https://community.tp-link.com/en

https://community.tp-link.com/en

https://community.tp-link.com/en
https://community.tp-link.com/en
Yesterday - last edited 5 hours ago
Tags: #VPN
Hardware Version: V2
Firmware Version: 2.3.3 Build 20251029 Rel.18054

I am still pretty to new to this and need some assistance with cascading routers to use VPN efficiently.

 

Configuration:

  • ER605, Un2.20 in Standalone Mode behind the ISP modem (WAN to WAN port).
  • AX53 (US) Ver.: 1.0 behind the ER605 router in Access Mode (WAN to WAN port) for providing WiFi to mobile devices and one wired device. The AX53 is running in its own VLAN.

The whole set-up is working without any problems.

 

However:

  • After installing VPN manually on the ER605 for the whole network (OpenVPN/UDP), I found out that the ER605 only permits speeds up to 20Mbps at best. Although the service works fine, the speed is not efficient.
  • My VPN provider does not offer a Wireguard manual installation file which would give me higher Internet speeds with the ER605. 
  • The AX53 already has a Wireguard client pre-installed, but in Access Mode the VPN function is not available.

 

What options/configurations are available while:

  • Keeping the ER605 in place behind the ISP modem for network and access management.
  • Using the VPN function just with the AX53 in router mode.
  • Cascading both routers but avoiding double NAT issues.

 

Thank you everyone in advance for your support.

  0      
  0      
#1
Options
1 Accepted Solution
Re:https://community.tp-link.com/en-Solution
16 hours ago - last edited 5 hours ago

  @Gabriel-TP 

 

Thank you Gabriel for the quick response. My only concern with port forwarding is comprosing some of the good security toos the ER605 offers. So I guess I will update my ER605 to an ER707 in order to get more OpenVPN throughput.

 

Thanks again

Recommended Solution
  0  
  0  
#3
Options
3 Reply
Re:https://community.tp-link.com/en
Yesterday

Hi @12Joe 

Thanks for reaching out to TP-Link Business Forums.

 

In regard to your concern, if you would like to configure the Archer AX53 in router mode plus VPN running, you are advised to

1. either putting ER605 behind the Archer AX53 with the whole topology as ISP modem - - Archer AX53 - - ER605;

2. or, keep the current topology ISP modem - - ER605 - - Archer AX53. However, the double-NAT issue will still persist.

Thus, if you want to configure the VPN on the Archer, you have to setup a port forwarding rule on the ER605 so that the traffic can be sent out.

 

Hope this may help.

  0  
  0  
#2
Options
Re:https://community.tp-link.com/en-Solution
16 hours ago - last edited 5 hours ago

  @Gabriel-TP 

 

Thank you Gabriel for the quick response. My only concern with port forwarding is comprosing some of the good security toos the ER605 offers. So I guess I will update my ER605 to an ER707 in order to get more OpenVPN throughput.

 

Thanks again

Recommended Solution
  0  
  0  
#3
Options
Re:https://community.tp-link.com/en
5 hours ago

Hi @12Joe 

 

Thanks for your sharing. You can just forward the traffic to a certain port so you would not expose all data to the whole network.

Also, if swapping to an ER707-M2 can fix the issue, then we would temporarily close your case and mark it as Solved.

Should you have any further concerns, please feel free to reach out to us and we would be here to help open the case.

Have a good day!

  0  
  0  
#4
Options