VPN

Internet / Permit Access / VPN

VPN stands for Virtual Private Network. VPN is a possibility for transmitting data safely via the internet. Security in a VPN is ensured by transmitting the data encrypted via what is known as a tunnel. The tunnel is the virtual connection.

The terminals of the tunnels can be individual computers or entire networks. Field representatives can connect with the corporate network over VPN. Via VPN you can access the home network of the FRITZ!Box safely with a smartphone. The local network at a branch office can also be connected to the local network of company headquarters via VPN. Both of the locations securely connected over VPN must have an internet connection.

Click on the "Apply" button to save your settings. If you leave the page without saving, all of your changes will be discarded.

VPN in the FRITZ!Box:

VPN in the FRITZ!Box is based on the IPSec standard.
Up to eight VPN connections can be configured and, theoretically, used at the same time.

Computer-LAN linkup: individual network devices can be integrated securely into the FRITZ!Box network over a VPN connection.
LAN-LAN linkup: the FRITZ!Box network can be connected securely with another network at a distant location over a VPN connection.
Connect FRITZ!Box with a VPN: the FRITZ!Box can be connected like a remote user using a VPN, for instance a corporate VPN.

Limitations

Some operating modes of the FRITZ!Box do not support VPN connections.

Wireless repeater	Note: When the FRITZ!Box is configured as a WLAN repeater, you cannot set this FRITZ!Box up for VPN connections. During repeater operation you must set up VPN in the FRITZ!Box that is configured as a wireless access point.
IP client	Note: When the FRITZ!Box is operated as an IP client on a router in the network, this FRITZ!Box cannot be configured for VPN connections. In this case you must set up VPN in the router used to establish the Internet connection.

Table with the VPN connections

The overview table lists all of the VPN connections configured in the FRITZ!Box.

Column	Meaning
Enabled	The VPN connection is released for use. The VPN connection is blocked for use.
name	The name of the VPN connection in the FRITZ!Box. Users who have been set up in the FRITZ!Box over the "System / FRITZ!Box Users" menu and have been assigned VPN rights are listed here with their user names.
Address in the Internet	When a VPN connection has been established, the public IP address of the remote site is displayed here.
local network	The non-public IP address of the destination network on the local end, that is, the FRITZ!Box. The internal tunnel packets arriving at the FRITZ!Box end of the tunnel must have destination addresses from this destination network. If the destination address of a packet is not from this network, the packet will be discarded. If the network address 0.0.0.0 is entered here, then packets with any destination address will be accepted and forwarded. Then all of the remote site's data traffic will be processed over the VPN connection.
Remote Network	The non-public IP address of the remote end. LAN-LAN linkup: for LAN-LAN linkups, this is the local IP address of the remote network. The internal tunnel packets arriving at the FRITZ!Box end of the tunnel must have sender addresses from this network. Remote user: In the case of a remote user, the IP address the FRITZ!Box assigned to the remote user appears here. This IP address is entered as the sender address for all internal tunnel packets.
Status	The VPN connection has been established. The VPN connection has not been established.
	For LAN-LAN connections and connections to a company VPN, the VPN connection is opened in editing mode. Remote connections for users and imported VPN configurations cannot be edited here. The button is not active for such connections. Remote connections for users can be edited in the "System / FRITZ!Box Users" menu. Imported VPN configurations are edited with a suitable program, for instance the "Configure FRITZ!Box VPN Connection" software.
	Deletes the VPN connection.