VPN over Local LAN

I have an older Access Point that only supports WEP.

I've heard that if one routes any WiFi traffic over a VPN connection
then that would nulify the vulnerability of the WEP protocol.

I have a router (Vigor 2600) that has a built in VPN server, I have used
this successfully for external VPN connections to my network but I
cannot get a connection from within my LAN.

It hangs on 'Verifying username and password'.

I suspect it is something to do with the IP addresses.

My router issues the IP addresses for the local network as well as the
VPN, my Access Point is plugged in to my router and gets its address
from the router.

Anyone done this before and able to give me some clues.

Geoff Lane

Geoff Lane <(E-Mail Removed)> wrote:
> I've heard that if one routes any WiFi traffic over a VPN connection
> then that would nulify the vulnerability of the WEP protocol.

Not completely true. The VPN session will encrypt between its two
endpoints, so in your case no-one will be able to see traffic between
your PC and the Vigor router. However, use of the VPN will not stop
anyone breaking WEP and using your wifi for free.


> I have a router (Vigor 2600) that has a built in VPN server, I have used
> this successfully for external VPN connections to my network but I
> cannot get a connection from within my LAN.

> It hangs on 'Verifying username and password'.

Many consumer grade routers cannot cope with internal references to
their WAN address. This would equally apply to the VPN engine on such
devices. Have you tried running VPN to the router's internal (LAN)
address?

Chris

Chris Davies wrote:

>> I've heard that if one routes any WiFi traffic over a VPN connection
>> then that would nulify the vulnerability of the WEP protocol.
>
> Not completely true. The VPN session will encrypt between its two
> endpoints, so in your case no-one will be able to see traffic between
> your PC and the Vigor router. However, use of the VPN will not stop
> anyone breaking WEP and using your wifi for free.

Hmm, yes, I didn't think of that but at least any traffic within the VPN
would be secure eg. banking etc

>> I have a router (Vigor 2600) that has a built in VPN server, I have used
>> this successfully for external VPN connections to my network but I
>> cannot get a connection from within my LAN.
>
>> It hangs on .
>
> Many consumer grade routers cannot cope with internal references to
> their WAN address. This would equally apply to the VPN engine on such
> devices. Have you tried running VPN to the router's internal (LAN)
> address?

Initially I gave just my router's local address, my VPN shows as
connecting but hangs on 'Verifying username and password'

I have a dynamic IP address but have an account with dynamicDNS so can
use that for external connections.

I'm thinking it may be an IP address problem as if I try to connect
internally I will get two addresses on the same subnet.

Geoff Lane

(E-Mail Removed) declared for all the world to hear...
> Chris Davies wrote:
>
> >> I've heard that if one routes any WiFi traffic over a VPN connection
> >> then that would nulify the vulnerability of the WEP protocol.
> >
> > Not completely true. The VPN session will encrypt between its two
> > endpoints, so in your case no-one will be able to see traffic between
> > your PC and the Vigor router. However, use of the VPN will not stop
> > anyone breaking WEP and using your wifi for free.
>
> Hmm, yes, I didn't think of that but at least any traffic within the VPN
> would be secure eg. banking etc
>
> >> I have a router (Vigor 2600) that has a built in VPN server, I have used
> >> this successfully for external VPN connections to my network but I
> >> cannot get a connection from within my LAN.
> >
> >> It hangs on .
> >
> > Many consumer grade routers cannot cope with internal references to
> > their WAN address. This would equally apply to the VPN engine on such
> > devices. Have you tried running VPN to the router's internal (LAN)
> > address?
>
> Initially I gave just my router's local address, my VPN shows as
> connecting but hangs on 'Verifying username and password'
>
> I have a dynamic IP address but have an account with dynamicDNS so can
> use that for external connections.
>
> I'm thinking it may be an IP address problem as if I try to connect
> internally I will get two addresses on the same subnet.

Change the Vigor to assign an IP in a different subnet. It can handle
two subnets so try one subnet for the LAN IP range and eg 192.168.1.1 to
192.168.1.254 and the second subnet for VPN addresses 192.168.2.1 to
192.168.2.254.
--
Regards
Jon