@Kevin_Z 

I have an issue with OpenVPN client connection of Archer AXE300, only when using SFP+ Internet WAN port and not the 10G Ethernet WAN Internet port

Details on Client VPN connection of the router not established when Internet WAN is the SFP+ port

(Sorry i have seen this threads only later....)

@Kevin_Z

 I am failing my OpenVPN client conntection to my personal Synology OpenVPN server.

1. Archer AX20 v1.0 

2. Personal - Synology OpenVPN (Self-signed certificate)
3. OpenVPN
4. Connects fine on Windows 11 PC - OpenVPN-gui
5. Stuck on connecting state in TP-Link web ui
6. Config:

dev tun
tls-client

remote <<hidden url>> 1111

redirect-gateway def1

pull

proto udp

script-security 2

reneg-sec 0

cipher AES-256-CBC

auth SHA512

auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
<<hidden>>
-----END CERTIFICATE-----

</ca>

  @Kevin_Z 

Hello. 
 

I had a problem connecting to a VPN on Deco BE85. The problem was solved by releasing patch 1.0.20 Build 20240808 Rel. 5953 for me. Thanks for solving my problem. But the question remains - will this patch be included in the public release of the firmware? Which version? Since the patch, two firmware versions have already been released, but the problem returns to them.

  @Kevin_Z I am failing with using PureVPN

1. Archer AX73 v1.0 

1.3.6 Build 20240407 rel.43274(4555)

2. PureVPN UK server
3. OpenVPN
4. Connects fine on MacBook using Tunnelblick with provided OpenVPN config
5. Stuck on connecting state in web ui
6. Config:

explicit-exit-notify
proto udp
remote url goes here
client
verb 1
dev tun
auth-user-pass
persist-key
persist-tun
nobind
scramble obfuscate sg+Jts{&
compress
<ca>
-----BEGIN CERTIFICATE-----
cert goes here
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
cert goes here
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
cert goes here
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
key goes here
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
key goes here
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction 1
remote-cert-tls server
route-method exe 
route-delay 0 
route 0.0.0.0 0.0.0.0
script-security 2

@Kevin_Z
Greetings,
I have got tp-link archer ax73 (ax5400 wi-fi 6 router).

Firmware Version:

1.3.6 Build 20240407 rel.43274(5255)

Hardware Version:

Archer AX73 v1.0

My VPN provider is hidemyname.
I was trying to connect the router to OpenVPN Turkish server using the Open VPN file.

client

#connect to VPN server
remote 194.116.191.204 58610
proto udp

#socket buffer size
sndbuf 262144
rcvbuf 262144

#DNS server to use
dhcp-option DNS 1.1.1.1

#remove to use your ISP's gateway
redirect-gateway def1

#certificate-related settings
#ns-cert-type server
remote-cert-tls server

# --- Your certificate is located at the end of this file ---

#cipher to use. Valid options are: AES-256-GCM, AES-192-GCM, AES-128-GCM, AES-256-CBC, AES-192-CBC, AES-128-CBC
cipher AES-256-CBC

#we don't use password authentication anyway, so this is simply to remove the openvpn warning
auth-nocache

#use virtual interface 'tun'
dev tun

#keep trying indefinitely to resolve the host name of the OpenVPN server.
resolv-retry infinite

#most clients don't need to bind to a specific local port number.
nobind

#try to preserve some state across restarts
persist-key
persist-tun

#set log file verbosity.
verb 4

#silence repeating messages
mute 20

#tell the server to immediately close its client instance object rather than waiting for a timeout
explicit-exit-notify

<ca>
some ca_text
</ca>

<cert>
cert_text
</cert>

<key>
private_key
</key>

<tls-crypt-v2>
client_key
</tls-crypt-v2>

I have succeeded in connecting to the same server using Open VPN GUI locally on my PC.
I am stuck at infinite connecting to the server. I would really appreciate assistance on the matter.

Best regards

  @Marvin_S 

I'm split tunneling (and it's working correctly on an ios device and a pc with the same .opvn file).  From the AX1800, I can ping the vpn gateway and the vpn tunnel ip.  I can't ping the vpn server IP or connect to any devices on the Server LAN (which i can do through both the ios device and the pc).

I've tested with the firewalls down on both server and client router, no change.