In my case, the fiber optic box I am connecting to didn't have anything like "virtual networks" or "NAT." I needed to look for Port Mapping. I got it working that way. ALSO, sending the Open VPN certificate to an iOS device is a little hard, easiest is to drop it via AirDrop, then save it Files, then grab it from there. ALSO, this video showed us how to set up a VPN with a fixed IP address but using the Dynamic DNS built into T-P Link's software is much better, since for most people that IP will change. Anyway, thanks for the excellent video!
Thank you for your video For those who cannot access lan networks shares Turn Firewall Off or Allow Port on Open VPN Set static up on file server IPv4 Use IP instead of name to access. Worked for me.
The video was very informative, now I know why the connection kept failing, I have my TP-Link connected to my ISP router, there is no other way, since my ISP uses a proprietary fiber connection that can't go directly into the TP-Link router, which is a shame, since it is much better. And I didn't need to port forward, as DMZ host covered it.
@@vinemr Your router should have the DMZhost/forwarding option. Then, your second router should be forwarded. Your router may also have a bridge mode, which I took to using a while ago. So my router with the proprietary fiber cable would simply forward every task except the TV system to my second router, so I can use it like if it's the only router.
Hiii I have a Question(s) 🙋🏽♂️, I’m new to using/learning about vpns/vpn routers, I understand the set up process of a (TP Link Ax3000) but I’m just curious to a few things and was wondering if maybe you knew the answers & could help. ISP modem is just the router/modem you get from like COX or whatever brand for TV/internet correct? How do I actually get/setup the VPN part like lets you change like ips country from say Canada to California. Is this vpn like a monthly subscription or no? How do I change like my country server using this vpn? Like say I’m in Canada but Netflix or Hulu doesn’t work here and I wanna switch it California so I can use Netflix or Hulu, how would I switch back and forth? Can this even do that?
Thank you, very helpful setup worked well. My TP-Link router is right behind the cable modem. I was able to get it connected from client, chose mobile hotspot, having issues with TCP so by chosing UDP it worked, but once connected IP on PC doesnt change. I was hoping my ip would change from the mobile one to the home network, is there additional config to achieve that?
Thanks for the short video and clear explanation. Do you know the cheaper router with this functionality (also including the internet access)? I wouldn’t even need WiFi. Thanks!
Need only stratic ip or directly get public ip gateway configur direct in tp-link router. Another question I have how much client contact smooth operation of RDP
Thank you for sharing this video. I have managed to setup OpenVPN server, and it works perfect when client is on Android phone or windows 10, but when I try to setup OpenVPN client on another router it connects but then block internet traffic on it. Tried it on two different routers with OpenVPN client, it has same problem. Any idea what might cause this problem?
I disabled my ISP modem/routers residential gateway so I can no longer access the admin panel without completely resetting it. Since it is in bridge mode do I still need to port forward? I can't seem to get the openVPN connection to work
@@alexismc1111 For me I thought it was a port forward issue but it was not. Make sure your ISP modem/router you have is in bridge mode so it's not causing any problems.
Hi.Doesnt work in my case. My tplink router is connected by Cable (WAN port, VPN router) to my sagem router (main router, LAN port). Set up like you did and nothing, internet is ok, VPN set up but i cant connect with Open VPN. Help please
Hi Enevis85, thank you for sharing you experience and for watching. Some ISPs use CG-NAT, which you can read about it here: en.wikipedia.org/wiki/Carrier-grade_NAT, this means that you public IP address might be shared with someone else and, in this case, the VPN doesn't work. If that's the case you should contact your ISP and ask them to remove your connection from that Carrier Grade network.
Your tplink router is in which mode? Router mode or accesspoint mode? If its router mode then only able to access the vpn server options. But if having isp modem then how to access these von features? Because we need to connect tplink router as access point right??
@@ExperiencingIT sorry, I still have doubt. Isp router or tplink router which one have the dhcp? Also how to connect these two routers? I mean from isp router's lan port to tplink routers wan or lan port? If wan port then how to setup the internet settings? In my case iam using pppoe login in isp router. So what I need to do in the tplink router?? So many doubts, please clarify 🥺 or is there any video to this setup?
