How to create a VPN server with TP Link Omada routers ER605 ER7206, IPsec - L2TP windows clients

[@PratikShahEditor]

You made this so freaking simple !! I had been struggling for months to do this. Thank you so much

[@JayGeiger]

Finally good instructions that actually work!

[@divyanshkapale6240]

It doesn’t quite go into the sa level as detail as Lypur’s videos, but it gives you a great overview of the “basics” - so that you can start

[@TobsTamboke]

Tried with other vids, no success. Tried this one, works on first attempt. Thanks! April 24, ER605 latest firmware, Apple latest IOS.

[@ivansantiagohernandez3453]

hi, what do you have to do en the modem side,? I tried this but no conection. thanks

[@7th_dwarf542]

good to see you share such important techniques. have a sub!

[@rigaro67]

A very good video that shows how easy is to set up a client-to-site connection using Omada. However, there is one thing that I would appreciate if anyone could explain how to implement a "kill switch" or network lock when your client's VPN connection drops. This is very important, because if you are accessing the internet via your remote site and the connection drops, your real IP will be revealed.

[@adamwilkosz9381]

Please hide your public IP number in the video - 4:07. Thank you for sharing your knowledge!

[@TechnologyMoments]

Thanks, Adam!

[@ArunG273]

How to configure with wireguard. I have er605 with wireguard option.

[@TechnologyMoments]

Yes, an option we've seen in the latest firmware of many devices. We are already working on a few videos about it once it has been thoroughly tested.

[@TAShyhas]

Hello, The video is very informative, I did it successfully, Thank you. Can you please put a video on port forwarding & load balancing together on an ER-605 router?

[@TechnologyMoments]

Hello, sure, thanks for your comments. In the meantime you can watch kzbin.info/www/bejne/hqXVi3yEqdhojrM and kzbin.info/www/bejne/rojYZpZ_lrV_oc0 hope they are also informative.

[@MrCredo1995]

This seems to work great - the only thing I can't wrap my head around is how you were able to create the VPN-IP-Pool in the same IP-Segment as your LAN. I'm getting an error message when I try this.

[@TechnologyMoments]

Actually it is ideal to use a different subnet as that is what the router will do, re route the packages to the appropriate network based on the port involved. Sorry about that.

[@bystrzakk]

Great video! But in a few simple words..what does it give us? as I understand every time that I would like to connect my device to this network I have to do it via VPN?

[@TechnologyMoments]

It will basically give you two advantages. First it must authenticate whoever wants to connect to your server or network and most importantly encrypts all the information you exchange with your home/office... a must nowadays if you connect remotely constantly.

[@bystrzakk]

​@@TechnologyMoments thank you so much for explanation. But isnt it that all devices inside network will be secured but still network provider can see that in area of this network someone was reaching "this and this" ? Specially with public IP? Thank you for help

[@jeffreydelacruz3390]

Hi Great video! one question, does the host clients have access to the internet when connected to the L2TP VPN?

[@TechnologyMoments]

In most times they do and besides proper router and gateway, DNSs specified play the most important role: community.sophos.com/utm-firewall/f/vpn-site-to-site-and-remote-access/100225/no-internet-access-through-l2tp-vpn

[@qx4df]

hey! great video, i just bought this device, i have a question tho, im new to this stuff, i mainly only need this as a vpn service so that when i am travveling i can access the internet through my home country, does this work in that way? or is this only for sharing local (LAN) devices to a remote location?

[@TechnologyMoments]

With the latest version of it's firmware there are more available options in the VPN configuration such as the "full mode" in OpenVPN that will let you have internet access.

[@adbaro3448]

Can you please make a video explaining how to use this as a OpenVPN client to connect to one of those widely available VPN services, thanks

[@TechnologyMoments]

Hello, we are just finishing tests and we have been very happy testing Open VPN actually is very simple and will try to do it next Week.

[@kablammy7]

@@TechnologyMoments I am going to look for that video because I have been trying for a week to get a known good .ovpn client file to connect to my Nord VPN dedicated server using Omada and a TP-Link ER605 . The file works fine with two other client apps . It will not work with Omada VPN . I have the passwords in a text file and it is accessed by putting the filename after the : auth-user-pass line in the configuration file . Works fine with the stand alone client app . The file imports no problem; I just fail to see the expected result of having my connection tunneled to the VPN server .

