Skip to Content

Troubleshooting VPN Connectivity: Draytek VPN User Can’t Ping Across LAN to LAN VPN to Site B

  • To troubleshoot the VPN connectivity problem between Draytek Vigor 2927 (Site A) and Meraki (Site B), first verify the consistency of LAN-to-LAN IPsec settings and confirm that LAN devices at both sites can communicate successfully.
  • Review the SSL VPN profile for Site A users and ensure it includes the necessary routing to direct traffic through the VPN tunnel to Site B.
  • Diagnose any configuration differences between the Draytek Vigor 2927 and the previous Draytek Vigor 3900, enable logging and debugging, keep firmware updated, and consider seeking support if the issue persists.

Resolving VPN Connectivity Issues between Draytek Vigor 2927 (Site A) and Meraki (Site B)

If you’re experiencing difficulties with a VPN user connecting from Draytek Vigor 2927 (Site A) to access devices at Site B via LAN to LAN IPsec to Meraki, follow these steps to diagnose and potentially resolve the issue:

Solution 1: Verify LAN-to-LAN Configuration

Double-check the LAN-to-LAN IPsec configuration on the Draytek Vigor 2927 at Site A. Ensure that the settings, including the pre-shared key, encryption methods, and phase 1/2 settings, match those configured on the Meraki device at Site B. Any discrepancies can lead to connectivity problems.

Solution 2: Check LAN-to-LAN Functionality

Confirm that LAN devices at both sites (Site A and Site B) can successfully ping devices on the other LAN through the VPN tunnel. This step is crucial for ensuring the basic LAN-to-LAN connectivity.

Solution 3: Review SSL VPN Configuration

Focus on the SSL VPN profile for users connecting to Site A. Make sure the configuration includes the necessary routes to direct traffic through the VPN tunnel to Site B. Verify that the “add more routing” option is correctly set up. Any misconfigurations here can result in users being unable to access Site B.

Solution 4: Diagnose Changes with Vigor 2927

Since you mentioned that the setup worked with a Draytek Vigor 3900 at Site A, it’s essential to identify any differences in configuration between the two Draytek devices. Check if the 2927 has any additional settings or requirements that might be affecting VPN traffic.

Solution 5: Log and Debug

Activate logging and debugging features on both the Draytek 2927 and Meraki devices to monitor the VPN connection in real-time. This will help identify any specific issues or errors that might be occurring during the connection process.

Solution 6: Firmware Updates

Ensure that both the Draytek 2927 and Meraki devices are running the latest firmware versions. Sometimes, firmware updates include bug fixes and improvements that can resolve compatibility issues.

Solution 7: Reach out to Support

If the issue persists and remains unresolved, consider reaching out to Draytek or Meraki support for expert assistance. They can provide guidance and troubleshoot the problem based on your specific configuration.

By following these steps and ensuring consistency in your configurations, you can increase the chances of successfully resolving the VPN connectivity issue between the Draytek Vigor 2927 at Site A and the Meraki device at Site B.


Troubleshooting VPN connectivity issues is essential for ensuring seamless communication between Draytek Vigor 2927 (Site A) and Meraki (Site B). By following the provided steps, users can identify and potentially resolve problems that may be preventing proper network access. Consistency in configuration and careful review of settings can significantly improve the chances of a successful VPN connection.


The information and steps provided in this response are intended as general guidance for troubleshooting VPN connectivity issues. Network configurations can vary, and specific issues may require different solutions. It’s essential to exercise caution and seek expert assistance if you’re unsure about any configuration changes or if problems persist. The steps outlined should be carried out with care and consideration for the unique requirements of your network setup.

Alex Lim is a certified IT Technical Support Architect with over 15 years of experience in designing, implementing, and troubleshooting complex IT systems and networks. He has worked for leading IT companies, such as Microsoft, IBM, and Cisco, providing technical support and solutions to clients across various industries and sectors. Alex has a bachelor’s degree in computer science from the National University of Singapore and a master’s degree in information security from the Massachusetts Institute of Technology. He is also the author of several best-selling books on IT technical support, such as The IT Technical Support Handbook and Troubleshooting IT Systems and Networks. Alex lives in Bandar, Johore, Malaysia with his wife and two chilrdren. You can reach him at [email protected] or follow him on Website | Twitter | Facebook

    Ads Blocker Image Powered by Code Help Pro

    Your Support Matters...

    We run an independent site that is committed to delivering valuable content, but it comes with its challenges. Many of our readers use ad blockers, causing our advertising revenue to decline. Unlike some websites, we have not implemented paywalls to restrict access. Your support can make a significant difference. If you find this website useful and choose to support us, it would greatly secure our future. We appreciate your help. If you are currently using an ad blocker, please consider disabling it for our site. Thank you for your understanding and support.