Sorry, i mean by if say i generate 2 ovpn configuration, client1.ovpn and client2.ovpn. I want to disable access to client1.ovpn, such that the person having client1.ovpn cant connect anymore. Is there a way?
Hola, si estoy usando el proveedor de servicios de TP-Link para el DNS Dinámico ¿Cómo se configuraría cuando la IP pública cambie al ser dinámica?... Gracias por el video 👍
Hi I don't understand this, after loading the certificate there is an error message: OpenSSLContext: SSL_CTX_use_certificatefailed: error:0A00018F:SSL routines::ee key too small
When you click Generate Certificate in VPN Server, what is the RSA public key length of the cert ? Can you customize the key length , let’s say I want to specify RSA4096 when clicking “Generate certificate” button
Hi, this is really helpful, but I have another question. I set up the VPN connection, Im conected via VPN, but the PC what I have connected to the TP link Archer C6 has a shared folder and I cannot see them via VPN, but when Im connected to the WiFi I can see shared folders. Could you help me what is worng in my setup? Thanks a lot!
Hi! Thank you for watching and for your comment. Honestly, I don't know how I can help you there :) Have you tried to connect the disk to a computer in your home network and check if you can access it using the VPN? Maybe the router doesn't let you access the drive if you are connecting over VPN?
Hi KrBenyo, you'd have to set up a dynamic DNS service. Most routers support this. You'd have to look at your router's owner's manual for instructions on how to get this set up.
Hi Juan! Thank you very much! According to the router's manual, you can have up to 10 connections. Check it out: www.tp-link.com/us/user-guides/archer-ax10&ax1500_v1/chapter-11-vpn-server
Hi @Not a RU-vidr Garcendy, I believe you have the ISP router between the your home network and the internet, right? Watch the following two sections of the video: 02:37 - Edit the OpenVPN config file 03:30 - Open the OpenVPN server port on the ISP router. Let me know. Regards
Excellent video! So detailed, thanks. I'm confused about one thing: if I want to setup a vpn protocol on the router (open vpn), why do we need to install the configuration on our devices...can't we connect to vpn directly from the router so that all the devices connected to router wifi are automatically using vpn from a vpn server provider such as express vpn (of course as an expressvpn subscriber) ?
Hi MN, the OpenVPN server being setup in this video is for you to connect to your home network when away from home. It is not for a VPN service amongst clients on the network.
@@ExperiencingIT ok, could you help me understand how to do that…configure the router to connect to a service provider’s VPN which then broadcasts vpn’d WiFi in the house ? Thank you 🙏🏼
Your router is a Open VPN server and basically what you did is to export configuration to whom will use the client.. right? But from your Home network side you are redirecting the contents to same address by encrypting and point to the device...? So the user inside WLAN can't see what you doing ? But how it is beneficial to your router security? And from Cell side you are connected to your home work as VPN ...🤔
Great video! I managed to setup OpenVPN on TP-Link Archer AX 20 thanks to you! I could connect (via hot-spot) and navigate the internet but can't acces my home network and this is what I need most. What should I do?
Hi Sorin, that's awesome! I'm glad I could be of help! It should let you access your home network by default, as I see no option to prevent accessing the lan, only to prevent internet access through the VPN... So, I'm sorry, in this case I don't know how to help you.
mi ISP tiene tecnología CG-NAT, es posible realizar esta configuración en mi ROUTER tplink AX1500, entendiendo que con CG-NAT mi IP WAN esta compartida con mas abonados. Incluso configure el router del ISP en modo BRIGDE para administrar todo desde mi tplink, pero la IP WAN que me resuelve es una IP LAN de la RED de mi ISP distinta a la IP WAN que obtengo en la pagina cual es mi IP .
Hola, espero que entiendas ingles. You're right, if you are behind a CG-NAT network, it'd be impossible for you to perform this configuration. Anyway, according to what I read, if you'd like to be out of that CG-NAT network, it is just a matter of contacting their customer support with that request.
Hi, nice video. I have little question. I use Archer C7 v5, set up OpenVPN with DDNs, connection into office from public is not problem, but i cant see LAN interface device(IP). I trying make static route but dont working. Do you mean i need service tunel for fusion these two networks? Do you have some tips where is problem? Here is some settings - LAN: 192.168.3.0/24, OpenVPN settings: 192.168.6.1(TCP 1194). From VPN i see internal GW: 192.168.3.1. Thanks a lot for answer )).