[@alwinkruijt8260]

That would be tis video kzbin.info/www/bejne/Z3vNpmeZgJeAjbs

[@carloscavalcante3398]

thank you! You are the best!

[@michaelpietrzak2067]

Excellent video!

[@AnilPekala]

Can we access internet over that VPN? If yes, What is the configuation for that? I have configured as shown above but I am unable to acess the internet over that VPN.

[@TechnologyMoments]

We have trying to make that easy for everyone, but openVPN has many restrictions. It works "out of the box" with internet access when using DHCP over windows 11. No luck with windows 10. But there are many ways (more technical of course) to tweak the DNS resolution using the ovpn file . openvpn.net/vpn-server-resources/troubleshooting-dns-resolution-problems/ Same for the gateway you want to use.

[@anfonse]

I am having the same issue, could successfully connect to VPN and see the office LAN, but do not have internet access, I am using L2TP protocol, no OpenVPN, could you solve your problem? I appreciate any advice

[@Ivoboue1752]

the video is incorrect in Step 2 (~2:00) if you also want to have the internet after connecting to that remote L2TP vpn server. When creating users, the local IP address should NOT be your router, it's the IP of the virtual VPN adapter, it should be something in the same subnet with your router, ie if your router is 10.10.10.1 the local IP can be 10.10.10.225. Additionally, DNS should be 8.8.8.8. Following these settings you will get the working vpn AND internet connection (successfully tested in my setup).

[@prasetiyot9480]

such a great.man.. thanks

[@parthasarkar986]

Awesome explanation!

[@HorfiProductiones]

Good afternoon, before subscribing to your chanel I have an important question. At minute 4:30 of this video, you are entering the public IP of the internet provider that is assigned to you at that moment, but here my problem and everyone's, that the internet provider changes the public IP address almost daily, and since I want to connect directly to my office from another country, I will not have anyone who can tell me the new IP address of the provider when it changes, so please help me to see if I can put a specific name instead of the address public IP assigned to me by my internet provider. Note, I left this same text in your spanish video.

[@TechnologyMoments]

I hope you were able to solve it. By the way there may be more options than just noIP or DYN

[@azkymohamed123]

How did you solve this?

[@mahmoudhabib6729]

Thanks for the Instruction my question is there any configuration on the router to allow VPN connection?

[@TechnologyMoments]

Not at all. The router will open the ports it needs as well as firewall exceptions.

[@mahmoudhabib6729]

​@@TechnologyMoments i did with the same configuration today but not working I hope you can help me. thanks and best regards

[@smartchines]

HI Thank very mush for your help, I have the er605 tp link I created a VPN L2TP but I have question, what if I want to get Internet access via VPN -L2TP is posible?

[@TechnologyMoments]

There are many ways you can redirect traffic through a VPN connection and it is just a matter of configuring correctly the router and/or routing tables, assign gateway and that's it.

[@jmijnen]

Nice video. Question I have it working. But I want all my internet from the cliënt trough the vpn. This not the case. Do I need to change a setting?

[@TechnologyMoments]

If it is ovpn there are several tutorials for adding specific gateways editing the ovpn file exported adding the lines with the specific commands for it.

[@mvaiks]

I followed this guide and was able to connect to the TPLink router acting as VPN server but I can't ping it or any device on the network. My TpLink is the ER7206.

[@TechnologyMoments]

You might want to check our video kzbin.info/www/bejne/rojYZpZ_lrV_oc0

[@雒晓文]

Does this method need any firewall configuration? Such as traffic rules or port forwarding or so on…? I followed this video but I cannot connect VPN, and I tried to connect my router port 4500, 500 from a public network, both failed.

[@TechnologyMoments]

Hello, the router will auto open the specific ports. If you're behind a firewall or your routers IP is not the public IP, you must open ports manually or have DMZ configured

[@雒晓文]

@@TechnologyMoments haha, finally I found I had ever set up a 500,4500,1701 port forward from wan to my Synology NAS, that is what made the vpn on TPlink didn’t work. Anyway, thank you for your reply.

