Fritzbox 7560 built in VPN server?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Fritzbox 7560 built in VPN server?

Peppery

919 posts

Ultimate Geek

Trusted

#253145 29-Jul-2019 12:08

Hi all,

I've been trying to set up the built-in VPN server on our 2degrees supplied Fritzbox 7560 to no avail. I've had a look through other topics here and it seems other posters have got it working just fine, so I'm wondering what I'm doing wrong.

I've registered the router with the Myfritz service and as far as I can tell it's all setup correctly. I've tried connecting directly to our IP, the .myfritz.net DDNS setup and my own domain name (CNAME'd to the myfritz address, works with other port forwards just fine). I've set it up as per instructions on both an iPhone and a MacBook and can't connect (I am off the LAN when trying to connect obviously).

The Fritzbox is on 07.01 and I'm just about out of ideas here. Do I need to set up something in permit access perhaps?

timmmay

20574 posts

Uber Geek

Trusted

Lifetime subscriber

#2285188 29-Jul-2019 14:31

Did you read this thread about the 7390, especially the last post? I got it working ok. If you did, suggest you double check you did all the steps. It was a bit fiddly but didn't take too long.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2285337 29-Jul-2019 19:22

And does the client support L2TP/IPsec with pre-shared key (a.k.a. L2TP IPSEC Xauth PSK)?

Peppery

919 posts

Ultimate Geek

Trusted

#2285345 29-Jul-2019 19:34

The devils in the details. I poured through that thread and everything seemed OK. I then went through the German AVM site and noticed they had the “group name” filled out which I had missed. It connects just fine with that!

One more thing, what sort of speeds are you both able to get through your VPN connection? Mine seems to top out at 4mbit. I’m not expecting great speeds but I was hoping for a little more than this!

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2285352 29-Jul-2019 19:47

Depends on lots of things, has the chipset in the router got IPSEC acceleration if its all in software then <5Mb/s is reasonable, and further whats the other end got. VPN tech is not simple, and needs lots of CPU to do the math, if its not there then you have crap outputs.

I suggest if you want decent throughputs you invest in much better hardware, and of course the other end of the VPN also.

My job is all about VPNs, this is what I do all day to keep secrets ....................................................... secret.

Cyril

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2285360 29-Jul-2019 20:08

The Fritz!Box VPN is really fast actually.

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2285364 29-Jul-2019 20:17

Really fast by what method, what cryptography, this can significantly impact its throughput, and more importantly what's at the other end.

Cyril

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2285365 29-Jul-2019 20:18

Using the default settings, Microsoft Surface, Windows 10 built-in client, L2TP/IPsec with pre-shared key.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2285368 29-Jul-2019 20:25

Yep, but what bit length, what level and type of proposal. Most domestic type devices can only accelerate lower protocols, and if the other, still unknown end demands xyz, then you could end up without hardware acceleration.

Cyril

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2285374 29-Jul-2019 20:32

I don't know - and they don't publish this info it seems.

timmmay

20574 posts

Uber Geek

Trusted

Lifetime subscriber

#2285375 29-Jul-2019 20:32

With the older 7390 and an H+ (3G rather than my usual 4G) connection I got about 2Mbps up and 2Mbps down with the speedtest app single threaded. I could try again when I have 4G. I only use it to check home video cameras, I wouldn't typically use it for browsing unless I was on an unsecured public WiFi connection, which I rarely use - I just use data since work pays for it and I stay below my limit.

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2285377 29-Jul-2019 20:34

I still don't understand what this vpn is connecting to, what's at the other end, where, what and who.

Cyril

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2285381 29-Jul-2019 20:39

cyril7: I still don't understand what this vpn is connecting to, what's at the other end, where, what and who.

Cyril

This is the VPN server - the router is not connecting to anything else, a client is connecting to the router. I don't about the OP but I usually connect to my home router when using WiFi in New Zealand - hotels mainly. When overseas I use the Norton Secure WiFi service.

timmmay

20574 posts

Uber Geek

Trusted

Lifetime subscriber

#2285382 29-Jul-2019 20:42

Phone or device connects to the Fritzbox, and is effectively on the home LAN. From there the device can connect to internal resources on the LAN with a private IP or out to the internet.

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2285784 30-Jul-2019 14:42

I've used an ODroid C2 as an OpenVPN server and got 80mbit over WiFi. I was happy enough with that. Personally I would use OpenVPN and a slightly more grunty CPU than the one built into the router.