How to Configure a TP-Link Omada Gateway as an OpenVPN Client

Note:

ER7206 with firmware 1.2.3 Build 20221104 or above, and ER605 V2 with firmware 2.1.1 Build 20230115 or above support certificate + account. ER605 V1 only supports certificate.

Application scenario

Take the following topology as an example. We will configure Router A as an OpenVPN Client and connect to the OpenVPN Server (Router B).

Case 1. How to configure an Omada gateway as an OpenVPN client in Controller Mode

Step 1. Export the Open VPN configuration file, including username and password, on Router B.

Step 2. Import the file to Router A.

Go to Settings → VPN and click + Create New VPN Policy.

In this example, we will use the following settings:

Name: tplink

Status: Enabled

Purpose: Client to Site VPN

VPN Type: VPN Client-OpenVPN

Mode: Certificate+Account

Username: admin

Password: 12345678

Remote Server: 172.30.30.198

Local Network Type: Network

Click Import to upload the OpenVPN file (filename ends in .ovpn) generated by the OpenVPN server.

Note: Local network is used to specify the subnet of the VPN client to access the VPN.

Step 3. Verify the connectivity of the OpenVPN tunnel.

Go to Insights → VPN status → PPTP/L2TP/OpenVPN Client

Note: If there is a tunnel listed, the VPN has been established successfully.

Case 2. How to configure an Omada gateway as an OpenVPN Client in Standalone Mode

Step 1. Export OpenVPN configuration file on Router A, including username and password.

Step 2. Import the file to Router B.

Go to VPN → OpenVPN and click Add to create a new VPN policy.

In this example, we will use the following settings:

Client Name: tplink

Mode: CA+PWD

Username: admin

Password: 12345678

Service Port: 1194

Remote Server: 172.30.30.198

Local Network: 192.168.2.1

Click the Browse button to upload the OpenVPN file (filename ends in .ovpn) generated by the OpenVPN server, and click Import.

Note: Local network is used to specify the subnet of the VPN client to access VPN.

Step 3. Verify the connectivity of the OpenVPN Tunnel

Go to VPN → OpenVPN → OpenVPN Tunnel

Note: If there is a tunnel listed, the VPN has been established successfully.