Upload OpenVPN profile to router
The H685 and H820 routers support OpenVPN via a built-in client. Rather than configuring individual fields, you can upload a complete .ovpn configuration file provided by your VPN provider or generated from your own OpenVPN server. The router applies the full configuration in one step.
Prerequisites
- An OpenVPN configuration file (
.ovpnor.cfg) from your VPN provider or server - The router has an active internet connection — see Configure APN Settings
- Access to the router's web interface — see How to Access the Router's Web Interface
Step 1 — Create a new OpenVPN instance
Navigate to Services > VPN and click the OpenVPN tab. The page lists any existing OpenVPN instances.
At the bottom of the page, enter a name for your new instance in the New instance name field — for example custom_config. Leave the type as Client configuration for an ether. Click Add.
| enabled | Started | Start/Stop | Tun/Tap | Port | Protocol | ||
| custom_config | No | no | start | tun | 1194 | udp | Edit Delete |
Step 2 — Add the fullcfg field
Click Edit on the instance you created. The instance configuration page opens.
Click the -- Additional Field -- dropdown and select fullcfg from the bottom of the list, then click Add. This adds a file upload field that accepts a complete OpenVPN configuration file.
| enabled | |
| tun_ipv6 | |
| nobind | |
| client | |
| client_to_client |
Select fullcfg from the dropdown — it is the last item in the list.
Step 3 — Upload the configuration file and enable
After adding the fullcfg field, click Choose file and select your .ovpn configuration file. Tick the enabled checkbox. Click Save.
| enabled | ✓ |
| tun_ipv6 | |
| nobind | |
| client | |
| client_to_client | |
| fullcfg | Choose file No file chosen |
Step 4 — Start the instance
Return to the overview page (Services > VPN > OpenVPN). Your instance now shows Yes under the enabled column. Click start to begin the VPN connection.
Once started, the Started column changes to yes. The VPN tunnel is now active.
Verifying the connection
Navigate to Status > Overview and check the network interfaces section for an active tun interface with an assigned IP address. This confirms the OpenVPN tunnel is established.
To check from SSH:
# Check the tunnel interface exists
ifconfig tun0
# View OpenVPN log output
logread | grep openvpn
Troubleshooting
| Issue | Resolution |
|---|---|
| Instance does not start | Check the configuration file is a valid .ovpn file. Review the system log at Status > System Log for OpenVPN error messages. Common causes: missing certificates or keys that should be embedded in the config file, or an unreachable remote server address. |
| Instance starts but no traffic passes | Check that the remote VPN server is reachable on the configured port. If your .ovpn file references external certificate or key files, these must be uploaded separately — consider embedding them inline in the configuration file instead. |
| fullcfg option not visible | Ensure you clicked -- Additional Field -- and scrolled to the bottom of the dropdown list. fullcfg is the last entry. |