How to set up The VPN Server/Client Feature on a Deco Mesh Wi-Fi Router
Deco W3600( V2 ) , Deco X20 , Deco X68( V2 ) , Deco WM9000 , Deco X25( V3 V4 ) , Deco BE95 , Deco X4300 Pro , Deco BE65 Pro , Deco X5000 , Deco W6000 , Deco XE5300 , Deco XE70 Pro , Deco X90 , Deco XE75 , Deco X95 , Deco X50 , Deco X75 , Deco X55 , Deco BE85 , Deco X50-PoE , Deco HB6300-Outdoor , Deco XE75 Pro , Deco XE200 , Deco WE10800( V2 V2.6 ) , Deco X50-Outdoor , Deco W7200( V2 V2.6 ) , Deco X5400 Pro , Deco X60( V3 V4 )
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device and check either the Datasheet or the firmware section for the latest improvements added to your product.
Deco Mesh Wi-Fi Systems offer several ways to set up VPN connections. In this article, we will cover the various methods and options available, and how to set them up.
VPN Server is a function that allows remote devices to access your home network via a secure tunnel through the internet. Deco Mesh Systems support three types of VPN Server:
- OpenVPN is somewhat complex, but with greater security and more stability, suitable for restricted environments such as campus networks or company intranet.
- PPTP VPN is easy to use with the built-in VPN software commonly found on computers and mobile devices, however it is less secure and may even be blocked by some ISPs.
- L2TP/IPSec VPN is more secure, but slower than PPTP VPN, and in some cases may run into trouble getting around firewalls.
VPN Client is a function that allows all devices in your home network to access remote VPN servers, without the need to install VPN software on each device.
Using OpenVPN to Access Your Home Network
OpenVPN Server is used to create an OpenVPN connection for remote devices to access your home network through a secure tunnel.
To use this VPN feature, you will need to enable OpenVPN Server on your Deco Mesh System, and install and run VPN client software on remote devices. Please follow the steps below to set up an OpenVPN connection.
1. Launch the Deco app. Go to MORE > Advanced > VPN Server, and tap Add VPN Server.
2. Select OpenVPN, enter the necessary information and save the settings.
- Description: Enter a name for this VPN connection.
- Service Type: Select the service type (communication protocol) for this OpenVPN connection (UDP/TCP).
- VPN Port: Enter a VPN service port to which a VPN device will connect. The port number should be between 1024 and 65535.
- VPN Subnet/Netmask: Enter the range of IP addresses that can be leased to the devices by the OpenVPN server.
- Client Access: Select your client access type. Select Home Network Only if you only want the remote device to access your home network. Select Internet and Home Network if you also want the remote device to access internet through the VPN server.
3. Tap the VPN you have saved and tap Export Config File to save the OpenVPN configuration file. This file will be used by the remote device to access your router and establish the VPN Tunnel.
4. Next, you will need to configure the OpenVPN connection on your remote device(s).
(1) Visit https://openvpn.net/community-downloads/ to download the OpenVPN software and install it on the device on which you want to run the OpenVPN client utility.
Note: You will need to install the OpenVPN client utility on each device you plan to use the VPN function for. On mobile devices, such as smartphones or tablets, you will need to download a third-party VPN app from the Google Play or Apple App Store.
(2) After installation, copy the file exported from your router to the OpenVPN client utility’s “config” folder (for example, C:\Program Files\OpenVPN\config on Windows). The file path depends on where the OpenVPN client utility is installed.
(3) Run the OpenVPN client utility and connect it to OpenVPN Server.
Using PPTP VPN to Access Your Home Network
PPTP VPN is used to create a PPTP VPN connection for remote devices to access your home network through a secure tunnel.
To use this VPN feature, you will need to enable PPTP VPN Server on your Deco Mesh System and configure the PPTP VPN connection on remote devices.
Please follow the steps below to set up a PPTP VPN connection.
1. Launch the Deco app. Go to MORE > Advanced > VPN Server, and tap Add VPN Server.
2. Select PPTP, enter the necessary information and save the settings.
- Description: Enter a name for this VPN connection.
- Client IP Address: Enter the range of IP addresses (up to 10) that can be leased to the devices by the PPTP VPN server.
- Allow NetBIOS passthrough: You can enable this option to allow your VPN device to access your Samba server using NetBIOS name.
- Allow unencrypted connections: You can enable this feature to allow unencrypted connections to your VPN server.
- Account List: Add the PPTP VPN connection account (username and password) for the remote device. You can create up to 16 accounts.
3. Next, you will need to configure PPTP VPN on your remote device(s). The remote device can use the Windows built-in PPTP software, or third-party PPTP software, to connect to PPTP Server. In this example we use the Windows built-in PPTP software.
(1) Go to Start > Control Panel > Network and Internet > Network and Sharing Center.
(2) Select Set up a new connection or network.
(3) Select Connect to a workplace and click Next.
(4) Select Use my Internet connection (VPN).
(5) Enter the internet IP address of the router in the Internet address field. Click Next.