[@jamesriady4140]

This only work if our isp give us static public ip or reserved public ip right? I have dynamic public ip, ip changes after every restart.

[@TechnologyMoments]

It does change, but you could have a workaround specifying a No-IP address, or DynDNS, and have it changed in the OVPN file. Take a look at this: openvpn.net/faq/can-openvpn-handle-the-situation-where-both-ends-of-the-connection-are-dynamic/

[@nabilhasan5257]

coz you did great work on the video, thank u for your help o7

[@leoncass2258]

So the VPN IP Pool has to be the same subnet as the LAN? It cannot be a seperate IP pool say 10.10.2.x ?

[@TechnologyMoments]

Hi, actually it is much better if it is not, as there will be no conflict of IPs and the router will do it's job linking the two separate LANs

[@490o]

Is it possible to do this with an ipv6 address as well? My ISP only gives out "shared" ipv4 addresses that can't be used for any at-home hosting

[@TechnologyMoments]

I have not seen such option with these devices. We'll try to test a little more and come back to you

[@490o]

@@TechnologyMoments Thanks. Do you also know what the bandwidth of the VPN server is with this particular router?

[@jerryjones1767]

Hi can you make a video with Client-to-LAN IPSec client vpn TPLink

[@TechnologyMoments]

I think this one might be what you're looking for. Hope it helps: kzbin.info/www/bejne/omSXo3VuhKefbpIsi=MzmE10MvN-vaoYYY

[@FakhruddinRatlamwala]

I want to ask how to configure vpn if i am using to public static ips ( two Internets )

[@TechnologyMoments]

Well you have the perfect sceenario. Here the video: kzbin.info/www/bejne/o2XWipJ_e6-Ihqc Using two of these: (amzn.to/3lKtHcs)

[@wizajit1]

I have a small query. Once we connect to the home VPN server we setup; does the internet usage(browsing etc) gets routed though the tunnel we created. In above case; the internet remains secure routing through your home router; rather than the mobile 4G LTE network? Am I right in my understanding? Thanks for your time :)

[@TechnologyMoments]

Yes, in the latest firmware of the er605 and er7206, you will have the option "full mode" which will let you tunnel internet traffic through the VPN.

[@davidesguerra7837]

Question why it seems it gets disconnected to the internet when connected to the VPN server? This full mode you mentioned can fix this??

[@diogchris]

Should i open any ports on my router? Bcs it doesn't work for me..😢

[@TechnologyMoments]

If you have the public IP being managed by the Omada router, no port redirection is needed. You might want to consider using OpenVPN. Check our video about it: kzbin.info/www/bejne/Z3vNpmeZgJeAjbs

[@VirajLakmal-ci9lg]

Need two public IPs for both location?😊

[@TechnologyMoments]

Just for the responder's side... or at least a DynDNS or noip.com account. Definitely you'll need control over you public IP at least for port forwarding.

[@ramand78]

I have a query.. can u help me please... I need to configure VPN with multiple static IP... All user who connect through VPN will assign different static IP addresses

[@TechnologyMoments]

With these particular routers (and currently, as this may change) is a little tricky from the GUI as what you may want to do is that you can assign each client a different L2TP connection, hence different usernames. To each, you will create an IP Pool with the same starting and ending address, so each time each of your users connect to the router, they will be handed the same IP Address. This is something we've done to a colleague and it has worked great for more than a year.

[@anime_remake776]

My ISP is Dynamic setting will it work?

[@TechnologyMoments]

For IPSec connections you might have to use always an IP, another good way would be to use OpenVPN ( kzbin.info/www/bejne/ooTYoWZ6pLmmi7s ) and might be easier for you to setup. OpenVPN might let you edit the ovpn file and change the public IP address of your Omada Router for the Host name that can be provided to you by DynDNS or NoIP.com

[@miguelmeneses3623]

I have a problem, basically I have my equipment inside omada sdn, When configuring it gives me conflicts when configuring on Windows and Mac, I have tried configuring it without encryption and it works without problems, the problem occurs when I encrypt it. Any advice?

[@TechnologyMoments]

I understand. That's odd as OpenVPN is very clean in terms of connectivity with secure encryption and trouble free. We'll look around. If you find the solution please let us know

[@mikh8l]

Great, straight forward videkIs having an Omada Controller preferable? What advantage does the Omada Controller give?

