Menu
What's new
By:
Filters Better Search

Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. S

    Because typing WPA keys on a smartphone usually sucks

    Hello Very good idea, qr code can also be useful for exporting ipsec vpn credentials, or ssh credentials, same as the wiregard export configuration system.
  2. S

    Wireguard Session Manager - Discussion thread (CLOSED/EXPIRED Oct 2021 use http://www.snbforums.com/threads/session-manager-discussion-2nd-thread.75129/)

    RT-AC86U firmwareAsuswrt-Merlin 384.17 my post-mount script !/bin/sh swapon /tmp/mnt/250/myswap.swp # Swap file created by amtm . /jffs/addons/diversion/mount-entware.div # Added by Diversion /jffs/addons/wireguard/wg_manager.sh init "" & # WireGuard Manager
  3. S

    Wireguard Session Manager - Discussion thread (CLOSED/EXPIRED Oct 2021 use http://www.snbforums.com/threads/session-manager-discussion-2nd-thread.75129/)

    Hello Mr @Martineau For update I still have the same reboot problem, my wireguard server is active, but if I connect my road warrior client no download, no internet access, no lan access. I have to launch wgm and select option 6 to restart the wireguard server and then it works fine. Maybe I...
  4. S

    Wireguard Session Manager - Discussion thread (CLOSED/EXPIRED Oct 2021 use http://www.snbforums.com/threads/session-manager-discussion-2nd-thread.75129/)

    Hello Monsieur @Martineau Thank you very much for this useful script, it works fine but I have 2 problems. If you have 2 dns in your client configuration, the qr code import failed on wireguard Android client => so I delete the second dns ip and voila it works with qr scan import. My second...
  5. S

    Asus IPSEC Vpn Server

    on android you can test IKEv2 with strongSwan and check the log if something goes wrong
  6. S

    Asus IPSEC Vpn Server

    ok try to put dns settings in the client, to check if this is a dns issue but you're right via IKEV1 it should work. For IKEV2 did you provide the strongswan.postconf #!/bin/sh CONFIG=$1 source /usr/sbin/helper.sh pc_append ": RSA /jffs/.le/$(nvram get ddns_hostname_x)/domain.key"...
  7. S

    Asus IPSEC Vpn Server

    If your android device showed up connected then your vpn is working... It seems like a DNS issue. Check your LAN settings => DNS Filter => is it enabled? Here is my configuration
  8. S

    Asus IPSEC Vpn Server

    yes we are talking about the same IPSec username and pass that you make in the Asus IPsec VPN section Ok first try to make the native ipsec vpn server work (IKEV1) and then use the same credentials for IKEv2, it should work you need to reboot once after adding the ipsec.postconf file
  9. S

    Asus IPSEC Vpn Server

    Hi ASUS IPSEC IKEv1 XAUTH/PSK server to IKEv1 XAUTH/PSK + IKEv2 EAP server. Both profiles can run parallel. You should to get Let's encrypt certificate for your ddns. Without letsencrypt, you need to generate self-signed certificate and install CA to trusted root CA of each devices. I don't like...
  10. S

    Asus IPSEC Vpn Server

    Hello Odkrys I've tested with rekey=no Now the ikev2 vpn is up after 4 hours on windows 10 native client (Status says connecting... ) vpn is working great but after a while 2 -3 hours, I still can't ping my router ip address, and dns resolution does not work anymore.... Vpn is up but nothing...
  11. S

    Asus IPSEC Vpn Server

    This my Ipsec IKE_V2 server status A picture is better than words, this is my status when I connect from my windows 10 native client As you can see the client status says "Connecting...", and after 2 to 3 hours access time it disconnects by itself With my Android client, the status says...
  12. S

    Asus IPSEC Vpn Server

    It seems related to my windows client, when I check the server connection under Client Status it is connecting... with no PSKRAUTHTIME value. When I use my android client everything looks fine, Client Status is connected and PSKRAUTHTIME shows urs value. I will try to stay connected with my...
  13. S

    Asus IPSEC Vpn Server

    Thank you for sharing your scripts I will try to make an IKE_v2 server only and disable IKE_v1 server which seems useless now. Do you know how to get rid of the 2 - 3 hours limit, my vpn server Ike_v2 disconnects my client every 2 - 3 hours?
  14. S

    Asus IPSEC Vpn Server

    I've added the 3 lines in my ipsec.postconf Thank you very much, it's working now, I can ping my router, access the web interface and all with IKE_v2 server ipsec vpn on. You rock!
  15. S

    Asus IPSEC Vpn Server

    Hello I tried the new IKE_v2 server vpn settings ipsec.postconf and strongswan.postconf with no luck on 384.9 and 384.10_2 same results. The vpn tunnel is connected but I can't ping my own router ip address and there is no dns resolution? I tried on android and windows 10 same results? If I...
  16. S

    Asus IPSEC Vpn Server

    @Odkrys Right now I'm on 384.7 it is rock solid, no reboot since 41 days, your ipsec IKEv2 vpn server works flawlessly. I will try the next firmware 384.10 and the new strongSwan 5.7.2 or maybe 5.8.0 release? Anyway thank you Odkrys for the new settings ipsec.postconf and strongswan.postconf
  17. S

    [Beta] Asuswrt-Merlin 384.10 Beta is now available

    Hello Odkrys Did you check your ipsec IKEv2 script with the 384.10 beta? Does the ipsec vpn IKEv2 server runs fine without modification? Thanks for time
  18. S

    VPN gurus here...

    Easy-peasy to setup thanks to Odkrys
  19. S

    Asus IPSEC Vpn Server

    Hello Ipsec IKEv2 vpn works great on my RT-AC86U with 384.7 firmware. Which firmware version do you have?
  20. S

    VPN gurus here...

    Because there are IOS MacOS and Windows IKEv2 + IKE native clients (strongswan for Android) , IPSEC IKEv2 or IKE is 4x time faster and with less latency than openvpn on my RT-AC86U. IKEv2 with Let's encrypt certificates is easier to deploy to clients, you only need login and password for IKEv2...
Top