Troubleshooting VPN Issues on Deco
- Case 1. Work as a VPN Pass-through router.
- Case 2. Work as a VPN Client.
- Case 3. Work as a VPN server.
- Case 4. Use PPTP/L2TP VPN as the internet connection type.
Case 1. Work as a VPN Passthrough router
The term "VPN Passthrough" on Deco means that it works neither as a VPN server nor a VPN client but as a tunnel in between that allows traffic from these endpoints to "pass through". All Deco supports VPN passthrough for IPSec/PPTP/L2TP and is intended to work without modification. So clients connected to Deco could directly make a VPN dial-up connection on themselves to the remote VPN server.
Q1. What should I do if the client failed to connect to the remote VPN server?
1. Ensure the same client could connect to the VPN server on another Wi-Fi network.
2. (Optional)If there is another DHCP router connected ahead of Deco, please change Deco to Access Point mode.
3. (Optional)If Deco is the only router, please unplug Deco and connect a computer via an Ethernet cable to the ISP modem and make VPN dial-up connection again.
Case 2. Work as the VPN Client.
>>Deco VPN Server/Client Supported List.
Q1. How to set up VPN Client on Deco?
Q2. VPN Client status showed connected, but the selected clients had no internet, or VPN Client status showed connecting all the time.
1. Ensure you could successfully make a VPN dial-up connection on the clients themselves via the same OpenVPN config file(Please remember that many OpenVPN providers require users to log into their management interface to find VPN service credentials first for a third-party OpenVPN configuration).
2. If possible, It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into Deco again to check if that works.
3. Confirm the current firmware is up-to-date.
4. Change the WAN DNS to 8.8.8.8/8.8.4.4 per link-How to change DNS server settings on Deco
If your issue cannot be fixed by the above suggestions, please comment below with the following information:
- What kind of VPN server you are connecting to, like NordVPN, ExpressVPN and SurfsharkVPN?
- What kind of VPN Client software you were using on the local PC or phone when it is connecting fine, like OpenVPN Connect or GlobalProtect APPs?
- Which step did you fail to get through, any error message or screenshot on the Deco APP?
Q1. How to set up VPN Server on Deco?
Q2. What should I do if I cannot connect to my VPN Server?
1. Ensure there is a public WAN IP address under Deco APP>More>Internet connection>IPV4. A private internet address under CG-NAT network would cause some issues.
2. Set up DDNS on Deco if the WAN IP is dynamic.
Case 4: Use PPTP/L2TP VPN as the internet connection type.
Some ISPs provide internet service based on PPTP/L2TP protocol. Please refer to this link to set up PPTP/L2TP internet connection on Deco:
Hi, can I have the current firmware version of your Deco BE85?
Do you mean the built-in NordVPN Client configuration token, such as https://www.tp-link.com/en/support/faq/3693/
Have you run into any issues with the manual configuration process?
Thank you very much.
Best regards.
Sorry for delayed answer - missed your post.
Fw version : 1.1.1 build 20241023 rel 34667
My previous message was
---
Same topic here just as an headup ==> VPN connect but no internet connection
Config
* BE85 (EU version)
* latest (as of 11/12) SW ==> with Wireguard option but nice initial screen to chose Nordvpn has been removed
* OpenVPN config using NordVPN config file (udp and tcp), working and tested on OpenVPN for Android after removing ping-timer-rem supposed to be unsupported as per OpenVPN support=> on OpenVPN, i have to chos a cert file on my phone
* with and without DNS change
* mac, pc, android client: not working both in client and in all blocker mode
Nore
* Could use a free VPN proivder and having internet but despite right IP displayng on control website from nordvpn, site says "not protected" ==> this one have a cert file included.
* warning: web interface of the BE85 192.168.68.1 does not look at all like tp-link screen shots, much simplier, no parameter possible, always have to go trhough Deco App (on Android in my case) to do things and especially to configure the VPN
Could it be a problem with certificates not being properly exchanged with the server?
Regards
Absolutely useless "function"
Running on PX50 with latest firmware, OVPN and PPTP not work. both work fine client on multiple devices including some device running older versions of of ovpn and on iot devices without issue.
