Do bazy wiedzy
Dokument informacyjny #230

Accessing multiple IP networks behind a FRITZ!Box over an IPSec VPN between two FRITZ! networks

IPSec allows you to connect two FRITZ! networks at different locations over a secure, encrypted VPN connection (LAN-LAN linkup).

If there is another router in one of the two FRITZ! networks that connects the IP network of this FRITZ! network with a second IP network, you must configure additional settings in order to be able to access network devices in the second IP network over the VPN connection.

Example values used in this guide

In this guide we show you how to configure access from the network of a FRITZ!Repeater in a branch to another IP network behind a FRITZ!Box in the headquarters. When adjusting the connection settings, replace the values used in this example with your actual values.

  • IP network of the FRITZ!Repeater (branch):
    192.168.20.0 (subnet mask: 255.255.255.0)
  • IP network of the FRITZ!Box (headquarters):
    192.168.10.0 (subnet mask: 255.255.255.0)
  • IP network of the router connected to the FRITZ!Box (headquarters):
    192.168.11.0 (subnet mask: 255.255.255.0)
  • IP addresses of the router in network of the FRITZ!Box (headquarters):
    192.168.10.2 and 192.168.11.1

Requirements / Restrictions

  • The Configure FRITZ!Box VPN Connection software was used to configure the VPN connection.

    Note:The Configure FRITZ!Box VPN Connection software is available for Windows 10 / 8 / 7 on the VPN service portal.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Repeater.

1 Setting up the FRITZ!Repeater (branch)

  1. Start the Configure FRITZ!Box VPN Connection software.
  2. In the "Existing Configurations" window, select the MyFRITZ! address of the FRITZ!Repeater (branch) (pi80ewgfi72d2os42.myfritz.net) and click on "Explorer".
  3. Open the file named "fritzbox_[...].cfg" with a text editor, for example WordPad.
  4. Look for the entry "accesslist" and add the IP network of the router connected to the FRITZ!Box (headquarters) to this entry:
    • accesslist =
    • "permit ip any 192.168.10.0 255.255.255.0",
    • "permit ip any 192.168.11.0 255.255.255.0";

      Important:The entries for the IP networks must be separated by a comma and the value for "accesslist" must end with a semicolon.

  5. Save the changes and import the edited file "fritzbox_[...].cfg" to the FRITZ!Repeater (branch).

2 Configuring a static IP route in the FRITZ!Box (headquarters)

Configure a static IP route in the FRITZ!Box (headquarters) to allow devices to access the router's IP network (192.168.11.0) over the FRITZ!Box (headquarters):

  1. Click "Home Network" in the user interface of the FRITZ!Box (headquarters).
  2. Click "Network" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click "Additional Settings" in the section "WAN setting" or "LAN Settings" to display all of the settings.
  5. Click "IPv4 Routes".
  6. Click "New IPv4 Route".
  7. Enter the IP network of the router (192.168.11.0) connected to the FRITZ!Box (headquarters) as the "IPv4 network".
  8. Enter the subnet mask of the other IP network (255.255.255.0) in the "Subnet mask" field.
  9. For the "Gateway", enter the IP address of the router in the network of the FRITZ!Box (headquarters) (192.168.10.2).
  10. Enable the option "IPv4 route active".
  11. Click "Apply" to save the settings.

3 Adjusting additional IP settings for the VPN connection

Configuring an IP Route in the other router

  1. Configure the router so that it routes between the IP network of the FRITZ!Box (headquarters) (192.168.10.0) and its own IP network (192.168.11.0). Refer to the router's manufacturer for information on how to set it up.

    Note:If a Windows computer with several network adapters is used as the router, "IP routing" must be enabled in Windows. Refer to Microsoft for information on configuring IP routing.

Configuring devices in the other router's IP network

  1. Either: Configure the IP address of the router from its own IP network (192.168.11.1) as the default gateway on the devices.
    • Or: On the devices, configure a static IP route to the IP network of the FRITZ!Box (headquarters) (192.168.10.0) that uses the router as the gateway (192.168.11.1).
Wybór języka