Last updated:

Get ExpressVPN on your router.
Need a VPN for your router?
Get ExpressVPN Now
Refer a friend to use ExpressVPN.
Love ExpressVPN? Want a free month?
Refer a Friend Now

This tutorial will show you how to set up a VPN on your TP-Link router with the L2TP protocol, including models using the old firmware.

Not all ExpressVPN locations may be available for manually configured connections.

Important: L2TP does not offer any encryption. It should only be used for anonymization or for changing locations. If you are located in a country with a high level of internet censorship, you are recommended to use the ExpressVPN app for a more stable VPN connection.

The steps in this guide were tested on the TL-R600VPN and AC1750 Archer C7 models. The L2TP setup may not work for all TP-Link router models.

Additionally, some TP-Link routers only allow IP addresses instead of ExpressVPN server names. ExpressVPN cannot provide IP addresses for setup on those routers. If you encounter difficulties with your specific TP-Link router model, contact the ExpressVPN Support Team for immediate assistance.

Note: The router used in the video is the TP-Link AC1750 Archer C7.

Before you begin, you may wish to make a note of your default internet settings. This will help you revert to your original internet settings when the VPN is not required.

Jump to…

1. Find your ExpressVPN account credentials
2. Configure your TP-Link router with the VPN
Disconnect from the VPN server

1. Find your ExpressVPN account credentials

Go to the ExpressVPN setup page. If prompted, enter your ExpressVPN credentials and click Sign In.

Enter your account credentials, then click "Sign In."

Enter the verification code that is sent to your email.

On the right, select L2TP/IPsec.

Click "L2TP/IPsec."

This will show you your username, password, and a list of server addresses around the world.

This will show you your username, password, and a list of server addresses around the world.

Keep this browser window open. You will need this information for the setup later.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

2. Configure your TP-Link router with the VPN

Each TP-Link router firmware version has its own user interface.

To find out which user interface your firmware version is associated with, enter 192.168.0.1 in your web browser and log in with your username and password. Then refer to the appropriate section which matches your user interface below.

Note: If your TP-Link router runs on an older firmware version such as TL-WR940N (c 3.16.9 Build 150312 Rel.59597n), refer to these steps to set up on older firmware.

In your browser’s address bar, enter the IP address for the router admin panel. By default, this is 192.168.0.1. (If your router’s IP address was changed in the past, and you cannot remember it, you can find it in your device’s settings.)

Log in with your router’s username and password. (By default, both are admin.)

At the top of the page, click the Advanced tab.

In the sidebar, go to Network > Internet.

Select "Internet."

Set Internet Connection Type to L2TP.

Enter the following information:

  • Username: Paste the manual configuration username you found earlier.
  • Password: Paste the manual configuration password you found earlier.
  • VPN Server IP/Domain Name: Paste the manual configuration server address you found earlier.

Set Secondary Connection to Dynamic IP.

Set the Secondary Connection to "Dynamic IP."

Leave MTU Size at 1460 (the default).

Set Connection Mode to Manually.

Set Max Idle Time to 0 minutes.

Click Connect.

Click "Connect" and "Save."

Click Save to save all your settings.

Important: You will need to wait for the connection to be completed. After hitting “Connect,” scroll up and check that IP Address and Primary Address do NOT display 0.0.0.0. You will only be able to access the internet when both fields are not showing 0.0.0.0.

Configure your TP-Link router (older firmware) with the VPN

In your browser’s address bar, enter the IP address for the router admin panel. By default, this is 192.168.0.1. (If your router IP address was changed in the past and you cannot remember it, you can find it in your device’s settings.)

Log in with your router’s username and password. (By default, both are admin.)

In the sidebar, click Network > WAN.

Set WAN Connection Type to L2TP/Russia L2TP.

Set the WAN Connection Type to "L2TP/Russia L2TP".

Enter the following information:

  • Username: Paste the manual configuration username you found earlier.
  • Password: Paste the manual configuration password you found earlier.
  • Confirm Password: Paste the same manual configuration password again.
  • Server IP Address/Name: Paste the manual configuration server address you found earlier.

Set Secondary Connection to Dynamic IP.

Set the Secondary Connection to "Dynamic IP."

Leave MTU Size at 1460 (the default).

Set Max Idle time to 0 minutes.

Set Connection Mode to Connect Manually.

Set the Connection Mode to "Connect Manually."

Click Connect and Save.

Click "Connect" and "Save."

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Disconnect from the VPN server

To disconnect from the VPN server, click on the Advanced tab.

In the sidebar, go to Network > Internet.

Near the bottom of the page, click Disconnect.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Was this article helpful?

We're sorry to hear that. Let us know how we can improve.

Which router model do you need help with?

Examples: Linksys WRT1200AC, Asus RT-AC56R

A member of our Support Team will follow up on your issue.