Troubleshooting VPN Client on Wi-Fi Router Is Not Working
This Article Applies to:
All the Wi-Fi Routers that support VPN Client, such as Archer AX20, Archer AX21, Archer AX90, etc.
Issue Description/Phenomenon:
The Wi-Fi Routers that are being discussed here are the models that support VPN Client, which allows users to connect to a VPN server without the need to install VPN software on each device. If you are unable to connect to a VPN server when trying to configure the VPN client on the TP-Link router, this article provides some suggestions that may help you out.
However, if VPN server on TP-Link router is not working, please follow this thread for troubleshooting: VPN Server Doesn't Work Properly on TP-Link Wi-Fi Routers
Troubleshooting Suggestions & Solution:
Step 1
For OpenVPN, please follow this FAQ How to get configuration files from OpenVPN service providers to get correct configuration file and your VPN service credentials, which is the key to accessing the VPN service.
Step 2
Ensure you can successfully connect to the VPN server using a third-party VPN client software like OpenVPN Connect or OpenVPN or WireGuard App for WireGuard VPN on the local PC/Smartphone. This can ensure the .opvn or .conf file is configured and exported correctly.
For example, If you are trying to connect to NordVPN, please don't use NordVPN App since it doesn't require the .opvn at all.
Note: NordVPN service credentials are different from your NordVPN account credentials, namely your email address and your password. You'll need NordVPN service credentials to connect to the VPN using the manual OpenVPN configuration method in the router.
Step 3
If step 2 is confirmed good, but it still fails to connect to the VPN server when uploading the .opvn file into the TP-Link router, be sure the router's firmware is up-to-date. You can check for the updates on the Tether app or on the router web GUI, or you can download it from the local official website and then install it manually.
Step 4
If it still fails, please check the size of the VPN configuration profile you are trying to upload to the router, and how large that file is. You may download and install the Notepad+ application to delete the useless comment in the profile if that is too large, then try uploading it into the router again.
Step 5
It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into the TP-Link router again to check if that works.
If the VPN connection still fails, please comment below on this topic and be sure to provide the following information:
1. Model number, hardware, and firmware version of your TP-Link Router.
2. What kind of VPN server you are connecting to?
3. What kind of VPN type are you choosing on the TP-Link router, OpenVPN, or PPTP VPN?
4. What kind of VPN Client software you were using on the local PC or phone when it was connecting fine? Please test and make sure you can connect to the server with third-party software, such as OpenVPN Connect for OpenVPN and WireGuard App for WireGuard VPN.
5. Which step did you stuck in, any error message or screenshot?
6. Troubleshooting you've done before, and be sure the .opvn file for OpenVPN or .conf file for WireGuard is included when emailing to support.
Related Articles:
If you are not familiar with the VPN, visit Introduction and Configuration Guide of VPN Function on TP-Link Wireless Routers
If you want to check which model supports the VPN Client, visit Routers supporting the VPN Client.
If you are unable to connect CyberGhost OpenVPN Server, please try Manually create the unified format for OpenVPN profile(CyberGhost OpenVPN Server)
-------------------------------------------------
Have other off-topic issues to report?
Welcome to > Start a New Thread < and elaborate on the issue for assistance.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@Thompst I was told by tp-link that the encrypted key is not supported and finally got it to connect by replacing the encrypted private key in the ovpn file with plain key
```
openssl pkey -in secure.key -out plain.key
```
Not sure why the router has a password field if it isn't supported
- Copy Link
- Report Inappropriate Content
Hi all,
I am trying to connect my TP-Link AX5400 (AX72) to a remote private OpenVPN Server.
Firmware Version 1.1.2 Build 20220520 rel.75663
I have successfully connected my PC using the desktop client and on my iPhone and iPad also using the OpenVPN Connect software client.
I used the ovpn file and the Private Key password that the OpenVPN server generated.
I would like to configure a 'dedicated' VPN connection using the TP-Link router, so that the client software on each individual device is not required.
I have set up the router normally and I can connect to it and it works for internet access.
If I go to the VPN client and enable it. I input the Private Key password in the password field and upload the ovpn file.
This says it is is successful but if I try to enable the VPN it just sits at 'connecting' and never seems to connect.
I have also tried the connection name in the user field.
The ovpn file contains all of the cert information etc.
**************************************
client
dev tun
proto udp
remote XXXXXX 51820
resolv-retry infinite
nobind
remote-cert-tls server
tls-version-min 1.2
verify-x509-name XXXXXXXXX name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIBvjCCAWWgAwIBAgIUMW1Hf2d6cVtLgNmI6TLeS6xxyNswCgYIKoZIzj0EAwIw
XXX
XXX
XXX
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIBxzCCAWygAwIBAgIRAJaCSHk0zlCraLbprsKG3KkwCgYIKoZIzj0EAwIwFjEU
XXX
XXX
XXX
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAjB2f+3jQTkIAICCAAw
XXX
XXX
XXX
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
f4365f80c613c05b3f98de319f5f39f9
XXX
XXX
XXX
-----END OpenVPN Static key V1-----
</tls-crypt>
*******************************************
Any help would be gratefully received.
- Copy Link
- Report Inappropriate Content
Thanks so much for sharing all the detailed info. To address the issue and try to fix it, we would like to have a specialist look into this further via email. Please check your mailbox later, and let us know if the issue is resolved. Thank you!
- Copy Link
- Report Inappropriate Content
ovpn config file:
client
nobind
dev tun
remote-cert-tls server
remote vpn. abcdef. uk 1194 udp
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIU2JtBOn91wMCAggA
...
