The Nighthawk RAX50 can host a VPN so that you reach your home network from elsewhere, and the usual faults are a server that is not enabled, a router that does not have a reachable address from outside, or a client that is set up wrongly. Open the router's page at routerlogin.net, go to Advanced, Advanced Setup, VPN Service, and enable the OpenVPN server, choosing UDP or TCP and a port. The router then offers a configuration file to download for your phone or laptop, which you import into an OpenVPN client.
The checks in more detail
For the router to be reachable the internet connection must have a public address, so first check that the WAN address shown on the router's status page is not a private one. If your provider uses a shared address, a VPN into the home will not work whichever way you set it up. The usual second problem is a changing address. Home internet addresses change, and the VPN configuration holds the address that was current when you downloaded it. Set up a dynamic DNS name in the router, under Advanced, Dynamic DNS, with a service that keeps a name pointing at your address, and use that name in the configuration.
Check that no other device in front of the router, such as the provider's modem in router mode, blocks the incoming port; in that case put the modem in bridge mode, or forward the port from the modem to the RAX50. If the client connects but cannot reach home devices or the web, check the settings that decide which traffic goes through the VPN: the option to access the local network and the option to route all traffic. Check the client's time and the certificate's date, which matter to OpenVPN.
A client on a network that blocks the VPN port, such as a hotel, may need a different port, such as 443 over TCP. If the router is used as a VPN client to a commercial service, the RAX50 does not offer that natively in the same menu, and a service's app on each device is the simpler way. Update the router's firmware, restart and test from a phone on mobile data. Contact Netgear if the VPN server option is missing, with the serial number.
Differential
Likely causes of “NETGEAR Nighthawk RAX50 router VPN client or server will not connect”, and how to tell them apart
- 1
The VPN server is not enabled
What separates it The client cannot connect
How to confirm Enable OpenVPN under VPN Service
- 2
A private or shared WAN address
What separates it Nothing connects from outside
How to confirm Ask the provider for a public address or use another method
- 3
An address that changed
What separates it It worked, then stopped
How to confirm Set up dynamic DNS and use its name
- 4
A modem or hotel network blocking the port
What separates it Connection times out
How to confirm Bridge the modem or change the port
- 5
Client settings
What separates it Connected but no access
How to confirm Check local network access and routing
Before you touch a setting
Record this first — changing settings destroys the evidence
- The WAN address shown
- Whether the server is enabled
- The protocol and port
- The client's network
Try in this order
0 of 6 completedEnable the VPN server
ReversibleAdvanced, VPN Service.
Check the WAN address
ReversibleIt must be public.
Set up dynamic DNS
ReversibleAnd use its name in the file.
Forward or bridge
ReversibleIf a modem blocks the port.
Import the file
ReversibleInto the client.
Test on mobile data
ReversibleFrom outside.
Model-specific
What is true of this model and not of its siblings
- Public address
- Required for a VPN into the home.
- Dynamic DNS
- Keeps the name pointing at your address.
Stop boundary
When this stops being a self-service repair
- !If the VPN server option is missing, contact Netgear with the serial number
- !Ask the provider about public addressing
- !Update the firmware
Evidence ledger
Sources behind this answer
Exact questions
Common questions
Does the RAX50 host a VPN?+
Yes, an OpenVPN server.
Why does it stop working after a while?+
Your address may have changed.
Why can't I reach home devices?+
Local network access may be off in the client.
Does it act as a VPN client?+
Not natively in the same way.