Troubleshooting VPN Issues on Deco

Troubleshooting VPN Issues on Deco

Troubleshooting VPN Issues on Deco
Troubleshooting VPN Issues on Deco
2023-07-07 10:16:19 - last edited Monday
Model: Deco  
Hardware Version:
Firmware Version:

 

 

 

 

 

Case 1. Work as a VPN Passthrough router

The term "VPN Passthrough" on Deco means that it works neither as a VPN server nor a VPN client but as a tunnel in between that allows traffic from these endpoints to "pass through". All Deco supports VPN passthrough for IPSec/PPTP/L2TP and is intended to work without modification.  So clients connected to Deco could directly make a VPN dial-up connection on themselves to the remote VPN server.
 

Q1. What should I do if the client failed to connect to the remote VPN server?
1. Ensure the same client could connect to the VPN server on another Wi-Fi network.
2. (Optional)If there is another DHCP router connected ahead of Deco, please change Deco to Access Point mode.
3. (Optional)If Deco is the only router, please unplug Deco and connect a computer via an Ethernet cable to the ISP modem and make VPN dial-up connection again.

 

 

Case 2. Work as the VPN Client.

>>Deco VPN Server/Client Supported List.

 

Q1. How to set up VPN Client on Deco?

https://www.tp-link.com/support/faq/3642/


Q2. VPN Client status showed connected, but the selected clients had no internet, or VPN Client status showed connecting all the time.

1. Ensure you could successfully make a VPN dial-up connection on the clients via the same OpenVPN config file

(Please remember that many OpenVPN providers require users to log into their management interface to find VPN service credentials first for a third-party OpenVPN configuration).
2. If possible, It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into Deco again to check if that works.

3. Confirm the current firmware is up-to-date.

4. Change the WAN DNS to 8.8.8.8/8.8.4.4 per link-How to change DNS server settings on Deco 

Note: If the common suggestions here didn't help, you can also refer to [Solution] Deco OpenVPN Client Always Connecting for more tips. We will update it with the latest solutions after further troubleshooting with the users.

 

 

 

Case 3. Work as a VPN Server.

 

Q1. How to set up VPN Server on Deco?

https://www.tp-link.com/support/faq/3642/


Q2. What should I do if I cannot connect to my VPN Server?

1. Ensure there is a public WAN IP address under Deco APP>More>Internet connection>IPV4. A private internet address under CG-NAT network would cause some issues.
2. Set up DDNS on Deco if the WAN IP is dynamic.

 

 

 


Case 4: Use PPTP/L2TP VPN as the internet connection type.

Some ISPs provide internet service based on PPTP/L2TP protocol. Please refer to this link to set up PPTP/L2TP internet connection on Deco: 

How to Configure PPTP/L2TP Internet Connection on the Deco

  0      
  0      
#1
Options
1 Accepted Solution
Re:Troubleshooting VPN Issues on Deco-Solution
Sunday - last edited Monday

  @David-TP  I think there are some missing parts that need to be added to your "Guide"

 

First, TP-Link Deco DO NOT ALLOW TO ADD A CA CERTIFICATE, so you need to add the CA to your OVPN File. 

Second, TP-Link VPN Client Wizards do not ask for mandatory credentials, so even if the system does not ask for them, you need to add them.

Third, I do not know the version of OpenVPN that TPlink uses in their Deco devices, but if the VPN provided has a line named "Keysize 256," you need to remove it.

 

Recommended Solution
  1  
  1  
#7
Options
6 Reply
Re:Troubleshooting VPN Issues on Deco
2024-09-04 18:25:21

  @David-TP

  I am using Nord VP.N.

Works fine on devices

I have followed the instructions on adding nord VPN to deco app and changed the dns 8.8.8.8 all I get is "connecting" but not actually connected, it shows server ip address but server dns is blank.  Why is it not connected?

  2  
  2  
#2
Options
Re:Troubleshooting VPN Issues on Deco
2024-09-06 18:49:10

  @castillo276 

Exactly the same here...

  1  
  1  
#3
Options
Re:Troubleshooting VPN Issues on Deco
2024-09-19 18:26:48

  @David-TP  Trying to connect via IPVanish.  Just sits at connecting.

  4  
  4  
#4
Options
Re:Troubleshooting VPN Issues on Deco
2024-09-20 10:25:14

  @Orphious 

Hi, Thanks for the feedback.

Are you able to use the same OpenVPN config file on the computer to successfully connect to the IPVanish VPN?

-If yes, could you please send an email to support.forum@tp-link.com with a copy of the IPVanish OpenVPN config file and the VPN connection status on the Deco APP?

 

Wait for your reply and best regards.

  0  
  0  
#5
Options
Re:Troubleshooting VPN Issues on Deco-Solution
Sunday - last edited Monday

  @David-TP  I think there are some missing parts that need to be added to your "Guide"

 

First, TP-Link Deco DO NOT ALLOW TO ADD A CA CERTIFICATE, so you need to add the CA to your OVPN File. 

Second, TP-Link VPN Client Wizards do not ask for mandatory credentials, so even if the system does not ask for them, you need to add them.

Third, I do not know the version of OpenVPN that TPlink uses in their Deco devices, but if the VPN provided has a line named "Keysize 256," you need to remove it.

 

Recommended Solution
  1  
  1  
#7
Options
Re:Troubleshooting VPN Issues on Deco
Monday - last edited Monday

  @Yorchz 

Thank you very much for the update.

I've updated some of the suggestions here:

Deco OpenVPN Client Always Connecting

I'll check with the engineer about the OpenVPN version and if you find more useful tips later, please feel free to share them with us.

Update: The current OpenVPN version is 2.4.11 or 2.6.6 based on the model numbers. Both versions support OpenSSL AES 256-bit.

 

Thanks again and best regards.

  0  
  0  
#8
Options

Information

Helpful: 0

Views: 10360

Replies: 6

Related Articles