How to configure L2TP VPN Server on TP-Link Routers?

New models of TP-Link routers come with L2TP VPN server functions. You can follow this tutorial to configure and turn it on.

1. Get a public IP address for your router. In order for your router to provide public VPN service, it must have a public and stable IP address. For example, your router's public IP address is: 113.97.237.50.

You also need to get the DNS IP address from your ISP, or a public DNS IP like 1.1.1.1 provided by Cloudflare.

2. Access the router Web portal with http://192.168.1.1, assuming it's LAN interface is configured with 192.168.1.1.

3. Verify the router's WAN interface is working with IP address of 113.97.237.5.

4. Verify the router's LAN interface is working with IP address of 192.168.1.1.

5. Open "VPN > L2TP > L2TP Server" settings. Click "+" to add a VPN service.

Service Interface: WAN1
                   (or WAN2, if you have 2 Internet connections)
IPsec Encryption:  Encrypted
Pre-shared Key:    retnecIYF
Status:            Enable

6. Open "VPN > Users > IP Address Pool" settings. Click "+" to add a pool.

Pool Name:   HomeUsers
Starting IP: 192.168.2.201
End IP:      192.168.2.254
             (Assuming 192.168.2.* is not used on LAN)

7. Open "VPN > Users > Users" settings. Click "+" to add a user.

User Name:       fyi
Password:        DontTellAnyOne
Service Type:    L2TP
Local IP:        192.168.2.1
IP Address Pool: Home-Users

DNS Address:     1.1.1.1 (or your ISP's DNS)
Tunnel:          Client-to-LAN
Max connections: 3

Your VPN server is ready with the following connection information:

Server IP:       113.97.237.5
Service Type:    L2TP
IPsec Enabled:   Yes
Pre-shared Key:  retnecIYF
User Name:       fyi
Password:        DontTellAnyOne

You can get similar configuration examples at https://www.tp-link.com/us/support/faq/444/.

⇒ L2TP VPN Client Configuration on macOS

⇐ What Is VPN (Virtual Private Network)

⇑ VPN (Virtual Private Network)

⇑⇑ Internet Connection - Frequently Asked Questions