How to set up a VPN Server/VPN Client on your TL-WR1502X travel router

In the OpenVPN connection, the home network can act as a server, and the remote device can access the server through the router which acts as an OpenVPN Server gateway.

To use the VPN feature, you should enable OpenVPN Server on your router, and install and run VPN client software on the remote device. Please follow the steps below to set up an OpenVPN connection.

1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.
2. Go to Advanced > VPN Server > OpenVPN, and tick the Enable box of OpenVPN.

3. Enter the necessary information and save the settings.

• Service Type: Select the service type (communication protocol) for OpenVPN: UDP/TCP.
• Service Port: Enter a VPN service port to which a VPN device connect, and the port number should be between 1024 and 65535.
• VPN Subnet/Netmask: Enter the range of IP addresses that can be leased to the device by the OpenVPN server.
• Client Access: Select your client access type. Select Home Network Only if you only want the remote device to access your home network. Select Internet and Home Network if you also want the remote device to access internet through the VPN server.

4. Click GENERATE to get a new certificate.

5. Click EXPORT to save the OpenVPN configuration file which will be used by the remote device to access your router.

6. Click SAVE.
7. Now you need to configure OpenVPN connection on your remote device.

1. Visit https://openvpn.net/community-downloads/ to download the OpenVPN software, and install it on your device where you want to run the OpenVPN client utility.

Note: You need to install the OpenVPN client utility on each device that you plan to apply the VPN function to access your travel router. Mobile devices should download a third-party app from Google Play or Apple App Store.

2. After the installation, copy the file exported from your router to the OpenVPN client utility’s “config” folder (for example, C:\Program Files\OpenVPN\config on Windows). The path depends on where the OpenVPN client utility is installed.
3. Run the OpenVPN client utility and connect it to OpenVPN Server.

PPTP VPN Server is used to create a PPTP VPN connection for remote devices to access your home network.

To use the VPN feature, you need to set up PPTP VPN Server on your router, and configure the PPTP connection on remote devices.

Please follow the steps below to set up a PPTP VPN connection.

1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.
2. Go to Advanced > VPN Server > PPTP, and tick the Enable box of PPTP.

3. Enter the necessary information and save the settings.

• Client IP Address: Enter the range of IP addresses (up to 10) that can be leased to the devices by the PPTP VPN server.
• Allow NetBIOS passthrough: Enable it to allow your VPN device to access your Samba server using NetBIOS name.
• Allow unencrypted connections: Enable it to allow unencrypted connections to your VPN server.
• Account List: Add the PPTP VPN connection account (user name and password) for the remote device. You can create up to 16 accounts.

4. Now you need to configure PPTP VPN on your remote device. The remote device can use the Windows built-in PPTP software or a third-party PPTP software to connect to PPTP server. Here we use the Windows built-in PPTP software as an example.

1. Go to Start > Control Panel > Network and Internet > Network and Sharing Center.
2. Select Set up a new connection or network.

3. Select Connect to a workplace and click Next.

4. Select Use my Internet connection (VPN).

5. Enter the internet IP address of the router in the Internet address field. Click Create .

6. Enter the User name and Password you have set for the PPTP VPN server on your router, and click Connect.

7. Click Connect Now when the VPN connection is ready to use.

L2TP/IPSec VPN Server is used to create a L2TP/IPSec VPN connection for remote devices to access your home network.

To use the VPN feature, you need to set up L2TP/IPSec VPN Server on your router, and configure the L2TP/IPSec connection on remote devices.

Please follow the steps below to set up the L2TP/IPSec VPN connection.

1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.
2. Go to Advanced > VPN Server > L2TP/IPSec, and tick the Enable box of L2TP/IPSec.

3. Enter the necessary information and save the settings.

• Client IP Address: Enter the range of IP addresses (up to 10) that can be leased to the devices by the L2TP/IPSec VPN server.
• IPSec Encryption/ IPSec Pre-Shared Key: Keep IPSec Encryption as Encrypted and create an IPSec Pre-Shared Key.
• Account List: Add the L2TP/IPSec VPN connection account (user name and password) for the remote device. You can create up to 16 accounts.

4. Now you need to configure L2TP/IPSec on your remote device. The remote device can use the Windows or Mac OS built-in L2TP/IPSec software or a third-party L2TP/IPSec software to connect to L2TP/IPSec Server. Here we use the Windows built-in L2TP/IPSec software as an example.

