Set up IKEv2 VPN for TP Link Safestream Router

TP-Link SafeStream Multi-WAN VPN routers are a powerful VPN solution for small-medium businesses. Thanks to seamless integration with TP-Link's Omada SDN platform, SafeStream routers can also be managed centrally and remotely - with a practical smartphone app for on the go. 

In this guide, we show you step-by-step how to set up a VPN connection to your SafeStream router using IPsec IKEv2 VPN to get secure remote access on your Mac, iPhone or iPad.

Tech specs: TP-Link TL-R605 Router

Series: TP-Link SafeStream Omada Gigabit VPN router

Model: TL-ER605

Recommended for: Small businesses

Supported VPN Protocols: IPsec (IKEv1 + IKEv2), PPTP, L2TP, OpenVPN

Max no. of VPN users: 20 (IPsec), 16 (OpenVPN)

WiFi: No

Device Status: Active

Set up IKEv2 IPsec VPN for TP-Link SafeStream

Create a new IPsec policy

In the user interface of your TP-Link SafeStream router, go to VPN > IPsec > IPsec Policy, where you can begin setting up IPsec VPN for your device.

Click Add to get started:

Add a new IPsec policy

Enter your VPN settings

You will now see a setup window for your new VPN policy. Fill out the initial fields with your connection settings:

• Policy Name: Choose an identifiable name for your VPN tunnel
• Mode: Select Client-to-LAN from the dropdown
• WAN: Select WAN from the dropdown
• Local Subnet: Enter the LAN address range you will be using for the VPN
• Pre-shared Key: Here you can enter a secure password for your VPN connection which you will need to enter later in the VPN client in order to connect

Add your initial VPN settings

Add advanced VPN settings

Click Advanced Settings to expand the next section. Then, fill out the phase one settings as demonstrated:

• IKE Protocol Version: Select IKEv2
• Negotiation Mode: Change to Responder Mode, then enter your IP address pool for the VPN
• Local ID Type: Choose IP address
• Remote ID Type: Choose IP address

Add your phase 1 settings

Finally, under Phase 2, click OK to save your new IKEv2 IPSec VPN tunnel:

Save your new VPN

You will now be able to view your new IPsec VPN policy in the overview:

Configured IPsec policy

Connect to TP-Link SafeStream IKEv2 VPN on Mac, iPhone, iPad

In order to connect to your new VPN, you will need a VPN client. VPN Tracker is the best VPN client for Mac and iOS and is fully compatible with TP-Link SafeStream IPSec VPN (IKEv1 & IKEv2) – providing you secure remote access to your SafeStream on Mac, iPhone, and iPad.

Get connected to TP-Link SafeStream VPN in 3 steps:

• Open the VPN Tracker connection creator for TP-Link SafeStream and create a free account
• Open the configuration and enter your device's public (WAN) IP address or hostname
• Finally, under Authentication, add the Pre-shared Key you configured on your device, and save your connection in your account via secure end-to-end encryption for access on all your devices