OpenVPN - This is why it is the most popular! - How to create an OpenVPN Server - Omada

In this video we address the requests of many of our users who wanted us to have published this important topic, about not only how to use the TP-link ER605 and ER7206 for creating an OpenVPN Server, but to use the OpenVPN client to establish remote secure connections to be used for file transfer, remote desktop connections, or even printing.
The hardware used, seen and related to this video:
TP.link ER605 amzn.to/3nhyFKN
Tp-link ER7206 amzn.to/3nnfFKI
DOWNLOAD OPEN VPN CLIENTS:
Community Client: openvpn.net/community-downloads/
Open VPN Connect: openvpn.net/vpn-client/

[@worknlisten1077]

Is there a video for straight beginners someone can recommend. IDK how to find the information he is putting in the boxes

[@TechnologyMoments]

HI, I would start reading some documents about them: support.huaweicloud.com/intl/en-us/vpn_faq/vpn_08_0602.html and help.skytap.com/wan-vpn-configuration-parameters.html#topo may give you a good start point for understanding terms and phases of the VPN negotiation.

[@mikecr3297]

Shit. Accurate, precise, straightforward, no BS, no junk talk, straight to the point. Literally one of the best vid I saw so far.

[@moga864]

Too many on the platform needlessly inflate a discussion to increase payout. You keep it concise and too the point without any unnecessary filler or mental ticks. Outstanding, and subbed. TY.

[@CryptoG86]

Huge help, thanks! Got it working in no time.

[@jennifertemmink5693]

Thanks for the tutorial this made setting it up a lot quickr :)

[@SergeantTrigger]

Crystal clear. Thanks.

[@benvoigt5794]

Perfect video - helped me a ton after finding no good resources for openvpn config for the ER605. Can you please link a video or guide to configure the firewall exceptions you mentioned around 5:48?

[@TechnologyMoments]

Thanks for your comments, we'll find some time to that for sure, soon.

[@orlie9135]

@@TechnologyMoments I have the same question. (similar question-- I can't route traffic between the internal lan and the vpn address pool. Have the same prob on an archer tplink w open vpn as well. I can connect but can't reach my devices (not windows servers, other devices that i can see from lan). Help?

[@isaacgolle416]

Does this establish an encrypted connection? i.e. does it use SSL or do we need to do additional steps to set that up? This video was very helpful.

[@TechnologyMoments]

That is a good question. OpenVPN is the prefered option nowadays and well implemented can be used for robust solutions. Take a look at this article and how they consider from weakest to strongest VPN alternatives. vpn.ac/knowledgebase/36/PPTP-vs-L2TP-vs-OpenVPN-which-one-to-use.html

[@user-ve8be5tg2w]

Great video! Do you know how to configure for the client dont use the internet of the VPN server when connected, but use the internet of ISP of the local network? I'm tried routing policy and other configs, but doenst work. Thanks!

[@TechnologyMoments]

It is a well known topic for tp-link routers not to be able to specify the gateway. They say for future firmwares it is going to be available. Some people have been able to tweak this parameter through the OVPN file, but most of the times with no luck.

[@czmmcz]

Newbie question: Would it be possible if I plug my ER605 directly to my ISP's ONT and then configure it from there? So it'll be something like ISP's ONT > ER605 > Wireless Router

[@TechnologyMoments]

That is the most common scenario for any router as your ISP will decide from there if it will handle the public IP or if it will let you configure it, letting the ONT work in bridge mode. If not, the only thing that'll happen is that it will translate two times. One done by the ONT and one by the ER605. Big advantage is that you'll have control not only of your internal network, but choose which DNS the router will query.

[@andreabissoli8993]

Hi thank you for your video. At which ip should i open the port i chose as server?

[@TechnologyMoments]

For example if like in this case you open port 1195 for connections it will be open automatically for any IP.

[@dfpc112]

Hey, so I have some questions, first I need a public IP for this to work right? Do I need to open a port on the router after I configured openvpn? Do I need to open a port on the computer where I will be using the vpn?

[@TechnologyMoments]

Hi, yes, you'll need the public IP address ideally. Eventhough you can use NoIP or OpenDNS seems like it does not work too good anymore. As for ports, as you are going to be configuring in the same router, it will open the ports automatically. Good luck!

[@jakeeemarcluckyparaan6654]

Hi sir, assuming that i want to access remotely my home network using different network but establishing a openvpn server. Can i access my home network by doing these? Thank you!

[@TechnologyMoments]

Absolutely, that is one of the options that people use the most. Very important in either case to have a public IP address associated to your router.

[@karl514b]

Does it not work if we want to configure this remotely from the omada controller? Does it need to be done in the routers GUI?

