How to set up WireGuard VPN on TP-Link wireless router (2024)

When the user needs a secure, fast, and modern VPN protocol to remotely access the internal network. Based on the UDP protocol, WireGuard VPN uses modern encryption algorithms to improve work efficiency.

WireGuard VPN Server is used to create a Wire Guard VPN connection for remote devices to access your home network.

Step 1. Set up WireGuard VPN Server on Your Router

1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.

2. Go to Advanced > VPN Server > WireGuard, and tick the Enable box of WireGuard.

3. View the default WireGuard VPN settings, as shown above. The parameters are automatically filled in, and do NOT change them unless necessary.

4. Select your Client Access type. Select Home Network Only if you only want the remote device to access your home network; select Internet and Home Network if you also want the remote device to access the internet through the VPN Server.

5. (Optional) Click Advanced Settings to display more settings. If DNS is turned on, the router will become the DNS server of the VPN client that establishes a connection with it. Change the Persistent Keepalive time (25 seconds by default) to send out heartbeat regularly, you can also click RENEW KEY to update the private key and public key.

Step 2. Create accounts that can be used by remote clients to connect to the VPN server.

1. Locate the Account List section. Click Add to create an account.

2. Specify a name for this account.

3. Enter the address of the virtual interface assigned to this account. Do NOT change it unless necessary.

4. Traffic sent from the WireGuard VPN client to the allowed IPs (client) will be transmitted through the tunnel. By default, all network traffic from clients will be transmitted through the tunnel. Do NOT change it unless necessary.

5. Traffic sent from the WireGuard VPN server to the allowed IPs (server) will be transmitted through the tunnel. Do NOT change it unless necessary.

6. Enable or disable the Pre-shared key.

7. Click SAVE.

Note: One account can only be used by one WireGuard VPN client at the same time to connect to the WireGuard VPN server.

8. Connect to the WireGuard server:

On the Account List, click in the Modify column of the corresponding account.

• For mobile phones, download WireGuard App from Google Play or Apple Store, then use the App to scan the QR Code to connect to this server.

• For other devices (e.g. TP-Link WireGuard VPN client), click EXPORT to save the WireGuard VPN configuration file which will be used by the remote device to access your router.

9. On the account list, you can click the button to modify the VPN server settings, connect to the server, or delete the account.

Please follow the steps below to set up and configure the WireGuard VPN Client on the Archer AX55:

1. Download the configuration file from your VPN provider.

2. We currently support some basic parameters of the WireGuard configuration file as Pic 1. If the configuration file you are using includes IPv6 address, MTU or many more (example as Pic 2), please edit the file and delete those parameters, then save the file.

3. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. Go to Advanced > VPN Client.

4. Enable VPN Client, and click SAVE.

5. Click Add button in the up-right of the Server List, specify a description for the VPN, and choose WireGuard as the VPN Type, click BROWSE to import the configuration file provided by your VPN provider, then click SAVE.

6. Check and enable the WireGuard in the Server List, add and enable the VPN Access for the devices that will use the VPN function.

Note: It's NOT suggested to use the same configuration file on multiple VPN Clients simultaneously. You could import the configuration file into your mobile phones as well as the router, but you are not allowed to connect to the VPN server simultaneously based on WireGuard protocols.