Asus AC87-U AsusWRT-Merlin Firmware:378.51 VPN Client stop working after few seconds

[dimbert]

Hi guys,

This is my first post here and I hope you guys can help me out and maybe my post becomes useful for other users.

My problem is with VPN clients running in my Asus AC87-U. When I was using the original firmware, this option worked perfectly with L2TP and I leaved turned on almost all day long. But I don't wan't to go back to the original Firmware... The Merlin version is much better in a lot of ways.

I'm using IPVanish and already tried all the Setups (OpenVPN - PPTP - L2TP) with no success at all.

Just tried this link: https://vpntips.com/vpn-router-install/ for OpenVPN setup, but the problem is the same:

The VPN just works for a few seconds (10 to 40 secs). After that my internet becomes unaccessible.

I'm using two PPOe modens with a Dual-Wan Setup (Fail Over) with fallback (Delay =0, Interval=4, FailOver time=4, Failback time=396, WatchDog=Yes, Ping: www.google.com).

PS - The Status VPN shows a little traffic, but stops after the service stops working.

I hope my english is enough.

Tks in Advance Guys!
And tks Merlin for this great Firmware

 

[Haggster]

What firmware version are you using? Did you check if the same thing happens after a firmware reset and entering all configuration options again?

Can you post some logs from the internal log viewer that show the moment the VPN client goes down?

And finally, did you verify that those VPN connections are stable when using them from a PC or any other device?

 

[dimbert]

What firmware version are you using? Did you check if the same thing happens after a firmware reset and entering all configuration options again?

Can you post some logs from the internal log viewer that show the moment the VPN client goes down?

And finally, did you verify that those VPN connections are stable when using them from a PC or any other device?

I'm using the Merlin AsusWRT 378.51 and just tryed with the 378.52_2 with the same problem

Just made a firmware reset and still having problems...

Yes I verify the VPN with my PC and it works just fine for all day long (IpVanish service).

I'm not sure, but I think it can be related with the setting:
Special Requirement from ISP
Enable VPN + DHCP Connection

I have it as "no". Do you think that can be something related with it?

Tks for your attention
Best Regards
Diego

 

[Haggster]

I'm not sure, but I think it can be related with the setting:
Special Requirement from ISP
Enable VPN + DHCP Connection

I have it as "no". Do you think that can be something related with it?

Probably. I'd try changing it.

Another thing I'd definitely try: see if you can adjust the MTU for the VPN connection. Maybe this is possible under "additional options" where you can enter options manually. We would have to ask somebody who knows more about the VPN client configuration options to see if this is possible. If you know how to adjust it, try adjusting the MTU to a value below 1400, e.g. 1392 (which generally seems to be a good MTU for VPN connections of all sorts).

 

[Danny Sasmita Natapradja]

I'm using the Merlin AsusWRT 378.51 and just tryed with the 378.52_2 with the same problem

Just made a firmware reset and still having problems...

Yes I verify the VPN with my PC and it works just fine for all day long (IpVanish service).

I'm not sure, but I think it can be related with the setting:
Special Requirement from ISP
Enable VPN + DHCP Connection

I have it as "no". Do you think that can be something related with it?

Tks for your attention
Best Regards
Diego

you can try this

My openvpn settings are :

Interface type : tun
Protocol : udp
Server address : sin-a01.ipvanish.com port : 443
Firewall : automatic
Authorization mode : tls
username/password authentication : yes
username : ipvanishusername
password : ipvanishpassword
Username / Password Auth. Only : yes
Extra HMAC authorization : disabled
Create NAT on tunnel : yes

advanced settings

Poll Interval : 0
Redirect Internet traffic : yes
Accept DNS Configuration : relaxed
Encryption cipher : aes-256-cbc
compression : adaptive
TLS Renegotiation Time : -1
Connection Retry : 30
Verify Server Certificate : yes common name : sin-a01.ipvanish.com
Custom Configuration :

resolv-retry infinite
nobind
persist-key
persist-tun
persist-remote-ip
comp-lzo
verb 3
auth SHA256
keysize 256
tls-cipher DHE-RSA-AES256-SHA

don't forget to open Content modification of Keys & Certificates. and paste the Certificate Authority cert below

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

 

[dimbert]

Tks to all you guys! I tried to reset all configs again, and now all is working fine...
Tks for all you guys! You rock!