Troubleshooting VPN Client on Wi-Fi Router Is Not Working
This Article Applies to:
All the Wi-Fi Routers that support VPN Client, such as Archer AX20, Archer AX21, Archer AX90, etc.
Issue Description/Phenomenon:
The Wi-Fi Routers that are being discussed here are the models that support VPN Client, which allows users to connect to a VPN server without the need to install VPN software on each device. If you are unable to connect to a VPN server when trying to configure the VPN client on the TP-Link router, this article provides some suggestions that may help you out.
However, if VPN server on TP-Link router is not working, please follow this thread for troubleshooting: VPN Server Doesn't Work Properly on TP-Link Wi-Fi Routers
Troubleshooting Suggestions & Solution:
Step 1
For OpenVPN, please follow this FAQ How to get configuration files from OpenVPN service providers to get correct configuration file and your VPN service credentials, which is the key to accessing the VPN service.
Step 2
Ensure you can successfully connect to the VPN server using a third-party VPN client software like OpenVPN Connect or OpenVPN or WireGuard App for WireGuard VPN on the local PC/Smartphone. This can ensure the .opvn or .conf file is configured and exported correctly.
For example, If you are trying to connect to NordVPN, please don't use NordVPN App since it doesn't require the .opvn at all.
Note: NordVPN service credentials are different from your NordVPN account credentials, namely your email address and your password. You'll need NordVPN service credentials to connect to the VPN using the manual OpenVPN configuration method in the router.
Step 3
If step 2 is confirmed good, but it still fails to connect to the VPN server when uploading the .opvn file into the TP-Link router, be sure the router's firmware is up-to-date. You can check for the updates on the Tether app or on the router web GUI, or you can download it from the local official website and then install it manually.
Step 4
If it still fails, please check the size of the VPN configuration profile you are trying to upload to the router, and how large that file is. You may download and install the Notepad+ application to delete the useless comment in the profile if that is too large, then try uploading it into the router again.
Step 5
It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into the TP-Link router again to check if that works.
If the VPN connection still fails, please comment below on this topic and be sure to provide the following information:
1. Model number, hardware, and firmware version of your TP-Link Router.
2. What kind of VPN server you are connecting to?
3. What kind of VPN type are you choosing on the TP-Link router, OpenVPN, or PPTP VPN?
4. What kind of VPN Client software you were using on the local PC or phone when it was connecting fine? Please test and make sure you can connect to the server with third-party software, such as OpenVPN Connect for OpenVPN and WireGuard App for WireGuard VPN.
5. Which step did you stuck in, any error message or screenshot?
6. Troubleshooting you've done before, and be sure the .opvn file for OpenVPN or .conf file for WireGuard is included when emailing to support.
Related Articles:
If you are not familiar with the VPN, visit Introduction and Configuration Guide of VPN Function on TP-Link Wireless Routers
If you want to check which model supports the VPN Client, visit Routers supporting the VPN Client.
If you are unable to connect CyberGhost OpenVPN Server, please try Manually create the unified format for OpenVPN profile(CyberGhost OpenVPN Server)
-------------------------------------------------
Have other off-topic issues to report?
Welcome to > Start a New Thread < and elaborate on the issue for assistance.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Thanks so much for sharing all the detailed info. To address the issue and try to fix it, we would like to have a specialist look into this further via email. Please check your mailbox later, and let us know if the issue is resolved. Thank you!
- Copy Link
- Report Inappropriate Content
Hi all,
I am trying to connect my TP-Link AX5400 (AX72) to a remote private OpenVPN Server.
Firmware Version 1.1.2 Build 20220520 rel.75663
I have successfully connected my PC using the desktop client and on my iPhone and iPad also using the OpenVPN Connect software client.
I used the ovpn file and the Private Key password that the OpenVPN server generated.
I would like to configure a 'dedicated' VPN connection using the TP-Link router, so that the client software on each individual device is not required.
I have set up the router normally and I can connect to it and it works for internet access.
If I go to the VPN client and enable it. I input the Private Key password in the password field and upload the ovpn file.
This says it is is successful but if I try to enable the VPN it just sits at 'connecting' and never seems to connect.
I have also tried the connection name in the user field.
The ovpn file contains all of the cert information etc.
**************************************
client
dev tun
proto udp
remote XXXXXX 51820
resolv-retry infinite
nobind
remote-cert-tls server
tls-version-min 1.2
verify-x509-name XXXXXXXXX name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIBvjCCAWWgAwIBAgIUMW1Hf2d6cVtLgNmI6TLeS6xxyNswCgYIKoZIzj0EAwIw
XXX
XXX
XXX
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIBxzCCAWygAwIBAgIRAJaCSHk0zlCraLbprsKG3KkwCgYIKoZIzj0EAwIwFjEU
XXX
XXX
XXX
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAjB2f+3jQTkIAICCAAw
XXX
XXX
XXX
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
f4365f80c613c05b3f98de319f5f39f9
XXX
XXX
XXX
-----END OpenVPN Static key V1-----
</tls-crypt>
*******************************************
Any help would be gratefully received.
