TP-Link SafeStream Multi-WAN VPN routers are a powerful VPN solution for small-medium businesses. Thanks to seamless integration with TP-Link's Omada SDN platform, SafeStream routers can also be managed centrally and remotely - with a practical smartphone app for on the go.
In this guide, we show you step-by-step how to set up a VPN connection to your SafeStream router using IPsec IKEv2 VPN to get secure remote access on your Mac, iPhone or iPad.
Set up IKEv2 IPsec VPN for TP-Link SafeStream
Create a new IPsec policy
In the user interface of your TP-Link SafeStream router, go to VPN > IPsec > IPsec Policy, where you can begin setting up IPsec VPN for your device.
Click Add to get started:

Add a new IPsec policy
Enter your VPN settings
You will now see a setup window for your new VPN policy. Fill out the initial fields with your connection settings:
- Policy Name: Choose an identifiable name for your VPN tunnel
- Mode: Select Client-to-LAN from the dropdown
- WAN: Select WAN from the dropdown
- Local Subnet: Enter the LAN address range you will be using for the VPN
- Pre-shared Key: Here you can enter a secure password for your VPN connection which you will need to enter later in the VPN client in order to connect

Add your initial VPN settings
Add advanced VPN settings
Click Advanced Settings to expand the next section. Then, fill out the phase one settings as demonstrated:
- IKE Protocol Version: Select IKEv2
- Negotiation Mode: Change to Responder Mode, then enter your IP address pool for the VPN
- Local ID Type: Choose IP address
- Remote ID Type: Choose IP address

Add your phase 1 settings
Finally, under Phase 2, click OK to save your new IKEv2 IPSec VPN tunnel:

Save your new VPN
You will now be able to view your new IPsec VPN policy in the overview:

Configured IPsec policy
Connect to TP-Link SafeStream IKEv2 VPN on Mac, iPhone, iPad
In order to connect to your new VPN, you will need a VPN client. VPN Tracker is the best VPN client for Mac and iOS and is fully compatible with TP-Link SafeStream IPSec VPN (IKEv1 & IKEv2) – providing you secure remote access to your SafeStream on Mac, iPhone, and iPad.
Get connected to TP-Link SafeStream VPN in 3 steps:
- Open the VPN Tracker connection creator for TP-Link SafeStream and create a free account
- Open the configuration and enter your device's public (WAN) IP address or hostname
- Finally, under Authentication, add the Pre-shared Key you configured on your device, and save your connection in your account via secure end-to-end encryption for access on all your devices
Your VPN Tracker benefits
- Secure remote access to your company network, home office, and Smart Home - all in one app
- Use your own VPN gateway
-
Ready-made profiles for 300+ VPN devices
- Configuration wizard for a smooth and fast setup
- For Mac, iPhone, iPad
- Discover all features
