All set - new profile
Type SSL Tunnel
with username and password as suggested

You mean SSL Tunnel ?

However - connection never gets to the router OR the router is not configured to accept it.

Is the Draytek the actual 'outside' edge device or is there a Virgin 'thing' stuck in-between the Draytek & the internet ?

Virgin Hub3 is defo set to Modem/Bridge mode.

Router -> Hub3 -> Internet

Well the fact that the client here doesn't fail for authentication reasons means that it never gets to the router as far as I'm concerned. Go back to the Hub3 and confirm everything there.

OR

Possibly try changing the port that SSL VPN is using in :-
VPN and Remote Access / SSL General Setup (say 8443) - and we can retry. This is just in-case the Hub3 is intercepting port 443 traffic.

... And funny that you should ask that.
I had a Synology device moaning that it couldn't do updates because more than one router was found on the network.
I've alleviated that but there is only 1 router and the Synology is not doing any DHCP to get in the way either.
What I have done successfully, is map the necessary ports over to Synology and run VPN Server there but I really want to isolate VPN to the router if I can.

You've changed the port haven't you...?

I now fail to connect because of authentication...so I got to the router.    Should be some syslog entries now too then....


So there's your answer - 443 was in-use by 'something else' - could be the Hub3 , could be the Draytek itself (e.g. the main GUI)