@Kevin_Z 

1. Model number, hardware, and firmware version of your TP-Link Router. 

Firmware Version:

1.1.2 Build 20241014 rel.59971(5553)

Hardware Version:

Archer AX55 v4.0

2. What kind of VPN server you are connecting to?

Amazon EC-2 instance running OpenVPN server, on Linux Ubuntu

3. What kind of VPN type are you choosing on the TP-Link router, OpenVPN, or PPTP VPN?

OpenVPN

4. What kind of VPN Client software you were using on the local PC or phone when it was connecting fine? Please test and make sure you can connect to the server with third-party software, such as OpenVPN Connect for OpenVPN and WireGuard App for WireGuard VPN.

OpenVPN Connect

5. Which step did you stuck in, any error message or screenshot?

Stuck at connecting, traffic routed outside of VPN.

6. Troubleshooting you've done before, and be sure the .opvn file for OpenVPN or .conf file for WireGuard is included when emailing to support.

Checked if pivate key included in .opv is encrypted. It isn't. 

I can share the ovpn config by email on reply!!! Please help.

 Hi @easyUp,

The tech team was made aware of your issue, they will likely reach out to you via email to continue to troubleshoot your issue. Please check your email box and confirm.

  @Kevin_Z 

Removing "auth-user-pass" allowed the VPN client to connect to my OpenVPN server.

However, once connected, devices setup to use this connection, cannot access the internet. The current config file used is below the pic:

dev tun
tls-client

remote <<hidden url>> 1111

redirect-gateway def1

dhcp-option DNS 1.1.1.1

pull

proto udp

script-security 2

reneg-sec 0

cipher AES-256-CBC
auth SHA512

comp-lzo
<ca>
-----BEGIN CERTIFICATE-----
<<hidden>>
-----END CERTIFICATE-----

</ca>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
<<hidden>>
-----END OpenVPN Static key V1-----

</tls-auth>

  @Kevin_Z 

I am also having trouble getting OpenVPN working

1. Model number, hardware, and firmware version of your TP-Link Router.

BE550 (V1.0) - FW: V1_1.0.12 Build 20240902

2. What kind of VPN server you are connecting to?

Archer BE400's VPN server (OpenVPN) - UDP/TUN/internet and home network (client access)

FW: 1.0.5 Build 20240911 rel.28762

Note - BE400 (main) has easyMesh enabled with a AX72 (1.2.6 Build 20240619 rel.72016)

3. What kind of VPN type are you choosing on the TP-Link router, OpenVPN, or PPTP VPN?

OpenVPN (VPN Client on BE550)

BE400 server has PPTP/ OpenVPN enabled.

4. What kind of VPN Client software you were using on the local PC or phone when it was connecting fine? Please test and make sure you can connect to the server with third-party software, such as OpenVPN Connect for OpenVPN and WireGuard App for WireGuard VPN.

tried OpenVPN connect on Windows and Android, both worked fine with .ovpn. BE550 also works with PPTP.

5. Which step did you stuck in, any error message or screenshot?

BE550 vpn client shows connected (OpenVPN) but when i check on my PC (the device is selected as going through VPN) using where is my location, it still shows my original location. My android os TV literally wont go on internet

6. Troubleshooting you've done before, and be sure the .opvn file for OpenVPN or .conf file for WireGuard is included when emailing to support.

Tried reconfiguring VPN server on BE400 (no luck), tried doing the pkey stuff (but the hash is the same), tried PPTP (which worked, so i know my Be400 server works)

  @Kevin_Z 

Its now working....

For others here, here was my issue and the changes I needed to make to get it working.

System/Networking

I wanted to create a OpenVPN session between my TP-Link router (client) and a Synology NAS (server) located in a remote network.

Opened the .opvn configuration file provided by the Synology and changed these parameters:

1) Ensured redirect gateway was enabled/enforced on the connection, by removing the # character infront of this line:

redirect-gateway def1

2) The TP-Link VPN client is already providing the username/password you provided in the VPN client profile you added there; so remove the following line which tells the VPN server to ask for it:

auth-user-pass

3) Add the following lines to set explicit DNS servers for the connection (these are the public Cloudflare DNS servers; you can use the Google ones as well). :

dhcp-option DNS 1.1.1.1
dhcp-option DNS 1.0.0.1

4) Just to be sure, I changed the DNS addresses for both the client network router and the server network router to also use the Cloudflare DNS servers above.

And that worked... I then added my media server as a device in the TP-Link VPN client Device List and it used the VPN connection its internet access.

  @Kevin_Z 

yes that's what I meant, I checked through websites such as whatismyip and it still shows my original IP.

Also, the right mac address is selected

no luck