How to establish L2TP Server by SMB VPN Router using the new GUI

TL-R600VPN( V4 ) , TL-ER6120( V2 V3 ) , TL-ER6020( V2 )
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device, and check either the Datasheet or the firmware section for the latest improvements added to your product. Please note that product availability varies by region, and certain models may not be available in your region.
Application Scenario
Taking an example for TL-R600VPN v4 to explain how to establish L2TP server by VPN router using the new GUI. The connection topology is as follows:
We configure TL-R600VPN v4 as L2TP server.
Configuration Steps
Step1:
Connect TL-R600VPN v4 as topology to make it access Internet successfully. Record its WAN1 port IP address 77.121.21.20, which would be filled in VPN client. The LAN ports subnet is 192.168.0.1/24.
Step2:
This step we create VPN IP address pool. When VPN client is connected to L2TP server successfully, server will assign a virtual IP address to client. This IP address comes from VPN IP address pool. Go to Preferences-->VPN IP Pool, Click Add.
On the popup page we name IP Pool Name as L2TP, configure Starting IP Address as 192.168.0.200, Ending IP Address as 192.168.0.250. Then click OK. So that VPN address pool is 192.168.0.200-192.168.0.250, which is in the same subnet with LAN ports subnet.
Note:
VPN IP address pool can be in the same subnet with LAN IP, and also can be different. When it is different from LAN IP subnet, we need to configure Multi-Nets NAT if VPN client want to take VPN Server as a proxy gateway. See more on How to access the internet by using VPN Server as a proxy gateway?.
Step3:
This step we enable L2TP. Go to VPN-->L2TP-->L2TP Server, click Add. On the popup page, choose WAN port as WAN1. Specify IPSec Encryption as Encrypted. (Here we select Encrypted, which means L2TP is encrypted by IPsec) And set the Pre-shared Key as 123456 for IPsec encryption. Then click OK.
Step4:
This step we create account name and password for L2TP VPN client. Go to VPN--->Users, click Add. Also there will be a popup page for us to set. Here we specify Account Name as tplink, Password as tplink. Select Protocol as L2TP. Configure Local IP Address as 192.168.0.199 (Local IP Address is local VPN virtual network IP address. It’s suggested that we configure it in the same subnet with Lan IP). On the below options, we specify IP Address Pool as L2TP we created above, DNS Address as 8.8.8.8, Network Mode as Client-to-LAN, Max Connections as 5. Then click OK.
Till now, we have finished configuring L2TP Server in the router.
As for client side configuration on remote PC, please refer to this FAQ: How to configure PPTP/L2TP client on remote PC?.
Looking for More
Fick du svar på din fråga?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
Tack.
We appreciate your feedback.
Click here to contact TP-Link technical support.

TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
SESSION, JSESSIONID, accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Zendesk
OptanonConsent, __cf_bm, __cfruid, _cfuvid, _help_center_session, _pendo___sg__.<container-id>, _pendo_meta.<container-id>, _pendo_visitorId.<container-id>, _zendesk_authenticated, _zendesk_cookie, _zendesk_session, _zendesk_shared_session, ajs_anonymous_id, cf_clearance
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au