FRITZ!Box 7430 Service - Knowledge Base

FRITZ!Box 7430 Service
< back to result list

Setting up a VPN connection between two FRITZ!Box networks

Through VPN (Virtual Private Network), you can connect two FRITZ!Box networks at different locations with each other. In this case, a securely encrypted "data tunnel" is established over the Internet; this tunnel allows direct IP access to the devices in the other network and all IP-based services such as e-mail servers, data banks, and file servers can be used without restriction.

Important:If you only want to connect a home office or a POS system with a central office, you can restrict the VPN connection to individual LAN ports on the FRITZ!Boxes. Devices connected to the LAN ports you selected cannot access other devices in the local FRITZ!Box's network or use the local FRITZ!Box's Internet connection.

Example values used in this guide

In this guide we show you how to connect the FRITZ!Box networks "FRITZ!Box A" and "FRITZ!Box B" to each other. When you set up your connection, replace the values used in this example with actual ones.

  • MyFRITZ! domain name of FRITZ!Box A:
    pi80ewgfi72d2os42.myfritz.net
  • IP network of FRITZ!Box A:
    192.168.10.0 (subnet mask: 255.255.255.0)
  • MyFRITZ! domain name of FRITZ!Box B:
    kw23qbmnj31x5aw75.myfritz.net
  • IP network of FRITZ!Box B:
    192.168.20.0 (subnet mask: 255.255.255.0)
  • VPN password (pre-shared key):
    secret

Requirements / Restrictions

  • At least one of the two FRITZ!Boxes must obtain a public IPv4 address from the Internet service provider.

    Important:If both of the FRITZ!Boxes are used on Internet connections that use DS-Lite ("Dual-Stack Lite"), you cannot establish a VPN connection. When DS-Lite is active, the status "IPv4 over DS Lite" is displayed under "Connections" on the "Overview" page of the FRITZ!Box user interface.

  • FRITZ!OS 6.20 or later is installed on FRITZ!Box B.

Important:Some of the settings described here are only displayed if the advanced view is enabled in the user interface. The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS. 

1 Preparations

Setting up a MyFRITZ! account and determining the domain name

With MyFRITZ! you can even access your FRITZ!Boxes over the Internet at all times if the FRITZ!Boxes receive different public IP addresses from your Internet service provider on a regular basis:

Note:You can use a different dynamic DNS service instead of MyFRITZ!. Since the FRITZ!Box gives higher priority to configured MyFRITZ! accounts, disable MyFRITZ! under "Internet > MyFRITZ! Account" in the user interface before setting up the VPN connection.

  1. Set up a MyFRITZ! account in both of the FRITZ!Boxes.

    Note:You can either configure the same or different MyFRITZ! accounts in the two FRITZ!Boxes. Even if both FRITZ!Boxes use the same MyFRITZ! account, each FRITZ!Box has its own unique MyFRITZ! domain name.

  2. Determine the MyFRITZ! domain names of both of the FRITZ!Boxes.

Adjusting the IP networks

VPN communication cannot occur if both FRITZ!Boxes use the same IP network. Since all FRITZ!Boxes use the IP network 192.168.178.0 in the factory settings, enter IP addresses from different IP networks in the FRITZ!Boxes:

Example:
In this guide, FRITZ!Box A has the IP address 192.168.10.1 (subnet mask 255.255.255.0) and FRITZ!Box B the IP address 192.168.20.1 (subnet mask 255.255.255.0).

  1. Click "Home Network" in the FRITZ!Box user interface.
  2. Click "Home Network Overview" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click the "IPv4 Addresses" button.
  5. Enter the desired IP address and subnet mask.
  6. Click "OK" to save the settings.

2 Configuring FRITZ!Box A

  1. Click "Internet" in the user interface of FRITZ!Box A.
  2. Click "Permit Access" in the "Internet" menu.
  3. Click on the "VPN" tab.
  4. Click the "Add VPN Connection" button.
  5. Click "Connect your home network with another FRITZ!Box network (LAN-LAN linkup)" and then "Next".
  6. Enter the password required to establish the VPN connection (secret) in the field "VPN password (pre-shared key)".

    Important:To ensure optimal security, the VPN password should be at least 16 characters long. Use numerals and letters, and combine capitals and lower-case letters.

  7. Enter the MyFRITZ! domain name of FRITZ!Box B (kw23qbmnj31x5aw75.myfritz.net) in the "Web address" field.
  8. Enter the IP network of FRITZ!Box B (192.168.20.0) in the "Remote network" field.
  9. Enter the subnet mask that corresponds to FRITZ!Box B's IP network (255.255.255.0) in the "Subnet mask" field.
  10. Only enable the option "Hold VPN connection permanently" if FRITZ!Box B has a public IPv4 address and you would like to maintain the VPN connection at all times.
  11. Click "OK" to save the settings.

3 Configuring FRITZ!Box B

  1. Click "Internet" in the user interface of FRITZ!Box B.
  2. Click "Permit Access" in the "Internet" menu.
  3. Click on the "VPN" tab.
  4. Click the "Add VPN Connection" button.
  5. Click "Connect your home network with another FRITZ!Box network (LAN-LAN linkup)" and then "Next".
  6. Enter the password required to establish the VPN connection (secret) in the field "VPN password (pre-shared key)".

    Important:To ensure optimal security, the VPN password should be at least 16 characters long. Use numerals and letters, and combine capitals and lower-case letters.

  7. Enter the MyFRITZ! domain name of FRITZ!Box A (pi80ewgfi72d2os42.myfritz.net) in the "Web address" field.
  8. Enter the IP network of FRITZ!Box A (192.168.10.0) in the "Remote network" field.
  9. Enter the subnet mask that corresponds to FRITZ!Box A's IP network (255.255.255.0) in the "Subnet mask" field.
  10. Only enable the option "Hold VPN connection permanently" if FRITZ!Box A has a public IPv4 address and you would like to maintain the VPN connection at all times.
  11. Click "OK" to save the settings.

4 Establishing a VPN connection

If you enabled the option "Hold VPN connection permanently" in the FRITZ!Boxes, then the VPN connection will be maintained at all times.

If the option "Hold VPN connection permanently" is not enabled, then the VPN connection is automatically established whenever one of the networks accesses the other network and it is cleared again whenever it has been inactive for one hour.

Note:Active VPN connections are displayed in the user interface of both of the FRITZ!Boxes under "Internet > Permit Access > VPN".



Help topics:

< back to result list