address, rather than a Network address. Did you mean to type 192.168.0.0 :?: or perhaps 192.168.1.0 :?:
192.168.1.10 is also an IP address (presumably of a specific machine on your home network) - so with the subnet mask given (255.255.255.0), that is a Network address of 192.168.1.0.