@Kevin_Z 

Hello

good morning

Archer AX20 v2.0 US firmware: 2.1.5 Build 20211231 rel.73104(5553)

Can't connect to VPN using WAN - L2TP My VPN Service Provider is LE-VPN and has the L2TP protocol active and functional, can you do something to make it work?

Using the New VPN Client Option in OPENVPN Protocol unfortunately lowers the internet speed performance too much and they already explained to me that when activating that it only uses a single processor core of the router and it is not an option for me, they can also add the Protocol WireGuard I would appreciate it I would like you to send me the latest beta ZIP to install on my router and do tests.

thanks

regards

  @Kevin_Z 

Hi Kevin

I have an Archer AX20 v2.0 and the firmware is up to date: 2.1.6 Build 20220128 rel.15823(4555).

I have tried to connect to CyberGhost VPN and PrivateInternetAccess VPN via OpenVPN and it is just stuck on "connecting". I have followed all of the steps outlined in your original post (size of config file is fine etc.)

Can you help at all?

Thanks

  @Kevin_Z 

Hi Kevin,

I need the OpenVPN server option operated with TAP mode (i.e. Bridge-mode) instead of TUN mode (i.e. Router-mode) provided by Archer AX90 FW. Can you help to ask if this option can be provided just like DD-WRT FW's OpenVPN server? Otherwise I don't know how to allow the remote VPN client to access the home LAN subnet's file sharing / RDP / VNC servers directly.

With the following AX90 FW version, the OpenVPN connection can be successfully established. But it is the same situation regarding Ronald's question.

Another curious design is about the "Access Control" on the "Guest network". I am surprised why it is also included. To me it makes more sense without any needing to set the MAC address in this table just for my different guests to use my WiFi network to access the internet while my home network is still only accessed with my home devices. It is the same for the company's office environment. It can be achieved with my another Buffalo AC1750DHP router running the DD-WRT FW.

Thank you for any help!

Best regards,

Wayne

Kevin_Z wrote

Kevin_Z: Can I know what kind of VPN server are you using on the AX90? And what is the working mode of the AX90 when you mentioning TAP mode (i.e. Bridge-mode), does it refer to Access Point mode? Some advanced features are not available when the router is working in AP mode, I guess VPN server would be one of them. VPN server can only be configured on the gateway router.

Hi Kevin,

As it is mentioned, the current AX90 FW's OpenVPN server does not have this TAP option when AX90 is configured as router mode. But it works with the DD-WRT FW in my experience. With OpenVPN server's TAP mode, the VPN client's IP is assigned with the LAN subnet's. I used to run DD-WRT's OpenVPN server with this mode.

 

Another curious design is about the "Access Control" on the "Guest network". I am surprised why it is also included. To me it makes more sense without any needing to set the MAC address in this table just for my different guests to use my WiFi network to access the internet while my home network is still only accessed with my home devices. It is the same for the company's office environment. It can be achieved with my another Buffalo AC1750DHP router running the DD-WRT FW.

Kevin_Z: Does it mean there is no internet access when connecting to the guest network and when Access Control is enabled? If yes, this has been brought up with the team and they will evaluate the feasibility to optimize the Access Control feature in the future.

Any device not described in the [Access Control] [White List] does not even have any chance to establish the connection to AX90's Guest WiFi network. For security consideration,  this option is useful in case to disallow some standalone devices to touch home LAN. But it is not really useful for occasionally visited guests case. Maybe an additional Guest Network SSID with the option to enable / disable the Access Control is more flexible. :p

Thank you for the reply!

Best Regards,

Wayne