How to use ExpressVPN on DrayTek DrayOS routers

router

Need a VPN for your router?

Get ExpressVPN Now
refer a friend

Love ExpressVPN? Want a free month?

Refer a friend now

This tutorial will show you how to set up ExpressVPN on your DrayTek DrayOS router using the L2TP protocol.

DrayTek DrayOS routers include: Vigor 2120, 2132, 2133, 2710, 2760, 2762, 2820, 2830, 2850, 2860, 2862, 2920, 2925, 2930, 2926, 2952, 3200, and 3220.

Sections

Find your ExpressVPN account credentials
Configure your DrayTek router with the VPN
Configure split tunneling on your DrayTek router
Connect to another VPN server
Disconnect from the VPN


Find your ExpressVPN account credentials

To begin, sign in to your ExpressVPN account.

sign in to your expressvpn account
Once you have signed in to the website, click on Set Up on More Devices.

set up on more devices windows
Click on Manual Config on the left side of the screen and then select PPTP & L2TP-IPSec on the right. This will show you your username, password, and a list of server addresses around the world.

Please keep this information on hand as you will need it to configure your DrayTek router.

copy pptp and l2tp info
Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top


Configure your DrayTek router with the VPN

Access your router’s control panel by entering the LAN IP address (default: 192.168.1.1) in your browser. Then log in with your username and password (default: admin / admin).

On the left-side menu, go to VPN and Remote Access > LAN to LAN.

The DrayOS LAN to LAN menu.

Under 1. Common Settings:

  • Profile Name: enter a name of your choosing
  • Enable this profile: checked
  • VPN Dial-Out Through: choose a Dial-Out WAN policy (e.g., WAN1 First)
  • Call Direction: Dial-Out
  • Always on: checked

The DrayTek router’s Common Settings screen, with relevant settings highlighted.

Under 2. Dial-Out Settings:

The DrayTek router’s Dial-Out Settings screen, with relevant settings highlighted.

Under 5. TCP/IP Network Settings:

  • Remote Network Mask: 0.0.0.0 / 00
  • From first subnet to remote network, you have to do: NAT

The DrayTek’s router’s TCP/IP Network Settings screen, with relevant settings highlighted.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top


Configure split tunneling on your DrayTek router

You can use DrayOS’s Policy Route feature to select which traffic goes through the VPN tunnel and which does not.

To use the Policy Route feature, go to Routing > Load-Balance/Route Policy.

The DrayOS Load-Balance/Route Policy menu.

Under Index: 1:

  • Enable: checked
  • Comment: enter a name of your choosing
  • Protocol: enter the protocol you want to send through the VPN connection
  • Source: enter the IP address you want to send through the VPN connection
  • Destination: enter the IP address you want to reach through the VPN connection
  • Destination Port: enter the port you want to reach through the VPN connection
  • Interface: VPN
  • Failover to: WAN/LAN
  • Gateway: Default Gateway
  • Failback: checked

The DrayTek router’s Routing >> Load-Balance/Route Policy screen, with relevant settings highlighted.

To verify the VPN connection is working, go to VPN and Remote Access > Connection Management to verify traffic is flowing through the VPN tunnel.

The DrayTek router’s VPN and Remote Access >> Connection Management screen, showing VPN Connection Status.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top


Connect to another VPN server

To use another VPN server, you will need to create a new VPN profile with a different server address.

Next, go to Routing > Load-Balance/Route Policy and change the VPN Interface to the new VPN profile. This is because only one VPN connection can be active at any time.

The DrayTek router’s VPN Interface screen, with the Default Gateway setting highlighted.

Alternatively, you can create a new Route Policy if you only want to send specific traffic to the new VPN profile.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top


Disconnect from the VPN

To disconnect the VPN connection, go to VPN and Remote Access > LAN to LAN.

Uncheck the box next to the connection name, then click OK at the bottom of the page.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Was this article helpful?1 0 Undo