...
...
GCFHQ1ic0bJzCstHffRMUw==
-----END ENCRYPTED PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----
MIIDYDCCAkigAwIBAgIQTpvQIEh+qkYSPUE/XSZjZzANBgkqhkiG9w0BAQsFADAX
...
...
...
rs5Zvw==
-----END CERTIFICATE-----
</cert>
<ca>
-----BEGIN CERTIFICATE-----
MIIDTjCCAjagAwIBAgIUcwEaYDeynwSKbHtqdRrbvT3ZSxYwDQYJKoZIhvcNAQEL
...
...
...
w++LUhoQQ53RqgNulNjsxCMZcj7LY+4gzuHVd3hpxszw7Q==
-----END CERTIFICATE-----
</ca>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
7740a69640652ce7255ca71305b2391e
...
...
...
2be49fa550274a72d0a066b93b4324b3
-----END OpenVPN Static key V1-----
</tls-auth>
redirect-gateway def1
- Copy Link
- Report Inappropriate Content
Hi I am trying to use the VPN Client feature of my new AX1800 Wi-Fi 6 Router but the status is stuck on connecting
Firmware Version: 1.1.2 Build 20221016 rel.75092(4555)
Hardware Version: Archer AX20 v3.0
Server OpenVPN
Server logs:
Fri Jan 13 18:51:57 2023 176.35.xxx.yyy:32907 [tp_link_router] Peer Connection Initiated with [AF_INET]176.35.xxx.yyy:32907
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 MULTI_sva: pool returned IPv4=192.168.255.22, IPv6=(Not enabled)
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 MULTI: Learn: 192.168.255.22 -> tp_link_router/176.35.xxx.yyy:32907
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 MULTI: primary virtual IP for tp_link_router/176.35.xxx.yyy:32907: 192.168.255.22
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 PUSH: Received control message: 'PUSH_REQUEST'
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 SENT CONTROL [tp_link_router]: 'PUSH_REPLY,block-outside-dns,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,comp-lzo no,route 192.168.255.1,topology net30,ping 10,ping-restart 60,ifconfig 192.168.255.22 192.168.255.21,peer-id 0,cipher AES-256-GCM' (status=1)
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 13 18:51:57 2023 tp_link_router/176.35.xxx.yyy:32907 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 13 18:52:11 2023 tp_link_router/176.35.xxx.yyy:32907 SIGTERM[soft,remote-exit] received, client-instance exiting
I am able to connect from windows pc using OpenVPN Connect Version 3.3.6 (2752) and I am also able to connect from android device using OpenVPN Connect version 3.3.0
- Copy Link
- Report Inappropriate Content
bouwew wrote
Hello,
I can't connect to various VPN services via the VPN client option.
Router: AX11000 V1, firmware 1.3.2 Build 20221128 rel.45807(4555)
After some investigation I found that all the provided options, OpenVPN, PPTP, L2TP, do not work for the tested free VPN providers on the Android App or are not supported. The last 2 due to security vulnerabilities I can read in their support messages.
WireGuard and IKEv2 are available from the VPN providers but are not provided by the router.
Kindly requesting to add support for the more popular, more safe protocols.
Thank you for your consideration :)
Thank you very much for sharing your opinions with the community.
Actually, the VPN Client of the Archer AX11000 can work with most of the VPN providers, such as ExpressVPN, NordVPN, Surfshark, Mullvad, Proton VPN, Private Tunnel, PIA, etc. Please visit the following community thread to check more with our VPN Client features:
How to Connect TP-Link Router to a third-party VPN Provider (For ExpressVPN, NordVPN, etc.)
- Copy Link
- Report Inappropriate Content
Hello,
I can't connect to various VPN services via the VPN client option.
Router: AX11000 V1, firmware 1.3.2 Build 20221128 rel.45807(4555)
After some investigation I found that all the provided options, OpenVPN, PPTP, L2TP, do not work for the tested free VPN providers on the Android App or are not supported. The last 2 due to security vulnerabilities I can read in their support messages.
WireGuard and IKEv2 are available from the VPN providers but are not provided by the router.
Kindly requesting to add support for the more popular, more safe protocols.
Thank you for your consideration :)
- Copy Link
- Report Inappropriate Content
samkaradze wrote
Hi, i have Tp-link archer a7 and failed to set up openVPN server on it.
I have tried both service types (udp, tcp), enable ddns but it's not working.
I tried to connect with iphone, mac and windows but without any result.
How can i configure it?
@samkaradze Please follow this configuration guide to review all the settings on the A7 and ensure all are correct:
How to use OpenVPN to access your home network through the Wi-Fi Routers
If still fails, please check which one is the case and try the suggestions accordingly:
- Copy Link
- Report Inappropriate Content
Hi, i have Tp-link archer a7 and failed to set up openVPN server on it.
I have tried both service types (udp, tcp), enable ddns but it's not working.
I tried to connect with iphone, mac and windows but without any result.
How can i configure it?
- Copy Link
- Report Inappropriate Content
Stranger1784 wrote
Archer AX23 v1.20
1.0.5 Build 20220216 Rel. 59311(4555)
Does not allow traffic to connect to the pptp server. Windows 7 client.
@Stranger1784 Have you tried the suggestions we provided in the original post, such as connecting to the PPTP server on the Windows 7 with a VPN Client software bypassing the AX23? Are you able to connect fine?
If yes, please email the config file that you tried to upload into the AX23 to support.forum@tp-link.com, then we may help confirm.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 5
Views: 111467
Replies: 273
Voters 2
