A Netgear Nighthawk RAXE500 that gives trouble with a VPN, where a client will not connect, drops or runs slowly, has a question to settle first: is the VPN running on a device behind the router, or on the router? This is a high-end tri-band Wi-Fi 6E router in the AXE11000 class, with 2.4, 5 and 6 gigahertz bands, and its role is to carry traffic. Most home VPN problems are on the device and the VPN service, not the router, but a few router settings matter, and the router can also host or pass through a VPN.
The checks in more detail
If a VPN app on a phone or a computer fails to connect, test it on another network, such as a phone hotspot; if it works there, the home network is blocking or altering the VPN traffic. Make sure the router's firmware is current, since updates fix VPN passthrough bugs. In the router's settings, check that VPN passthrough for IPSec, PPTP and L2TP is enabled where the router offers it, and that a firewall feature or a security service such as a built-in scan is not blocking the VPN's ports;
many VPNs use UDP ports such as 500, 4500 or 1194. Try a different protocol in the VPN app, such as OpenVPN TCP or WireGuard, because some networks handle one better. If the provider uses carrier-grade NAT, a VPN server at home cannot be reached from outside. If the VPN is slow, check that it is not running over the 2.4 gigahertz band or at a weak signal; connect by Ethernet to test, since the encryption adds load.
Lower the MTU in the VPN app if pages half load. If the 6 gigahertz band is used, only Wi-Fi 6E devices see it, so a device may be on a slower band. If you wish to host a VPN at home, the router's software may include a VPN server feature, which needs a public address or dynamic DNS and forwarded ports; check the router's features in the web admin. Quote the RAXE500 serial number to Netgear if the router appears to drop VPN traffic.
Differential
Likely causes of “NETGEAR Nighthawk RAXE500 router VPN client or server will not connect”, and how to tell them apart
- 1
A VPN service or app problem
What separates it It fails on every network
How to confirm Test on another network and update the app
- 2
Passthrough or a security feature blocking
What separates it It works on a hotspot but not at home
How to confirm Enable passthrough; check firewall features
- 3
The wrong protocol
What separates it The connection stalls
How to confirm Try another protocol in the app
- 4
A weak signal or a slow band
What separates it The VPN is slow
How to confirm Test by Ethernet; move closer
- 5
Carrier-grade NAT for hosting a VPN
What separates it A home VPN server cannot be reached
How to confirm Ask the provider for a public address
Before you touch a setting
Record this first — changing settings destroys the evidence
- Where the VPN runs
- Whether it works on a hotspot
- Which protocol it uses
- The router firmware version
Try in this order
0 of 6 completedTest on a hotspot
ReversibleTo isolate the network.
Update the firmware
ReversibleOn the router.
Enable VPN passthrough
ReversibleIf it is offered.
Try another protocol
ReversibleIn the VPN app.
Test by Ethernet
ReversibleFor speed.
Contact Netgear
ReversibleIf the router drops it.
Model-specific
What is true of this model and not of its siblings
- Where the VPN runs
- On a device, or on the router.
- Passthrough
- It lets VPN traffic through the router.
- Protocols
- Each behaves differently on different networks.
- Speed
- Encryption adds load; wired tests are fair.
- Hosting
- It needs a public address and forwarded ports.
- Netgear help
- Quote the RAXE500 serial number.
Stop boundary
When this stops being a self-service repair
- !Do not disable router security to test
- !Do not share VPN credentials
- !Contact the VPN provider for account errors
Evidence ledger
Sources behind this answer
Exact questions
Common questions
Why will my VPN not connect at home?+
The router may be blocking it, or the protocol does not suit.
Is the router the problem?+
Often the VPN service or the device is.
Does 6 GHz matter?+
Only for 6E devices.
Can I host a VPN?+
If the router has a VPN server and the provider gives a public address.
What is MTU?+
A setting that can fix half-loaded pages.