This Article Applies to:
Archer C1200 , Archer C5400 , Archer A2600 , Archer AX55 , Archer AX53 , Archer AX10 , Archer AX51 , Archer AX96 , Archer AXE95 , Archer AX10000 , Archer AX50 , Archer C3150( V2 ) , Archer C6( V2 ) , Archer C7( V4 V5 ) , Archer AX90 , Archer AX6000 , Archer C5400X , Archer A20 , Archer AX1800 , Archer AX206 , Archer AX4200 , Archer C3200( V2 ) , Archer AX75 , Archer AX4400 , Archer AX73 , Archer A10 , Archer AX4800 , Archer A2300 , Archer AXE75 , Archer A6( V2 V3 ) , Archer A7 , Archer AX72 , Archer AXE200 Omni , Archer GX90 , Archer A9 , Archer AX68 , Archer C2300 , Archer AX5300 , Archer AX23 , Archer AX20 , Archer C3150 V2 , Archer C4000 , Archer AX21 , Archer AXE300 , Archer AX1500 , Archer AX60 , Archer AX11000 , Archer AX3200 , Archer AX3000
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device and check either the Datasheet or the firmware section for the latest improvements added to your product.
In the OpenVPN connection, the home network can act as a server, and the remote device can access the server through the router which acts as an OpenVPN Server gateway. To use the VPN feature, you should enable OpenVPN Server on your router, and install and run VPN client software on the remote device. Please follow the steps below to set up an OpenVPN connection.
You may refer to the video first:
Case 1: Only one router in the home network map
Step1. Set up OpenVPN Server on Your Router
1. Log in to the web-based interface of the router. If you don’t know how to do that, please refer to
How do I log into the web-based Utility (Management Page) of TP-Link wireless router?
2. Go to Advanced > VPN Server > OpenVPN, and select Enable VPN Server.
Note:
- Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static IP address for the router’s WAN port and synchronize your System Time with the internet.
- For the CG-NAT ISP: Comporium and Direct link - radio service, provide the customer a private IP, that will cause you can’t use the OpenVPN and affect the NAT Type. You can contact the ISP and ask them to offer a Statis IP address.
- The first time you configure the OpenVPN Server, you may need to Generate a certificate before you enable the VPN Server.
3. Select the Service Type (communication protocol) for OpenVPN Server: UDP, TCP.
4. Enter a VPN Service Port to which a VPN device connects, and the port number should be between 1024 and 65535.
5. In the VPN Subnet/Netmask fields, enter the range of IP addresses that can be leased to the device by the OpenVPN server.
6. Select your Client Access type. Select Home Network Only if you only want the remote device to access your home network; select Internet and Home Network if you also want the remote device to access internet through the VPN Server.
7. Click Save.
8. Click Generate to get a new certificate.
Note:
If you have already generated one, please skip this step, or click Generate to update the certificate.
9. Click Export to save the OpenVPN configuration file which will be used by the remote device to access your router.
Step 2. Configure OpenVPN Connection on Your Remote Device
1. Visit http://openvpn.net/index.php/download/community-downloads.html to download the OpenVPN software, and install it on your device where you want to run the OpenVPN client utility.
Note:
You need to install the OpenVPN client utility on each device that you plan to apply the VPN function to access your router. Mobile devices should download a third-party app from Google Play or Apple App Store.
2. After the installation, copy the file exported from your router to the OpenVPN client utility’s “config” folder (for example, C:\Program Files\OpenVPN\config on Windows). The path depends on where the OpenVPN client utility is installed.
3. Run the OpenVPN client utility and connect it to OpenVPN Server.
Case 2: Two or more routers in the home network map
Step1. Set up OpenVPN Server on Your Router
1. Log in to the web-based interface of the router. If you don’t know how to do that, please refer to
How do I log into the web-based Utility (Management Page) of TP-Link wireless router?
2. Go to Advanced > VPN Server > OpenVPN, and select Enable VPN Server.
Note:
• Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static IP address for router’s WAN port and synchronize your System Time with internet.
• The first time you configure the OpenVPN Server, you may need to Generate a certificate before you enable the VPN Server.
3. Select the Service Type (communication protocol) for OpenVPN Server: UDP, TCP.
4. Enter a VPN Service Port to which a VPN device connects, and the port number should be between 1024 and 65535. Please write down the Service Port.
5. In the VPN Subnet/Netmask fields, enter the range of IP addresses that can be leased to the device by the OpenVPN server.
6. Select your Client Access type. Select Home Network Only if you only want the remote device to access your home network; select Internet and Home Network if you also want the remote device to access internet through the VPN Server.
7. Click Save.
8. Click Generate to get a new certificate.
Note:
If you have already generated one, please skip this step, or click Generate to update the certificate.
9. Click Export to save the OpenVPN configuration file which will be used by the remote device to access your router.
10. Set up Virtual Server/Port Forwarding for Router 2 on Modem Router/Router 1, please refer to
Port forwarding: how to set up virtual server on TP-Link Wi-Fi Routers (tp-link.com)
Note:
- Please make sure the Internal Port is the same as the VPN Service Port you wrote down before.
- Enter and write down the External Port.
11. Go to the Management Interface of the Modem Router/Router1, and write down the WAN IP address.
12. Right-Click the OpenVPN configuration file, open it with the Notepad.
Please modify the following two characters:
- Modify the remote address to the WAN IP address of the Modem Router/Router1 you wrote down in Step 11.
- Modify the Port number to External Port you set for the Router2 in Step 10.
13.Save the OpenVPN configuration file.
Step 2. Configure OpenVPN Connection on Your Remote Device
1. Visit http://openvpn.net/index.php/download/community-downloads.html to download the OpenVPN software, and install it on your device where you want to run the OpenVPN client utility.
Note:
You need to install the OpenVPN client utility on each device that you plan to apply the VPN function to access your router. Mobile devices should download a third-party app from Google Play or Apple App Store.
2. After the installation, copy the file exported from your router to the OpenVPN client utility’s “config” folder (for example, C:\Program Files\OpenVPN\config on Windows). The path depends on where the OpenVPN client utility is installed.
3. Run the OpenVPN client utility and connect it to OpenVPN Server.
Get to know more details of each function and configuration please go to Download Center to download the manual of your product.
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
We'd love to get your feedback, please let us know how we can improve this content.
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.
