Draytek Vigor2136 Series User Manual page 216

Available settings are explained as follows:
Item
Enabled
Listen Port
Private Key
Generate Private Key
Public Key
Mode
Accept VPN
Connections on
Description
Switch the toggle to enable/disable the settings.
Enter a port number for WireGuard VPN server.
The default number is 51820.
Default Key Pairs
Displays the private key generated.
Generate – Click to generate keys (private and public) for the VPN
server.
It is required to be configured in the WireGuard VPN client router.
After clicking Generate, the public key will be shown on this page.
More settings –
Maximum TCP segment size (VPN MSS)
Set the maximum segment size (MSS) for different VPN types.
Auto Adjustment by WAN MTU – VPN MSS is the maximum data size
that can be sent in a single TCP packet. It should be set to a value
lower than the network's MTU to prevent fragmentation.
Manually - Please specify the MSS values for each type to avoid
packets cut by MTU during the data transmission period via the IPsec
VPN connection.
IPsec

WireGuard

OpenVPN

Listen on Interface
Select the WAN interfaces to accept WireGuard VPN connections.
All Interfaces – Accept the VPN connections on all WAN interfaces.
Specified Interface – Customize the WAN interface, IP address, and
VPN protocols which allow the VPN connections.
+Add – Click to have a new entry setting.

VPN Access List
206