Business Community > Routers > VPN to the controller better or faster than via port forwarding?
< Routers

VPN to the controller better or faster than via port forwarding?

VPN to the controller better or faster than via port forwarding?

VPN to the controller better or faster than via port forwarding?
VPN to the controller better or faster than via port forwarding?
3 weeks ago - last edited 3 weeks ago
Tags: #VPN #Routing #Network Connectivity
Model: ER707-M2   ER605 (TL-R605)  
Hardware Version: V1
Firmware Version: 1.2.3

Hello everyone,

 

I currently have the following situation:

 

Site A: ER707-M2 + OC300

 

> The router dials in via PPPoE and receives a fixed IP from ISP. This is the main location in a server room.

 

Site B: ER605 + PoE switch + 3 APs

 

> This is another location that is to be managed via the OC300. Also dial-in via PPPoE, but a public, sometimes changing IP. Not a fixed one.

 

Now to the problem / question:

 

Site B is currently managed via port sharing on the Internet at Site A. This was the simplest option at the time of setup. https://www.tp-link.com/de/support/faq/3641/

 

However, we now have the feeling that, for example, the portal loads a little slowly, sometimes there may also be WLAN problems, roaming doesn't work properly, etc.

 

So the question arose as to whether port forwarding via Internet to the OC300 might have been the worst solution for us? Is a VPN, on the other hand, better or faster and more stable? The problem would be that location B has a changing public IP.

 

What do you think?

  0      
 
  0      
 
#1
Options
6 Reply
Re:VPN to the controller better or faster than via port forwarding?
3 weeks ago

  @TW_EPC 

 

Hi,

 

I'm not sure why there's a problem with your current configuration.

The question is - why there's an issue with connection between side B and your controller. If that's ISP's issue - the VPN may not help here.

Have you tested a simple PING from side B to your OC? For some longer period of time to see if you are loosing packages somehow?

 

But regarding your question - you can establish Client 2 Site VPN - for example WireGuard. Your side B would be a client, therefore it's changing IP doesn't really matter. If the connection get interrupted somehow, in theory should be re-established back once the internet/server are available.

 

I do have such configuration now established between my main ER707 and site ER605, but - to be fair - I'm not utilizing it as heavily as you are.

  0  
  0  
#2
Options
Re:VPN to the controller better or faster than via port forwarding?
3 weeks ago - last edited 3 weeks ago

Hi @TW_EPC 

Thanks for posting in our business forum.

There is basically no difference between the VPN and the port forwarding in latency.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#3
Options
Re:VPN to the controller better or faster than via port forwarding?
3 weeks ago

Okay, if that makes no difference, then everything seems to be okay. Then there must be a problem somewhere else.

 

The connection is permanently stable. We are the ISP ourselves. Of course, we could also give both sites a fixed IP somehow, but we don't want to.

 

The portal authentication issue is the most noticeable. I have already reported this separately. It basically works very well, but is sometimes extremely slow.

 

Well. I'll keep looking...

 

 

  0  
  0  
#4
Options
Re:VPN to the controller better or faster than via port forwarding?
3 weeks ago

Hi @TW_EPC 

Thanks for posting in our business forum.

TW_EPC wrote

Okay, if that makes no difference, then everything seems to be okay. Then there must be a problem somewhere else.

 

The connection is permanently stable. We are the ISP ourselves. Of course, we could also give both sites a fixed IP somehow, but we don't want to.

 

The portal authentication issue is the most noticeable. I have already reported this separately. It basically works very well, but is sometimes extremely slow.

 

Well. I'll keep looking...

 

 

When other people funnel into the same terminal, it could cause congestion. This is when the commercial line comes into play. That might reduce the latency depends on ISP optimization.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#5
Options
Re:VPN to the controller better or faster than via port forwarding?
3 weeks ago

  @Clive_A 

 

In fact, we have activated gigabit synchronisation at every location. So that shouldn't really be a problem.

 

Even the first device in the WLAN takes a few seconds to call up the portal. But it can also be normal, I just don't have the experience.

 

BR Tim

  0  
  0  
#6
Options
Re:VPN to the controller better or faster than via port forwarding?
3 weeks ago

Hi @TW_EPC

TW_EPC wrote

  @Clive_A 

 

In fact, we have activated gigabit synchronisation at every location. So that shouldn't really be a problem.

 

Even the first device in the WLAN takes a few seconds to call up the portal. But it can also be normal, I just don't have the experience.

 

BR Tim

Hmm. I mean the dedicated line from your ISP for commercial and enterprise. It is not about the UL/DL.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#7
Options

Information

Helpful: 0

Views: 146

Replies: 6

Tags

VPN Routing Network Connectivity
Related Articles
 Remote Desktop Connection via VPN
391 0
Accessing ISP via VPN
626 0
I want to send only voip traffic to the ipsec tunnel.
530 0
3 Sites connect via ipsec site-to-site vpn
412 0
ER605 disconnected since months but reachable via VPN
1963 0
IKEv2 VPN not working on Android 14 to ER605v2 (Galaxy S24 Ultra)
3072 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.