Troubleshooting VPN Issues on Deco
- Case 1. Work as a VPN Pass-through router.
- Case 2. Work as a VPN Client.
- Case 3. Work as a VPN server.
- Case 4. Use PPTP/L2TP VPN as the internet connection type.
Case 1. Work as a VPN Passthrough router
The term "VPN Passthrough" on Deco means that it works neither as a VPN server nor a VPN client but as a tunnel in between that allows traffic from these endpoints to "pass through". All Deco supports VPN passthrough for IPSec/PPTP/L2TP and is intended to work without modification. So clients connected to Deco could directly make a VPN dial-up connection on themselves to the remote VPN server.
Q1. What should I do if the client failed to connect to the remote VPN server?
1. Ensure the same client could connect to the VPN server on another Wi-Fi network.
2. (Optional)If there is another DHCP router connected ahead of Deco, please change Deco to Access Point mode.
3. (Optional)If Deco is the only router, please unplug Deco and connect a computer via an Ethernet cable to the ISP modem and make VPN dial-up connection again.
Case 2. Work as the VPN Client.
>>Deco VPN Server/Client Supported List.
Q1. How to set up VPN Client on Deco?
Q2. VPN Client status showed connected, but the selected clients had no internet, or VPN Client status showed connecting all the time.
1. Ensure you could successfully make a VPN dial-up connection on the clients themselves via the same OpenVPN config file(Please remember that many OpenVPN providers require users to log into their management interface to find VPN service credentials first for a third-party OpenVPN configuration).
2. If possible, It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into Deco again to check if that works.
3. Confirm the current firmware is up-to-date.
4. Change the WAN DNS to 8.8.8.8/8.8.4.4 per link-How to change DNS server settings on Deco
If your issue cannot be fixed by the above suggestions, please comment below with the following information:
- What kind of VPN server you are connecting to, like NordVPN, ExpressVPN and SurfsharkVPN?
- What kind of VPN Client software you were using on the local PC or phone when it is connecting fine, like OpenVPN Connect or GlobalProtect APPs?
- Which step did you fail to get through, any error message or screenshot on the Deco APP?
Q1. How to set up VPN Server on Deco?
Q2. What should I do if I cannot connect to my VPN Server?
1. Ensure there is a public WAN IP address under Deco APP>More>Internet connection>IPV4. A private internet address under CG-NAT network would cause some issues.
2. Set up DDNS on Deco if the WAN IP is dynamic.
Case 4: Use PPTP/L2TP VPN as the internet connection type.
Some ISPs provide internet service based on PPTP/L2TP protocol. Please refer to this link to set up PPTP/L2TP internet connection on Deco:
Hi, can I have the current firmware version of your Deco BE85?
Do you mean the built-in NordVPN Client configuration token, such as https://www.tp-link.com/en/support/faq/3693/
Have you run into any issues with the manual configuration process?
Thank you very much.
Best regards.
Sorry for delayed answer - missed your post.
Fw version : 1.1.1 build 20241023 rel 34667
My previous message was
---
Same topic here just as an headup ==> VPN connect but no internet connection
Config
* BE85 (EU version)
* latest (as of 11/12) SW ==> with Wireguard option but nice initial screen to chose Nordvpn has been removed
* OpenVPN config using NordVPN config file (udp and tcp), working and tested on OpenVPN for Android after removing ping-timer-rem supposed to be unsupported as per OpenVPN support=> on OpenVPN, i have to chos a cert file on my phone
* with and without DNS change
* mac, pc, android client: not working both in client and in all blocker mode
Nore
* Could use a free VPN proivder and having internet but despite right IP displayng on control website from nordvpn, site says "not protected" ==> this one have a cert file included.
* warning: web interface of the BE85 192.168.68.1 does not look at all like tp-link screen shots, much simplier, no parameter possible, always have to go trhough Deco App (on Android in my case) to do things and especially to configure the VPN
Could it be a problem with certificates not being properly exchanged with the server?
Regards
Absolutely useless "function"
Running on PX50 with latest firmware, OVPN and PPTP not work. both work fine client on multiple devices including some device running older versions of of ovpn and on iot devices without issue.
Looking on server logs I see not attempt from PX50 to attempt to connect to the server despite the router showing "Connecting" the clients on the device list are left unable to connect to internet.
It also raise the question of why there are no accessible logs on the routers to help diagnose the issue rather than having to guess. I have validate my server, profiles and use it successful on a range of clients from high to low spec, new to old. The only one that doesn't work is the Deco.
Tried to contact directly as per your signature but received a "not authorized"...
--- Here is my msg ;) ---
Hi
Calling from this thread
https://community.tp-link.com/en/home/kb/detail/412688?sortDir=DESC&page=1
Retried today with original openvpn server file from nord vpn, could connect (according to Deco app) to fr555 tcp server but still can go through (basically, when i turn on vpn for.my mobile connected on wifi to Deco be85 eu version, last sw, i get 'no internet available')
Should I send you the openvpn file.to try (and if so how, here i am limited to 1000 chars).
Thanks