[@TechnologyMoments]

Hello, we're glad you found this video helpful. Having the Omada controller active will give you many advantages, specially in terms of scalability, and ease of use. Also changes among big networks will be active and provisioned very quickly as well as firmware update control. You'll find that most of the times, specially in gateways and firewalls, may be very well needed to access directly to devices every once in a while. Also, it is, at least for now easy to choose which setting override directly configured settings in the device.

[@billieschultz1352]

Which VPN router do you recommend ? You have 2 links. Just curious on your perspective 🤔

[@TechnologyMoments]

Hi, both have basically the same functionality, but, the er7206 has far better hardware and capacity of managing more VPN connections and clients. That would be my choice Omada Router 7206 (amzn.to/3DXRI4B), and if you have a smaller network of about 100 to 120 clients the er605 will do (amzn.to/3A3Msv4)

[@billieschultz1352]

I have a tp link AX6000 will I need a controller too ? Thank you 😊

[@ericanerny1771]

@@TechnologyMoments Thanks for this info.... I want to set this up to do L2TP in a small business, I will need between 100 and 150 current connections. You mention the 7206 can do around 100-120 current connections but on TP's website it says around 50 clients for L2TP/PPTP/Open VPN. Could you offer advice please?

[@arielayala7450]

Hola! muy buen video. Es necesario tener el modem en modo bridge para que funcione? Mi ISP me asigno una ip fija, me brindo la pueerta de enlace, submask y los dns primarios y secundarios pero no me conecta.

[@TechnologyMoments]

Modo bridge solamente en caso que tu ISP no te permita tener el control de tu IP pública.

[@pavelnogovitzin9343]

do i have to use fixed ip or it will work even if my public ip will change ?

[@TechnologyMoments]

They will work but you just have to use the FQDN of your NoIP or Dynamic DNS service provider.

[@MALAYALI-cj9mv]

Bro, how to setup site to site without static ip or ddns ?

[@TechnologyMoments]

You may do it maybe with site to site using OpenVPN which is easier to change the host name for an FQDN of the client/host

[@XxAbdo]

I did everything like in the video but it doesn't work, it doesn't want to even connected

[@DjMrMors]

Nice video, just to verify that i understand correct . With this router i can access remotely my server from another device/network through internet? I want to use it for such a reason . Also do u know if i can use it for wake on lan on my server?

[@TechnologyMoments]

That is correct. You just place one unit at your work/home and access your local resources remotely. i can assure you, VPNS for this purpose had never been easier to set up. We are about to upload yet another video of Client Router to Server Router, also using OpenVPN and setup only takes a couple minutes on each location. also the ER7206 router also from tplink is just more powerful but same functionality amzn.to/3dO3F3o

[@USDuser]

Setup the OpenVPN server, however, VPN client IP not changing to VPN Server IP when connected. Is that for all router VPN server or just TP-Link, Any idea?

[@TechnologyMoments]

When the VPN is created, a virtual adapter is added. That is the one that receives the IP from the VPN server, check that from shell with the ipconfig /all command

[@KarthikeyanSekaran]

Hi Can you help me to connect P2S VPN thorough this device ER605. i do have a static public IP. Followed the instruction but in client machine its not connecting getting error as the L2TP connection attempt failed.

[@TechnologyMoments]

I would check the OVPN file generated with a text editor. The last lines should contain you public IP. It is the most common problem.

[@abarisist]

for er605 i set up 2 wan with bridge mode modem then go to gigabit swich then go to 4 accespoints and then almost total 60-70 users. i had connection problems with er605. reset then 1 day normal then problem again. then i start to use old model er5120 now no problem ,

[@TechnologyMoments]

Interesting to know and thanks for posting, just for us to let us know, were you using a standalone setup or using the Network Controller? No issues on our networks so far, so it may be a very specific situation. Again thanks for posting

[@muhammadasjad6686]

i have no-ip ddns account..How to use it instead of public ip address?

[@faycalelmehraz8553]

Hi, As I have an ER605 router coupled to an ISP fiber optic router, the configuration shown on your video don't let me confiuring the VPN service, could you help me please to fix this problem? thanks.

