Asus AC66U Merlin - OpenVPN CLIENT Connection refused

[Nixel]

Hello all,

I recently upgraded to Merlin's firmware, specifically because I wanted to setup VPN rules, to route only some traffic through VPN.

I have a private VPN server on a VPSCheap.net VPS server. It's an OpenVPN Access Server one, with web ui.

I was using it for a while with stock firmware, I had to change TLS to 1.0 instead of 1.2 for it to work.

After changing firmware I can't connect to it anymore, I tried turning TLS back on and to 1.2, no luck so far. Here's what I get:

Jul 6 00:00:45 disk_monitor: Got SIGALRM...
Jul 6 00:03:21 openvpn[2056]: WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Jul 6 00:03:21 openvpn[2056]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jul 6 00:03:21 openvpn[2056]: TCP/UDP: Preserving recently used remote address: [AF_INET]192.243.108.120:1194
Jul 6 00:03:21 openvpn[2056]: Socket Buffers: R=[87380->200000] S=[16384->200000]
Jul 6 00:03:21 openvpn[2056]: Attempting to establish TCP connection with [AF_INET]192.243.108.120:1194 [nonblock]
Jul 6 00:03:22 openvpn[2056]: TCP: connect to [AF_INET]XXX.XXX.XXX.XXX:1194 failed: Connection refused
Jul 6 00:03:22 openvpn[2056]: SIGUSR1[connection failed(soft),init_instance] received, process restarting
Jul 6 00:03:22 openvpn[2056]: Restart pause, 300 second(s)

Thanks for you time and attention!

 

[kfp]

Port 1194 is typically used with UDP, but it seems like you’re trying TCP from the logs. Are you sure you got the protocol + port right?

 

[Nixel]

All settings were downloaded from the server, in ovpn file. Not sure if protocol was there though

 

[Nixel]

Port 1194 is typically used with UDP, but it seems like you’re trying TCP from the logs. Are you sure you got the protocol + port right?

Yay! Thanks, indeed I had to manually change protocol from TCP to UDP in my router's settings. Works now I was sure that protocol was loaded from ovpn file. Should've checked.

Also great that Merlin supports ovpn 1.2 and encryption, those did not work with stock firmware.