Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. eibgrad

    VPN Director Assistance Request

    Well I don't know anything about that script, or how you configured it. But it's extremely likely it is the source of the problem. Because if you were to delete those specific entries, I bet it would work correctly. ip rule del fwmark 0x8000/0xf000 table main ip rule del fwmark 0x1000/0xf000...
  2. eibgrad

    VPN Director Assistance Request

    I did a search on "0x8000/0xf000" and got a hit on the following link. https://www.snbforums.com/threads/domain-based-vpn-routing-script.79264/ Any chance you're using the above script? Or just forgot you installed it?
  3. eibgrad

    VPN Director Assistance Request

    LOL. That's why I had you dump the internals. There's always a risk from a conflict. I have no clue about the source. If the problem persists after a reboot, perhaps a dump of the mangle table might prove useful as well. iptables -t mangle -vnL
  4. eibgrad

    VPN Director Assistance Request

    Well that didn't take long. Something else is marking packets and routing through the OpenVPN client(s) and main routing table, and it has higher priority than the VPN Director. admin@GT-AX11000-25C0:/tmp/home/root# ip rule 0: from all lookup local 150: from all fwmark 0x8000/0xf000...
  5. eibgrad

    VPN Director Assistance Request

    BTW, as an aside, with all the OpenVPN clients configured w/ a kill switch, and all of them routing the *same* local IP network, it makes no sense to have them all active at the same time. The only one that will be actively routed through is OpenVPN client #1. And should its tunnel fail, the...
  6. eibgrad

    VPN Director Assistance Request

    Doesn't seem possible. More likely you're somehow misinterpreting the results. Dump the internals and let's see if anything is amiss. ifconfig brctl show ip route ip route show table ovpnc1 ip route show table ovpnc2 ip route show table ovpnc3 ip route show table ovpnc4 ip route show table...
  7. eibgrad

    Firmware version check for RT-AX58U Merlin support

    NIB = New In Box The RT-AC68U (which I own as well) isn't worth all that much these days, maybe $30-35. IMO, you'd be better off to keep it and install FreshTomato or DD-WRT and use if for other purposes (AP/VAP, guest/iot network, wireless ethernet bridge, repeater, WISP router, etc.).
  8. eibgrad

    Firmware version check for RT-AX58U Merlin support

    Only YOU can judge whether the purchase is worth the risk. It's your money. Perhaps tell them you'll pay the asking price if they provide confirmation about the above. Or else offer a little less to make it worth the risk. Based on current eBay pricing for sold items, the RT-AX58U seems to...
  9. eibgrad

    RT-AC1900P and RT-AX86U Pro - issues with video calls

    What you might want to try is using ssh to access the router and run the top command to monitor the resources being used by the router at any given time. You *might* notice a trend, perhaps some other process(es) that is consuming excessive resources at the same time. By default, the output...
  10. eibgrad

    Firmware version check for RT-AX58U Merlin support

    You might find the following helpful. https://wikidevi.wi-cat.ru/ASUS_RT-AX58U https://wikidevi.wi-cat.ru/ASUS_RT-AX58U_v2 Good news is, both versions are Broadcom. On the whole, it appears to be very minor improvements for V2 (a little faster, an additional core, 2.5Gb WAN, etc.). That's...
  11. eibgrad

    RT-AC1900P and RT-AX86U Pro - issues with video calls

    Have you tried using the QoS features of your ASUS router in order to given your laptop and/or that service higher priority? Because it sure sounds from your description that is the issue.
  12. eibgrad

    Help Needed: Configuring OpenVPN Server and Instant Guard on Asus GT-AX11000 with Technicolor CobraXh Modem Router

    That's why you should be using DDNS to keep a *dynamic* host name updated w/ your primary router's public IP. Go to WAN->DDNS on the ASUS router and configure it w/ www.asus.com and your preferred hostname (provided it isn't already registered by someone else). It will automatically detect...
  13. eibgrad

    Help Needed: Configuring OpenVPN Server and Instant Guard on Asus GT-AX11000 with Technicolor CobraXh Modem Router

    I assume you exported the OpenVPN client config file using the OpenVPN server's export function. That file can be edited w/ any text editor. Just change the remote directive from the private IP (192.168.1.103) to your public IP (or DDNS name if you're using it), save it, and use that modified...
  14. eibgrad

    Help Needed: Configuring OpenVPN Server and Instant Guard on Asus GT-AX11000 with Technicolor CobraXh Modem Router

    Most likely you exported the config file from the GT-AX11000 which is pointing to your *private* IP on the WAN! You need to change the remote directive in that config file to point to the *public* IP (or DDNS if you're using it) of the primary router.
  15. eibgrad

    Import long ovpn file

    I don't know if the limit is so much a function of the import itself, as much as a limit of nvram where the custom configuration must be stored. Really depends on a lot on your router and how much flash is available for these purposes. Regardless, can't you just separate the routes from the...
  16. eibgrad

    DSL-AX82U HTTP/HTTPS Port Forwarding

    One possibility that many ppl overlook is the target machine perhaps having a personal firewall that's preventing the remote access. IOW, the traffic is reaching the target but it's being rejected by the target itself. If problems persist, I suggest dumping the relevant portions of the...
  17. eibgrad

    DSL-AX82U HTTP/HTTPS Port Forwarding

    If you have access to SSH, you can issue the following command to see what if anything is already listening on those ports that may be preventing you from using them yourself. netstat -tupln I realize that some ASUS GUIs have a similar feature (Network Tools->Netstat), but I prefer the command...
  18. eibgrad

    Migrating from OpenVPN to Wiregaurd

    You need better hardware, NOT a change in VPN. It's mighty convenient to use the router, so it's the first choice of most ppl. But your typical consumer-grade router is a poor platform for many services. I had the same problem until I moved it to a SFF PC I threw together out of old spare...
  19. eibgrad

    OpenVPN Client in ASUS causes IP/routing conflict

    Or else change the OpenVPN server's IP network to something other than the default such that it doesn't conflict w/ that of the local OpenVPN client. I realize that's NOT always possible w/ OEM firmware. They sometimes hide such details. Or else it's configurable under another heading, such...
  20. eibgrad

    Clarification and Discussion on Recent 388.8 Changes

    Astrill provides their own implementation of OpenVPN that (afaik) has nothing to do w/ the router's implementation, and thus has nothing to do w/ the discussions here. Any questions about how their Applet works or should to be configured needs to be addressed by Astrill tech support.
Top