- Copy Link
- Report Inappropriate Content
@Thompst I was told by tp-link that the encrypted key is not supported and finally got it to connect by replacing the encrypted private key in the ovpn file with plain key
```
openssl pkey -in secure.key -out plain.key
```
Not sure why the router has a password field if it isn't supported
- Copy Link
- Report Inappropriate Content
Thanks I decrypted the key and added it to the ovpn file and I now get a connected status but it does not seem to route my client traffic.
Do you have to explicitly define every clent to use the VPN?
I have tried with and without.
- Copy Link
- Report Inappropriate Content
@Thompst from the clients I ran trace route and it was going through the VPN server. You need to enable each client you want going through the VPN in your tp-link router.
However I couldn't remote desktop between clients even after using port forwarding.
I returned the router in the end
I am now running openvpn community client on each pc, started by windows task scheduler, to run at startup...
- Copy Link
- Report Inappropriate Content
I have devices I need to use that cannot run the OpenVPN Connect client.
In addition the speed using the router is sooo slow compared to the Connect client on PC or IOS.
I have decided to return the AX5400 and ordered a GL.iNet GL-AX1800(Flint) WiFi 6 Router instead.
This supports Wireguard which is apparently much faster.
- Copy Link
- Report Inappropriate Content
Hi All,
Tried setting up NordVPN on my Archer AX55Pro and the speeds were terrible; 5mps down and up. Cancelled that and went to Surfshark and the speeds were about the same.
On on a 100/40 FTTP plan and the speeds are fairly well as advertised and are with an acceptable slowdown when using the the inbuilt MacOS VPN client. I'm guessing that there is something wrong with the router VPN client? Has anyone else had such a massive slow down when using a router client?
I've checked and there no current firmware update for this router.
- Copy Link
- Report Inappropriate Content
Hi,
I bought AX20 router and when I entered my account online I dont have VPN Client option in menu only VPN Server. Can you please confirm why isnt it listed? Is there any other way that I can connect to NordVPN?
I have found this link https://www.tp-link.com/pl/support/faq/3135/ but as mentioned above the option is not listed.
- Copy Link
- Report Inappropriate Content
Donna1234 wrote
Hi,
I bought AX20 router and when I entered my account online I dont have VPN Client option in menu only VPN Server. Can you please confirm why isnt it listed? Is there any other way that I can connect to NordVPN?
I have found this link https://www.tp-link.com/pl/support/faq/3135/ but as mentioned above the option is not listed.
Hi @Donna1234 Thank you for reaching out to us and welcome to the TP-Link community.
Archer AX20 does support VPN Client. Please make sure you have upgraded the router firmware to the latest version, which is 1.1.2 Build 20221016, and you will get the VPN Client setting menu on the router web GUI.
You may refer to this guide to upgrade and install the latest firmware on your router.
- Copy Link
- Report Inappropriate Content
Cozz wrote
Hi All,
Tried setting up NordVPN on my Archer AX55Pro and the speeds were terrible; 5mps down and up. Cancelled that and went to Surfshark and the speeds were about the same.
On on a 100/40 FTTP plan and the speeds are fairly well as advertised and are with an acceptable slowdown when using the the inbuilt MacOS VPN client. I'm guessing that there is something wrong with the router VPN client? Has anyone else had such a massive slow down when using a router client?
I've checked and there no current firmware update for this router.
@Cozz Thank you for asking in the community.
I tried to explain this earlier to others in the community, the speed of the VPN Client on the router cannot be as fast as that when connecting to the VPN server on a computer directly. Apparently, the router's CPU can't handle the VPN encryption as fast as a computer with the app does. When you create an encrypted tunnel between the router and the VPN provider, that will add overhead to the processor/resources of the router, which would cause a drop in performance which also means a drop in WAN to Internet throughput.
You may compare the speed of the VPN Client on some other home wireless routers if that is possible, you might get similar results.
BTW, there will be a speed improvement when using WireGuard VPN, and Archer AX55 Pro is planned to support WireGuard VPN in the near future. You may keep an eye on the router web GUI or the Tether app to check for the updates, and we will also update the below thread once it supports WireGuard VPN:
- Copy Link
- Report Inappropriate Content
Information
Helpful: 8
Views: 67169
Replies: 241
Voters 2
