FRITZ!Box 3370 Service - Knowledge Base

FRITZ!Box 3370 Service

No IP communication over VPN connection between two FRITZ!Box networks

Although a VPN connection is established between two FRITZ!Boxes, computers and other devices in the network of one of the FRITZ!Boxes cannot access shared files and printers or other services in the network of the other FRITZ!Box. Devices in the remote network do not respond to pings.

Important:Some of the settings described here are only displayed if the advanced view is enabled in the user interface. The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS

Simply proceed as described below. After each measure, check whether the issue persists.

1 Deleting static IP routes

If static IP routes are set up in the FRITZ!Boxes that point to the IP network of the other FRITZ!Box, reliable VPN communication is not possible.

Delete all such static IP routes in both FRITZ!Boxes:

  1. Click "Home Network" in the FRITZ!Box user interface.
  2. Click "Network" or "Home Network Overview" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click the "IPv4 Routes" button.
  5. In the table, disable or delete all entries where the IP network of the remote FRITZ!Box is entered in the "Network" column.

    Example:
    The remote FRITZ!Box uses the IP address 192.168.10.1 with the subnet mask 255.255.255.0. This means that no static route may be active for the IP network 192.168.10.0.

  6. Click "OK" to save the settings.

2 Configuring parental controls to allow Internet access

If the FRITZ!Box parental controls block Internet access for a device, then the device also cannot be accessed over a VPN connection.

Therefore, make sure that the respective devices are allowed to access the Internet:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Parental Controls" tab.
  4. If Internet access has been restricted or blocked for the device you would like to access over VPN, configure the parental controls so that the device has unrestricted Internet access.

3 Configuring a network device as a DHCP client

To ensure that the network device always uses the correct IP settings, make sure that it is configured as a DHCP client (this is the standard setting for most devices and operating systems):

4 Correcting the VPN settings

If the IP address (xxx.xxx.xxx.1) of the remote FRITZ!Box is entered as the "destination network" instead of its IP network (xxx.xxx.xxx.0), you can only access the remote FRITZ!Box itself over the VPN connection.

Example:
A FRITZ!Box has the IP address 192.168.10.1 with the subnet mask 255.255.255.0. This means that the IP network of this FRITZ!Box is 192.168.10.0.

In order to rule out incorrect IP settings for the VPN connection, reconfigure it: