A VPN client is a terminal device or software used to establish a secure connection between a user and a VPN server.
What is VPN?
VPN (Virtual Private Network) helps you access internet resources remotely, securely, and privately with tunneling technology. The VPN encrypts your personal information and hides your IP address from the public when you use the internet. To the users of the VPN, it will look like the computers were directly connected to each other.
Common Network Topology:

Here we take WR2100 as a demonstration.
Step 1: Open a web browser and go to http://cudy.net or http://192.168.10.1.
For details, please refer to How to log into the web interface of Cudy Router?
Step 2: Click on General Settings->VPN and enable VPN.

Default Rule: Allow all devices or Ban all devices to use VPN.
To specify the device, click on System Status-> Devices->VPN to enable or disable it.

Site-to-Site: Allow the devices in two sites to communicate with each other.
VPN Policy:
Disable: No additional setting.
VPN kill switch: Turn off the Internet connectivity when the VPN connection is lost.
Domain: Specify which domains go through the VPN and which don't
Remote Subnet: Specify what subnets go through the VPN and which don't
Step 3: In the Protocol list, select the one you need and enter the VPN information provided by your VPN provider.
• PPTP VPN
Enter the VPN server address (for example, 113.92.73.163) and the VPN Username and password provided by your VPN provider.

• L2TP VPN
Enter the VPN server address (for example 113.92.73.163), VPN username and password, and pre-shared key provided by your VPN provider.
If your VPN provider also provides you the tunnel IP which binds with the account, you can enable the Use custom tunnel IP option.

• OpenVPN
Click on Browser to import the configuration file provided by your VPN provider.


• WireGuard VPN
Click on Browser to import the configuration file provided by your VPN provider.

The Interface and Peer will synchronize automatically from your VPN Provider's CONF File.

• ZeroTier Slave
Type in the ZeroTier Network ID and Gateway provided by the ZeroTier Master. The Gateway can be found on VPN Status part.


Related Article: How to remote connect Cudy Router via Zerotier?-Cudy Home
138 comments
Hi, I downloaded and installed the latest firmware found on your website (LT500E V1.0 hardware) 2.3.13-20250221-111145
I’ve already tried all the options, including the site-to-site option. It doesn’t change anything at all.
@Dear Arturo,
1. Please update the firmware of LT500 to the latest firmware version.
2. Please try to enable the site-to-site option.
Then check if the problem fixed?
“Good morning, I created LAN1 with an OpenVPN server on an OpenWrt router and LAN2 with a Cudy LT500 OpenVPN client router. The VPN (TUN) closes but I can’t ping LAN2 from LAN1. From within Cudy, I can ping devices on LAN1 and those addressed to the VPN network via the VPN interface, but from the Cudy LAN interface, however, I can’t. From LAN1, I can ping the server-side VPN interface but not the Cudy-side VPN interface or the Cudy-side LAN subnet. Basically, the VPN isn’t redirected to the Cudy LAN. I’ve tried every possible Cudy setting to no avail. It seems there’s a missing network connecting the VPN to the LAN. Do you have any suggestions? Is there any way to access it via SSH to manually add the missing routes? If so, how? Thanks.”
Good morning, I created LAN1 with an OpenVPN server on an OpenWrt router and LAN2 with a Cudy LT500 OpenVPN client router. The VPN (TUN) closes but I can’t ping LAN2 from LAN1. From within Cudy, I can ping devices on LAN1 and those addressed to the VPN network via the VPN interface, but from the Cudy LAN interface, however, I can’t. From LAN1, I can ping the server-side VPN interface but not the Cudy-side VPN interface or the Cudy-side LAN subnet. Basically, the VPN isn’t redirected to the Cudy LAN. I’ve tried every possible Cudy setting to no avail. It seems there’s a missing network connecting the VPN to the LAN. Do you have any suggestions? Is there any way to access it via SSH to manually add the missing routes? If so, how? Thanks.
@Dear TEN,
OK, I will reply you via email.
“Current firmware (at least in WISP) frequently drops WireGuard then leaks IP as discussed (and also reported by others) on what today is https://www.cudy.com/de-de/blogs/faq/wie-stelle-ich-den-vpn-client-ein-um-auf-einen-remote-vpn-server-zugreifen?page=4#Comments-589223624948 – as requested I’ve sent all details to sam at cudy dot com some 6 weeks ago and been asked to wait, but never received confirmation, follow-up or word of a fix”
Current firmware (at least in WISP) frequently drops WireGuard then leaks IP as discussed (and also reported by others) on what today is https://www.cudy.com/de-de/blogs/faq/wie-stelle-ich-den-vpn-client-ein-um-auf-einen-remote-vpn-server-zugreifen?page=4#Comments-589223624948 – as requested I’ve sent all details to sam at cudy dot com some 6 weeks ago and been asked to wait, but never received confirmation, follow-up or word of a fix.