(6) Enter the Username and Password you assigned to the PPTP VPN server on your router, and click Connect.
(7) Click Connect Now when the VPN connection is ready to use.
Use L2TP/IPSec VPN to Access Your Home Network
L2TP/IPSec VPN Server is used to create an L2TP/IPSec VPN connection for remote devices to access your home network through a secure tunnel.
To use this VPN feature, you will need to enable L2TP/IPSec VPN Server on your Deco Mesh System and configure the L2TP/IPSec VPN connection on remote devices.
Please follow the steps below to set up the L2TP/IPSec VPN connection.
1. Launch the Deco app. Go to MORE > Advanced > VPN Server, and tap Add VPN Server.
2. Select L2TP/IPSec, enter the necessary information and save the settings.
- Description: Enter a name for this VPN.
- Client IP Address: Enter the range of IP addresses (up to 10) that can be leased to the devices by the L2TP/IPSec VPN server.
- IPSec Encryption/ IPSec Pre-Shared Key: Keep IPSec Encryption as Encrypted and create an IPSec Pre-Shared Key.
- Account List: Add the L2TP/IPSec VPN connection account (username and password) for the remote device. You can create up to 16 accounts.
3. Now you need to configure L2TP/IPSec on your remote device. The remote device can use the Windows or Mac OS built-in L2TP/IPSec software or a third-party L2TP/IPSec software to connect to L2TP/IPSec Server. In this example, we use the Windows built-in L2TP/IPSec software.
(1) Go to Start > Control Panel > Network and Internet > Network and Sharing Center.
(2) Select Set up a new connection or network.
(3) Select Connect to a workplace and click Next.
(4) Select Use my Internet connection (VPN).
(5) Enter the internet IP address of the router in the Internet address field. Select Don’t connect now; just set it up so I can connect later. Then click Next.
(6) Enter the Username and Password you have set for the L2TP/IPSec VPN server on your Deco, and click Connect.
(7) Click Close when the VPN connection is ready to use.
(8) Go to Network and Sharing Center and click Change Adapter Settings.
(9) Find the VPN connection you created, then double-click it.
(10) Enter the Username and Password you have set for the L2TP/IPSec VPN server on your router and click Properties.
(11) Switch to the Security tab, select Layer 2 Tunneling Protocol with IPsec (L2TP/IPSec) and click Advanced settings.
(12) Select Use preshared key for authentication and enter the IPSec Pre-Shared Key you have set for the L2TP/IPSec VPN server on your Deco. Then click OK.
Done! Click Connect to start VPN connection.
Use VPN Client to Access a Remote VPN Server
VPN Client is a function used to create VPN connections for devices in your home network to access a remote VPN server.
To use the VPN Client feature, simply configure a VPN connection, designate which devices on your Deco router you want to use the feature, then these devices will be able to access the remote VPN server. To accomplish this, please follow the steps below:
1. Launch the Deco app. Go to MORE > Advanced > VPN Client.
2. Enable VPN Client and tap Add VPN Server.
3. Select a VPN Type, enter the VPN information supplied by your VPN provider, and save the settings.
OpenVPN: Enter the VPN username and password, if required by your VPN provider, otherwise simply leave them empty. Then, import the configuration file provided by your VPN provider.
PPTP: Enter the VPN server address and the VPN username and password supplied by your VPN provider.
L2TP/IPSec: Enter the VPN server address, VPN username and password, and IPSec pre-shared key supplied by your VPN provider.
4. Tap Client List, then tap + to add devices that will use the VPN function.
5. Tap Access Permission to allow all devices connected to your Deco to use the VPN function, or only allow devices on the Client List to use VPN function.
Done! The specified devices can now access the VPN server.
To learn more about each function and configuration of your TP-Link product, please visit the Download Center, where you can find the manual TP-Link product model.
Looking for More
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
We'd love to get your feedback, please let us know how we can improve this content.
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.
TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
We have updated our Policies. Read Privacy Policy and Terms of Use here.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
We have updated our Policies. Read Privacy Policy and Terms of Use here.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Livechat
__livechat, __lc2_cid, __lc2_cst, __lc_cid, __lc_cst, CASID
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au
Meta Pixel
_fbp
Crazy Egg
cebsp_, _ce.s, _ce.clock_data, _ce.clock_event, cebs
Hotjar
OptanonConsent, _sctr, _cs_s, _hjFirstSeen, _hjAbsoluteSessionInProgress, _hjSessionUser_14, _fbp, ajs_anonymous_id, _hjSessionUser_<hotjar-id>, _uetsid, _schn, _uetvid, NEXT_LOCALE, _hjSession_14, _hjid, _cs_c, _scid, _hjAbsoluteSessionInProgress, _cs_id, _gcl_au, _ga, _gid, _hjIncludedInPageviewSample, _hjSession_<hotjar-id>, _hjIncludedInSessionSample_<hotjar-id>
lidc, AnalyticsSyncHistory, UserMatchHistory, bcookie, li_sugr, ln_or