Step 1:Login on vpn-matcher.draytek.com and create a new account

For example Login   ilan_support    pwd    xxxx

Step 2:Add a device  in VPN Matcher

Step 3:Fill in the Blanks. Keep the format for MAC address as shown (which can be found in the LAN MAC address)

Note that one Profile will be set as a VPN server=Yes      –   the second profile will be = No

Step 4:Get an Authkey by clicking on     My profile   click save to finish

Authkey:    for example   teLBAwUDsNPrjsRG

Step 5: Set first Router 1 – Go to VPN and Remote Access > VPN Matcher Setup

Router 1 –2862VAC   –  MAC    00-1D-AA-66-21-28

Step 6: Fill in the VPN Matcher Server =vpn-matcher.draytek.com

Account = as created before eg  ilan_support

AuthKey = as created as above   eg teLBAwUDsNPrjsRG

Step 7: Check the STUN server  using IP   77.72.169.212

Step 8:  Check the Profile created =  DIAL OUT  and   pre-shared key    =  test

Step 9: Check  IPSEC Security Method > Advanced   – check aggressive Mode – read Local ID  as test2

Step 10: Set up Router 2   – Go to VPN and Remote Access > VPN Matcher Setup

Router 2 –  2862ac   MAC 00-1D-AA-79-54-80

Step 11: Fill in the VPN Matcher Server =vpn-matcher.draytek.com

Account = as created before  eg  ilan_support

AuthKey = as created as above   eg teLBAwUDsNPrjsRG

Step 12: Check STUN server  at 77.72.169.212  if external IP is detected.

Step 13: Check that this profile  in vpn-matcher.draytek.com as set as VPN client  i.e NO

Step 14: See final results vpn-matcher.draytek.com

Step 15: Check the auto-created LAN to LAN profile.

This one should be a DIAL in profile and pre-shared key = test as created above.

Step 16: Check that the Local ID in the       Dial IN settings is as set up above i.e. test2

Step 17: Check the external IP seen by the Stun Server  – This IP address e.g. 49.181.191.188   will change each time the USB WAN reboots

But shows that the VPN stun server is working

Step 18: Final result in VPN and Remote Access>> Connection Management

However WAN fail over may not work as expected. Error below may appear

————————————————————————————————————————————————————-.https://www.draytek.com/about/newsroom/2019/draytek-released-a-new-service-VPN-matcher

DrayTek Released a New Service – VPN Matcher

2019-10-23

Today we released a new service – DrayTek VPN Matcher to help two routers, both behind NAT, find each other and establish a LAN-to-LAN VPN. The service allows VPN traffic to traverse the NAT. It’s the solution for multi-site companies with the need for VPN connections but cannot afford a public IP address.

How it works

To use the service, Network Administrator first needs to register an account at DrayTek VPN Match server and add the VPN peers into the account’s device list. Next, enable VPN Matcher on the VPN router’s GUI and input the credentials. The router will then communicate with the Matcher server to report its real IP address and port number and ask for the peers’ information. VPN Matcher will help the routers to find each other on a specified public IP and port so they can send the VPN traffic and establish a VPN connection.

Feature Availability

VPN Matcher is now available for Vigor2620LTE and VigorLTE 200n, in the latest firmware version 3.8.13. Vigor2762, Vigor2862, Vigor2133, Vigor2926, Vigor2952, and Vigor3220 are planed to support this feature in firmware version 3.9.2. Vigor2765 is planned to add this feature in firmware version 4.1.0.