Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[LondonCalling]

Just received my DIR-880L - bought primarily for the inbound VPN Server facility.

As far as I can see, the inbound VPN is restricted to a single user.  You can set up just one username and password.  And that's it.  There is no place I can see to add a second or third user etc.

I've never seen a VPN router before that is designed for a network with only one user.

Am I missing something?  The function is called Quick VPN.  Is there another way to add additional VPN users?  

Will a firmware update address this limitation?

If this limitation is intentional, the marketing information should make it clear this is a one-user VPN server.

[FurryNutz]

Link>Welcome!

• What Hardware version is your router? Look at sticker under router.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

[LondonCalling]

Hardware Version: A1
Firmware Version: 1.01

[FurryNutz]

What region are you located?

I've put in an email to D-Link about this to see what the expected behavior should be. I'll post back if I get some info. 

[LondonCalling]

UK

Hope D-Link can fix this with a firmware update - and be clear about this significant limitation to buyers in the meantime.

[gmlink]

I'm considering buying 880L for same reason (L2TP/IPsec VPN server).

Since you use VPN on 880L, I wonder if you could answer one question that I was not able to find on net:

Is IP address that 880L give to remote VPN client in same range as local LAN IP address?

In other words, if my home LAN is 192.168.1.x , will my remote windows VPN client get address like 192.168.1.55 , or it will be from completely different range, like 10.10.10.55 ?

Reason I ask is that first option is what I need, because only in that case windows VPN client will be able to find all devices in my home LAN even if I do not set VPN connection to my home as "default internet gateway". In such scenario (which I presume is common, since most people want to keep going to internet from where their client PC is, rather thru VPN and then their home link), Windows only add VPN network to its route table, and if client VPN address was 10.10.10.55, then only 10.10.10.x will be added to Windows route table - resulting in Windows not being able to find any of my home 192.168.1.x devices.

There is complicated workaround for this, requiring to add permanent route for 192.168.1.x to windows client, and to make that route active only if VPN is active, and not to get deleted afterwards (hence "complicated" workaround) - but worst problem is that it needs to be added to any potential client.

[FurryNutz]

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email. I'll post back if I hear anything from my side.

Let us know how it goes please.

UK

Hope D-Link can fix this with a firmware update - and be clear about this significant limitation to buyers in the meantime.

[LondonCalling]

Gmlink - re the IP address allocated to the incoming VPN client:

I am not a VPN expert but, from memory the VPN client gets an address in the same subnet as all the other locally-connected devices. 

The router seems to ignore the DHCP Range in Network Settings on the router, and there is no option on the router to choose the IP address that the VPN client will be allocated.  So if the router DHCP settings are to allocate DHCP devices IP addresses 192.168.1.50 to 192.168.1.100, the VPN client might be allocated 192.168.1.2.   

There is only one VPN client allowed so we're only talking about one IP address, and I don't think you can set it.   I'm not sure if it changes each time used or if it is always 192.168.1.2.  The VPN settings on this router are very limited compared to the Draytek or Billion home-use routers I have used before.

My iPhone VPN settings are "Route All Traffic: On" so internet is routed through router - which is the opposite of what I think gmlink is seeking.   

I'm considering buying 880L for same reason (L2TP/IPsec VPN server).

Since you use VPN on 880L, I wonder if you could answer one question that I was not able to find on net:

Is IP address that 880L give to remote VPN client in same range as local LAN IP address?

In other words, if my home LAN is 192.168.1.x , will my remote windows VPN client get address like 192.168.1.55 , or it will be from completely different range, like 10.10.10.55 ?

Reason I ask is that first option is what I need, because only in that case windows VPN client will be able to find all devices in my home LAN even if I do not set VPN connection to my home as "default internet gateway". In such scenario (which I presume is common, since most people want to keep going to internet from where their client PC is, rather thru VPN and then their home link), Windows only add VPN network to its route table, and if client VPN address was 10.10.10.55, then only 10.10.10.x will be added to Windows route table - resulting in Windows not being able to find any of my home 192.168.1.x devices.

There is complicated workaround for this, requiring to add permanent route for 192.168.1.x to windows client, and to make that route active only if VPN is active, and not to get deleted afterwards (hence "complicated" workaround) - but worst problem is that it needs to be added to any potential client.

[LondonCalling]

D-Link technical support have confirmed:
"Yes that is correct. The QuickVPN setup in this device only allows for one username and password to be entered at any one time."

So no hint that this serious limitation might be addressed with a firmware release. 

I contend that a VPN server that is designed to serve just one user is a pretty serious limitation.  If D-Link doesn't want to be accused of trying to mislead purchasers, the marketing of this product should make the limited VPN function very clear - or fix it so it works like a true VPN server.

btw I tried phone and email for support. 

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email. I'll post back if I hear anything from my side.

Let us know how it goes please.

[FurryNutz]

I think you may need to look and review at what the meaning maybe behind "QuickVPN". This maybe a marketing project however looking at this, "QuickVPN" maybe just that, only meant for one "QuickVPN" access. It may not be actually intended to be a full on VPN server with unlimited access. D-Link maybe setting up for limited VPN use since again, this model router and others are not Business class routers and they may not want to impact those routers which do have full VPN features. The limitation maybe just what D-Link designed for the home use. Maybe D-Link thought of that for some home users, only one access maybe needed since maybe only one user would be at home and not having multiple people from home working on VPN.   If users are working with more then one, then a business class router maybe needed. Again, these are home class routers and most D-Link home class routers are mainly VPN pass thru only.

I'll have my contact at D-Link review this to confirm it for this model router.