NETGEAR separates three VPN cases on its Nighthawk routers. VPN passthrough lets a VPN client on a device connect through the router, and NETGEAR has an article on troubleshooting passthrough for home routers. The Nighthawk's own VPN service, with a Windows client route, lets you reach your home network or internet service from elsewhere. The third is the VPN client software itself, and NETGEAR's troubleshooting says a software firewall such as Norton, ZoneAlarm or the Windows firewall can stop the client starting a tunnel, so switch it off to test,
The checks in more detail
and on Windows the TAP-Windows Adapter connection must be renamed NETGEAR-VPN or the tunnel fails. If a VPN will not connect, check the router is in router mode, since the VPN service is unavailable in access point mode, that Armor or Circle is not blocking it, that the router has a public WAN address and that the ports are reachable, since double NAT breaks inbound VPN. Update firmware, and test the same VPN on another network to see whether the fault is the VPN provider or your setup.
A VPN on a device also bypasses parental filters. Pick the VPN approach by purpose: passthrough for a client on a device, the router VPN to reach home from outside. Keep credentials strong, since a home VPN is reachable from the internet. If you only need to reach one device at home, such as a network drive, check whether its maker offers a secure remote-access service, which avoids exposing a VPN port at all.
A VPN that works on cellular data but not on your home network points at the home network, so compare the same device on both and note which one fails. Try the VPN with the router's own address as a test target first, then a public site, so you learn whether the tunnel reaches home or the wider internet before you start changing settings. Keep the VPN client updated, since old clients are a common reason for a tunnel that used to work and now does not.
Differential
Likely causes of “NETGEAR Nighthawk routers VPN client or server will not connect”, and how to tell them apart
- 1
A software firewall
What separates it The VPN client cannot start because a software firewall on the computer blocks it
How to confirm Disable the software firewall as a test, and see whether the VPN client can then start
- 2
The TAP adapter name
What separates it The tunnel fails on Windows because the TAP adapter does not have the expected name
How to confirm Rename the TAP adapter to NETGEAR-VPN in the Windows network settings, and try again
- 3
AP mode
What separates it The VPN service is unavailable because the router is running in AP mode
How to confirm Use router mode, since the VPN service is not available while the router is in AP mode
- 4
Double NAT
What separates it The inbound VPN fails because there is a double NAT in front of the router
How to confirm Fix the double NAT first, since inbound connections cannot pass through two routers
- 5
Armor or Circle
What separates it The VPN is blocked because Armor or Circle filters the traffic on the network
How to confirm Turn Armor or Circle off as a test, and see whether the VPN then connects
Before you touch a setting
Record this first — changing settings destroys the evidence
- The type of VPN and the client software that you use
- The exact error message that the VPN client shows
- Which mode the router is in, router mode or AP mode
- Whether the VPN works when you try it on another network
Try in this order
0 of 7 completedIdentify the VPN
ReversibleIdentify the kind of VPN you use, which is passthrough, a client on a device, or the router's VPN.
Update
ReversibleUpdate the VPN client and the router firmware, since old versions can fail to connect properly.
Disable software firewalls
ReversibleDisable software firewalls on the device as a test, and see whether the VPN then works.
Rename the TAP adapter
ReversibleRename the TAP adapter to NETGEAR-VPN on Windows, since the router expects that name, and then test again to see whether it helped.
Check the mode
ReversibleCheck the mode, since the router's own VPN service needs router mode and not AP mode.
Check double NAT
ReversibleCheck for double NAT, since an inbound VPN needs a public WAN address on the router.
Test elsewhere
ReversibleTest on another network, such as a phone hotspot, and compare the result with your home network.
Model-specific
What is true of this model and not of its siblings
- Router VPN
- Not every Nighthawk model has the router VPN service.
- Passthrough
- Passthrough works on NETGEAR home routers.
- Other models this page answers
- These steps also fit the Nighthawk RAX120 router, Nighthawk CAX80 cable modem router.
Stop boundary
When this stops being a self-service repair
- !If the VPN works elsewhere but not at home, check NAT and ports
- !If passthrough fails, contact the VPN provider, since their software may need a change
- !If the router VPN will not enable, contact NETGEAR support
Evidence ledger
Sources behind this answer
VPN passthrough.
Firewalls and the TAP adapter.
Windows client setup.
Router VPN service.
The company and its products.
Exact questions
Common questions
What is VPN passthrough?+
A client on a device connects through the router.
Does AP mode disable VPN?+
In AP mode the VPN service is unavailable, so use router mode if you need it.
What is the TAP rename?+
Rename the TAP adapter to NETGEAR-VPN on Windows, since the router expects that name.
Can a VPN bypass filters?+
Yes, a VPN can bypass filters, since it hides the traffic from the router.