Archer AX11000 v1 auto updated to firmware 2.2.1 issues

Since the automatic update last night, i can't do speedtest from the web management or from the theter app. Was working fine before the update. It start doing the test but never end. then the internet status page bug and did not show info and have hard time to connect to management page after that and tether app did not connect at all. Need to reboot my router to get it fix. the update is from 1.3.4 Build 20230906. Seem to take way much time to boot than before.
On the canadian site i did not see the corresponding update but it is available on the global site. Next week I will try to do factory reset and reconfigure it (i will lost 1 or 2 hour doing it because of my setup, mac filter, parental control, and number of device).
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Updates, everything else seem to work perfectly and seem to be stable. Did not have impact on memory and cpu usage.
- Copy Link
- Report Inappropriate Content
Hello@boyalone18 ,
Welcome to our community.
After rebooting, does everything work again? Is there any error message? Please take a screenshot of the error and send it here.
- Copy Link
- Report Inappropriate Content
@Joseph-TP
2 seconds after clicking speedtest button it toggle between those 2 screens
then if i click on internet status
or check config
even log does not work i cannot select anything from drop down
when i logoff then try to logon, here my login screen.
i can't login.
my internet work but i don't know if i'm protected or not.
need to reboot to log in and make webpage of router work again.
I did not do factory reset at this moment probably my next step.
- Copy Link
- Report Inappropriate Content
@Joseph-TP
after factory reset start working as before
Then I activate IPSEC and problem came back. It seem to be ipsec that is not compatible or working with speedtest.
I disable ipsec and reboot then speedtest working again,
What AI think:
On your AX11000, the built-in speed test runs inside the router itself, not on your PC/phone. It works by:
Opening a direct connection from the router → to TP-Link’s (Ookla-based) speed test servers.
Measuring throughput while bypassing your LAN devices.
🔹 Why it breaks when you enable the IPSec VPN server
When you turn on the IPSec VPN server:
The router changes how it handles NAT acceleration and packet processing.
Hardware NAT / flow offload is usually disabled when VPN features are active. (You already saw <hw_enable>off</hw_enable> in your config.)
IPSec hooks into the packet path (IP stack + crypto), and the firmware may prevent the internal speedtest daemon from running because it can’t properly bind to the WAN interface while VPN encryption modules are active.
Some TP-Link firmwares even block the test completely when VPN is enabled, to avoid inaccurate results (since all WAN traffic is now potentially routed through the IPSec stack).
🔹 What this means in practice
Router’s speed test button won’t work as long as the IPSec server is enabled.
Your internet still works fine; you just need to test speeds from a client device (PC/phone).
If you disable IPSec VPN server, the button should work again immediately.
🔹 Workarounds
-Test from your PC → Just use speedtest.net or CLI (speedtest-cli) to measure.
-Temporarily disable IPSec VPN server → Run the built-in router test, then re-enable it.
- Copy Link
- Report Inappropriate Content
Got problems with NAT port forwarding.
####################################################################
# Archer AX11000 System Log
# Time = 2025-09-08 19:00:15
# H-Ver = 1.0.0 ; S-Ver = 2.2.1 Build 20250725 rel.9119
# LAN: I = 192.168.2.1 ; M = 255.255.255.0 ; MAC = 60:32:B1:3A:76:64
x
x
# Clients connected: 9 ; WI-FI : 6
####################################################################
2025-09-08 18:58:58 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:555 ip:192.168.2.20 in-port:554 protocol:all]
2025-09-08 18:58:57 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:81 ip:192.168.2.20 in-port:80 protocol:all]
2025-09-08 18:58:57 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:556 ip:192.168.2.21 in-port:554 protocol:all]
2025-09-08 18:58:57 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:82 ip:192.168.2.21 in-port:80 protocol:all]
2025-09-08 18:58:57 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:7001 ip:192.168.2.58 in-port:7001 protocol:all]
2025-09-08 18:58:57 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:21 ip:192.168.2.129 in-port:21 protocol:tcp]
2025-09-08 18:58:56 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:8080 ip:192.168.2.182 in-port:8080 protocol:all]
2025-09-08 18:58:56 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:557 ip:192.168.2.18 in-port:554 protocol:all]
2025-09-08 18:58:56 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:2160 ip:192.168.2.227 in-port:1880 protocol:all]
2025-09-08 18:58:56 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:86 ip:192.168.2.18 in-port:80 protocol:all]
2025-09-08 18:58:56 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:87 ip:192.168.2.24 in-port:80 protocol:all]
2025-09-08 18:58:55 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:2222 ip:192.168.2.192 in-port:2222 protocol:all]
2025-09-08 18:58:55 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:6000 ip:192.168.2.192 in-port:5432 protocol:all]
2025-09-08 18:58:55 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:2200 ip:192.168.2.185 in-port:1880 protocol:all]
2025-09-08 18:58:55 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:4444 ip:192.168.2.115 in-port:4444 protocol:all]
2025-09-08 18:58:55 nat[22792]: <5> 211054 Virtual server created succeeded[ex-port:88 ip:192.168.2.106 in-port:81 protocol:all]
2025-09-08 18:58:54 nat[22792]: <6> 211501 Initialization succeeded
2025-09-08 18:58:54 nat[22792]: <6> 211501 Initialization succeeded
cant reach the network from outside the network
- Copy Link
- Report Inappropriate Content
Hello @boyalone18 ,
Welcome to our community.
May I know if your network topology diagram is as follows:
ISP modem—router —PC
(Note: — stands for wired connection,)))((( stands for wireless connection )
Can I know if you've set up an IPSec VPN on your computer? Who is your VPN provider? Please tell me more details about the VPN service:
- What devices does it run on?
- Is it for business use and provided by a company? Or is it a personal need?
- Is there any specific software used?
- Copy Link
- Report Inappropriate Content
Hello@JJBZA ,
Welcome to our community.
May I know if your network topology diagram is as follows:
ISP modem—router )))((( client devices
(Note: — stands for wired connection,)))((( stands for wireless connection )
Does it occur after the new firmware update? Have you been able to reboot the router for a try?
Please check the settings on the port forwarding page and see if any settings have been changed.
Best Regards.
- Copy Link
- Report Inappropriate Content
@Joseph-TP
I was talking about the embeded ipsec vpn server I can set up on the router itself. When I only activate it without connecting to it cause problem to the embeded speedtest of the router and web interface. And my setup was a classic one. ISP (fiber) connected to my routher using cat 6 and my windows 11 pc connect to router via wifi.
On the router I configure open vpn server, IPSEC server, parental control, white list mac access, qos, activate 3 option in security under home care, disable mesh and transform guest network to normal wifi with access to my network as i have many device and manualy assign them to different ssid.
- Copy Link
- Report Inappropriate Content
Hello @boyalone18 ,
Thank you for your reply with details.
We would like to escalate your case to the support engineers, and they will follow up on it. If you are willing to conduct further analysis, please check your inbox and respond.
- Copy Link
- Report Inappropriate Content

Information
Helpful: 0
Views: 511
Replies: 9
Voters 0
No one has voted for it yet.