Problems with setting up VPN on Archer C6 v2.0 behind ISP router

Problems with setting up VPN on Archer C6 v2.0 behind ISP router

Problems with setting up VPN on Archer C6 v2.0 behind ISP router
Problems with setting up VPN on Archer C6 v2.0 behind ISP router
2024-04-06 19:09:45
Model: Archer C6  
Hardware Version: V2
Firmware Version: 1.3.7

Hi!


I am trying to set up VPN on a TP Link Archer C6 v2.0 router. It was working previously, but after a change in the network configuration, it does not anymore.

 

Original setup:


Internet - (WAN) ISP router (LAN) - (WAN) TP Link router

In this setup, VPN was working perfectly, I had port forwarding set up in the ISP router, and I could access the VPN server on TP link router via internet.
The problem was, the ISP router does not allow setting up static routes, which meant that I could not access the TP Link router's subnet from the ISP router, which I want to, since I have a NAS running there.

 

Because of this, I switched to setup number 2:


Internet - (WAN) ISP router (LAN) - (LAN) TP Link router
So the only difference is now they are connected LAN to LAN, TP Link router being the DHCP server. Everything works, devices can reach other on both sides, everything perfect. The only difference is that even after I updated the port forwarding target to the TP Link router's new IP, I cannot connect to the VPN.

 

Here is what I tried:
- I thought maybe I botched the port forwarding somehow, so I changed the port forwarding target to my PC and left everything else intact, I fired up wireshark, and I checked out the traffic arriving from that port. Every packet arrives, it works perfectly.
- Then, I thought that maybe the TP Link router does not allow VPN connections from its LAN port. Being connected to the local home network, I started the VPN connection with the target being set to the TP link router's local address. It also worked, so this is ruled out, too.

 

Maybe it does not allow connections from different IP subnets, but only on its LAN port? Why did it work on the WAN port?

 

Again, I want to point out that everything else works, every device can reach each other and the internet, too.

 

VPN type is OpenVPN and I tried both UDP and TCP protocols, no luck.
I've also read the manuals, but it does not mention anything related to the problem.

 

Do you have any idea? Thank you in advance.

  0      
  0      
#1
Options
3 Reply
Re:Problems with setting up VPN on Archer C6 v2.0 behind ISP router
2024-04-07 09:31:33

  @BilboLaggins 

 

Do you mean the operation mode of Archer C6 is still on Router mode but using LAN ports only?

Please note that VPN function is not available in AP mode, and it is still in Router mode now, it is still a NAT product even though WAN port is not used, please try to disable NAT to see if it helps:

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode. If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  0  
  0  
#2
Options
Re:Problems with setting up VPN on Archer C6 v2.0 behind ISP router
2024-04-09 20:41:58

  @Sunshine Thanks for you quick reply!

 

Do you mean the operation mode of Archer C6 is still on Router mode but using LAN ports only?

That is exactly the case.

 

Please try to disable NAT to see if it helps

I unchecked both boxes, even restarted the router, but unfortunately it did not help, the situation is exactly the same. Do you have any further idea?

 

Thank you again.

  0  
  0  
#3
Options
Re:Problems with setting up VPN on Archer C6 v2.0 behind ISP router
2024-04-10 00:24:52

  @BilboLaggins 

 

If your ISP router (modem ?) could be set in bridge mode you'll overcome the double NAT issue and use your C6 in the original setup - check this FAQ.

If that's not possible another option would be to connect your NAS to the ISP router. Thus, the NAS can be accessed from both ISP and C6 LAN.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#4
Options

Information

Helpful: 0

Views: 533

Replies: 3

Related Articles