Ask "where is my VPN?" and three honest answers compete: it's the app showing a connect button, it's the file you downloaded during setup, and it's the account you signed up for. All three are right, because a working VPN setup is three parts doing three jobs — and half of everyday VPN confusion comes from asking one part a question that belongs to another.
This article sorts the parts out. Once they're distinct in your head, setup instructions read more clearly, troubleshooting gets faster, and questions route themselves to the right place.
The client: the software that runs the connection
The VPN client is the program on your device that actually establishes and maintains the connection — the thing with the connect control, the status indicator, and the prompts. In the documented Lisar setup using OpenVPN Connect, that software is the client: it reads the imported OpenVPN profile and runs the connection on your device.
Client, profile and service are roles, not three required downloads. OpenVPN Connect is a client for the manual OpenVPN route; the Lisar Connect app for Android, iPhone and iPad is another client path, and a compatible operating system can provide the L2TP/IPsec client. The profile supplies connection settings and Lisar manages the account and service. Choose the current device guide.
The profile: the instructions the client follows
The client needs to be told what connection to run, and that's the profile's job. For the OpenVPN Connect setup described here, the profile arrives as a .ovpn file downloaded from your own profile in the Lisar Panel — a real file carrying the profile-specific setup information for how that particular profile connects. The supported flow is the whole handshake between the parts: download the .ovpn file, open OpenVPN Connect, choose Upload File, import and save the profile, and connect.
Because the file carries setup information tied to your profile, it's sensitive setup material with the standing rules this series repeats on purpose: it comes fresh from your own Panel profile per device, and it never travels through chats, shared folders, email, or anyone else's hands. The profile is also where "which device" questions live — each device imports its own fresh download, following the guide for that device.
The service layer: the account, the Panel, the plan
The service layer manages your Lisar account, profiles, and plan. The Lisar Panel shows your profiles and their current setup information, while your plan determines which service features apply, including routing features where included. GeoDNS, DNS AdBlock and Custom Exit are available according to plan. The Panel is the source of truth for anything profile-specific: what's current, what your plan includes, what a profile's status is.
The service layer is where management happens — and it's the layer official Lisar support belongs to. Client-software questions have the client maker's documentation; connection-state questions start at the device in front of you; profile and plan questions live in the Panel and with Lisar support.
Three parts, one setup — and better questions
Put together, the model is one sentence: the service layer manages what's yours, the profile carries the instructions, and the client runs them. In the documented OpenVPN Connect flow, these roles meet at each step: Panel to file to client. Other supported setup paths use the settings and software specified in their own guides.
The payoff is diagnostic. "The button says disconnected" is a client-and-device question first. "Is my profile still active, and what does my plan include?" is a Panel question, answered by looking, not guessing. "Which file should this new tablet use?" is a profile question with a standing answer: a fresh download from your own Panel profile, via the supported flow. Asking each part its own question is most of what experienced users do differently — and it's a habit, not expertise.
What the model keeps honest
The three-part picture also keeps expectations where they belong. The client reports connection state — it doesn't decide what any website or service does with your traffic. The profile carries setup instructions — it isn't an access pass to anything. And the service layer manages plans and profiles — it doesn't override networks you don't control or decisions other services make under their own rules.
Each part does its own job well precisely because none of them pretends to do the others' — or anyone else's. That's the shape of the whole setup, and it's the shape the rest of this series keeps returning to.
Frequently asked questions
How do the client, profile, and Lisar service work together? The client runs the connection, the profile supplies its connection settings, and the Lisar service manages your account, profiles, and plan. In the documented OpenVPN Connect setup, download your .ovpn profile from the Lisar Panel and import it into OpenVPN Connect.
What exactly is the .ovpn file for? It's the profile — the instructions the client follows for how your particular profile connects. It downloads fresh from your own profile in the Lisar Panel, for the authorized profile, through the supported flow, and it's treated as sensitive setup material.
Where do I check what my plan includes or whether my profile is active? The Lisar Panel — it's the source of truth for anything profile-specific, including plan features where included. GeoDNS, DNS AdBlock and Custom Exit are available according to plan.
Who do I ask when something isn't working? Route the question to its part: connection state starts at the client and device in front of you; profile and plan questions live in the Panel and with official Lisar support; the client software itself has its maker's documentation.
Does the client decide what websites or services do with my connection? No — the client runs the connection and reports its state. What any service does remains that service's decision under its own rules; no part of the setup changes that.
Related guidance: VPN Terms Glossary: Profile, Client, DNS, Exit, and Routing and What Is an OVPN File? How to Open and Use It.