Hi  @carmlav ,

Do you have any news on this subject?

I'm with the same problem, OpenVPN works fine except for accessing the router web management interface.

Regards

mcalmeida

  @carmlav 

Hi,

did you try to open a VNC or RDP session from your device connected by VPN to one of your PCs and from there, open a browser pointing to the router admin page?

I would try also to compare the http headers of the (working) call from a PC inside the network and the (unauthorized) call from the device you are trying to access from VPN.

You should able to sniff the traffic on your local network with wireshark and see your incoming and outgoing requests/response from both device and PC.

If you can ping the router from your device and reach the its port 80, I think the issue should be related to something in the headers or the payload that differs, maybe a source domain or something like that.

My two cents.

Daniele

  @mcalmeida 

Hi,

Tp-link customer care confirmed that's not possibile to reach the modem from the openvpn connection. It's unbelievable, but this Is.

You can try to open the modem administration from internet only to the first assigned vpn subnet address (ex. 10.x.x.6 in my case). 

This works fine for me, but it's not a good solution. 

Tp-link has to resolve this . 

  @jdaniele 

Hi, My solution has been a Raspberry pi4 in the same modem subnet. From there you can reach the modem.

Tp-link has to modify the firewall rules allowing the con to go where it wants and nat it. it would be easy for them to do (and while we're at it, add the source ip field in the firewall rules configuration tables)

Bye

Hi,

Thank you all for your support and suggestions.

I think I've found a solution in another sub-forum.

1. Setup the router with your preferred configuration.

2. Setup OpenVPN and confirm it is working as you pretend.

3. Activate the 2nd IP Address for the local network on the same lan as the OpenVPN lan address.

This solution is working for me for 3 days without any questions.

regards

mcalmeida

  @mcalmeida 

Hi,

looks great!
I'll try.
Many thanks to you too

  @carmlav 

Hi,

let me know if it works for you.

Regards

mcalmeida

  @mcalmeida 

hi,

unfortunately it didn't work. If you try to enter the second IP of the same openvpn subnet, an error message warns that it is not possible and, at the same time, disables the vpn. How did you make it work?

Hi  @carmlav ,

I've followed the directions on this post: 

    https://community.tp-link.com/en/home/forum/topic/579716

Please pay attention to message #3, about the correct sequence of operations.

  @mcalmeida I have Archer MR600 V1.

How can I use VPN to connect my router web interface from internet.

Can you guide me to setup VPN.