How to build a VPN tunnel with TD-W9970 (new logo)

TD-W9970( V2 V3 V4 )
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device, and check either the Datasheet or the firmware section for the latest improvements added to your product. Please note that product availability varies by region, and certain models may not be available in your region.
1. Log into web management page of the modem router.
How to login to the web management page of TD-W9970 (new logo)?
2. Go to Network → IPSec VPN, you can Add/Remove or Enable/Disable the IPSec tunnel connections on the screen as shown.
This section will guide you to configure a VPN tunnel between two modem routers. The topology is as follows.
Note: You could also use other VPN Routers to set VPN tunnels with the modem router. It supports up to 10 VPN tunnels simultaneously.
Click Add New Connection and then you will enter the screen shown below.
Enter the Remote IPSec Gateway Address (URL) in the box which is the public WAN IP or domain name of the remote VPN server endpoint. (For example: Input 219.134.112.247 in Device1, Input 219.134.112.246 in Device2).
Enter Tunnel access from local IP addresses: Choose Subnet if you want the whole LAN to join the VPN network, or else choose Single Address if you want a single IP to join the VPN network.
IP Address for VPN: Enter the IP address of your LAN. (For example: Input 192.168.1.1 in Device1, input 192.168.2.1 in Device2)
IP Subnetmask: Enter the Subnetmask of your LAN. ( For example: Input 255.255.255.0 in both Device1 and Device2)
Tunnel access from remote IP addresses: Choose Subnet if you want the Remote Whole LAN to join the VPN network, or else choose Single Address if you want single IP to join the VPN network.
IP Address for VPN: Enter the IP address of the Remote LAN. (For example: Input 192.168.2.1 in Device1,Input 192.168.1.1 in Device2)
IP Subnetmask: Enter the subnetmask of the remote LAN. ( For example: Input 255.255.255.0 in both Device1 and Device2)
Key Exchange Method: Select Auto (IKE) or Manual.
If you select Manual as Key Exchange Method, the screen will display as follows:
If you select Auto as Key Exchange Method, the screen will display as follows:
We recommend you leave the Advanced Settings as default value.
Note: If you want to change the default settings of Advanced Settings, please make sure that both VPN server endpoints use the same Encryption Algorithm, Integrity Algorithm, Diffie-Hellman Group and Key Life time in both phase1 and phase2.
After complete the basic settings and click Save/Apply in both Device1 and Device2, PCs in LAN1 could communicate with PCs in remote LAN2. (For example: You can ping the IP address of PC2 which is 192.168.2.100 in PC1)
Note: The VPN Servers Endpoint from both ends must use the same pre-shared keys and Perfect Forward Secrecy settings.
Get to know more details of each function and configuration please go to Download Center to download the manual of your product.
¿Es útil esta pregunta frecuente?
Sus comentarios nos ayudan a mejorar este sitio.
¿Cuál es tu preocupación con este artículo?
- Insatisfecho con el producto
- Muy complicado
- Titulo confuso
- Eso no aplica a mi
- Demasiado vago
- Otro
Gracias
Agradecemos sus comentarios.
Haga clic aquí para comunicarse con el soporte técnico de TP-Link.
Productos recomendados
Este sitio utiliza cookies. Si continúa navegando por el sitio, acepta el uso que hacemos de las cookies. No volver a mostrar Más información .
Your Privacy Choices
Este sitio utiliza cookies. Si continúa navegando por el sitio, acepta el uso que hacemos de las cookies. No volver a mostrar Más información .
TP-Link
accepted_local_switcher, tp_privacy_banner, tp_privacy_base, tp_privacy_marketing, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Las cookies de análisis nos permiten analizar sus actividades en nuestro sitio web para mejorar y adaptar la funcionalidad de nuestro sitio web.
Nuestros socios publicitarios pueden configurar las cookies de marketing a través de nuestro sitio web para crear un perfil de sus intereses y mostrarle anuncios relevantes en otros sitios web.
Google Analytics y Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads y DoubleClick
test_cookie, _gcl_au
Meta Pixel
_fbp
Crazy Egg
cebsp_, _ce.s, _ce.clock_data, _ce.clock_event, cebs
lidc, AnalyticsSyncHistory, UserMatchHistory, bcookie, li_sugr, ln_or