Skip to main content

Set up IKEv2 VPN for TP Link Safestream Router

By GabrielleAugust 4, 2023August 8th, 2023No Comments

TP-Link SafeStream Multi-WAN VPN routers are a powerful VPN solution for small-medium businesses. Thanks to seamless integration with TP-Link's Omada SDN platform, SafeStream routers can also be managed centrally and remotely - with a practical smartphone app for on the go. 

In this guide, we show you step-by-step how to set up a VPN connection to your SafeStream router using IPsec IKEv2 VPN to get secure remote access on your Mac, iPhone or iPad.

Tech specs: TP-Link TL-R605 Router

Series: TP-Link SafeStream Omada Gigabit VPN router

Model: TL-ER605

Recommended for: Small businesses

Supported VPN Protocols: IPsec (IKEv1 + IKEv2), PPTP, L2TP, OpenVPN

Max no. of VPN users: 20 (IPsec), 16 (OpenVPN)

WiFi: No

Device Status: Active

TP Link R605 router

Set up IKEv2 IPsec VPN for TP-Link SafeStream

Create a new IPsec policy

In the user interface of your TP-Link SafeStream router, go to VPN > IPsec > IPsec Policy, where you can begin setting up IPsec VPN for your device.

Click Add to get started:

Add a new IPsec policy


Enter your VPN settings

You will now see a setup window for your new VPN policy. Fill out the initial fields with your connection settings:

  • Policy Name: Choose an identifiable name for your VPN tunnel
  • Mode: Select Client-to-LAN from the dropdown
  • WAN: Select WAN from the dropdown
  • Local Subnet: Enter the LAN address range you will be using for the VPN
  • Pre-shared Key: Here you can enter a secure password for your VPN connection which you will need to enter later in the VPN client in order to connect

Add your initial VPN settings


Add advanced VPN settings

Click Advanced Settings to expand the next section. Then, fill out the phase one settings as demonstrated:

  • IKE Protocol Version: Select IKEv2
  • Negotiation Mode: Change to Responder Mode, then enter your IP address pool for the VPN
  • Local ID Type: Choose IP address
  • Remote ID Type: Choose IP address

Add your phase 1 settings


Finally, under Phase 2, click OK to save your new IKEv2 IPSec VPN tunnel:

Save your new VPN


You will now be able to view your new IPsec VPN policy in the overview:

Configured IPsec policy

Connect to TP-Link SafeStream IKEv2 VPN on Mac, iPhone, iPad

In order to connect to your new VPN, you will need a VPN client. VPN Tracker is the best VPN client for Mac and iOS and is fully compatible with TP-Link SafeStream IPSec VPN (IKEv1 & IKEv2) – providing you secure remote access to your SafeStream on Mac, iPhone, and iPad.

Get connected to TP-Link SafeStream VPN in 3 steps:

  • Open the VPN Tracker connection creator for TP-Link SafeStream and create a free account
  • Open the configuration and enter your device's public (WAN) IP address or hostname
  • Finally, under Authentication, add the Pre-shared Key you configured on your device, and save your connection in your account via secure end-to-end encryption for access on all your devices

Your VPN Tracker benefits

  • Secure remote access to your company network, home office, and Smart Home - all in one app
  • Use your own VPN gateway
  • Ready-made profiles for 300+ VPN devices
  • Configuration wizard for a smooth and fast setup
  • For Mac, iPhone, iPad
  • Discover all features
connect to IPsec vpn on iOS
0 0 votes
Article Rating
Notify of
Inline Feedback
View all comments
Privacy-Settings / Datenschutz-Einstellungen
Feedback or improvements? Let us know!x