Upload OpenVPN profile to router

The H685 and H820 routers support OpenVPN via a built-in client. Rather than configuring individual fields, you can upload a complete .ovpn configuration file provided by your VPN provider or generated from your own OpenVPN server. The router applies the full configuration in one step.


Prerequisites


Step 1 — Create a new OpenVPN instance

Navigate to Services > VPN and click the OpenVPN tab. The page lists any existing OpenVPN instances.

At the bottom of the page, enter a name for your new instance in the New instance name field — for example custom_config. Leave the type as Client configuration for an ether. Click Add.

OpenVPN
☰  OpenVPN instances
  enabled Started Start/Stop Tun/Tap Port Protocol  
custom_config No no start tun 1194 udp Edit Delete

Step 2 — Add the fullcfg field

Click Edit on the instance you created. The instance configuration page opens.

Click the -- Additional Field -- dropdown and select fullcfg from the bottom of the list, then click Add. This adds a file upload field that accepts a complete OpenVPN configuration file.

Overview » Instance "custom_config"
Switch to advanced configuration »
☰  Basic Settings
enabled  
tun_ipv6  
nobind  
client  
client_to_client  
-- Additional Field --   Add
Save

Select fullcfg from the dropdown — it is the last item in the list.


Step 3 — Upload the configuration file and enable

After adding the fullcfg field, click Choose file and select your .ovpn configuration file. Tick the enabled checkbox. Click Save.

☰  Basic Settings
enabled
tun_ipv6  
nobind  
client  
client_to_client  
fullcfg Choose file No file chosen
Save

Step 4 — Start the instance

Return to the overview page (Services > VPN > OpenVPN). Your instance now shows Yes under the enabled column. Click start to begin the VPN connection.

Once started, the Started column changes to yes. The VPN tunnel is now active.


Verifying the connection

Navigate to Status > Overview and check the network interfaces section for an active tun interface with an assigned IP address. This confirms the OpenVPN tunnel is established.

To check from SSH:

# Check the tunnel interface exists
ifconfig tun0

# View OpenVPN log output
logread | grep openvpn

Troubleshooting

Issue Resolution
Instance does not start Check the configuration file is a valid .ovpn file. Review the system log at Status > System Log for OpenVPN error messages. Common causes: missing certificates or keys that should be embedded in the config file, or an unreachable remote server address.
Instance starts but no traffic passes Check that the remote VPN server is reachable on the configured port. If your .ovpn file references external certificate or key files, these must be uploaded separately — consider embedding them inline in the configuration file instead.
fullcfg option not visible Ensure you clicked -- Additional Field -- and scrolled to the bottom of the dropdown list. fullcfg is the last entry.