Troubleshooting VPN Client on Wi-Fi Router Is Not Working
This Article Applies to:
All the Wi-Fi Routers that support VPN Client, such as Archer AX20, Archer AX21, Archer AX90, etc.
Issue Description/Phenomenon:
The Wi-Fi Routers that are being discussed here are the models that support VPN Client, which allows users to connect to a VPN server without the need to install VPN software on each device. If you are unable to connect to a VPN server when trying to configure the VPN client on the TP-Link router, this article provides some suggestions that may help you out.
However, if VPN server on TP-Link router is not working, please follow this thread for troubleshooting: VPN Server Doesn't Work Properly on TP-Link Wi-Fi Routers
Troubleshooting Suggestions & Solution:
Step 1
For OpenVPN, please follow this FAQ How to get configuration files from OpenVPN service providers to get correct configuration file and your VPN service credentials, which is the key to accessing the VPN service.
Step 2
Ensure you can successfully connect to the VPN server using a third-party VPN client software like OpenVPN Connect or OpenVPN or WireGuard App for WireGuard VPN on the local PC/Smartphone. This can ensure the .opvn or .conf file is configured and exported correctly.
For example, If you are trying to connect to NordVPN, please don't use NordVPN App since it doesn't require the .opvn at all.
Note: NordVPN service credentials are different from your NordVPN account credentials, namely your email address and your password. You'll need NordVPN service credentials to connect to the VPN using the manual OpenVPN configuration method in the router.
Step 3
If step 2 is confirmed good, but it still fails to connect to the VPN server when uploading the .opvn file into the TP-Link router, be sure the router's firmware is up-to-date. You can check for the updates on the Tether app or on the router web GUI, or you can download it from the local official website and then install it manually.
Step 4
If it still fails, please check the size of the VPN configuration profile you are trying to upload to the router, and how large that file is. You may download and install the Notepad+ application to delete the useless comment in the profile if that is too large, then try uploading it into the router again.
Step 5
It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into the TP-Link router again to check if that works.
If the VPN connection still fails, please comment below on this topic and be sure to provide the following information:
1. Model number, hardware, and firmware version of your TP-Link Router.
2. What kind of VPN server you are connecting to?
3. What kind of VPN type are you choosing on the TP-Link router, OpenVPN, or PPTP VPN?
4. What kind of VPN Client software you were using on the local PC or phone when it was connecting fine? Please test and make sure you can connect to the server with third-party software, such as OpenVPN Connect for OpenVPN and WireGuard App for WireGuard VPN.
5. Which step did you stuck in, any error message or screenshot?
6. Troubleshooting you've done before, and be sure the .opvn file for OpenVPN or .conf file for WireGuard is included when emailing to support.
Related Articles:
If you are not familiar with the VPN, visit Introduction and Configuration Guide of VPN Function on TP-Link Wireless Routers
If you want to check which model supports the VPN Client, visit Routers supporting the VPN Client.
If you are unable to connect CyberGhost OpenVPN Server, please try Manually create the unified format for OpenVPN profile(CyberGhost OpenVPN Server)
-------------------------------------------------
Have other off-topic issues to report?
Welcome to > Start a New Thread < and elaborate on the issue for assistance.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
I never was able to get the L2TP/IPSec to work. Working with senior tech support I was given an update to the firmware for Wireguard. This works hit and miss. It connects fine to some sites but not consistent. I'll try the L2TP/IPSec with the new firmware and see if there are any better results. I'm happy that the OVPN works for you now..
- Copy Link
- Report Inappropriate Content
Hello,
Model: Archer AXE5400
Hardware Version: V1
Firmware Version: 1.1.9 Build 20231115 rel.37295(4555)
I am trying to connect to vpn using open vpn method on the vpn client on the router but it keeps in connecting status forever, i have tried the open vpn file on my laptop and it is working fine with successful connection.
could anyone help here.
- Copy Link
- Report Inappropriate Content
In my .ovpn file I had to delete the line "allow-compression no"
- Copy Link
- Report Inappropriate Content
Hi
I am using, TP Link AX5400 Wi-Fi 6 Router(Archer AX73 v2.0, 1.1.0 Build 20240323 rel.70541(5553) ).
The router is behind a multi-wan switch (TP Link TL-R470T+) which is connected to 2 ISP The load balancer is enabled (Enable Application Optimized Routing + Enable Bandwidth Based Balance Routing on port(s) -> tried all the 4 combinations)
The issue I am facing is openVPN is stuck in connecting, its works vpnbook provider but not works for OpenVPN & vpnjantit,
The issue am getting from server-side log is Multiple simultaneous connections using the same ovpn profile are not allowed
And I am seeing 2 connections established from same IP address, even though I enabled Enable Application Optimized Routing
I also tried to connecting AX5400 router directly to a single modem, there also vpnjantit is not working.
& all the *.ovpn config file are working on android OpenVPN client
Thanks
- Copy Link
- Report Inappropriate Content
hi!! I've got a question why my set up shows so much variability in Wifi and VPN. I was wondering if you could help? Let me explain.