Hi Lukas, you should automatically see your internal network... The only option when setting up the Open VPN server is to prevent clients from using the internet. Have you tried connecting to some resource inside your LAN?
Yo man, great video. Do you happen to know if TPlink routers support Proxy services natively also? As in routing all your traffic through the VPN whereby you also use its IP as your external endpoint. I've found that on the OpenVPN app you need to assign a separate proxy server, but I'm not sure if TPlink routers support this.
@@tahatatilbal yeah I found this out now. In all fairness external IP spoofing doesn't matter too much for my use case, but it could in the future. I decided to just run a separate OpenVPN server in an lxc container on my home server, which does support IP proxy.
@@TheDescender4 i don't have ability to run a home server, and living in a shitty undemocratic country i really need ip spoofing. just to escape deep packet injection. but i understand you completely :)
A great video really well detailed, I cannot manage to get this to work, my scenario is that my AX10 in inside the ISP router as demonstrated here, I have followed all the steps shown and tried with 2 different ISP's each have different routers. I really need to VPN into the AX10. How can I resolve this i have been trying for a week now to get this right...
Hi Chas, maybe your ISP use CG-NAT? You can read about it here: en.wikipedia.org/wiki/Carrier-grade_NAT, this means that you public IP address might be shared with someone else and, in this case, the VPN doesn't work. If that's the case you should contact your ISP and ask them to remove your connection from that Carrier Grade network.
Is it important to setup a Openvpn? I just bought this router and so far great experience. I just plug it in and used the app to setup. By the way, router is directly connected to the ISP
Hi! Thank you for watching and for your comment! No, you'd only setup a VPN if you'd like to connect remotely to your home network. Otherwise, it is not necessary :)
@sohaib arif Hi again. No special advices. Just keep it simple :) Do not turn off the router firewall, do not open any unnecessary ports and, regarding Wi-Fi security, use the highest that your clients can manage, i.e., WPA-2/3.
I'am planning to buy a new router. Main reason is because my current router VPN speed is quite poor. Only 3Mbit/s at top. Could you please inform me about TP-Link Archer AX10 speed capability! I would expect much better speed from Archer AX10 thanks to the triple core CPU.
Hi BaliBoy, thank you for watching and for your comment. According to TP-Link's website, the AX10 is capable of 1.2G bps in the 5GHz band (AX) and 300 Mbps in the 2.4 GHz band. Bear in mind that usually VPN services do have their own speed limitations, so you could be facing the same speed problems even using another router. Also, this router doesn't have any embedded VPN client.
@@ExperiencingIT Thank you for your answer. But maybe you misunderstood what I think of. I wanna use the AX10 as an VPN server because I want to reach my home network from remote. Now I use PPTP VPN and I think I will stay that way. In this case I think the speed depends only the performance of the router and of course the speed of the internet connections. The internet connections on both ends are optical. So the only bottleneck could be the router. Do you have any information If I use this router in the writen scenario what speed I should expect via VPN (PPTP)?
@BaliBoy28 looks like, yes, I misunderstood you :) you're right, I believe the bottleneck of a VPN connection will be on the end of the VPN with the slowest link to the internet. On another subject, you mention you use PPTP to establish a VPN connection. Be aware that, that protocol, is considered obsolete. en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol. You are better off using, in this case, OpenVPN.
My WAN IP and Public IP are different. WAN IP shown in my tplink router starts with 172.23.x.x and when I google 'What is my IP' it shows different IP. In such case what can I do to create OpenVPN server.
Hi Vivek, thank you for watching and for your comment. Is your TP-Link router facing the internet directly or is it connected an ISP router? Aren't you using a VPN to access the internet?
@@vivek_gangani You then have to use the public IP address shown by Google. And review these two sections of the video: 02:37 - Edit the OpenVPN config file 03:30 - Open the OpenVPN server port on the ISP router. Cheers
Hi Todor, I don't know to which speeds you are referring to, but the VPN speed will depend on the speed offered by your ISP. Also, bear in mind that OpenVPN is not a fast protocol... LAN Speeds, according to TP-Link's website, these are the theoretical speeds of this router: "1201 Mbps on 5 GHz band and 300 Mbps on 2.4 GHz band". Thank you for watching.
