OpenVPN between Vigor Router and OpenVPN Access Server

OpenVPN Access Server is a common VPN solution in multiple countries and offers multiple regional connection locations worldwide.
Later model routers such as the Vigor2927 and Vigor2865 running firmware version 4.2.2 now supports dialing out OpenVPN tunnel to OpenVPN Access Server.
This article documents how to create an OpenVPN tunnel between a Vigor Router and the OpenVPN Access Server.

OpenVPN Access Server Configuration

1. First, we have to set up an OpenVPN Access Server. Please refer here

2. When OpenVPN Access Server successfully set up, please log in to client UI, and click "Yourself(user-locked profile)" to download the OpenVPN config file.

Router Configuration

3. Go to VPN and Remote Access >> LAN to LAN, and click an index to create a VPN profile.

• Enable the profile and enter in the Profile Name
• Select Dial-Out as Call Direction and enable Always on
• Select OpenVPN as VPN server type

On Import OpenVPN config file menu item, click on [+] icon.
Click on Choose File and select the OpenVPN config downloaded previously then click Import

After clicking Import, the success message will appear once import is completed. Then, we could go to Local Certificate and Trusted CA Certificate to check the certificate status.

Back to the LAN to LAN profile, we will find out that some settings are automatically configured into the profile, e.g TCP/UDP, server IP, and OpenVPN Advanced Settings.
Please enter in the Username and Password, then click OK.

Go to VPN and Remote Access >> Connection Management, dial the profile and check the VPN status.