[@TechnologyMoments]

Hello, I understand. When trying to setup your router as a responder (server for the connection) you might have to ask your ISP to give you control of your public IP Address (it is something we had to do through a business account only) some others like the one I have at home, do such thing by asking them to set their routers (such as your PON) in bridge mode so that your router is exposed directly to the internet. Beware that you might loose functionality of their equipment such as wifi or even IpTV as that device becomes just a bridge as its name suggests so that your router will take control. Also wifi should be provided by your own APs, which usually is much better.

[@faycalelmehraz8553]

@@TechnologyMoments You are right, but even if we have a business account with a public IP address, we can't set the ISP router as a bridge (the router is ZTE F680). Is there any other solution?

[@ferasawwad71]

Greetings to you. Can domain be used instead of the public ip? Is it possible to consider this explanation as a connection from a phone to the router, in other words, from the client to the server? Not from site to site.

[@TechnologyMoments]

Hi. Yes but it is currently not supported by the current firmware.

[@nemethalex1087]

Thanks for the video. I have a problem though. My case is Different site's PC > ADSL Modem > Internet > Office ISP modem > ER605. My problem is that only the ISP's router have a public IP and it's not working if i type in that IP when setting up the VPN connection on the client. Any suggestions? Edit: There is a PPTP and Ipsec passthrough option in the ISP modem enabled by default so i probably need the choose either of them.

[@TechnologyMoments]

If you're in the "client's" side it does not matter which options you choose, as that is the point of any remote access. Be able to connect from anywhere. as of your er605 it does have to be the one "exposed" to the Internet. If not, you might want to have it moved to the DMZ or just forward any related port to it. You might want to read: www.itprotoday.com/strategy/q-what-firewall-ports-should-we-open-make-ipsec-work-through-our-firewalls

[@Termiborger]

Jesus in heaven, you probably just saved me a week's worth of headaches with this 5m tutorial alone, THANK YOU!

[@patrickmacasinag1749]

Hi I don't have a public IP, it will work with NO-IP?

[@TechnologyMoments]

Yes it will, you just have to edit the ovpn file and instead of the IP, use the FQDN of your prefered Dynamic DNS provider. We recommend to use www.noip.com?fpr=9imud noip.com

[@nelsonlunas]

please explain ER7206 and overlap

[@TechnologyMoments]

We'll do.

[@SourabhBelekar]

I have setup a L2TP server (in office) and I can connect to it over the internet but when L2TP server is enabled, my lan devices (in office) on ports 2 to 5 cannot access internet . I am using er605.

[@TechnologyMoments]

in L2TP connections the problem may be due to not being able to access the local DNS. Try trouble shooting using a pint plotter or similar app so you can see if it is a problem of connectivity or DNS.

[@ionelrusu7417]

The l2tp connection attempt failed beacause the security layer encountered a processing error during initial negotiations with the remote computer

[@ionelrusu7417]

Can you help me please?

[@neph1l1m33]

Hi! I connected to my router via VPN but I can't see the local network. Help me what can I do?

[@TechnologyMoments]

You may have to configure Firewall at the client itself. Take a look at our video: kzbin.info/www/bejne/rojYZpZ_lrV_oc0

[@Mike-kl5yc]

how can I get my public IP from router? I just type what is my ip and use the public ip from the site it gave me and it doesn't work. I don't think my dhcp is conflicting with the vpn pool because they are on different ranges. not sure tbh

[@TechnologyMoments]

It is very likely your router is not managing the public IP. You have to make sure you're in charge of your public IP. Most ISPs control that unitil asked by them

[@Mike-kl5yc]

ah yes that makes sense. I was testing this on my parents network. They have their isp router conntected to the modem and I have one of their lan ports connecteed to the omada router via WAN port. That could be it. Anyway, i decided to return this router and get a protectli vault instead to learn opensense but thank you for explaining that. I wonder if I would run into the same issue if I tried to do this in my college dorm though given that it has one ethernet port. @@TechnologyMoments

[@krogkortet]

Is this the box to buy if I would like my own private VPN service? Say I'm abroad traveling, could I connect to this (similar to Nord vpn etc) and from then look like I am surfing from my home (where this box will be connected to the intent via a normal router).

