@Kevin_Z 

I have created a separate thread:

VPN Client unable to establish a connection to CyberGhost VPN, Status - Connecting

But seems the issue is pretty similar, so I'll post it here as well.

I have a new router - Archer BE230 v1.0, Firmware - 1.0.3 Build 20240612 rel.13057(4555).
I have a subscription for VPN from CyberGhost.
I want to configure the router to connect to the VPN provided by CyberGhost.

I have prepared configuration files from an OpenVPN service provider (CyberGhost) according to:
https://www.tp-link.com/us/support/faq/3763/#_CyberGhost

Then edit .ovpn manually according to:
https://www.tp-link.com/ca/support/faq/3338/

CyberGhost provides several options for used VPN protocol, including OpenVPN UDP/TCP and legacy OpenVPN <= 2.3.

The issue is that when I use the latest maintainable OpenVPN, the router cannot connect to the VPN, constantly showing Status - Connecting, assuming that the router cannot establish a connection.

But then I created a similar configuration using legacy OpenVPN <= 2.3, and the router successfully connected to a VPN.

What is the problem, the router doesn’t support the latest OpenVPN version?
Let me know if you need any additional information.

Please provide information on how to configure the connection to exactly CyberGhost using the latest OpenVPN version.

hi!!  I've got a question why my set up shows so much variability in Wifi and VPN.  I was wondering if you could help? Let me explain.

I've set up a home network as follows:

* Virgin Media modem (UK) ->TPLink AXE5400 -> TL-SL2428P Switch -> 2 separate EAP653 access points

This is a recently refurbished home, so I have ethernet cables running everywhere from bedrooms, office to security cameras and TV into the Switch.

There is a wifi coming from the router (which was standard TPLink and all appliances are connected to) and 2 Wifis I set up in the access points: one for adults and one for kids to help reach the garden and Wifi dead spots.

The access points are powered  by 100Mbps POE port, while the rest of the house is normal 1000Mbps.  That's the reason I want to keep the router Wifi for now if I can (not sure why POE is only on slower ports).

I set up Nord VPN in the router, and in my Omada controller it shows both switch and Wifi are in the VPN.  However the router settings show that it is connected to the normal Virgin Media server.  
 

Also different Wifis show different IP addresses (see table above)

Wifi origin:

Adult / Kids: Access Point

Router / Guest: Router

Questions:

1. Why is the router identifying itself with the Virgin Media IP address when it is connected to the VPN?

2. Why are the PC and mobile phones seeing different IP addresses?

Basically I want the whole house going through the VPN but I think I messed up somewhere.  I'd like to keep the router Wifi if possible since otherwise I need to buy a POE adapter for the 1000Mbps ports.

Sometimes I get an "operation failed" message in the router system in the VPN section and the whole page is blank (all VPN settings not loaded etc) but the VPN still works!  Not sure if this means anything.

Any insight appreciated as I've gotten as far as I can with Youtube videos and 3 kids around.

Thanks

Hi

I am using, TP Link AX5400 Wi-Fi 6 Router(Archer AX73 v2.0, 1.1.0 Build 20240323 rel.70541(5553) ).
The router is behind a multi-wan switch (TP Link TL-R470T+) which is connected to 2 ISP The load balancer is enabled (Enable Application Optimized Routing + Enable Bandwidth Based Balance Routing on port(s) -> tried all the 4 combinations)

The issue I am facing is openVPN is stuck in connecting, its works vpnbook provider but not works for OpenVPN & vpnjantit,
The issue am getting from server-side log is Multiple simultaneous connections using the same ovpn profile are not allowed
And I am seeing 2 connections established from same IP address, even though I enabled Enable Application Optimized Routing 
I also tried to connecting AX5400 router directly to a single modem, there also vpnjantit is not working.
& all the *.ovpn config file are working on android OpenVPN client

Thanks

  @AQRA1988 

In my .ovpn file I had to delete the line "allow-compression no"

  @Kevin_Z 

Hello, 

Model: Archer AXE5400   

Hardware Version: V1

Firmware Version: 1.1.9 Build 20231115 rel.37295(4555)

I am trying to connect to vpn using open vpn method on the vpn client on the router but it keeps in connecting status forever, i have tried the open vpn file on my laptop and it is working fine with successful connection.

could anyone help here.

  @chiphead 

I never was able to get the L2TP/IPSec to work.  Working with senior tech support I was given an update to the firmware for Wireguard.  This works hit and miss.  It connects fine to some sites but not consistent.  I'll try the L2TP/IPSec with the new firmware and see if there are any better results.  I'm happy that the OVPN works for you now..

  @MrHalfpint Thanks, you resolved the hanging issue with OpenVPN.

I'm interested in also trying L2TP/IPSec, to see if there's a speed improvement.

I get a 'Connecting' hang when connecting using the credentials provided by KeepSolid VPN Unlimited:

General Info:
Domain name: (VPN Server)
psk: (IPSec Pre-Shared Key)

Device Config:

Login: (Username)

Password: (Password)

Global Config:

Login: (ignore?)

Password: (ignore?)

  @chiphead 

remove the "allow-compression no"

In the router Advance, VPN Client settings, I enabled VPN Client, added the OVPN file to the new Profile, and when attempting to connect, it's hanging at Connecting. On the Mac, I'm able to connect using 'OpenVPN VPN Connect' client with the same OVPN file. Normally I use the native 'KeepSolid VPN Unlimited' client from the App Store.

Please assist with troubleshooting.

​​

• Hardware Version:
  • Archer AX73 AX5400 Wi-Fi 6 Router HW V1.6
• Firmware Version: 
  • 1.3.6 Build 20240325 rel.39241(5553)
• VPN provider:
  • KeepSolid VPN Unlimited
• VPN Type:
  • OpenVPN
• Computer
  • MacBook Pro, Apple M1 Pro, 32 GB memory, macOS 14.5 (Sonoma)

Here's the content of the OVPN file (removed the certificate for brevity):

client
dev tun
reneg-sec 0
persist-tun
persist-key
ping 5
nobind
allow-compression no
remote-random
remote-cert-tls server
auth-nocache
route-metric 1
cipher AES-256-CBC
auth sha512

<ca> 
(certificate)
</ca>

<cert>
(certificate)
</cert>

<key>
(private key)
</key>

remote (vpn server address)
proto udp

port 1197