Like every other website on the planet, SmallNetBuilder uses cookies. Our cookies track login status, but we only allow admins to log in anyway, so those don't apply to you. Any other cookies you pick up during your visit come from advertisers, which we don't control.
If you continue to use the site, you agree to tolerate our use of cookies. Thank you!

Router Charts

Click for Router Charts

Router Ranker

Click for Router Ranker

NAS Charts

Click for NAS Charts

NAS Ranker

Click for NAS Ranker

More Tools

Click for More Tools

LAN & WAN Reviews

VPN Site-to-Site

Figure 15 below from D-Link's Product Data Sheet depicts using two D-Link DFL routers to create a site-to-site VPN connecting two small office LANs. As you can see in this example network, there is a Mail Server in the Small Office LAN on the left, which is securely accessible to the PCs in the Satellite Office LAN on the right, via this VPN.

Site-to-site VPN
Click to enlarge image

Figure 15: Diagram of a typical site-to-site VPN

Compared to the VPN Client, site-to-site VPN functionality was easy. I was able to set up a site-to-site VPN using a DFL-CPG310 at one location and a Linksys RV042 as the other. 

With the Site-to-Site configuration wizard, I used AES-128 Encryption and SHA-1 Authentication for IPSec Phase 1 and Phase 2 negotiation. I selected Diffie-Hellman Group 1 on both Phase 1 and Phase 2, and enabled Keep Alive to keep the tunnel active. 

Each side used the other's Dynamic DNS to locate and recognize the other side, and authentication was handled through a manually entered Shared Secret Key (PSK), which is a common text string you enter on both routers. Figure 16 is a status screen from the DFL-CPG310 showing the VPN has been successfully established, linking the /24 LAN of the D-Link to the /24 LAN of the Linksys.

VPN status
Click to enlarge image

Figure 16: VPN status screen showing connection
Check out the slideshowFor more detail, please see the slide show of screen shots showing all the configuration options selected on both the D-Link and the Linksys.

I was impressed with the D-Link's site-to-site VPN stability and resiliency. I left this site-to-site VPN running continuously, and it remained up for the several weeks I tested this router. I configured a couple of the PCs on the D-Link LAN to run automatic backups to a storage device on the Linksys LAN over this VPN, and they all ran without error.


Let's take a look at the throughput measurements from our Router Performance Charts in Figure 17 and Figure 18 below. Comparing WAN to LAN and LAN to WAN throughput for routers with VPN capability, we can see the DFL-CPG310's performance is near the top with 39 Mbps WAN to LAN and 45 Mbps LAN to WAN throughput.

WAN to LAN Throughput
Click to enlarge image

Figure 17: WAN to LAN throughput comparison chart

LAN to WAN Throughput
Click to enlarge image

Figure 18: LAN to WAN throughput comparison chart

More LAN & WAN

Wi-Fi System Tools
Check out our Wi-Fi System Charts, Ranker and Finder!

Support Us!

If you like what we do and want to thank us, just buy something on Amazon. We'll get a small commission on anything you buy. Thanks!

Over In The Forums

Device: RT-N66UFirmware: 380.69Hello everyone,i attached a tp-link access point to my router and created vlans for several SSIDs.In addition i would l...
Hello, I'm looking for advice for the build in the subject line. I'm a landscape architect starting my own small office. It will be two people at firs...
Is this ok to do ? Also allow only specified ip address.I want to do this my for cousins so i don't have to go over there every time.I notice the 86u ...
Hi,I want to assign my virtual machines to a certain dhcp range.I have been playing around with dnsmasq.conf.add but cant get it to work.This is what ...
Hi allIt seems that devices on 5G-1 and 5G-2 cannot "see" each other.On Wireshark it seems some packets can't traverse from one 5G band to the other. ...

Don't Miss These

  • 1
  • 2
  • 3