I've set up a home network as follows:
* Virgin Media modem (UK) ->TPLink AXE5400 -> TL-SL2428P Switch -> 2 separate EAP653 access points
This is a recently refurbished home, so I have ethernet cables running everywhere from bedrooms, office to security cameras and TV into the Switch.
There is a wifi coming from the router (which was standard TPLink and all appliances are connected to) and 2 Wifis I set up in the access points: one for adults and one for kids to help reach the garden and Wifi dead spots.
The access points are powered by 100Mbps POE port, while the rest of the house is normal 1000Mbps. That's the reason I want to keep the router Wifi for now if I can (not sure why POE is only on slower ports).
I set up Nord VPN in the router, and in my Omada controller it shows both switch and Wifi are in the VPN. However the router settings show that it is connected to the normal Virgin Media server.
Also different Wifis show different IP addresses (see table above)
Wifi origin:
Adult / Kids: Access Point
Router / Guest: Router
Questions:
1. Why is the router identifying itself with the Virgin Media IP address when it is connected to the VPN?
2. Why are the PC and mobile phones seeing different IP addresses?
Basically I want the whole house going through the VPN but I think I messed up somewhere. I'd like to keep the router Wifi if possible since otherwise I need to buy a POE adapter for the 1000Mbps ports.
Sometimes I get an "operation failed" message in the router system in the VPN section and the whole page is blank (all VPN settings not loaded etc) but the VPN still works! Not sure if this means anything.
Any insight appreciated as I've gotten as far as I can with Youtube videos and 3 kids around.
Thanks
- Copy Link
- Report Inappropriate Content
Thank you for posting in our community.
1. Why is the router identifying itself with the Virgin Media IP address when it is connected to the VPN?
The AXE5400 router works as the gateway in your network, and the VPN functionality of typical NAT devices only works within the LAN but not the WAN. All the traffic originating from the router's WAN, such as interactions with the internet service provider (ISP) device, bypasses the VPN and directly exits through the WAN interface. This behavior is considered normal.
2. Why are the PC and mobile phones seeing different IP addresses?
As you described, there are at least three different wireless networks and it's possible that the mobile phones and PCs are switching between these wireless connections when you are moving around. If these devices utilize randomized MAC addresses when connecting to different networks, the VPN connection will identify them as separate devices since it relies on MAC addresses for device identification. To determine whether your mobile phones and PCs are using randomized MAC addresses, you can refer to this guide for instructions.
- Copy Link
- Report Inappropriate Content
I have created a separate thread:
VPN Client unable to establish a connection to CyberGhost VPN, Status - Connecting
But seems the issue is pretty similar, so I'll post it here as well.
I have a new router - Archer BE230 v1.0, Firmware - 1.0.3 Build 20240612 rel.13057(4555).
I have a subscription for VPN from CyberGhost.
I want to configure the router to connect to the VPN provided by CyberGhost.
I have prepared configuration files from an OpenVPN service provider (CyberGhost) according to:
https://www.tp-link.com/us/support/faq/3763/#_CyberGhost
Then edit .ovpn manually according to:
https://www.tp-link.com/ca/support/faq/3338/
CyberGhost provides several options for used VPN protocol, including OpenVPN UDP/TCP and legacy OpenVPN <= 2.3.
The issue is that when I use the latest maintainable OpenVPN, the router cannot connect to the VPN, constantly showing Status - Connecting, assuming that the router cannot establish a connection.
But then I created a similar configuration using legacy OpenVPN <= 2.3, and the router successfully connected to a VPN.
What is the problem, the router doesn’t support the latest OpenVPN version?
Let me know if you need any additional information.
Please provide information on how to configure the connection to exactly CyberGhost using the latest OpenVPN version.
- Copy Link
- Report Inappropriate Content
Deco BE85, firmware 1.0.18
VPN - IPSec
VPN status is Connecting any time
VPN is work from my phone normally
I have tried to connect to this VPN server from another router (deco x60 and Archer AX6000). VPN client works fine.
- Copy Link
- Report Inappropriate Content
Hi, Thank you very much for the feedback.
I'd like to escalate your case to the senior engineer directly for further assistance.
In the meantime, since the VPN client configuration of Deco BE85 is exactly the same as Deco X60, Do you mean the same configuration details used to work well on Deco X60, but not on BE85, right?
Is BE85 the new main Deco and Deco X60 now working as the satellite Mesh units? or are they actually on separate Mesh systems?
Wait for your reply and best regards.
- Copy Link
- Report Inappropriate Content
Hello. Thanks for the quick response. The same VPN configurations are set on all devices (type, server IP, username, password, PSK). This configuration does not work on BE95, but it works on others. X60 and Archer are in other houses, in other networks. I can also connect by enabling a VPN connection with the same configurations from my phone and laptop via the BE85 network.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 8
Views: 67262
Replies: 241