Looking on server logs I see not attempt from PX50 to attempt to connect to the server despite the router showing "Connecting" the clients on the device list are left unable to connect to internet.
It also raise the question of why there are no accessible logs on the routers to help diagnose the issue rather than having to guess. I have validate my server, profiles and use it successful on a range of clients from high to low spec, new to old. The only one that doesn't work is the Deco.
Tried to contact directly as per your signature but received a "not authorized"...
--- Here is my msg ;) ---
Hi
Calling from this thread
https://community.tp-link.com/en/home/kb/detail/412688?sortDir=DESC&page=1
Retried today with original openvpn server file from nord vpn, could connect (according to Deco app) to fr555 tcp server but still can go through (basically, when i turn on vpn for.my mobile connected on wifi to Deco be85 eu version, last sw, i get 'no internet available')
Should I send you the openvpn file.to try (and if so how, here i am limited to 1000 chars).
Thanks
Any resolution?
X50 running Nordvpn gives client connection speeds of 10Mbps. ISP connection is 100Mbps. Nordvpn app directly on clients running at 90Mbps .
The function is unusable.
looking for using NordVirtualprivatenetwork connected to BE65 router for japan abamaTV/ korea scopTV via Quest 3/S apple vision pro
aftermoving to new lux appartment cost 10000000RMB/HKD by my fxxking parents from one VictoriaHK to MarineCovaHK kaitak ,they finally
switch from Huawei (powerline)/ZTE (protableWifi)/Mirouter (lighting/camera/doorwifi/vacam/airfiltering)/linksys(WRT54G) to back to TPlink
BE65 2 home from iSP HygitionGlobalcommunication (backed by LaiKaiSeng)(rent to chinaMobile /PCCW changed to chinamobile dicated
line (ChukouYidong)
we need to login my anti sister Gmail to gaint the NordVPN token , the KaneWrath C&C / conquerblade /BF/COd in steam/origin/EA
/UBISOFT was heavy delated same as expensive Fortinet UTM(unfield threat management) (cost 2K USD notincluding licence)
only using Flightradar ADB-s marinetraffic crusis for signseening,
may setup Doco homeshield subcriation or metaQuestPLus subcribation or X (twitter subcribation connected back to octuss online shopping /
foodpanda shopping / hsbc app / payme app/ UKgov app /hkgov app & Uber sub month & airbnb subcration
so should We open Free guest account with extenal large wifi for 5KMin roottop to casting to rest of oldairport cost 10B HKD/RMB construction fee in newrail likes shanghai magnet rail , the UK highspeed train Suxk!(VirginTrain/cross country) CH(Switzerland)SBB was extreamy expensive
alos just notic that was more than three hundred cloused curcuirt television in my accommunication , which more than REDSQUARE I visit before/buckingham palace/Winsor palace/ Frenhc meseum OMG!
hate the outside HKCOP ctOS expensive cost 50000 HKD/RMB per unit, installed ten in hot zone LKF , to monitor they kissing and WWE outside the Nightclub/bar whatever =_='
sorrry for too many Ques , have been visit ShenZhen HQ(largeLogo) outside during HKcivilWar b4
the homeshiled was by Japanese brand Trendmicro and USA brand Symentec , is it good to pay the price when using Netease/NYSE:BIDU map, SHex:MOMO dating software dont have Wechat/alipay
Good luck earn more $$ and keep in lowpofite from Taiwan Chutin TV channal /Man-see TV channel / Sailap TV channel make negative for liberial HK/CN corp compared to original Beijing Xiaomi/chinaUnicom/Alipay(CN)version which the LummanKong(elite force) using (poorest village)in my oLd UK boarding School cost GBP30000 per years was using cheap D-link router(TW) not Zyxel/FTNT/JNPR expensive ,
how does the VPN passthought whalesbrower (KR) / Yandex brower(RU/UA/USSR)/ QQ/MIbrower(northerPRC) / Firefox/Chrome/edge traffic analysis for airticket /passport renew /onlinedating , thx