Using OpenVPN to Securely Access Your Network Remotely
Tony
You probably have a myriad of connected resources in your home: a surveillance camera, a NAS device storing your family photos and videos, a private computer, and more. If you want to allow remote access to these resources via internet for yourself, your roommates, your friends, and/or your family members without making it easy to hack and be exposed in public, you might want to consider using a VPN connection. If your TP-Link router is equipped with OpenVPN, you can take advantage of this useful feature.
Why is OpenVPN recommended?
OpenVPN is an easy-to-configure and secure way to create private VPN connections. It is an open source software based on OpenSSL (Open Secure Sockets Layer) and has several advantages:
- Easy setup
The home network can act as a VPN server. All you need to do is to configure the router as a server gateway by following the guide, then download and install the OpenVPN client utility on each device that you plan to access your router.
- Internal security features
OpenVPN adopts the OpenSSL library to provide encryption of both the data and control channels, allowing you to authenticate those who want to access your private network sources using pre-share secret keys, certificates, or usernames and passwords.
- Compatibility
OpenVPN’s traffic is based on common network protocols (TCP and UDP), making it capable of traversing NATs (network address translators) and firewalls.
How to configure OpenVPN to access your network.
In this OpenVPN connection, the home network can act as a server and the remote device can access the server through the router which acts as an OpenVPN Server gateway. To use the VPN feature, set up OpenVPN Server on your router, then install and run VPN client software on the remote device. Follow the steps below to set up an OpenVPN connection.
Before you start:
For a more stable VPN connection, we recommend that you configure Dynamic DNS Service for your router and synchronize your System Time with internet.
1. Set up OpenVPN Server on TP-Link Your Router
1) Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.
2) Go to Advanced > VPN Server > OpenVPN, select the checkbox to enable VPN Server.
3) Select the Service Type (communication protocol) for OpenVPN Server: UDP, TCP.
4) Enter a VPN Service Port to which a VPN device connects, and the port number should be between 1024 and 65535.
5) In the VPN Subnet/Netmask fields, enter the range of IP addresses that can be leased to the device by the OpenVPN server.
6) Select your Client Access type. Select Home Network Only if you only want the remote device to access your home network; select Internet and Home Network if you also want the remote device to access internet through the VPN Server.
7) Click Save.
2. Generate a certificate to be used by the remote device.
1) Click Generate to get a new certificate.
2) Click Export to save the OpenVPN configuration file (client.ovpn) which will be used by the remote device to access your router.
3. Configure OpenVPN Connection on Your Remote Device
1) Visit http://openvpn.net/index.php/download/community-downloads.html to download the OpenVPN software and install it on your device where you want to run the OpenVPN client utility.
Note: You need to install the OpenVPN client utility on each device that you plan to apply the VPN function to in order to access your router. Mobile devices should download a third-party app from Google Play or the Apple App Store.
2) After the installation, copy the file (client.ovpn) exported from your router to the OpenVPN client utility’s “config” folder (for example, C:\Program Files\OpenVPN\config on Windows). The path depends on where the OpenVPN client utility is installed.
3) Run the OpenVPN GUI, then the OpenVPN GUI icon 
will appear in the system tray. Right-click on the icon, and a menu should appear showing the names of your OpenVPN configuration files and giving you the option to connect. Click Connect to connect to the server for VPN service.
4) The OpenVPN GUI icon will turn green once the VPN connection is established.
Comment
I did all of these steps and have openvpn up and running (thank you!), But it's only giving me access to the internet and my router. It's not giving me access to anything on the other subnet. Also, using a net analyzer app shows that there's only 2 devices on the network: my VPN client and the router.
How do I get access to the rest of the network?
I am in exactly the same situation, how do you access you LAN via the VPN?
Same. I have gone through these steps and it does not work as described. Can only access my router config page remotely. I cannot connect to any devices on my home network.
If you are not able to access devices on the LAN check the security settings (computer firewall or security softare) if they are allowed access. For example, the Windows Firewall will prevent any local access. What you can also do is to get on a computer that is on the LAN and not through OpenVPN, and see if you can access anything locally to rule out the VPN.
I have tried everything and can not get this to work! Like everyone else I only have access to the router none of the devices on the LAN. It is a shame that this does not work!
I'm having the same problem. Firewall is turned off can access router via openvpn, but can't access other LAN ip addresses. Plz help.
Ok, I just figured out how to access your LAN from OpenVPN, here is how
First, go to the advanced tab, then go to network, then static routing.
Here is what I did to get it to work correctly
Hope this helps!
I have the same problem (can connect to the router but not to the local LAN). I have tried the static IP solution above but without success.
Update 2020-08-18:
I managed to get it to work by starting the OpenVPN client as administrator, i.e. in Windows right-click on the OpenVPN icon and select "Run as administrator".
To check note the IP address of one of the other devices in the LAN that you are connecting to and then try to ping the IP address in a command prompt.
Is the answer to port forward the OpenVPN port to the computer on your network?
I have simillar problem. Anyone can help? Client connected to OpenVpn server on Archer C7 need acces to local LAN (machine on 192.168.1.10)