FRITZ!Box 4020 Service - Knowledge Base
IP communication over VPN connection between two FRITZ!Box networks not possible
Although the VPN connection between two FRITZ!Boxes is established, computers and other devices in the network of one of the FRITZ!Boxes cannot access shared files and printers or other services in the network of the other FRITZ!Box. Devices in the remote network do not respond to pings.
Simply proceed as described below. After each measure, check whether the problem persists.
Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.
1 Deleting static IP routes
If static IP routes are set up in the FRITZ!Boxes that point to the IP network of the other FRITZ!Box, reliable VPN communication is not possible.
Delete all such static IP routes in both FRITZ!Boxes:
- Click "Home Network" in the FRITZ!Box user interface.
- Click "Network" or "Home Network Overview" in the "Home Network" menu.
- Click on the "Network Settings" tab.
- Click the "IPv4 Routes" button. If the button is not displayed, enable the Advanced View first.
- In the table, disable or delete all entries where the IP network of the remote FRITZ!Box is entered in the "Network" column.
The remote FRITZ!Box uses the IP address 192.168.10.1 with the subnet mask 255.255.255.0. This means that no static route may be active for the IP network 192.168.10.0.
- Click "OK" to save the settings.
2 Restarting the FRITZ!Box
You may be temporarily unable to correctly establish the VPN connection due to an error with the FRITZ!Box or your internet connection. Therefore, restart the FRITZ!Box so that it reinitializes the firewall and re-establishes the internet connection:
- Click "System" in the FRITZ!Box user interface.
- Click "Backup" in the "System" menu.
- Click on the "Restart" tab.
- Click the "Restart" button.
3 Configuring the device to automatically obtain IP settings
To ensure that the device always uses the correct IP settings, make sure that it automatically obtains its IP settings from the FRITZ!Box (this is the standard setting for most devices):
- Configure the device to automatically obtain IP settings via DHCP.
4 Configuring the firewall
- If a firewall is installed on the device, configure it so that it does not block communication with the remote FRITZ!Box's IP network (for example 192.168.20.0). Refer to the manufacturer of the firewall for information on how to set it up, for example consult the manual.
5 Deleting VPN connections and reconfiguring them
If the IP address (xxx.xxx.xxx.1) of the remote FRITZ!Box is entered as the "destination network" instead of its IP network (xxx.xxx.xxx.0), you can only access the remote FRITZ!Box itself over the VPN connection.
A FRITZ!Box has the IP address 192.168.10.1 with the subnet mask 255.255.255.0. This means that the IP network of this FRITZ!Box is 192.168.10.0.
To rule out incorrect IP or other VPN settings in one of the FRITZ!Boxes, reconfigure the VPN connection:
- Delete the VPN connection in the user interface of both of the FRITZ!Boxes.
- Reconfigure the VPN connection between both of the FRITZ!Box networks.