FRITZ!Box 7330 – Service - Knowledge Base

FRITZ!Box 7330 – Service

Setting up a VPN connection to the FRITZ!Box in Apple macOS

With VPN (Virtual Private Network), you can use your computer with Apple macOS to establish a secure connection to your FRITZ!Box over the Internet and then access all of the devices and services in the FRITZ!Box home network.

Example values used in this guide

In this guide we show you how to connect a computer with macOS 10.12 to the FRITZ!Box over VPN. When you set up your connection, replace the values used in this example with actual ones.

  • MyFRITZ! domain name of the FRITZ!Box:
    pi80ewgfi72d2os42.myfritz.net
  • User name of the FRITZ!Box user:
    John Smith
  • Password of the FRITZ!Box user:
    secret
  • Shared secret of the FRITZ!Box user:
    Zj7hPCouK65IrPU4

Requirements / Restrictions

  • macOS 10.6 or later is installed on the computer.
  • The FRITZ!Box must obtain a public IPv4 address from the Internet service provider.

    Important:The FRITZ!Box is not accessible from the Internet over IPv4 when used on a DS-Lite ("Dual-Stack Lite") connection. When DS-Lite is active, the status "IPv4 over DS Lite" is displayed under "Connections" on the "Overview" page of the FRITZ!Box user interface.

Important:Some of the settings described here are only displayed if the advanced view is enabled in the user interface. The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS

1 Preparations

Setting up MyFRITZ!

With MyFRITZ! you can even access your FRITZ!Box over the Internet at all times if its public IP address changes on a regular basis, for example after being automatically disconnected by your Internet service provider:

Note:If you already use a different dynamic DNS service, you can also use this service instead of MyFRITZ!.

Adjusting the FRITZ!Box's IP network

Both ends of the VPN connection must have IP addresses from different IP networks. VPN communication cannot occur if your computer is connected with a router (for example a FRITZ!Box) that has the same IP address as your FRITZ!Box.

Note:All FRITZ!Boxes use the IP network 192.168.178.0 in the factory settings.

Assign an IP address to your FRITZ!Box that differs from the IP addresses used by the routers via which you want to establish a connection to your FRITZ!Box with, for example 192.168.10.1 (subnet mask 255.255.255.0).

  1. Click "Home Network" in the FRITZ!Box user interface.
  2. Click "Network" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click the "IPv4 Addresses" button.
  5. Enter the desired IP address and subnet mask.
  6. Click "OK" to save the settings.

2 Setting up a VPN connection in the FRITZ!Box

In the FRITZ!Box, set up a different user for each VPN connection.

  1. Click "System" in the FRITZ!Box user interface.
  2. Click "FRITZ!Box Users" in the "System" menu.
  3. Click the (Edit) button for the user who intends to connect to the FRITZ!Box via VPN,
    • or, if you have not set up any users yet:
      • Click the "Add User" button and enter a name and password of your choice for the user in the corresponding fields.
  4. Enable the option "VPN".
  5. Click "OK" to save the settings.

Now the FRITZ!Box sets up the VPN rights for this FRITZ!Box user.
A window displaying the VPN settings for the FRITZ!Box user will then open automatically.

Note:You can call up the window any time by clicking "Show VPN Settings" in the settings for the FRITZ!Box user.

3 Setting up and establishing a VPN connection on the computer

Set up the VPN connection on the computer using the VPN settings displayed in the FRITZ!Box user interface for the FRITZ!Box user:

Note:You can access the VPN settings if you select "System > FRITZ!Box Users" in the user interface, call up the settings for the user, and click "Show VPN Settings".

  1. Open the "System Settings" in the Apple menu.
  2. Click "Network" in the "System Preferences" menu.
  3. Select the desired location, then click the plus sign below the list with the existing connections.
  4. Select the entry "VPN" from the drop-down list "Interface".
  5. Select the entry "Cisco IPSec" from the drop-down list "VPN Type".
  6. Enter a name of your choice (FRITZ!Box VPN) for the "Service Name" and then click "Create".
  7. Enter the MyFRITZ! domain name of the FRITZ!Box (pi80ewgfi72d2os42.myfritz.net) for the "Server Address".
  8. For the "Account Name", enter the name of the FRITZ!Box user (John Smith) who intends to connect to the FRITZ!Box via VPN.
  9. Enter the password for the FRITZ!Box user (secret) in the "Password" field.

    Important:If you enter the password here, a password will not be required to establish the VPN connection. Protect your computer with a password so that unauthorized persons cannot use the VPN connection.

  10. Click "Authentication Settings ...".
  11. In the "Shared Secret" field, enter the shared secret (Zj7hPCouK65IrPU) displayed in the VPN settings for the FRITZ!Box user.
  12. Enter the name of the FRITZ!Box user (John Smith) in the "Group Name" field.
  13. Click "OK" and then "Connect".