• P1280
  • AP920R
  • 3910

How to Use Central VPN Management (CVM)

Introduction of CVM

Central VPN Management (CVM) is an easier way to establish and manage VPN connections between several CPE (VPN clients). It allows Administrator on the CVM Router to:

  • Set up VPN connections with just one click
  • Backup and restore CPE configurations
  • Upgrade firmware for CPE
  • Manage multiple CPEs simultaneously


Vigor 2860/2925

Vigor 2960

Vigor 3900

Maximum number of CPE




In the following example, we demonstrate how to use CVM on a VPN server to manage the VPN network with CPEs. There will be three parts of the notes,

A. Configuration of CVM Router and CPEs.

B. VPN network Management

Part A. Configuration of CVM Router and CPEs

For CVM to work, it requires settings on both CVM Router(VPN server) and the CPEs, The following are the detailed instruction of the configurations.

  1. [On CVM Router] Set up CVM: Go to  Central VPN Management  >>  General Setup
    1. In General Settings tab, Enable  CVM Port, and enter a  port number .

    2. Copy the URL of ACS server. (This will be used for settings on CPEs)

      Note : URL with https and http is for CVM SSL Port and CVM Port respectively.

    3. Select a WAN interface for  WAN IP for Remote Connection .

    4. In IPsec VPN Settings tab, enter  Username  and  Password .

    5. Select the  Local Subnet  to establish VPN connection.

  2. [On CVM Router] Enable CVM Access Control: Go to System Maintenance  >> Management , make sure the CVM Port is enabled.


  3. [On CPEs] Set up TR-069: Go to System Maintenance  >> TR-069
    1. Paste the URL of ACS server copied from CVM settings on VPN server.

  4. [On CPEs] Enable Internet Access Control: Go to System Maintenance  >> Management , enable Allow management from the Internet and make sure TR069 server is enabled.

    After the above configuration, the CPE is connected to CVM Router, and we can see the device appears in the Unmanaged Device List of CVM Router.

  5. [On CVM Router] Edit the  Managed Device List: Go to  Central VPN Management  >>  CPE Management  >>  Managed Devices List.
    1. Select the CPE device in Unmanaged Devices List, enter a  Description Name  and its  Location , then click  Add  to add it to Managed Devices List.

    2. After that, the CPE will appear in  Managed Devices List  with  its name and IP address. Also double click on the item for detailed information.


  6. [On CVM Router] Observe the location of CPEs on Google Map: Go to  Central Management  >>  CPE Management , in  Google Map  tab shows the location of each CPE.

Part B. VPN Network Management 

To establish VPN connection: Go to Central VPN Management >> VPN Management.

  1. The VPN Management page shows all the devices in Managed Device List and their connection status.

  2. Move the cursor to a device to show its detailed information.
  3. Click on a device to show the VPN type options, then click on one of the options to establish VPN connection. In both PPTP and IPsec, the system will give a username and password automatically; however, Administrator could change the encryption methods by choosing “Advanced”.

  4. Wait a few second and refresh the page, we will see the VPN connection is on and the connection information is in the CPE VPN Connection List below.

  5. After that, both CPE and VPN server will create a LAN-to-LAN profile in VPN and Remote Access >> LAN to LAN.

Administrator could also change the VPN type in VPN Management page, and the settings will applied to the LAN-to-LAN profile automatically.

Part C. CPE Maintenance

In this part, we will demonstrate an example of CPE maintenance. Assuming Administrator wants a CPE to backup its configuration and stored in an USB once a day. This can be done from the VPN server with CVM. 

  1. Create a schedule for the configuration backup: Go to  Application  >>  Schedule , click on an index number to add a schedule profile.
    1. Select the  Start Date  and  Start Time  as the time for CPE to backup its configuration.


  2. Go to Central VPN Management  >> CPE Management  >> CPE Maintenance , make sure there is a USB disk connected to the router. 

  3. Add a CPE Maintenance profile: In the CPE Maintenance page, click on an index number to add a new profile.
    1. Enter the  Profile Name .

    2. Enter the  Schedule  proflie index.

    3. Click OK to save.

  4. After the configuration backup, go to  USB Application  >>  File Explorer  to check if the configuration files has been saved successfully.


  • News
    Evénements, Nouveauté
    Pour en savoir plus sur les nouveautés et événements DrayTek.
    Cliquez ici
    Informations produits
    Accédez ici à nos catalogues, solutions, produits, matrice produits, informations techniques...
    Cliquez ici
    Aides Technologies
    Accéder ici à notre rubrique Technologie, Etude de cas, Médiathéque, aides techniques...
    Cliquez ici
    Solutions d'affaires
    Accéder ici aux solutions d'affaires, que vous soyez une TPE, PME, micro-entreprise...
    Cliquez ici


Nom (*)
Please let us know your name.
Email (*)
Please let us know your email address.