Instructions for Use

Note:
• Before you enable VPN Server, we recommend you congure Dynamic DNS Service (recommended) or assign a static IP address for router’s WA
with internet.
• The rst time you congure the OpenVPN Server, you may need toGeneratea certicate before you enable the VPN Server.
3. Select theService Type(communication protocol) for OpenVPN Server: UDP, TCP.
4. Enter aVPN Service Portto which a VPN device connects, and the port number should be between 1024 and 65535. Please write down the Se
5. In theVPN Subnet/Netmaskelds, enter the range of IP addresses that can be leased to the device by the OpenVPN server.
6. Select yourClient Accesstype. SelectHome Network Onlyif you only want the remote device to access your home network; selectInternet an
remote device to access internet through the VPN Server.
7. ClickSave.
8. ClickGenerateto get a new certicate.
Note:
If you have already generated one, please skip this step, or clickGenerateto update the certicate.
9. ClickExportto save the OpenVPN conguration le which will be used by the remote device to access your router.
10. Set up Virtual Server/Port Forwarding for Router 2 on Modem Router/Router 1, please refer to
Port forwarding: how to set up virtual server on TP-Link Wi-Fi Routers (tp-link.com)
Note:
1. Please make sure the Internal Port is the same as the VPN Service Port you wrote down before.
2. Enter and write down the External Port.
11. Go to the Management Interface of the Modem Router/Router1, and write down the WAN IP address.
12. Right-Click the OpenVPN conguration le, open it with the Notepad.
Please modify following two characters:
1. Modify the remote address to the WAN IP address of the Modem Router/Router1 you wrote down in Step 11.
2. Modify the Port number to External Port you set for the Router2 in Step 10.