ER605 does not retry VPN connection

ER605 does not retry VPN connection

ER605 does not retry VPN connection
ER605 does not retry VPN connection
2024-02-12 11:26:41 - last edited 2024-02-23 02:50:25
Tags: #VPN
Model: ER605 (TL-R605)  
Hardware Version:
Firmware Version:

If the VPN server is not available when the router restarts and then subsequently comes online the ER605 does not seem to attempt to connect to it once it comes online.

This is using a LAN-to-LAN connection, which works fine if the server is available when the router is restarted.

Am I missing a setting or is this a problem with the router?

  0      
  0      
#1
Options
2 Accepted Solutions
Re:ER605 does not retry VPN connection-Solution
2024-02-20 03:21:03 - last edited 2024-02-23 02:50:25

  @NathanJPhillips 

 

I'm going to have make some assumptions here in the absence of useful info, feel free to correct them and maybe we'll get closer to the bottom of this.

 

I suspect you have 'a 3rd party server' and an ER605 as opposed to a pair of ER605's or even just two TPlink routers trying to talk to each other.

I suspect you don't actually have a static IP at either end and are in fact using DDNS for the server end (you haven't bothered to or cannot do that on the ER605 end).

I suspect when your server 'goes down', it's public IP changes and your DDNS service is slow to detect the IP change and update the DDNS record.

 

The above would explain what you are seeing.

 

My recommendation is to make the ER605 end the L2TP client.  Stand up the L2TP server at the other end.  You should be able to repeatedly bounce the ER605 end and it should always reconnect within ~3min of reset/powerup.  If you can prove that to yourself, then you can move on because the trouble is actually at the server end.

<< Paying it forward, one juicy problem at a time... >>
Recommended Solution
  0  
  0  
#11
Options
Re:ER605 does not retry VPN connection-Solution
2024-02-21 00:38:08 - last edited 2024-02-23 02:50:50

  @NathanJPhillips 

 

Have a look at this thread:

 

https://community.tp-link.com/en/business/forum/topic/634228?replyId=1269906

<< Paying it forward, one juicy problem at a time... >>
Recommended Solution
  1  
  1  
#16
Options
14 Reply
Re:ER605 does not retry VPN connection
2024-02-12 14:22:23

  @NathanJPhillips 

 

What VPN type are you using?  I use L2TP/IPsec and they always come back up, no matter which end I bounce.

<< Paying it forward, one juicy problem at a time... >>
  0  
  0  
#3
Options
Re:ER605 does not retry VPN connection
2024-02-12 22:54:19

  @d0ugmac1 I'm using PPTP because the ER605 end does not have a static IP address.

 

When you say bounce, do you mean just briefly disconnect? Have you tried leaving the server offline for an extended period and then seeing whether the ER605 reconnects? Perhaps it gives up after a while. My server was down for about a day and since it went up again about 12 hours ago the ER605 doesn't seem to have retried the connection.

  0  
  0  
#4
Options
Re:ER605 does not retry VPN connection
2024-02-12 23:28:42

  @NathanJPhillips 

 

Everything from a power glitch to a 2 day storm outage and it always comes back up.

<< Paying it forward, one juicy problem at a time... >>
  0  
  0  
#5
Options
Re:ER605 does not retry VPN connection
2024-02-18 02:44:09

Hi @NathanJPhillips 

Thanks for posting in our business forum.

Try L2TP instead of PPTP. PPTP is outdated.

 

Like what the other member wrote, it should reconnect.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  0  
  0  
#6
Options
Re:ER605 does not retry VPN connection
2024-02-19 09:19:13
@Clive_A did you see the message saying that the ER605 does not have a static IP address? How would you use L2TP without a static IP address?
  0  
  0  
#7
Options
Re:ER605 does not retry VPN connection
2024-02-19 09:33:38 - last edited 2024-02-23 02:50:46

  @NathanJPhillips 

 

you use L2TP the same way as PPTP, there is no difference except that L2TP is more secure.

 

but if you use LAN to LAN or Site to Site, I would recommend IPSec site to site VPN, which also works well with dynamic IP. you need to use no-ip or another dynamic dns service to connect by name instead of ip.

  1  
  1  
#8
Options
Re:ER605 does not retry VPN connection
2024-02-19 09:37:53
  1  
  1  
#9
Options
Re:ER605 does not retry VPN connection
2024-02-20 01:39:11

Hi @NathanJPhillips

NathanJPhillips wrote

@Clive_A did you see the message saying that the ER605 does not have a static IP address? How would you use L2TP without a static IP address?

? Why does it matter? If you don't have a static IP, how do you use PPTP? What is the difference?

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  1  
  1  
#10
Options
Re:ER605 does not retry VPN connection-Solution
2024-02-20 03:21:03 - last edited 2024-02-23 02:50:25

  @NathanJPhillips 

 

I'm going to have make some assumptions here in the absence of useful info, feel free to correct them and maybe we'll get closer to the bottom of this.

 

I suspect you have 'a 3rd party server' and an ER605 as opposed to a pair of ER605's or even just two TPlink routers trying to talk to each other.

I suspect you don't actually have a static IP at either end and are in fact using DDNS for the server end (you haven't bothered to or cannot do that on the ER605 end).

I suspect when your server 'goes down', it's public IP changes and your DDNS service is slow to detect the IP change and update the DDNS record.

 

The above would explain what you are seeing.

 

My recommendation is to make the ER605 end the L2TP client.  Stand up the L2TP server at the other end.  You should be able to repeatedly bounce the ER605 end and it should always reconnect within ~3min of reset/powerup.  If you can prove that to yourself, then you can move on because the trouble is actually at the server end.

<< Paying it forward, one juicy problem at a time... >>
Recommended Solution
  0  
  0  
#11
Options
Re:ER605 does not retry VPN connection
2024-02-20 23:13:45

@d0ugmac1 Thanks for raising some questions to help me provide more useful background.

The server is a DrayTek Vigor 2925, the client a TP-Link ER605.

The server is at the static IP address 81.2.80.129 and has been for many years, this won't change.

If the server is up the client connects reliably to it but if the connection drops the client does not reconnect until it is rebooted.

The client is behind NAT - I might be able to get someone to make the NAT server forward inbound traffic to the ER605 but I don't know this for sure yet.

As mentioned above I am using PPTP.

We are OK with the level of security provided by PPTP but a totally unencrypted L2TP wouldn't work for our use case.

I believed L2TP with IPSec wouldn't work because the client does not have a static IP address, I can try to use DDNS but because it is behind NAT I am not sure this would work so haven't yet tried. Is it worth trying to get this working?

  0  
  0  
#12
Options

Information

Helpful: 0

Views: 1075

Replies: 14

Tags

Related Articles