- The FRITZ!Box uses 1024-bit Diffie-Hellman initial key exchange
(DH group 2). It then also accepts 768, 1536, 2048 and 3072 bit
(DH groups 1, 5, 14, and 15).
• Supported IPSec algorithms for IKE phase 2:
- Encryption method: AES with 256, 192, 128 bit, Triple DES with
168 bit or DES with 56 bit
- Hash algorithms: SHA2-512, SHA1 or MD5-96
- The Diffie-Hellman group is determined by IKE phase 1
- Compression: None
Connecting FRITZ!Box with a VPN Provider
With WireGuard, you can use your FRITZ!Box to establish a VPN con-
nection to an internet anonymization service (VPN provider). You can
specify whether all or only some of your devices in the home network
can access the internet via the VPN provider. The VPN provider must
support WireGuard.
IPv4 and IPv6 Network Traffic over VPN
The FRITZ!Box can establish VPN connections over both IPv4 and
IPv6. This means that VPN connections can also be established if the
FRITZ!Box is operated on an internet connection with Dual-Stack Lite
(DS-Lite).
However, the FRITZ!Box can only transmit IPv4 data within the VPN
tunnel. It is not possible to access IPv6 web services or devices in the
remote network over the VPN connection if they are only available via
IPv6.
Maximum Number of Simultaneous VPN Connections to the FRITZ!Box
In the FRITZ!Box you can configure several VPN connections and use
them at the same time. It does not matter whether the connections
are IPSec or WireGuard connections, connections from a computer or
smartphone, connections to another FRITZ!Box or a company VPN.
FRITZ!Box 7590 AX 115
User Interface: Internet Menu
• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •
• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •