How to set up WireGuard VPN on a TP-Link Wireless Router

User Scenario

When a secure, fast, and modern VPN protocol is needed to remotely access the internal network based on the UDP protocol, WireGuard VPN uses modern encryption algorithms to improve work efficiency.

How to Set up an Archer AX55 as a WireGuard VPN Server

The WireGuard VPN Server function is used to create a WireGuard VPN connection for remote devices to securely access your home network.

Step 1. Set up WireGuard VPN Server on Your Router

1. Visit http://tplinkwifi.net and log in with your TP-Link ID or the password you set for the router.

2. Go to Advanced → VPN Server → WireGuard, and tick the Enable box next to WireGuard.

3. View the default WireGuard VPN settings, as shown above. The parameters are automatically filled in, and do NOT change them unless necessary.

4. Select your Client Access type.

1. Select Home Network Only if you only want the remote device to access your home network.
2. Select Internet and Home Network if you also want the remote device to access the internet through the VPN Server.

5. (Optional) Click Advanced Settings to display more settings. If DNS is turned on, the router will become the DNS server of the VPN client that establishes a connection with it. Change the Persistent Keepalive time (25 seconds by default) to send out heartbeat regularly. You can also click RENEW KEY to update the private key and public key.

Step 2. Create accounts that can be used by remote clients to connect to the VPN server.

1. Locate the Account List section. Click Add to create an account.

2. Specify a name for this account.

3. Enter the address of the virtual interface assigned to this account. Do NOT change it unless necessary.

4. Traffic sent from the WireGuard VPN client to the allowed IPs (client) will be transmitted through the tunnel. By default, all network traffic from clients will be transmitted through the tunnel. Do NOT change it unless necessary.

5. Traffic sent from the WireGuard VPN server to the allowed IPs (server) will be transmitted through the tunnel. Do NOT change it unless necessary.

6. Enable or disable the Pre-shared key.

7. Click SAVE.

Note: Only one account can be used by one WireGuard VPN client at a time to connect to the WireGuard VPN server.

8. Connect to the WireGuard server:

On the Account List, click   in the Modify column of the corresponding account.

• For mobile phones, download the WireGuard App from Google Play or Apple Store, then use the App to scan the QR Code to connect to this server.

• For other devices (e.g. TP-Link WireGuard VPN client), click EXPORT to save the WireGuard VPN configuration file which will be used by the remote device to access your router.

9. On the Account List, you can click the button to modify the VPN server settings, connect to the server, or delete the account.

How to Configure WireGuard VPN Client on the Archer AX55

Please follow the steps below to set up and configure the WireGuard VPN Client on the Archer AX55:

1. Download the configuration file from your VPN provider.

2. We currently support some basic parameters of the WireGuard configuration file, as shown in Pic 1 below. If the configuration file you are using includes IPv6 address, MTU or many more parameters, (example in Pic 2), please edit the file and delete those parameters, then save the file.

3. Visit http://tplinkwifi.net and log in with your TP-Link ID or the password you set for the router. Go to Advanced → VPN Client.

4. Enable VPN Client and click SAVE.

5. Click the Add button in the upper-right of the Server List, specify a description for the VPN, and choose WireGuard as the VPN Type, click BROWSE to import the configuration file provided by your VPN provider, then click SAVE.

6. Check and enable the WireGuard entry in the Server List, add and enable the VPN Access for the devices that will use the VPN function.

Note: It is NOT suggested to use the same configuration file on multiple VPN Clients simultaneously. You could import the configuration file into your mobile phones as well as the router, but you are not allowed to connect to the VPN server simultaneously based on WireGuard protocols.