1. Go to Start > Control Panel > Network and Internet > Network and Sharing Center.
2. Select Set up a new connection or network.

3. Select Connect to a workplace and click Next.

4. Select Use my Internet connection (VPN).

5. Enter the internet IP address of the router in the Internet address field. Select Don’t connect now; just set it up so I can connect later. Then click Next.

6. Enter the User name and Password you have set for the L2TP/IPSec VPN server on your router, and click Connect.

7. Click Close when the VPN connection is ready to use.

8. Go to Network and Sharing Center and click Change Adapter Settings.

9. Find the VPN connection you created, then double-click it.

10. Enter the Username and Password you have set for the L2TP/IPSec VPN server on your router, and click Properties.

11. Switch to the Security tab, select Layer 2 Tunneling Protocol with IPsec (L2TP/IPSec) and click Advanced settings.

12. Select Use preshared key for authentication and enter the IPSec Pre-Shared Key you have set for the L2TP/IPSec VPN server on your router. Then click OK.

Done! Click Connect to start VPN connection.

WireGuard VPN Server is used to create a Wire Guard VPN connection for remote devices to access your home network.

1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.
2. Go to Advanced > VPN Server > WireGuard, and tick the Enable box of WireGuard.

3. View the default WireGuard VPN settings, as shown above. The parameters are automatically filled in, and do NOT change them unless necessary.

• Client Access: Select your client access type. Select Home Network Only if you only want the remote device to access your home network. Select Internet and Home Network if you also want the remote device to access internet through the VPN server.
• (Optional) Click Advanced Settings to display more settings. If DNS is turned on, the router will become the DNS server of the VPN client that establishes a connection with it. Change the Persistent Keepalive time (25 seconds by default) to send out heartbeat regularly, you can also click RENEW KEY to update the private key and public key.

4. In Account List, click Add to create an account.

• Username: Give a name to this account.
• Address: Enter the address of the virtual interface assigned to this account. Do NOT change it unless necessary.
• Allowed IPs (client): Traffic sent from the WireGard VPN client to the allowed IPs (client) will be transmitted through the tunnel. By default, all network traffic from clients will be transmitted through the tunnel. Do NOT change it unless necessary.
• Allowed IPs (server): Traffic sent from the WireGard VPN server to the allowed IPs (server) will be transmitted through the tunnel. Do NOT change it unless necessary.
• Pre-shared key: Enable or disable pre-shared key.

5. Click SAVE, then a window pops up as below.

6. Done. Now connect to the WireGuard server.

• For mobile phones, download WireGuard App from Google Play or Apple Store, then use the App to scan the QR Code to connect to this server.
• For other devices (e.g. TP-Link WireGuard VPN client), Click EXPORT to save the WireGuard VPN configuration file which will be used by the remote device to access your router.

VPN Client is used to create VPN connections for devices in your home network to access a remote VPN server.

To use the VPN feature, simply configure a VPN connection and choose your desired devices on your Deco router, then these devices can access the remote VPN server. Please follow the steps below:

1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.
2. Go to Advanced > VPN Client and enable it.

3. Add VPN servers in the Server List, and enable the one you need.

• 1. In the Server List section, click Add.
  2. Specify a description for the VPN, and choose the VPN type.
  3. Enter the VPN information provided by your VPN provider.
• OpenVPN: Enter the VPN username and password if required by your VPN provider, otherwise simply leave them empty. Then import the configuration file provided by your VPN provider.

You can also select Import the CA file or edit the . ovpn file manually, then upload the CA file or manually configure the settings.

• PPTP: Enter the VPN server address (for example: 218.18.1.73) and the VPN username and password provided by your VPN provider.

• L2TP/IPSec VPN: Enter the VPN server address (for example: 218.18.1.73), VPN username and password, and IPSec pre-shared key provided by your VPN provider.

• WireGuard VPN: Give a description, and click BROWSE to import the WireGuard VPN server configuration. Then you will see the detailed parameters. Do NOT change the parameters unless necessary.

1. 4. Save the settings.
   5. Specify a description for the VPN, and choose the VPN type.

Enter t

4. In Device List, add VPN clients that will access the VPN server you have configured.

Done! Now the devices you specified can access the VPN server you enabled.

Get to know more details of each function and configuration please go to Download Center to download the manual of your product.