[@TechnologyMoments]

Hi, you are right. However for a complete "remote gateway" setup, additional configuration is needed for the ovpn file, and even from version to version, it might change in behavior. Here the option for home: amzn.to/3DBGtjh and for medium sized networks: amzn.to/3jbDcjk with SFP in the WAN port

[@krogkortet]

@@TechnologyMoments super, thank you 👍😎

[@StevenSwehla]

Spot-on

[@efovadia]

Hi, Android now supports IKEv2/IPsec (no other protocols) - does er605 v2 support that?

[@TechnologyMoments]

Hi, for these scenarios I usually prefer to have the routers setup in standalone mode. You can take a look at the routers emulator here where you can find the answer to all these questions and the capabilities of these routers: emulator.tp-link.com/er605_un_1.0/index.html

[@kaenstudio1271]

Helped. Thanks a lot

[@aftaab-e-hidayat8605]

Help I don’t know how to use the app my dad bought all the plugin s how do u use the app??

[@TechnologyMoments]

Take a look at this vido regarding using Omada with the App: kzbin.info/www/bejne/eavZo31rbNqJn6M hope it helps.

[@MrNoneya011]

Android no longer supports PPTP or L2TP connections. Got an update for IPSec configurations?

[@TechnologyMoments]

I would strongly recommend using OpenVPN which is fantastic, or stablish a LAN to LAN or client to LAN configuration in your router (in case you work remotely from the same place) which is transparent for the user.

[@MrNoneya011]

@@TechnologyMoments Can you make a video for using OPENVPN.... Im trying to set it up now and having problems.

[@REMOTiEify]

hi . do you have to do any port forwarding?

[@TechnologyMoments]

Hello, when you do it with your own public IP address configured in the WAN port no further configuration is necessary. This means the router will automatically open and listen on the corresponding ports.

[@syamkrishna2272]

nice one

[@parthasarkar986]

I have two routers, main routers LAN port is connected to omada VPN routers WAN port. Then what will the local IP of my router and I set up all the parameters and still unable to establish VPN connection as error message showing the L2TP server is unable to connect as security layer of the computer fail to negotiate to establish connection and authentication. What to do now?

[@TechnologyMoments]

Hi, if the problem logged is oriented to a failed authentication it might be one of two problems. First any of the parameters is not sonsistent as protocols, key, etc. And second, is that if one of the routers is already being NATed, you might failing to redirect ports successfully from the one oxposed to the internet to the internal. Router. Let me know if I understood your situation.

[@parthasarkar986]

@@TechnologyMoments Basically I have fibre optic broadband connection and ISP provided me a wireless ont for internet access, so I have WAN patch coming directly from ont's LAN port which is directly connected to omada VPN router's WAN port. This is the network senerio. Can you tell me how IP addressing while setting VPN router L2TP server user, client and server. I have also static IP in my connection. Or kindly make a video explaining the senerio.

[@mingzhu8093]

Does it support Wireguard?

[@TechnologyMoments]

Have not used it. Let's see if another viewer can help us with it.

[@Yaniv.C]

This could have been great if youd spend more time discussing the internet configuration

[@raulguajardo1206]

Does anyone knows how to connect the router to the Private vpn server? I've tried many times and it looks like it connects but it doesn't work.

[@TechnologyMoments]

You might want to watch this video, this approach using OpenVPN as a client Router.

[@36stifler]

I request the support on my omada OC200 controller. I would like to know how to send automatic reports to my email monthly, since I have 200 parents distributed by the branches. Regards

[@bienangelogonzales8541]

Thank you

[@supportitservices6349]

you do not mention IPsec setup

[@tonmb_]

can it work on ps5

[@TechnologyMoments]

Probably, but we have not tested it.

[@zhareeveabduraja5323]

How can i block utorrent in TPLINK ER-605? Please make a video

[@TechnologyMoments]

We'll try and do that, thanks for your comments

[@EstrategiasConLuisGabrielVIP]

GOD!!!My broo

[@Combatzone1rSYoxBz]

Aaron 70218 I tNice tutorialnk you accidentally closed it and then it crashed. Could you give more details?

[@TechnologyMoments]

Hi, you mean at any point in the video? Let us know so we can help you.

