Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[snowcrashed]

I recently upgraded from a DIR-825 to the 880L and absolutely love it. Everything has been a breeze to set up and connection speeds are excellent. I set up QuickVPN recently to close a few port forwards and manage my home server (Win 8.1) a little more securely. Using a GS5 on Android 5.0 and can I connect securely to the 880L. The issue is that I can't see any network resources while connected. All services work perfectly when connected to the LAN. I've tried RDP, SSH, browsing other computers and network shares but none of it seems to be accessible. I CAN browse the internet however. Whatismyip reports my home WAN IP when connected so some gears are spinning somewhere. These are my settings currently:

DIR-880L
General
L2TP over IPSec: Enabled
Username: ********
Password: ********
PSK: ********

Advanced Settings...
Authentication Protocol: MSCHAPv2
MPPE: RC4-128

Galaxy S5
Settings>Connections>More Networks>VPN>Basic VPN

Type: L2TP/IPSec PSK
Server Address: *******
L2TP secret: Not used
IPSec identifier: Not used
IPSec pre-shared key: **********
DNS search domains: Not used
DNS servers: Not used
Forwarding routes: Not used

I will send $20 to anyone who can help me figure this out! 

[FurryNutz]

Link>Welcome!

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?

The nature of most VPNs are to only have access to resouces on the VPN network only while connected to it. All other resources are not available until you disconnect. Would kind of defeat the purpose of VPN to allow other resourses during VPN connections...

Basic VPN Troubleshooting and Suggestions

[snowcrashed]

Furry thanks for the reply here and via PM. Here's my router info:

DIR-880L Rev A1
FW: 1.04WW
Region: NA

I checked your guide and others. Things I tried:

Disabled SPI, ALG, IPV4 Multicast... no luck

I have a syslog server running and something I noticed is my vpn connection gets assigned the ip 192.168.100.1 and 100.2. My dhcp range is 192.168.0.100 - .120. Could this be the issue?

[snowcrashed]

After researching this a little more it appears putting VPN clients on a seperate subnet is normal behavior. Here's what the 880 reports when a client connects:



Since VPN and LAN clients are on different subnets, how do they communicate? Networking and VPN are still new to me, do I need to use a static route for this? Thanks in advance for any help, I'm not easily confused but networking... 

[FurryNutz]

https://en.wikipedia.org/wiki/Virtual_private_network

[snowcrashed]

Furry, thanks for your help. It seems that VPNs do not route broadcast traffic (which would make things a lot simpler) without some effort. Bridging LAN and VPN subnets would be a good solution and is easy, but the 880L cannot do this with VLANS on stock firmware. My misunderstanding of how VPN works made me think you could tap into a network securely and use it like you were physically connected but VPN doesn't do that. Thanks for your help, wish we could have figured out a way to do this!

[FurryNutz]

Why they are call VPNs. You might try a dedicated firewall or VPN device or a dedicated managed switch with VLAN support. I don't have much experience with them. There maybe a configuration that maybe suited for your needs there. These home class routers are designed for the average to some advanced home users and have some limits on what they can do.

[snowcrashed]

So, here's what I learned about connecting Android devices via stock VPN app to the Dlink DIR-880L (and other routers with similar setups) via L2TP/IPSEC :

- 192.168.0.x (LAN) and 192.168.100.x (VPN) subnets are connected by default. Not sure if that means they are bridged (no mDNS traffic was detected), but they do talk. There's no need to do anything fancy in the router setup for this

- Communication that works with LAN clients over VPN (that I know of): HTTP, SSH, RDP, FTP

- Browsing SMB (shares): not possible without some kung fu. ES File Explorer and other android apps don't talk SMB over VPN very well apparently. FTP servers DO work. I set one up on IIS (local scope only) and everything connects immediately

Just wanted to share what I found for anyone else interested

[FurryNutz]

Thanks for the info... 

[DoughBoy]

So, here's what I learned about connecting Android devices via stock VPN app to the Dlink DIR-880L (and other routers with similar setups) via L2TP/IPSEC :

- 192.168.0.x (LAN) and 192.168.100.x (VPN) subnets are connected by default. Not sure if that means they are bridged (no mDNS traffic was detected), but they do talk. There's no need to do anything fancy in the router setup for this ...

Just what I needed... thank you for sharing!

[snowcrashed]

Just what I needed... thank you for sharing!

No problem  Always share findings and discoveries to help others 

[FurryNutz]

Thank you sir.