[@TechnologyMoments]

Our very "personal" recommendation is to implement the VPNs directly form the GUI, one advantage is connection speed after power failures. But it is absolutely possible to do it all from the controller.

can I define my vlans (with tags) on TP LINK ER605 and use those VLANS on a TP Link EAP225 directly? I mean... I don't want (aka dont have money) to use a controller and a switch. Will only the ER605 + EAP225 do the trick? thanks!

[@TechnologyMoments]

Remember you can install the Omada Application in your Windows computer, configure, and let it running. You don't need to have it always on, and both your devices support it. www.tp-link.com/us/support/download/omada-software-controller/#Controller_Software Good luck!

[@majid1347]

Hi, Thanks for sharing, I tried this openVPN and it access to your local network device and but does not take Router public IP. do we have solution with this router ? for example if my laptop with ISP IP Y1.Y2.Y3.Y4 connect to openVPN server with public IP X1.X2.X3.X4 , my laptop still have the IP of the Y1.Y2.Y3.Y4 ( what my public IP )

[@TechnologyMoments]

You are right. Let me see if I understood correctly. Besides you connecting to you main office network and sharing resources, you will still be able to connect to the internet, and if you go to whatismyip.com you will still be able to connect to your ISP through the gateway originally configured in your network adapter. That is how it works and depending how you connect from one to another you can change this. For example we're about to publish a video having two routers connected through Open VPN and it works in a totally different way, letting you have more options. Also our recently released video about IPsec tunnels (site to site) between two of these routers is a great functionallity that will let you play a little with the gateways.

[@majid1347]

@@TechnologyMoments what I expect from openVPN functionality is this scenario: I have one VM in AWS and I only can ssh to it from my home office, now if I want to ssh to my VM in a coffee shop via browser using my home VPN server , can I do it ? ( I mean by using this router)

[@MrAGMAGNO]

Do I need to port forward port 1194 on my main router for this to work? thank you.

[@TechnologyMoments]

If your ER7206 (or ER605) hosting the VPN is behind it, then yes. If you are talking about where the client is located, then no, you don't need to do anything on the clients' side. You could very well be at a hotspot and should get connected.

[@wlodekbudowa7128]

Is it possible to setup 2FA? I have vpn server on asus RT-AX55.

[@TechnologyMoments]

Not that we know of. We’ll see what others have accomplished.

[@ArunG273]

my 2 isp routers cannot connect to devices inside er605 and vice versa. could you make a video how to setup these devices?

[@TechnologyMoments]

We are creating videos that may help you do this through VPN, hope you find them useful

[@dannydzware2023]

Thanks for that video. But I have the following problem, if I import that file it shows me the local IP from the er605 (192.168.x.x) and not like yours a public one. I believe, I missed some settings, but according to video I can't see, where I did the mistake. maybe you know, what is the trick. As long as I am connected to the er605 I can connect with the openvpn. But as soon I am using for example my hotspot, I can't connect anymore. Thanks for your help

[@TechnologyMoments]

At the moment of exporting the ovpn file such file includes the address that was assigned to the WAN port of your router. If you have it behind a firewall and forwarded the corresponding port (1194) just edit the line for the host name of your DynDNS or the public IP, connect to a remote network and attempt connection. Have a great day!

[@MrNoneya011]

This is cool and all, but doesnt apply to Android 12 as I last commented on your previous VPN video using the ER605. Can you do a video for the latest Android revision that applies to most of the current android devices.

[@TechnologyMoments]

That is a good Idea, we are currently working on the site to site VPN which is basically using your routers to stablish the tunnel, you might enjoy it too. Your suggestion is appreciated we'll try and do that very soon.

[@cristianp535]

Hi it works but the thing is that the client Ip doesn't change, in continues with the same public ip not with the vpn Ip

[@TechnologyMoments]

Hi, yes the IP continues to be the public IP of remote client, all traffic should be forwarded through remote network and remote gateway for it to have access to the internet through the remote network. There are of course ways to manipulate such settings. We'll try and have a video tweaking the ovpn file for such tasks.

[@DjMrMors]

dear friend becauase i dont remember for sure and i am confused . when you connect from android, do u have access to the internet? because right now i dont , any help please?

[@TechnologyMoments]

Hi, that is a good question and a very usual one with Open VPN. Remember that most of the routing information can be configured in the ovpn file. Here a link to your specific question: superuser.com/questions/1203170/gateway-doesnt-change-when-connecting-to-openvpn-on-1-specific-client

[@DjMrMors]

@@TechnologyMoments i will just answer my own question for others to know, u have full access to the internet without doing anything, however i want to make you another question if you know. i am running a home server with truenas scale, right now wake on lan is enabled but i cant wake my server with openvpn any ideas? thank you

[@josecisne7997]

Do I have to use a different certificate for each user, or can the same certificate be used by many users?