[@benoitcoppey596]

Hello What to put in server name or address I'm stuck

[@TechnologyMoments]

Hi, server name here usually refers to the IP address of your VPN server, if you have a way of making it an FQDN thanks to NoIP or DynDNS, you would have to change it in the ovpn file so it will find the server.

[@benoitcoppey596]

@@TechnologyMoments how do i modify the ovpn file, thanks in advance

[@drh3rd]

Can one install a VPN onto the Omada ER605 VPN Router, so that every device that connects to the router will be by default utilize the VPN connection going out (thereby eliminating to create a VPN on each individual device on the network)? And if this is doable, can one create a rule that configures a single device to bypass the VPN? If yes and yes... anyone tell a tutorial or more on this? Without and with the connector... too much to ask? Newb, but capable of following directions.

[@TechnologyMoments]

It's important then to understand how gateways may be configured over VPNs . This article may help you. learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

[@drh3rd]

@@TechnologyMoments Tx. After more searching, consensus is, don't even try this on the ER605. For several reasons not worth listing. Oh well. I already have another solution in the werks. Tx for your reply. Much appreciated.

[@diwankarmishra7012]

The Public IP that you mentioned in the start that has to be configured. Do I have to give a Public IP directly to This router? Because currently I have one router and in this router I have given it’s LAN. Will VPN work if I have given a LAN IP in my WAN port?

[@TechnologyMoments]

It will not work unless you have a way of redirecting VPN port for which you can take a look at this article: serverfault.com/questions/451381/which-ports-for-ipsec-lt2p Basically you have to ask your ISP to give you access to their router so you can redirect ports at will. Then you create your own VPN server on your own router.

[@salapolivalenta77]

Very well explained. However, VPN l2tp server works very nice as long as you don't have the router connected as client to another l2tp ipsec server. Me for example I have my ER605 v2 permanently connected to softether VPN server deployed and configured by me on a debian Linode VPS. You need to create some additional rules in Policy routing where from you should specify the local IP adress and protocol where vpn is applying to. Everything works perfect until I am connecting with my phone to router l2tp server. Phone is connected and seems to works fine but on that computer with the chosen ip adress connected to linode VPN nothing works anymore. So as long as some client is conencted to ER605 l2tp vpn server, the l2tp client connection to linode stops working. You can't use both in the same time. Once I disconnect the vpn connection on the smartphone the computer connection through linode starts to work again instantly

[@TechnologyMoments]

Hello! Very interesting insight you are giving us with this explanation. For those who may be wondering if L2tp works simultaneously with OpenVPN, well, it does and works very well. Have a great day and keep on enriching this exchange of ideas when you have something to add.

[@salapolivalenta77]

@@TechnologyMoments Hello, yes, I have also openvpn client connected to some other openvpn server and works as expected. Don't need for policy routing settings like l2tp client requires, you just need to choose local network where applies, either single ip /32 or a subnet containing multiple hosts and ofc the ovpn file config taken from the server side. What i haven't tested on this router is openvpn server but should work. As I said, very well explained. Thank you again!

[@icandidstudios]

Amazing

[@billieschultz1352]

It didn't connect to the VPN. I'm using Windows 11. What could I be doing wrong 🤔 it says: The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiation with the remote computer. Do I need a controller? I have my AX6000 as a (AP)

[@TechnologyMoments]

If it was an updated computer it may be due to an update. You can read this article. appuals.com/how-to-fix-the-l2tp-connection-attempt-failed-because-the-security-layer-encountered-a-processing-error/ In a clean instalation this does not happen and we've tested and proved it. Your Access Point does not have anything to do with the problem. Also, if your server is Ubiquiti device, there are known issues in which you might want to reset, and reconfigure the server. It can even be a setting backup being restored to it.

[@Taino300]

Way too complicated :(

[@TechnologyMoments]

Hi, it may seem complicated at first, but you'll be able to sleep better knowing your communications are secure when working remotely or implementing such methods at your business.

[@Linas1985]

hello, dear Technology Moments youtube user, i want to create a server, from my external HDD, via my tp-link router, and i need a specific knowlede, about that - so tell me, how do i contact you in private

[@TechnologyMoments]

Sure you can contact us through our website www.technologymoments.com