How to set up OpenVPN Server on Deco APP

Deco X20 , Deco BE65-5G , Deco X68 , Deco WM9000 , Deco PX50 , Deco BE95 , Deco BE75 , Deco BE5000 , Deco BE65 Pro , Deco W8100 , Deco BE25-Outdoor , Deco XE70 Pro , Deco BE11000 , Deco XE75 , Deco X95 , Deco X55 Pro , Deco BE25 , Deco X50 , Deco X75 , Deco X55 , Deco BE85 , Deco X50-PoE , Deco BE65 , Deco XE75 Pro , Deco XE200 , Deco X20-Outdoor , Deco WB10800 , Deco X50-Outdoor , Deco X80 , Deco X60
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device, and check either the Datasheet or the firmware section for the latest improvements added to your product. Please note that product availability varies by region, and certain models may not be available in your region.
OpenVPN is an open-source virtual private network (VPN) software that utilizes SSL/TLS protocols for encrypted communication. It provides secure remote access and site-to-site connections and is widely used for protecting network communication and access control.
Please follow the steps below to set up the OpenVPN Server on Deco APP.
1. Launch the Deco app. Go to MORE > Advanced > VPN Server, and tap Add VPN Server.
2. We recommend enabling DDNS (Dynamic Domain Name System) to bind your WAN IP to a domain name. This can prevent issues with your WAN IP changing, which might otherwise cause VPN connection problems.
Please refer to this link: https://www.tp-link.com/support/faq/3481/
3. Select OpenVPN, enter the necessary information and save the settings.
- Description: Enter a name for this VPN.
- Service Type: Select the service type (communication protocol) for OpenVPN: UDP/TCP.
- VPN Port: Enter a VPN service port to which a VPN device connect, and the port number should be between 1024 and 65535.
- VPN Subnet/Netmask: Enter the range of IP addresses that can be leased to the device by the OpenVPN server.
- Client Access: Select your client access type. Select Home Network Only if you only want the remote device to access your home network. Select Internet and Home Network if you also want the remote device to access internet through the VPN server.
Note: Deco/router does not support UDP's NAT Loopback. If you configure a VPN server on deco using a UDP-based VPN protocol, and try to connect to the server from the local network, you will not be able to connect. If there is a need to connect to the server from the LAN side, Select TCP in Service Type.
4. Tap the VPN you have saved and tap Export Config File to save the OpenVPN configuration file which will be used by the remote device to access your router.
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.

TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Livechat
__livechat, __lc2_cid, __lc2_cst, __lc_cid, __lc_cst, CASID
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au
Meta Pixel
_fbp
Crazy Egg
cebsp_, _ce.s, _ce.clock_data, _ce.clock_event, cebs
lidc, AnalyticsSyncHistory, UserMatchHistory, bcookie, li_sugr, ln_or