Hiii I have a Question(s) 🙋🏽♂️, I’m new to using/learning about vpns/vpn routers, I understand the set up process of a (TP Link Ax3000) but I’m just curious to a few things and was wondering if maybe you knew the answers & could help. ISP modem is just the router/modem you get from like COX or whatever brand for TV/internet correct? How do I actually get/setup the VPN part like lets you change like ips country from say Canada to California. Is this vpn like a monthly subscription or no? How do I change like my country server using this vpn? Like say I’m in Canada but Netflix or Hulu doesn’t work here and I wanna switch it California so I can use Netflix or Hulu, how would I switch back and forth? Can this even do that?
Hi, if I have 2 AX10. Can I setting up a AX10 to be VPNserver (in PPTP) and another one to be VPN client (in PPTP), then connect from client to server?
Boas, eu também tenho uma configuração open vpn no meu router tplink, está tudo a funcionar mas a velocidade está a 20mb up e dw, é normal? ou está a escapar-me alguma configuração para aumentar essa velocidade? abraço
Hello, I have the Ax50 router and I'm in a bit of a tumble. I have tried to do everything that you did in the video. I even bought the Static IP from my ISP. But since I don't have an ISP router, but cable comes straight from the wall. I don't know how to forward the AX50 router port. When I try to connect with OpenVPN client after exporting, it just tells me unable to connect. When I try to open the wifi default IP port it tells me that "IP address cannot be the same with LAN IP address". Any help ?
Hi MisterBiter, first of all, thank you for watching and for your comment. This IP given by your ISP, where do you set it up? IS it here: www.tp-link.com/us/user-guides/archer-ax50_v1/chapter-4-set-up-internet-connection#ug-sub-title-3 If you do not have a router from your ISP, you don't need to open or forward any port on the AX50. You would only have to export the OpenVPN config file and use it on the OpenVPN client... Let me know how it went.
@@ExperiencingIT Hey, yes thank you! Actually managed to figure it out. For some reason my DDns noip setup didnt work but static ip does. So it's all working now!
Antes de mais, parabéns pelo video ! Está excelente ;) Pelo que o vídeo dá a entender, este vídeo é feito por um Tuga certo? :) Se sim, tenho uma grande questão que gostaria de esclarecer com alguém que percebe do assunto. Tenho este router e gostava de esclarecer uma duvida sobre o mesmo, se for possível. É possivel falar por e-mail ou de outra forma? :)
Olá Rui, sim, sou Português. Bem, antes de mais, obrigado pela visualização e pelo comentário. Se me quiseres contactar, podes fazê-lo através do formulário de contacto que tenho no site: www.experiencingit.net/contact-us/. Apesar do meu email não ser confidencial, não quero deixá-lo num comentário do YT para evitar spam.
@@ExperiencingIT Amigo desculpe o atraso. Só tive tempo agora para lhe enviar o e-mail (através do formulário). Quando puder, verifique se recebeu uma mensagem minha (Rui Ribeiro) :)
This is only required only if your router is connected to a modem, and the modem is not in bridge mode. When you open the config file, if your IP is local, you have to open the port. If the config IP is already a public internet, you don't need this step.
Infact by using open vpn configuration profile on your router, you are making your whole local network much less secured just for the sake of hiding your original ip.
@@ExperiencingIT Might be i am wrong.But theoratically, if we connect to a vpn, than our all internet traffic is routed through that vpn.So the people owning vpn can monitor all our internet taffic if there is no end to end encryption.
@@tarungupta2001 Hi, thank you for sharing your concerns. A VPN creates a secure, encrypted, point-to-point connection. Read more about OpenVPN here: en.wikipedia.org/wiki/OpenVPN or here: openvpn.net/
@@tarungupta2001 I also believe I understood you incorrectly :) If you buy a VPN service, yes, they might know the sites you navigate to, that's true, but the information passing between your VPN provider and your computer is encrypted, so, supposedly, there's no way for the VPN provider to read the data between your computer and the internet site.
