I've found my Father-in-laws Orange vDSLbroadband has this problem, ie vpn shows it's connected but all traffic is actually routed via base connection and not via the vpn. I've not tried disabling the Intruder Detection yet as this sounds rather drastic! An alternative could be to allow pptp (point to point tunnelling protocol), or ipsec etc as required. This would be safer and might work provided the 'external ping' issue is not controlled by some other aspect of intruder detection that cant be controlled by a rule. Has anyone tried this?

In reply to a post by tobiz:

I've found my Father-in-laws Orange vDSLbroadband has this problem, ie vpn shows it's connected but all traffic is actually routed via base connection and not via the vpn. I've not tried disabling the Intruder Detection yet as this sounds rather drastic! An alternative could be to allow pptp (point to point tunnelling protocol), or ipsec etc as required. This would be safer and might work provided the 'external ping' issue is not controlled by some other aspect of intruder detection that cant be controlled by a rule. Has anyone tried this?

Tried all the firewall & intruder detection setting options and none allowed vpn to my Draytek 2820 router. Since I know this can be done, eg from Bt Infinity broadband setup I conclude vpn over EE is not possible. I assume somewhere in the Orange contract small print it specifies this but have not looked. Not having vpn is very restrictive especially since the previous Orange broadband kit permitted it.

It's not quite the same but I had problems getting usable VOIP with a Brightbox. Replacing the Brightbox router with a Draytek solved the problem instantly.

The EE network was fine, the Brightbox was crippled.

I think the Brightbox has severe limitations when it comes to using it for anything other than basic web connectivity.

Try a different router locally - I'm assuming the Draytek you refer to in your post is at the office. If not, sorry!

In reply to a post by caffn8me:

It's not quite the same but I had problems getting usable VOIP with a Brightbox. Replacing the Brightbox router with a Draytek solved the problem instantly.

The EE network was fine, the Brightbox was crippled.

I think the Brightbox has severe limitations when it comes to using it for anything other than basic web connectivity.

Try a different router locally - I'm assuming the Draytek you refer to in your post is at the office. If not, sorry!

Thanks for the reply. My father-in-laws setup seems to be an EE Bright Box connected to a BT Infinity box. I think the Bright box is the router and the BT box the vDSL terminator (probably normally placed on the wall next to the BT Master socket). I think you are right that the local wifi network from the Brightbox is ok it's the Bright box router part that is the problem not passing on VPN packets. BTW the router is not in an office, it's my private one. At some time I might try replacing the EE Brightbox with another vDSL capable router (such as a Fritz!Box), set that up so it has vDSL on the broadband side and a standard network on the other. As I said I'm pretty convinced it's the EE Bright Box router as I've been able to VPN to my Draytek from lots of places and by lots methods, eg wifi, cabled lan etc. The real problem is I need to get at least VPN to work to my router before attempting to connect my wife's laptop via VPN to her office from her father's home network; I have no idea what her company uses for their VPN but my guess that it has the words Cisco and Microsoft somewhere in the chain.

I've had good results getting various Drayteks to connect VPNs with each other and with Watchguards of assorted flavours - all using IPsec.

The Drayteks I now run VPNs on are all VDSL routers without the BT Openreach modem. I haven't had a chanc to play with a FritzBox yet.

A Netgear DG834 ADSL router connected to Watchguard by VPN but had treacle slow throughput (less than 1Mbps).

I think the Brightbox is probably borked.

Good luck!