Troubleshooting VPN Issues on Deco
- Case 1. Work as a VPN Pass-through router.
- Case 2. Work as a VPN Client.
- Case 3. Work as a VPN server.
- Case 4. Use PPTP/L2TP VPN as the internet connection type.
Case 1. Work as a VPN Passthrough router
The term "VPN Passthrough" on Deco means that it works neither as a VPN server nor a VPN client but as a tunnel in between that allows traffic from these endpoints to "pass through". All Deco supports VPN passthrough for IPSec/PPTP/L2TP and is intended to work without modification. So clients connected to Deco could directly make a VPN dial-up connection on themselves to the remote VPN server.
Q1. What should I do if the client failed to connect to the remote VPN server?
1. Ensure the same client could connect to the VPN server on another Wi-Fi network.
2. (Optional)If there is another DHCP router connected ahead of Deco, please change Deco to Access Point mode.
3. (Optional)If Deco is the only router, please unplug Deco and connect a computer via an Ethernet cable to the ISP modem and make VPN dial-up connection again.
Case 2. Work as the VPN Client.
>>Deco VPN Server/Client Supported List.
Q1. How to set up VPN Client on Deco?
Q2. VPN Client status showed connected, but the selected clients had no internet, or VPN Client status showed connecting all the time.
1. Ensure you could successfully make a VPN dial-up connection on the clients themselves via the same OpenVPN config file(Please remember that many OpenVPN providers require users to log into their management interface to find VPN service credentials first for a third-party OpenVPN configuration).
2. If possible, It's also suggested to try TCP protocol on the VPN server if it's currently using UDP, then save the file and upload it into Deco again to check if that works.
3. Confirm the current firmware is up-to-date.
4. Change the WAN DNS to 8.8.8.8/8.8.4.4 per link-How to change DNS server settings on Deco
If your issue cannot be fixed by the above suggestions, please comment below with the following information:
- What kind of VPN server you are connecting to, like NordVPN, ExpressVPN and SurfsharkVPN?
- What kind of VPN Client software you were using on the local PC or phone when it is connecting fine, like OpenVPN Connect or GlobalProtect APPs?
- Which step did you fail to get through, any error message or screenshot on the Deco APP?
Q1. How to set up VPN Server on Deco?
Q2. What should I do if I cannot connect to my VPN Server?
1. Ensure there is a public WAN IP address under Deco APP>More>Internet connection>IPV4. A private internet address under CG-NAT network would cause some issues.
2. Set up DDNS on Deco if the WAN IP is dynamic.
Case 4: Use PPTP/L2TP VPN as the internet connection type.
Some ISPs provide internet service based on PPTP/L2TP protocol. Please refer to this link to set up PPTP/L2TP internet connection on Deco:
"Same issues as you guys with BE85 - latest firmware, DNS updated and two VPN providers / approx 20 servers tried in UDP and TCP."
Can I have more details about the issue mentioned above? Do you mean "Deco failed to connect the VPN Server and the VPN client status is connecting"?
What VPN servers do you plan to connect to, NordVPN, ExpressVPN , or something else?
It would be highly appreciated if you could start a new thread here and add more details:
https://community.tp-link.com/en/home/forum/39
Wait for your reply and best regards.
Same issue. Hung at connecting. Using IPVanish
When I look at my logs this seems to relate to failing getting the ca server certi
Same topic here just as an headup ==> VPN connect but no internet connection
Config
* BE85 (EU version)
* latest (as of 11/12) SW ==> with Wireguard option but nice initial screen to chose Nordvpn has been removed
* OpenVPN config using NordVPN config file (udp and tcp), working and tested on OpenVPN for Android after removing ping-timer-rem supposed to be unsupported as per OpenVPN support=> on OpenVPN, i have to chos a cert file on my phone
* with and without DNS change
* mac, pc, android client: not working both in client and in all blocker mode
Nore
* Could use a free VPN proivder and having internet but despite right IP displayng on control website from nordvpn, site says "not protected" ==> this one have a cert file included.
* warning: web interface of the BE85 192.168.68.1 does not look at all like tp-link screen shots, much simplier, no parameter possible, always have to go trhough Deco App (on Android in my case) to do things and especially to configure the VPN
Could it be a problem with certificates not being properly exchanged with the server?
Regards
- What kind of VPN server you are connecting to, like NordVPN, ExpressVPN and SurfsharkVPN? NordVPN
- What kind of VPN Client software you were using on the local PC or phone when it is connecting fine, like OpenVPN Connect or GlobalProtect APPs? Open VPN
- Which step did you fail to get through, any error message or screenshot on the Deco APP? Deco app appears to take all the necessary info and the IP address of the server populates but stays stuck at connecting