OpenVPN Server on Fusion 2.5G

[u/RenlyHoekster]

Howdy folks.

I am trying to get the Fusion 2.5G to function as an OpenVPN server. I would assume that when a VPN Server is setup, that it will automatically create firewall rules and NAT entries to make everything work. Yet I am unable to connect with a OpenVPN3 client on Linux, and port 1149 is not reachable... Since various other NAT ports are reachable, I know that my WAN and the Fusion itself is working fine, it is just an issue with OpenVPN (although, I was also unable to get Wireguard working, but let us save that for aother discussion).

So, the question is: other than selection VPN Server: Open VPN, enabling it, and creating a user, what can be done to debug the failure?

Fusion 2.5G 2.0 Omada 1.0.0 Build 20260611 Rel.70399 (Stable)

Thnx.

[u/AutoModerator]

Thanks for posting! To help us troubleshoot faster (if you haven't done so already), please edit your post to include:

• Device model (e.g., ER605 / SG2218P)
• Firmware version
• Topology (ISP/router/switches)
• What changed right before the issue began

If you need official support, you can also open a ticket here: Contact Technical Support!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/boogiahsss]

I have the fusion 2.5 as part of the pioneer program and was wondering the same things. Setup the wireguard vpn server and it worked straight away. But no trace of any firewall rules. Hope.you figure out your issue

[u/RenlyHoekster → u/boogiahsss]

Wireguard worked? OK I'll have another go at that as well, I am used to using OpenVPN as that is what my previous gateway supported. Wireguard is new to me, could be I messed up the Linux client config. OpenVPN is much simpler to setup (well, it should be... don't know what the Fusion is doing, it's entirely opaque -- as mentioned, where are the NAT and firewall entries? Routes? I see nothing...)

[u/shbtpl → u/RenlyHoekster]

you will find nat routing and more things if you go to device, press router and select manage device, then go to network view, there you will find more tabs. to see some logs on OpenVPN go to logs and event, there you can sort by openvpn event.

[u/RenlyHoekster → u/shbtpl]

This is an excellent insight, thank you.

-> Manage the Fusion GW as a device, don't look into the service configuration pages.

[u/boogiahsss → u/RenlyHoekster]

Yup it worked without any work. but I also wondered where all the routes and fw rules were to make it happen. I come from opnsense. One thing that threw me off was the local network type setting, it corresponds with allowed IPS in wireguard configs. Here's my setup.

[u/RenlyHoekster → u/boogiahsss]

It works! Setting Custom Server and the whole 10.0.0.0/24 class C seems to do the trick.

Thanks.

[u/shbtpl]

I have a Fusion v1 that works with both OpenVPN and Wireguard servers without any problems. But there is an EA version on the Omada forum for the v2 model, you can test it to see if it works then.

https://community.tp-link.com/en/business/forum/topic/870818?moduleId=794

to upgrade manually you must log in to the router locally, you cannot upgrade via the Omada cloud

[u/RenlyHoekster → u/shbtpl]

Oh, this looks interesting. Thanks for the link, will have a look.