@Ian_D 

I just turned on the VPN client and checked. I see the VPN static route with a 10. prefix. I checked it a couple times over 15 minutes or so, no changes. It did not have a default gateway address, is that normal?

  @Mbauer5 thanks. Yes this normal.

Leave the vpn connected without any clients assigned and just check in to see if that 10 address changes. If it does, it means the VPN has reconnected. This is just one of the issues we are looking at

OpenVPN issue

Ok looks like the router is not marking the client traffic to use the VPN tun0 tunnel

root@X50:/# ip rule show
0:      from all lookup local
32764:  from 192.168.68.115 lookup vpn
32765:  from all fwmark 0x40000/0x40000 iif br-lan lookup vpn
32766:  from all lookup main
32767:  from all lookup default

In this example, any client matching the packet mark (any client added via the app will be added to get the packet mark)  0x40000 will be routed via the vpn (tun0)

I created a specific rule for 1 client also, 192.168.68.115 to send any traffic via the vpn (tun0) but that doesn't work either

root@X50:/# ip route show table vpn
0.0.0.0/1 via 10.10.100.25 dev tun0
default via 10.10.100.26 dev tun0
10.10.100.1 via 10.10.100.25 dev tun0
23.106.37.84 via xx.xx.xx.xx dev br-wan
128.0.0.0/1 via 10.10.100.25 dev tun0

We know the tun0 is up and working

root@X50:/# ping 10.10.100.1
PING 10.10.100.1 (10.10.100.1): 56 data bytes
^C
--- 10.10.100.1 ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss

root@X50:/# ping -I tun0 10.10.100.1
PING 10.10.100.1 (10.10.100.1): 56 data bytes
64 bytes from 10.10.100.1: seq=0 ttl=64 time=21.994 ms
64 bytes from 10.10.100.1: seq=1 ttl=64 time=20.320 ms
^C

root@X50:/usr# traceroute -n -i tun0 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 46 byte packets
 1  10.10.100.1  24.212 ms  19.412 ms  22.120 ms
 2  23.106.37.124  23.258 ms  23.106.37.125  23.642 ms  23.106.37.124  21.503 ms
 3  23.106.32.4  21.731 ms  23.106.32.2  21.939 ms  23.106.32.4  22.685 ms
 4  31.31.39.60  25.533 ms  23.421 ms  22.772 ms
 5  31.31.34.22  28.145 ms  29.290 ms  27.199 ms
 6  31.31.34.125  40.932 ms  32.322 ms  31.31.34.127  26.914 ms
 7  31.31.38.39  32.450 ms  30.987 ms  35.864 ms
 8  108.170.241.193  29.936 ms  108.170.241.225  37.159 ms  108.170.241.193  29.271 ms
 9  142.251.225.137  33.281 ms  172.253.66.185  39.120 ms  142.251.66.241  28.290 ms
10  8.8.8.8  28.947 ms  28.874 ms  32.866 ms

So now i need to identify why the client is blocked, but thats not easy as im not great with linux

  @David-TP My new Deco X50 is 1.2... and i cannot use this new firmware ??

Thank

Hispa

  @Hispanico X50(1.2) firmware 1.0.1 Build 20221103 Rel. 43293

So no new features for my X50...i buy now :-(

Thank

  @Ian_D 

LT2P is stuck forever 'Connecting..'

PPTP still works

OpenVPN - have some questions:

Is the config file format/language universal, or does it depend on the router?  Like, if I sign up for a service and download the config file for another TP-Link or, say, Asus router, can I use it on the Deco?

Not s single major service supports this model.  Which is understood, as it just came out and Asus routers seem to have been the most VPN-friendly.  But could you suggest a way forward?  Download an Asus OpenVPN config file and start messing with its contents?

Thanks

  @David-TP    in all firmware versions, the problem is that after optimization (the latest iOS test version), the router occupies the busiest channel. a huge ping . the application says that everything is OK. and YouTube frames are falling apart.  I have 2 a DECO x50 and x20 v4 . the problem is also that the computer clings to the farthest point x 50v 1 

  @Muscovite there is a standard set of values in the config file. There are also some settings that suit particular devices.

We can modify a file that will suit the X50. If you already have a file, I can look at it for you.

Don't sign up to a different service yet, we have identified some issues in the current firmware that need to be fixed by way of firmware update.

The guys @ TP-Link have been helping me to troubleshoot these issues and have been amazing, so a big thanks to them.

Hopefully I will be testing the new firmware very soon and will feedback then

  @Ian_D 

Ian, thank you for your generous offer and willing to go the extra mile!  Ashamed to say my 7-day product return window was closing fast so I chickened out and returned the x50. I am getting a proper full-size WiFi router, which with features like VPN Fusion will even allow for several different VPN services to be assigned to specific different devices, if need be.

It is a bit unfair to the Deco line, as it is a first and foremost a mesh system (a happy user of x60 of many years here), but its VPN support is at a very early stage.   Having said that, kudos to tp-link for introducing new features.

Thanks again!

PS  I also misreported the connection speed using the PPTP, which was turned out to be only 15-20Mbps over a 300Mbps line.

  @Muscovite No probs, shame it didnt work out for you.

Out of interest, which router have you gone for?