Deco VPN Configuration Guide
This Article Applies to all Deco models that support VPN.
Deco VPN Supported List
Contents
OverView
Built-in VPN Configurations
-
NordVPN
-
Surfshark
WireGuard VPN
OpenVPN
PPTP VPN
L2TP/IPSec VPN
Troubleshooting
1. OverView
VPN (Virtual Private Network) provides a means for secure communication between remote computers across a public wide area network (WAN), such as the Internet. Virtual indicates the VPN connection is based on the logical end-to-end connection instead of the physical end-to-end connection. Private indicates users can establish the VPN connection according to their requirements and only specific users are allowed to use the VPN connection.
The core of VPN is to realize tunnel communication, which fulfills the task of data encapsulation, data transmission and data decompression via the tunneling protocol. Common tunneling protocols are Layer 2 tunneling protocol and Layer 3 tunneling protocol.
Typical Topology of VPN
2. Built-in VPN Configuration
2.1 NordVPN
2.2 Surfshark
3. WireGuard VPN (Only Some models have supported this feature via a firmware upgrade.)
3.1 Configuring WireGuard VPN Server
3.2 Configuring WireGuard VPN Client
4. OpenVPN
4.1 Configuring OpenVPN Server
Step 1 Please open the Deco APP and go to More > Advanced > VPN Server > Add VPN Server, and select VPN type - OpenVPN.
Description:
Enter a name for this VPN.
Service Type:
Select the service type (communication protocol) for OpenVPN: UDP/TCP.
VPN Port:
Enter a VPN service port to which a VPN device connects, and the port number should be between 1024 and 65535.
VPN Subnet/Netmask:
Enter the range of IP addresses that can be leased to the device by the OpenVPN server.
Client Access:
Select "Home Network Only" if you only want the remote device to access your home network.
Select "Internet and Home Network" if you also want the remote device to access internet through the VPN server.
Step 2 Choose the VPN you have saved and click 'Export Config File' to save the OpenVPN configuration file which will be used by the remote device to access your router.
Step 3 Configure OpenVPN connection on the remote device.
(1) Visit https://openvpn.net/community-downloads/ to download the OpenVPN software.
Note: You need to install the OpenVPN client utility on each device that you plan to apply the VPN function to access your Deco router. Mobile devices should download a third-party app from Google Play or Apple App Store.
(2) After the installation, copy the file exported from your router to the OpenVPN client utility’s “config” folder (for example, C:\Program Files\OpenVPN\config on Windows). The path depends on where the OpenVPN client utility is installed.
(3) Run the OpenVPN client utility and connect it to the OpenVPN Server.
4.2 Configuring OpenVPN Client
Step 1 Please go to the Deco APP > More > Advanced >VPN Client > Enable VPN Client and 'Add VPN Server' - OpenVPN.
Step 2 Enter the VPN username and password if required by your VPN provider, otherwise simply leave them empty. Then import the configuration file provided by your VPN provider.
>>How to get configuration files from OpenVPN service providers.
5. PPTP VPN
5.1 Configuring PPTP VPN Server
Step 1 Go to Deco APP > MORE > Advanced > VPN Server > Add VPN Server - PPTP
Description:
Enter a name for this VPN.
Client IP Address:
Enter the range of IP addresses (up to 10) that can be leased to the devices by the PPTP VPN server.
Allow NetBIOS Passthrough:
Enable it to allow your VPN device to access your Samba server using NetBIOS name.
Allow unencrypted connections:
Enable it to allow unencrypted connections to your VPN server.
Account List:
Add the PPTP VPN connection account (user name and password) for the remote device. You can create up to 16 accounts.
Step 2 Configure PPTP VPN on the remote client.
The remote device can use the Windows built-in PPTP software or a third-party PPTP software to connect to PPTP Server. Here we use the Windows built-in PPTP software as an example.
How to setup a VPN connection in Windows
5.2 Configuring PPTP VPN Client
Step 1 Please go to Deco APP > More > Advanced > VPN Client > Enable VPN Client and 'Add VPN Server' - PPTP
Step 2 Enter the VPN server address and the VPN username and password provided by your VPN provider.
Step 3 Click 'Client List' > '+' to add devices that will use the VPN function.
6. L2TP/IPSec VPN
6.1 Configuring L2TP/IPSec VPN Server
Step 1 Go to Deco APP > MORE > Advanced > VPN Server> Add VPN Server - L2TP/IPSec
Description:
Enter a name for this VPN.
Client IP Address:
Enter the range of IP addresses (up to 10) that can be leased to the devices by the L2TP/IPSec VPN server.
IPSec Encryption/ IPSec Pre-Shared Key:
Keep IPSec Encryption as Encrypted and create an IPSec Pre-Shared Key.
Account List:
Add the L2TP/IPSec VPN connection account (user name and password) for the remote device. You can create up to 16 accounts.
Step 2 Configure PPTP VPN on the remote client.
The remote device can use the Windows built-in PPTP software or a third-party PPTP software to connect to PPTP Server. Here we use the Windows built-in PPTP software as an example.
How to setup a VPN connection in Windows
6.2 Configuring L2TP/IPSec VPN Client
Step 1 Please go to Deco APP > More > Advanced > VPN Client > Enable VPN Client and 'Add VPN Server' - L2TP/IPSec.
Step 2 Enter the VPN server address, VPN username and password, and IPSec pre-shared key provided by your VPN provider.
Step 3 Click “Client List” >”+” to add devices that will use the VPN function.
BIUS
I have Deco S7 v1.20 when will this device support OpenVPN ?
I've considered buying a BE85 and BE65-5G but realized that site-2-site VPN is not available. 🙁 Is this feature planned for the future?