ER605 OpenVPN Client setup requires static server ip?

ER605 OpenVPN Client setup requires static server ip?

ER605 OpenVPN Client setup requires static server ip?
ER605 OpenVPN Client setup requires static server ip?
Yesterday - last edited Yesterday
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.2.5 Build 20240522 Rel.75860

I have been trying for couple of hours now to setup an ER605 to act as a client to connect to an OpenVPN server which is behind a dynamic ip-address. I can get the VPN connection to work by inserting the server IP-address directly, but ER605 is giving me an error message when i try to insert the host name (automatically updating host name of the ip-address) to the OpenVPN Client Remote Server - address field.

 

I get "invalid ip-address format" -error with any "host name" type address unless it is in numerical ip-address format (and this would not work for long with a server that is behind dynamic ip like my home Asus router)

 

What i am trying to achieve is to have Asus router (AX-92U) serve as VPN server and have the ER605 automatically connect to this server via modern and secure VPN protocol, but i cant get Ipsec to work (skill issue i think) and OpenVPN is giving me this issue that it requires the address in number format. PPTP worked, but is likely the most unsecure option and would really want to use some other option.

 

What can i do here? Any ideas how to get this to work?

 

Seems incredible to me that dynamic host name for the server address is not allowed as this is how the entire internet works.

  0      
  0      
#1
Options
2 Accepted Solutions
Re:ER605 OpenVPN Client setup requires static server ip?-Solution
Yesterday - last edited Yesterday

  @TuomasG 

 

IPsec policy that's the right place.

Check the official instruction from TP-Link, point 4 and 5 is what you are looking for:

https://www.tp-link.com/us/support/faq/3051/

 

I don't think there's username and password for IPsec at all. are you sure that IPsec is set up on that Asus server?

 

Hope it helps :)

 

Cheers

Recommended Solution
  1  
  1  
#4
Options
Re:ER605 OpenVPN Client setup requires static server ip?-Solution
Yesterday - last edited Yesterday

  @TuomasG 

 

For OpenVPN those may be hardware limitations. For ER605 the OVPN speed is:

 

According to official datasheet from TP-Link.

 

L2TP would be faster for sure. You should try to configure that instead I think.

Recommended Solution
  1  
  1  
#6
Options
5 Reply
Re:ER605 OpenVPN Client setup requires static server ip?
Yesterday

  @TuomasG 

 

Hi,

 

As far as I know, OpenVPN as well as Wireguard on Omada setup supports IP only for now.

The domain name as an address is to be implemented in the future updates but not sure for now when.

 

IPsec do work with domain names for sure - that's something I'm using on my own.

 

Cheers

  0  
  0  
#2
Options
Re:ER605 OpenVPN Client setup requires static server ip?
Yesterday

  @RaRu 

 

Thank you for the answer!

 

Do you have any tips how to get the Ipsec to work? I am struggling as the GUI has the "Ipsec" menu under "VPN", but that only contains "Ipsec policy" setup which i cant figure out as it doesnt even ask for username and password besides the preshared key and those are required by the Asus server. If i setup the Ipsec tunnel from the L2TP menu, i cant change any of the policy settings anymore as the policy is created automatically and i get an error related to main mode in my asus log and i cant really change any settings.

 

The protocols i am able to use are either weak or rely on ip-address only for server, and the one that should work i cant figure out. Dammit.

  0  
  0  
#3
Options
Re:ER605 OpenVPN Client setup requires static server ip?-Solution
Yesterday - last edited Yesterday

  @TuomasG 

 

IPsec policy that's the right place.

Check the official instruction from TP-Link, point 4 and 5 is what you are looking for:

https://www.tp-link.com/us/support/faq/3051/

 

I don't think there's username and password for IPsec at all. are you sure that IPsec is set up on that Asus server?

 

Hope it helps :)

 

Cheers

Recommended Solution
  1  
  1  
#4
Options
Re:ER605 OpenVPN Client setup requires static server ip?
Yesterday

  @RaRu 

 

Thanks, i thought that Asus had support for site to site Ipsec, but in reality what they call ipsec seems to be actually L2TP over ipsec, so having site-to-site over ipsec is not possible with the vpn server. Unfortunately i also run into an error with L2TP over ipsec option, so bit stuck at the moment.

 

OpenVpn works with fixd ip-address for now, but its also surprisingly slow (around 15Mbs with 100Mbs connection). 
 

Lets see how things will develop, but slightly dissappointed so far with this unit and its performance / flexibility. 
 

Thanks again for your help!

  0  
  0  
#5
Options
Re:ER605 OpenVPN Client setup requires static server ip?-Solution
Yesterday - last edited Yesterday

  @TuomasG 

 

For OpenVPN those may be hardware limitations. For ER605 the OVPN speed is:

 

According to official datasheet from TP-Link.

 

L2TP would be faster for sure. You should try to configure that instead I think.

Recommended Solution
  1  
  1  
#6
Options