@avpopov1977 

you cannot create a route to an OpenVPN tunnel. routing must be pushed by the OpenVPN server, there is nothing ru can do on the router to do that.

  @MR.S 

hmm... do you mean routing had to be provided only from OpenVPN server? 

even for ER8411 clients before the NAT?

it is very disappointing information....

i hope to upgrade L2TP to OpenVPN by ER8411.

  @avpopov1977 

yes there is no policy route on OpenVPN yet. but it comes in Omada version 5.15 so it's probably not too long.
L2TP has policy route if it is an option

  @MR.S 

Looks I have an Idea about "crutches"

+one more Wan at er8411 in Static IP mode

+er605 as OpenVPN Client

+static routes all I need to this Wan!

Looks awfuly stupid but will work..

Thanks! I will wait Omada 5.15 very much )

Best Regards.

  @avpopov1977 

that sounds good, I do the same with Wireguard. have created a WAN to which I have connected a router that run wireguard client and run policy route via the WAN interface to the other router. works perfectly :-)

  @MR.S 

It is so disappointing to spent cash for er8411 as a VPN solution and to use er605 for VPN client... ((

I hope TP-Link will upgrade VPN abilities in er8411 soon. As for now my old er6120 works much more faster and had no such troubles as you can see at the picture:

Extra CPU Load causer by pressing "Disconnect" button at my PPPoE Wan.

er6120 works fine for 5 years with the same providers... 

This bug already transferred via my TP-Link national support team....

P.S. OpenVPN via er605 gave only 10Mbps, L2TP had 150+ Mbps.....

Best Regards.

  @avpopov1977 

yes agree, but now the policy route to both OpenVPN and Wireguard is coming soon. the only thing that worries me is that the ER8411 doesn't work well with OpenVPN. I did a test yesterday, I set up an OpenVPN client tunnel against a Unifi UCG-Ultra as server and ER8411 and ER706W as client, and ER706W which is a much slower router. I have not converted it to Mbps so you get the result in MB/s

On the ER8411, the download was about 5-6 MB/s. On the ER706W, I downloaded 15 MB/s and the ER8411, which is supposed to handle over 4000 MBps.

how much can your ER8411 transfer via OpenVPN?

  @MR.S 

MB is Mbits or Megabytes?

I made OpenVPN server at er8411, connected via Iphone useing OpenVPN app:

DL = 32 Mbits, UL = 2 Mmits.. Good enough for LTE.

How your er8411 feels if to Disconnect - Connect one of WAN Interfaces?

Can you show CPU graph?

avpopov1977 wrote

  @MR.S 

 

 

 

How your er8411 feels if to Disconnect - Connect one of WAN Interfaces?

Can you show CPU graph?

  @avpopov1977 

I don't quite understand the question?

But CPU is like this

  @MR.S 

When i went to fast.com or speedtest.net i was maxing out around 300mb/s up/down, thats on site 3gb/s symettric, and remote 1.5gb/1gb. Wireguard i get around 8-900mb/s. Both are a far cry from the specs.