[@TechnologyMoments]

You can use the same ovpn file for several connections.

[@josecisne7997]

@@TechnologyMoments Thank you!

[@vladip4309]

​@@TechnologyMomentsDo you know, by any chance, how to generate new cert? Even when I delete VPN profile and create new one, diff checker shows that certificate parts are completely identical for old and new profile files.

[@scottabraham1396]

When I do this it has a stage of inputting primary DNS which you don’t seem to have on your set up, what would I put in this ?

[@TechnologyMoments]

You can use that, of the local network. For better results you might even use Google DNS as the secondary DNS

[@scottabraham1396]

@@TechnologyMoments I’ve managed to connect a VPN (actually use L2TP VPN) however I have no control over the LAN network which my IP cameras are connected to. I’m guessing it might have something to do with port forwarding access? Sorry complete novice trying to learn any advice greatly appreciated!

[@jayveegonzales1988]

do you need two er605 for this to work?

[@TechnologyMoments]

For this client to server connection you just need to be connected to the internet and the VPN will connect your laptop/PC to your office/home.. If you want to have a "client site" to a "Main Office Site", keep in mind that not all routers have the same configurable options so it is ideal to have both ends of the VPN with the same hardware. That particular scenario we watched in this video: kzbin.info/www/bejne/ooTYoWZ6pLmmi7s

[@JuanCarlosMartinez-hc1uh]

Si quisiera realizar una vpn en casa y comectarme desde fuera con cualquier dispositivo solo necesitaria el router server?

[@TechnologyMoments]

Es correcto, pero lo importante es que puedas "encontrarlo" desde cualquier lugar de manera que una IP fija por parte de tu proveedor de internet y que tu router las pueda manejar, es lo ideal. Open VPN como viste en este video es tu mejor opción. Saludos!

[@JuanCarlosMartinez-hc1uh]

@@TechnologyMoments gracias

[@felipecardoso7117]

I have a Virgin Router connected to my ER7206 and is giving a DHCP IP to it. When I try to create the OpenVPN server, it is taken the IP from the Virgin router as "public ip". I already tried to change manually in the file, but doesnt work. Any idea what I could try to solve it or am I doing something wrong?

[@TechnologyMoments]

The reason is that your ISP's router must have the port redirected to the internal router. Otherwise it wont connect. You did right just changing the IP in the file, only thing left is Virgin letting you redirect the port used for the connection.

[@felipecardoso7117]

@@TechnologyMoments I fixed setting the Virgin router to DMZ on my router. Thank you so much!!

[@vinnumarto3505]

@@felipecardoso7117 hi I am trying to do the same can you help here . Know your ip showing vpn server but the other website which I am trying to access is getting my actual Wi-Fi router location

[@felipecardoso7117]

@@vinnumarto3505 To be honest, I gave up from OpenVPN, and I'm doing trough L2TP Server, I managed to make it work! But if you still want to, you have to go to your ISP router and set your tp-link as DMZ or the ISP router as bridge mode. This will allow your ISP router to foward the necessary ports to the VPN request hit your TP Link. Let me know if I can help you with anything else.

[@vinnumarto3505]

@@felipecardoso7117 Thanks for the reply ..I am trying to access my office laptop pretending to be in home location for that i need wifi hotspot with vpn (since I am in another country) to office laptop , the office laptop using okta verify for location finding , I have tried express vpn hot spot its showing home IP in knowyourIp address however okta verify gettting actual source IP .Please help you know any Idea or setup

[@sphtd]

Hi, i have ER605 and i dont have options OpenVPN in user. Do i need this?

[@TechnologyMoments]

Yes, we've heard that for version 1 users. Check if there is a firmware update. If after update it is not displaying, you may also have v1 hardware.

[@sphtd]

@@TechnologyMoments i dont remember but i suppose it is v2 but i will check it in monday

[@mph8759]

Unfortunately I’m not able to get Internet connectivity. I’m on ER605 also

[@TechnologyMoments]

Hi, it may be very probable you have a fixed IP address, and you may need to test before with dynamic IP. Then set again to fixed IP and add another DNS different than your router. It as a matter of DNS settings, and you can tell as you can ping an external IP address, and such ping will continue without problem after connecting.

[@mph8759]

@@TechnologyMoments im using DHCP (on the ER605) for all clients. ISP gives me fixed. I followed your instructions but still can’t access WAN through VPN, only LANs. I saw on some forums that this seems to be an issue with the ER605. Any ideas?

[@mph8759]

I have now retired this router and replaced it with an OPNSense box

[@Dan23jazper]

Why i cant access to my local network?

[@TechnologyMoments]

It is probable you need to create the proper firewall exceptions: kzbin.info/www/bejne/rojYZpZ_lrV_oc0