General questions about VPN function on TP-Link Routers and Deco
Deco W3600( V2 ) , Archer C5400 , Archer AX55 , Archer C1200( V2 V3 ) , Deco X20( V4 ) , Archer AX12 , Archer AX53 , Archer AX10 , Archer AX95 , Deco X68( V2 ) , Deco WM9000 , Deco X25( V3 V4 ) , Archer C6U , Archer AX15 , Deco X4300 Pro , Archer C58HP , Deco W6000 , Archer AXE95 , Deco XE5300 , Archer BE11000 Pro , Archer C8( V4 ) , Archer AX50 , Archer C7( V5 ) , Archer AX90 , Deco XE75 , Archer AX6000 , Deco X75 , Archer GXE75 , Deco BE85 , Archer C60( V2 V3 ) , Deco WE10800( V2 V2.6 ) , Archer AXE5400 , Deco X50-Outdoor , Deco W7200( V2 V2.6 ) , Archer BE800 , Archer AX5400 Pro , Archer AX80 , Deco X5400 Pro , Archer BE3600 , Archer BE805 , Archer BE9300 , Archer C59( V2 ) , Archer AX75 , Archer AX4400 , Archer AX73 , Archer BE700 Pro , TL-WR941HP( V2 ) , Deco BE95 , Archer BE230 , Archer BE550 , Archer AXE75 , Archer AX72 Pro , Deco BE65 Pro , Deco X5000 , Archer AX72 , Deco XE70 Pro , Archer A7( V5 ) , Archer AXE200 Omni , Archer GX90 , Deco X90 , Archer A9 , Deco X95 , Deco X50 , Archer AX23 , Archer AX3000 Pro , Deco X55 , Archer AX21 , Archer AX55 Pro , Deco HB6300-Outdoor , Archer Air R5 , Deco XE75 Pro , Deco XE200 , Archer AXE300 , Archer AX1500 , Archer BE700 , Archer BE900 , Archer AX11000 , Archer GE800 , Archer AX3200 , Archer AX3000 , Deco X60( V3 V4 )
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device and check either the Datasheet or the firmware section for the latest improvements added to your product.
Q1. What is VPN?
A: VPN stands for Virtual Private Network. A VPN helps you access internet resources remotely, securely, and privately with tunneling technology. You might use a VPN for Enhanced Security, Privacy Protection, and Remote Access.
Enhanced Security: VPNs encrypt your internet traffic, protecting your data from potential eavesdropping or unauthorized access.
Privacy Protection: VPNs hide your IP address and location, making it difficult for websites, advertisers, or malicious actors to track your online activities.
Remote Access: VPNs enable secure access to your home or office network from remote locations, allowing you to access files, printers, or other network resources.
You may go to Introduction of VPN to get more information
Q2. How to select the VPN functions on the TP-Link Wi-Fi Router and Deco Mesh Wi-Fi System
A: TP-Link routers offer two types of VPN function: VPN client and VPN server. VPN client allows users to connect to a VPN server, establishing a secure connection for accessing resources. VPN server acts as a gateway, accepting client connections and providing secure access to a network.
The table below lists common use cases.
Please note that some router models may only support VPN server function, check it here:
TP-Link Deco Whole Home Mesh Wi-Fi Routers
Q3. What VPN protocols do TP-Link Wi-Fi Router and Deco Mesh Wi-Fi System support?
A: TP-Link VPN routers and Deco devices support multiple VPN protocols, including: PPTP, L2TP/IPsec, OpenVPN, and WireGuard, with compatibility varying by model.
Please go to the product [Specifications] of the models listed at the following link for more details:
TP-Link Deco Whole Home Mesh Wi-Fi Routers
Or you can contact TP-Link support for accurate information regarding VPN protocol support for your specific model.
Q4. How to set up VPN with TP-Link Wi-Fi router or Deco Mesh Wi-Fi system
A: Please refer to How to Establish a VPN Connection on TP-Link Wi-Fi Router to set up VPN connection on TP-Link Wi-Fi router.
Please refer to How to set up VPN Server/VPN Client on Deco router to setup VPN connection on Deco Mesh Wi-Fi system.
Q5. What should I do if VPN doesn't work on Wi-Fi Router or Deco Mesh Wi-Fi system?
A: Please refer to What should I do if VPN doesn't work on Wi-Fi Router to trouble shoot.
Q6. Can I use VPN to access the whole network from both VPN server and VPN client side with TP-Link Wi-Fi Router or Deco Mesh Wi-Fi system?
A: No, the ability for the server to access the client can typically only be achieved in site-to-site VPN. The VPN types supported by router and deco are designed for client-to-server connections, meaning that the client can access the server, but not the other way around.
Q7. Do TP-Link Wi-Fi Router or Deco Mesh Wi-Fi System work with a third party VPN service?
A: TP-Link Wi-Fi Router and Deco Mesh Wi-Fi System work with the VPN using the standard VPN protocol such as PPTP, L2TP/IPsec, OpenVPN, and WireGuard. For some certain custom VPN services requiring to use custom VPN client software, we recommend to check the compatibility with the VPN provider and TP-Link cannot guarantee the support to those VPN.
Q8. Can I use VPN to bypass geographical restrictions with TP-Link Wi-Fi Router or Deco Mesh Wi-Fi system?
A: Yes, VPN can help bypass geographical limitations. By routing your internet traffic through a server in another region, a VPN can make it appear as if you are accessing the internet from that region, allowing you to access region-restricted content or services. However, it should be noted that the use of VPN may be legally restricted in some regions or countries, and it is recommended to use it in compliance with applicable laws.
Q9. How many devices can I connect to a VPN Server running on TP-Link Wi-Fi Router or Deco Mesh Wi-Fi System?
A: When setting up a TP-Link router as a PPTP or L2TP/IPSec server, you can create a total of 16 accounts. However, only 10 accounts are allowed to connect to the VPN server online at a time, with one device per account. For the WireGuard you can have a maximum of 16 concurrent connections, and for OpenVPN, the maximum number of concurrent connections is limited to 10.
Q10. If the Deco satellite does not support the VPN function, can I still use the VPN function with the Main Deco?
A: Yes, you can still use the VPN function with the Main Deco even if the Deco satellite does not support it. The VPN feature will work when enabled on the Main Deco.
Q11. Can I configure a separate DNS server address when using a VPN connection on TP-Link Wi-Fi Router or Deco Mesh Wi-Fi System?
A: Currently, TP-Link Wi-Fi routers do not support the configuration of a separate DNS server address when using a VPN connection.
By addressing these questions, you can gain a better understanding of VPN functionality on TP-Link routers and Deco devices.
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
We'd love to get your feedback, please let us know how we can improve this content.
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.
TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Livechat
__livechat, __lc2_cid, __lc2_cst, __lc_cid, __lc_cst, CASID
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au
Meta Pixel
_fbp
Crazy Egg
cebsp_, _ce.s, _ce.clock_data, _ce.clock_event, cebs
Hotjar
OptanonConsent, _sctr, _cs_s, _hjFirstSeen, _hjAbsoluteSessionInProgress, _hjSessionUser_14, _fbp, ajs_anonymous_id, _hjSessionUser_<hotjar-id>, _uetsid, _schn, _uetvid, NEXT_LOCALE, _hjSession_14, _hjid, _cs_c, _scid, _hjAbsoluteSessionInProgress, _cs_id, _gcl_au, _ga, _gid, _hjIncludedInPageviewSample, _hjSession_<hotjar-id>, _hjIncludedInSessionSample_<hotjar-id>
lidc, AnalyticsSyncHistory, UserMatchHistory, bcookie, li_sugr, ln_or