Troubleshooting VPN Client on Wi-Fi Router Is Not Working
This Article Applies to:
All the Wi-Fi Routers that support VPN Client, such as Archer AX20, Archer AX21, Archer AX90, etc.
Issue Description/Phenomenon:
The Wi-Fi Routers that are being discussed here are the models that support VPN Client, which allows users to connect to a VPN server without the need to install VPN software on each device. If you are unable to connect to a VPN server when trying to configure the VPN client on the TP-Link router, this article provides some suggestions that may help you out.
However, if VPN server on TP-Link router is not working, please follow this thread for troubleshooting: VPN Server Doesn't Work Properly on TP-Link Wi-Fi Routers
Troubleshooting Suggestions & Solution:
Step 1
For OpenVPN, please follow this FAQ How to get configuration files from OpenVPN service providers to get correct configuration file and your VPN service credentials, which is the key to accessing the VPN service.
Step 2
Ensure you can successfully connect to the VPN server using a third-party VPN client software like OpenVPN Connect or OpenVPN or WireGuard App for WireGuard VPN on the local PC/Smartphone. This can ensure the .opvn or .conf file is configured and exported correctly.
For example, If you are trying to connect to NordVPN, please don't use NordVPN App since it doesn't require the .opvn at all.
Note: NordVPN service credentials are different from your NordVPN account credentials, namely your email address and your password. You'll need NordVPN service credentials to connect to the VPN using the manual OpenVPN configuration method in the router.
Step 3
If step 2 is confirmed good, but it still fails to connect to the VPN server when uploading the .opvn file into the TP-Link router, be sure the router's firmware is up-to-date. You can check for the updates on the Tether app or on the router web GUI, or you can download it from the local official website and then install it manually.
Step 4
If it still fails, please check the size of the VPN configuration profile you are trying to upload to the router, and how large that file is. You may download and install the Notepad+ application to delete the useless comment in the profile if that is too large, then try uploading it into the router again.
Step 5
It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into the TP-Link router again to check if that works.
If the VPN connection still fails, please comment below on this topic and be sure to provide the following information:
1. Model number, hardware, and firmware version of your TP-Link Router.
2. What kind of VPN server you are connecting to?
3. What kind of VPN type are you choosing on the TP-Link router, OpenVPN, or PPTP VPN?
4. What kind of VPN Client software you were using on the local PC or phone when it was connecting fine? Please test and make sure you can connect to the server with third-party software, such as OpenVPN Connect for OpenVPN and WireGuard App for WireGuard VPN.
5. Which step did you stuck in, any error message or screenshot?
6. Troubleshooting you've done before, and be sure the .opvn file for OpenVPN or .conf file for WireGuard is included when emailing to support.
Related Articles:
If you are not familiar with the VPN, visit Introduction and Configuration Guide of VPN Function on TP-Link Wireless Routers
If you want to check which model supports the VPN Client, visit Routers supporting the VPN Client.
If you are unable to connect CyberGhost OpenVPN Server, please try Manually create the unified format for OpenVPN profile(CyberGhost OpenVPN Server)
-------------------------------------------------
Have other off-topic issues to report?
Welcome to > Start a New Thread < and elaborate on the issue for assistance.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hello
good morning
Archer AX20 v2.0 US firmware: 2.1.5 Build 20211231 rel.73104(5553)
Can't connect to VPN using WAN - L2TP My VPN Service Provider is LE-VPN and has the L2TP protocol active and functional, can you do something to make it work?
Using the New VPN Client Option in OPENVPN Protocol unfortunately lowers the internet speed performance too much and they already explained to me that when activating that it only uses a single processor core of the router and it is not an option for me, they can also add the Protocol WireGuard I would appreciate it I would like you to send me the latest beta ZIP to install on my router and do tests.
thanks
regards
- Copy Link
- Report Inappropriate Content
macmax1718 wrote
Hello
good morning
Archer AX20 v2.0 US firmware: 2.1.5 Build 20211231 rel.73104(5553)
Can't connect to VPN using WAN - L2TP My VPN Service Provider is LE-VPN and has the L2TP protocol active and functional, can you do something to make it work?
Using the New VPN Client Option in OPENVPN Protocol unfortunately lowers the internet speed performance too much and they already explained to me that when activating that it only uses a single processor core of the router and it is not an option for me, they can also add the Protocol WireGuard I would appreciate it I would like you to send me the latest beta ZIP to install on my router and do tests.
thanks
regards
Hello @macmax1718, I replied to you earlier in this thread that the WAN L2TP VPN configuration doesn't support IPSec security, so it won't work with your ISP in that configuration. We are not able to provide a beta firmware to achieve that, sorry for that.
- Copy Link
- Report Inappropriate Content
Hi Kevin
I have an Archer AX20 v2.0 and the firmware is up to date: 2.1.6 Build 20220128 rel.15823(4555).
I have tried to connect to CyberGhost VPN and PrivateInternetAccess VPN via OpenVPN and it is just stuck on "connecting". I have followed all of the steps outlined in your original post (size of config file is fine etc.)
Can you help at all?
Thanks
- Copy Link
- Report Inappropriate Content
oosman5 wrote
Hi Kevin
I have an Archer AX20 v2.0 and the firmware is up to date: 2.1.6 Build 20220128 rel.15823(4555).
