ASUS RT-AC68R and OVPN @ 2048 cipher.

[cone_head]

ASUS RT-AC68R and OVPN @ 2048 cipher.

What I have.
NP++ (Notepad ++)
ASUS RT-AC68R Merlin 3.0.0.4.374.39
Open VPN for Android 0.6.11
openvpn-install-2.3.4-I001-i686
Samsung Galaxy S5 (ATT)

How I did it.
Install OVPN for Android to my phone.
Install Openvpn-Install 32 bit on my system to create the 2048 certs needed.

Followed http://www.howtogeek.com/60774/connect-to-your-home-network-from-anywhere-with-openvpn-and-tomato/ so I know how to create the certs but editing the vars.bat to 2048.

Created the needed certs, CA, Client, Server and DH.

ASUS RT-AC68R Merlin 3.0.0.4.374.39 settings for OVPN server 1

Note: I do not have any port forwarding or other configs, its pretty much stock as far as configs. Just increased security settings.

I am using DDNS.

OVPN server 1 settings.

Interface: TUN
Protocal: TCP
Port: 1194
Firewall: Auto
Auth: TLS (So I can add the cert stuff)
User Name and PW: NO
Extra HMAC: Disable
VPN Subnet: Default settings
Poll Interval: 0
Push to LAN: Yes
Direct clients to redirect: No
Respond to DNS: No
Encryption Cipher: AES-256-CBC
Compression: None
TLS: -1
Manage Client options: No
Custom Config: Blank.

Now, Once you create your certs, put the cert into in to the ‘Content modification of Keys & Certificates.’ For each cert. and save it (Note: I have no formal training on this stuff and I was able to figure it out)

Now start the VPN client and click on the Export button, this will give you a partial cert with the CA credentials already populated. You just need to populate the rest, use NP++ for this.

Trust me, it’s easy.

I found OVPN for android client has settings you can check that will force all traffic over the tunnel.

Now I can safely browse the internet from any unsecured wifi knowing that all traffic is going form my phone to my asus then to the internet via a VPN @ 2048 cipher.

Like I stated, I have no training so I did the poor man’s test and blocked t.msn.com and I could not access it with the VPN turned on.

Anyone willing to show me some commands real time I can use on the ASUS to show traffic and urls if that’s possible from the TOOLS > Run CMD for real time traffic?

 

[trek_520]

Thanks for posting this.

Question - how come you did not just export the config file from the within the router? Is there some advantage to manually setting it up?

 

[cone_head]

If you let the router do all the work, including generating the necessary keys it will export a complete *.ovpn cert that can be imported.

If you manually configure the keys only a partial cert is exported containing only the CA portion. Leaving only a partial ovpn thus missing client info that needs to be filled out.

If I am correct the cipher by default is 1024 and the majority of the industry is already using 2048 cipher so I wanted to bring my vpn into alignment.

 

[jcarrra]

Shouldn't
"Direct clients to redirect internet traffic"
be set to YES so that the client sends ALL traffic over the VPN tunnel rather than sending "normal" internet traffic like web browsing out whatever local wifi you are on?