Adding a VPN Server to a TP-Link Deco Unit

Deco VPN Server

If you are following along with our Build your Homelab series, you might start to wonder how we will be able to access our services when we are not at home. Although we have already set up NGINX and Dynamic DNS to access a service when not at home, there is a blanket solution as well, and in this case it is setting up a VPN server. We will look at setting up a VPN server as a service inside of our Homelab in a future article, but for today, we are going to use the included VPN service of our Router.

We are using a TP-Link Deco BE65 (read our full TP-Link Deco BE65 review here) but the steps should be the same for most Deco units.


Step 1: Setting up the Server

We have looked previously at what a VPN is and how it works and today we are going to use a (Free) VPN service to install a service on our Deco unit. The installation is very straightforward. First, open your Deco Smartphone app and go to More, then tap VPN. You will be given two options, one for VPN Client and one for VPN Server. A VPN client will connect this Deco unit to a VPN Server elsewhere so that your home internet connection is secured. The VPN Server option will allow up to create a new VPN Server on the Deco so that other clients can connect to it. The description also tells us that we will be able to see our home network:

As a VPN Server, Deco allows you to access devices in the Deco network while away from home

We want to add a new VPN server, so tap on it. The next screen will show you all the VPN Servers already active. Tap Add VPN Server or the PLUS in the top right corner.

The next screen will have all the details of the VPN server. We just need to fill in a name, and select whether clients can access just the devices or the devices and internet connection. Once completed, you will be able to download the configuration file for this VPN connection. This file contains the SSH Keys for the connection, so no username and password is needed to be set up. (The Deco app does not allow screenshots of this page, so we used one from TP-Link.com, your window might look different)

Select more > VPN for the main settings

Select VPN Server

Screenshot_20250324_113022_Deco

Select Add VPN Server

Add VPN Dertails

Enter a name, the rest can be left default. – Image Credit: TP-LInk.com


Step 2: Connect from client devices.

To connect to your VPN network, your devices will need a app installed. For windows, you can use the app at https://openvpn.net/community-downloads/ Look for the following section and download the latest OpenVPN Connect app:

Download the file, and double click it to install. Once installed, it will be running in your task bar, so right click on the Icon and select Import. Browse to the file downloaded by the Deco app and Import the config. You will then be able to connect to your VPN server.

Import settings

The new icon will be in the taskbar next to your clock

For Android or iOS, go to the respective app store and search for OpenVPN Connect.

AndroidiOS
https://play.google.com/store/apps/details?id=net.openvpn.openvpnhttps://itunes.apple.com/us/app/openvpn-connect/id590379981?mt=8

Once installed, open the app and again import the settings file that was exported by Deco. You will be able to connect to your home network from anywhere in the world!

OpenVPN Connection
OpenVPN Connection

Conlusion

In conclusion, leveraging the built-in VPN server functionality of your TP-Link Deco router (or similar device) provides a straightforward and effective way to access your home network remotely. By following the simple steps outlined, you can establish a secure connection, granting you access to your homelab services and devices from anywhere. This method eliminates the need for complex configurations or additional software installations on your home server, streamlining the process. Whether you’re using a Windows, Android, or iOS device, the OpenVPN Connect app, paired with the configuration file generated by your Deco, enables seamless and secure remote access. This solution is a valuable addition to any homelab setup, ensuring that your services are always within reach, regardless of your location.