I have tried to connect to CyberGhost VPN and PrivateInternetAccess VPN via OpenVPN and it is just stuck on "connecting". I have followed all of the steps outlined in your original post (size of config file is fine etc.)
Can you help at all?
Thanks
Have you found this guide to manually creating the unified format for the OpenVPN profile when connecting to the CyberGhost OpenVPN Server? You can also try that when connecting to PrivateInternetAccess VPN if that works for CyberGhost. Please let me know if it works.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Hi Kevin,
I need the OpenVPN server option operated with TAP mode (i.e. Bridge-mode) instead of TUN mode (i.e. Router-mode) provided by Archer AX90 FW. Can you help to ask if this option can be provided just like DD-WRT FW's OpenVPN server? Otherwise I don't know how to allow the remote VPN client to access the home LAN subnet's file sharing / RDP / VNC servers directly.
With the following AX90 FW version, the OpenVPN connection can be successfully established. But it is the same situation regarding Ronald's question.
Another curious design is about the "Access Control" on the "Guest network". I am surprised why it is also included. To me it makes more sense without any needing to set the MAC address in this table just for my different guests to use my WiFi network to access the internet while my home network is still only accessed with my home devices. It is the same for the company's office environment. It can be achieved with my another Buffalo AC1750DHP router running the DD-WRT FW.
Thank you for any help!
Best regards,
Wayne
- Copy Link
- Report Inappropriate Content
oosman5 wrote
Hi Kevin You are right the CyberGhost file was split so I followed the instructions and manually created the unified format file. Still the same thing - stuck on 'connecting'. Any other ideas? Thanks Omer
@oosman5 I see. If that is the case, can you please check and determine if you can connect to the CyberGhost VPN server or PrivateInternetAccess VPN server when running the VPN Client on a local device directly, such as a Windows computer or phone? If that works, we would like to have the vpn config file that you imported on the AX20 then, you can email it to support.forum@tp-link.com.
- Copy Link
- Report Inappropriate Content
WayneHu wrote
Hi Kevin,
I need the OpenVPN server option operated with TAP mode (i.e. Bridge-mode) instead of TUN mode (i.e. Router-mode) provided by Archer AX90 FW. Can you help to ask if this option can be provided just like DD-WRT FW's OpenVPN server? Otherwise I don't know how to allow the remote VPN client to access the home LAN subnet's file sharing / RDP / VNC servers directly.
With the following AX90 FW version, the OpenVPN connection can be successfully established. But it is the same situation regarding Ronald's question.
Kevin_Z: Can I know what kind of VPN server are you using on the AX90? And what is the working mode of the AX90 when you mentioning TAP mode (i.e. Bridge-mode), does it refer to Access Point mode? Some advanced features are not available when the router is working in AP mode, I guess VPN server would be one of them. VPN server can only be configured on the gateway router.
Another curious design is about the "Access Control" on the "Guest network". I am surprised why it is also included. To me it makes more sense without any needing to set the MAC address in this table just for my different guests to use my WiFi network to access the internet while my home network is still only accessed with my home devices. It is the same for the company's office environment. It can be achieved with my another Buffalo AC1750DHP router running the DD-WRT FW.
Kevin_Z: Does it mean there is no internet access when connecting to the guest network and when Access Control is enabled? If yes, this has been brought up with the team and they will evaluate the feasibility to optimize the Access Control feature in the future.
Thank you for any help!
Best regards,
Wayne
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Kevin_Z wrote
Kevin_Z: Can I know what kind of VPN server are you using on the AX90? And what is the working mode of the AX90 when you mentioning TAP mode (i.e. Bridge-mode), does it refer to Access Point mode? Some advanced features are not available when the router is working in AP mode, I guess VPN server would be one of them. VPN server can only be configured on the gateway router.
Hi Kevin,
As it is mentioned, the current AX90 FW's OpenVPN server does not have this TAP option when AX90 is configured as router mode. But it works with the DD-WRT FW in my experience. With OpenVPN server's TAP mode, the VPN client's IP is assigned with the LAN subnet's. I used to run DD-WRT's OpenVPN server with this mode.
Another curious design is about the "Access Control" on the "Guest network". I am surprised why it is also included. To me it makes more sense without any needing to set the MAC address in this table just for my different guests to use my WiFi network to access the internet while my home network is still only accessed with my home devices. It is the same for the company's office environment. It can be achieved with my another Buffalo AC1750DHP router running the DD-WRT FW.
Kevin_Z: Does it mean there is no internet access when connecting to the guest network and when Access Control is enabled? If yes, this has been brought up with the team and they will evaluate the feasibility to optimize the Access Control feature in the future.
Any device not described in the [Access Control] [White List] does not even have any chance to establish the connection to AX90's Guest WiFi network. For security consideration, this option is useful in case to disallow some standalone devices to touch home LAN. But it is not really useful for occasionally visited guests case. Maybe an additional Guest Network SSID with the option to enable / disable the Access Control is more flexible. :p
Thank you for the reply!
Best Regards,
Wayne
- Copy Link
- Report Inappropriate Content
Information
Helpful: 8
Views: 65431
Replies: 241