The invention discloses a method and system for router VPN network connection. The method comprises the steps that a S100 internal network router and an external network client verify the legitimacy of the identities of each other. A S200 internal network router establishes a safe channel to be connected with the external network client, and implements a key agreement with the external network client on the safe channel. A S300 internal network router controls and makes sure that the router itself can match with the channel configuration of the external network client, and pushes configuration parameters related with VPN to the external network client to establish VPN network connection. By establishing the VPN connection between the router and the client and using the VPN technology to connect the router network, the encryption is good, the adaptability is high, and the method and system is flexible, and not easy to be blocked.