Recommend:
To the knowledge base
Knowledge document #200

FRITZ!VPN cannot establish a VPN connection to FRITZ!Box

The FRITZ!VPN software cannot establish a VPN connection to the FRITZ!Box. One of the following error messages may be displayed in the FRITZ!VPN journal:

  • "Timeout, could not contact the remote site."
  • "Could not resolve the name of the remote site."
  • "The VPN connection cannot be established because FRITZ!VPN could not find any active connection to the internet. Please connect to the internet first."

Simply proceed as described below. After each measure, check whether the problem is solved.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Public IP address required for access

So that FRITZ!VPN can establish a VPN connection to the FRITZ!Box, the FRITZ!Box must obtain a public IPv4 address from the internet service provider. If the FRITZ!Box only obtains a private IPv4 address, it is not possible to establish a VPN connection.

You can find out whether the FRITZ!Box obtained a public or private IPv4 address by following the steps in our guide Identifying the address range of the IPv4 address for the internet connection.

2 Maintaining a permanent internet connection

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Account Information" in the "Internet" menu.
  3. Click "Change connection settings".
  4. Enable the option "Maintain permanently (recommended for flat rates)". If the option is not shown, the FRITZ!Box is already permanently connected to the internet.
  5. Click "Apply" to save the settings.

3 Checking the login status of the FRITZ!Box's domain name

If the VPN connection occasionally cannot be established, there may be an issue with the MyFRITZ! or dynamic DNS service. Therefore, check whether the FRITZ!Box is successfully logged into MyFRITZ! or the dynamic DNS service when you try to establish the VPN connection:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Online Monitor" in the "Internet" menu.
  3. If MyFRITZ! is active or dynamic DNS is "logged on successfully", continue with the next section.
    • If MyFRITZ! is not active or "logged on successfully" is not displayed for dynamic DNS, wait until the technical issues have been resolved and try to establish the VPN connection at a later time. If the error is permanent, reconfigure the MyFRITZ! or dynamic DNS account, or refer to the corresponding provider.

4 Adapting the IP Networks

For VPN communication to occur, the computer with FRITZ!VPN and the FRITZ!Box must use different IP networks. If the computer with FRITZ!VPN and the FRITZ!Box are in the same IP network, you must adjust either the IP settings of the computer with FRITZ!VPN or the IP network of the FRITZ!Box:

Example:
In the factory settings, all FRITZ!Boxes use the IP network 192.168.178.0 (IP address 192.168.178.1, subnet mask 255.255.255.0).
If the computer with FRITZ!VPN is connected to a FRITZ!Box and both the local and remote FRITZ!Boxes use the IP network 192.168.178.0, VPN connections cannot be established.
If the computer with FRITZ!VPN has the IP address 192.168.20.13 (subnet mask 255.255.255.0), it is located in the IP network 192.168.20.0 and can establish a VPN connection to the FRITZ!Box.

Adjusting the IP settings of the computer with FRITZ!VPN

  1. Adjust the IP network of the router (for example FRITZ!Box) from which the computer with FRITZ!VPN obtains its IP address. If the computer does not obtain its IP settings via DHCP, change the IP settings on the computer itself.

Adjusting the FRITZ!Box's IP network

  1. Click on "Home Network" in the FRITZ!Box user interface.
  2. Click on "Network" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click on the "IPv4 Addresses" button.
  5. Enter the desired IP address and subnet mask.
  6. Click on "OK" to save the settings and on the FRITZ!Box, confirm that the procedure may be executed if asked to do so.

Now the FRITZ!Box uses the new IP network. Reconfigure the VPN connection in FRITZ!VPN and the FRITZ!Box so that the computer with FRITZ!VPN also obtains an IP address from the new IP network after establishing the VPN connection.

5 Configuring a firewall for FRITZ!VPN

If the computer with FRITZ!VPN is protected by a firewall on the computer or an upstream router, you may have to open ports and enable IP protocols in the firewall that are required by FRITZ!VPN before you can establish a VPN connection:

  1. Configure the firewall for FRITZ!VPN.

6 Mobile broadband driver is not supported

The FRITZ!VPN software currently cannot be used with the mobile broadband driver for Windows 8 / 7 or Huawei ("HUAWEI Mobile Connect"). If the internet connection is established by a mobile broadband modem or a mobile network dongle and the modem or dongle uses this driver, FRITZ!VPN cannot establish a VPN connection.

Workaround

You can use the FRITZ!VPN software if the mobile broadband modem or mobile network dongle can also be used without a mobile broadband driver:

  1. Configure the mobile broadband modem or mobile network dongle so that it uses a driver other than the mobile broadband driver from Windows 8 / 7 or from Huawei, for example a "WAN-Miniport(IP)" driver.

    Note:Refer to the manufacturer for information on using the mobile broadband modem or mobile network dongle with other drivers, for example consult the manual.

7 Deleting a VPN connection and reconfiguring it

If the VPN connection cannot be established at all, then the VPN configuration in FRITZ!VPN or the FRITZ!Box is incorrect, for example due to a typing error, an incorrect MyFRITZ! address, or errors made when editing the CFG file. Therefore, reconfigure the VPN connection:

  1. Delete the VPN connection in the Configure FRITZ!Box VPN Connection software.
  2. Delete the VPN connection in the FRITZ!VPN software and in the FRITZ!Box.
  3. Reconfigure the VPN connection between FRITZ!VPN and the FRITZ!Box.
Language selection