asus RT-AC68U -asuswrt-Merlin firmware v 378.55

[martinr]

Hello veli,

Do you still have a copy of the config file you exported into the client laptop's OpenVPN program? If so, tell me what is the address on Line 4? My config file looks like:

1 client
2 dev tun
3 proto udp
4 remote rubxxxxxxxxx.asuscomm.com 1194
5 float
.
.

NB "rubxxxxxxx" I have altered for security reasons. Do similar when you reply (so if it's an IP address, reply as eg 89.xxx.xxx.56). The address on Line 4 is my DDNS address. I am guessing that if the router is unaware of a DDNS address, it takes the current public IP address and assumes it's fixed.

If you don't have the original config file, could you export another - just for this exercise, then delete it - and tell me what is on Line 4.

In addition, please provide answers to each of:

1. Do you have either:
a. A DDNS address or
b. Is your IP address fixed?

2. Did you forward Port 1194 on the B Box to Port 1194 on the ASUS?

3. On the ASUS GUI page for OpenVPN Servers, at the bottom of the page, are you showing the same username and password that you enter into the OpenVPN program on the laptop to connect?

4. In the Advanced Settings in the OpenVPN Servers page (against VPN Details, under"General") , is Username/Password Authentication set to YES?

(For setting up purposes, you might want to also set Username/Password Auth only to YES. What this will do is allow you to connect just with the username and password - no keys/certificates - so that would remove one area where problems occur. Then when it's all working, you go back and change it to NO, so you then authenticate with both usermane/password AND public keys and certs. Learning to walk before learning to run, as it were.)

 

[veli]

Hello martinr.

I've tested a few times!
But no connection via laptop with sim card.


client
dev tun
proto udp
remote XXX.asuscomm.com 1194
float


1/a DDNS adress and a PPPoE adres

2/Port 1194 yes forward

4/Username/Password Authentication set to YES

Regards,

veli.

 

[martinr]

Hello martinr.

I've tested a few times!
But no connection via laptop with sim card.


client
dev tun
proto udp
remote XXX.asuscomm.com 1194
float


1/a DDNS adress and a PPPoE adres

2/Port 1194 yes forward

4/Username/Password Authentication set to YES

Regards,

veli.

I'm not sure, I think I know where the problem is but I wouldn't know how to fix it. You have set up a DDNS address through ASUS, well done. But, and this is where I reach the limit of my knowledge, I think that DDNS address is linked to your ASUS router, which is behind the B Box. If, as in my case, your ASUS router had the Internet on the WAN side, the DDNS address would be recognised.

I think you could prove this: if you go into the Asus GUI to the Administration page and the system tab, and, fourth from bottom, set Enable Web access from WAN to YES ( and check the Authentication method above it is is still set to HTTP) - just for the purposes of this test. Then hit APPLY at the bottom. Now if you shut down your wifi on the laptop and connect to the Internet through the sim card, if you open a browser and type in your DDNS address ......asuscomm.com, if my theory is correct, you will not get a connection to the Asus router page. (Then, assuming you want this, set the Enable WAN access back to NO (best security)).

By the way, when you tried to connect using your sim card in the laptop, I hope you turned the laptop wifi switch to OFF (or disconnected from the wifi network in the Notification area).

Hopefully, if this is the problem, someone far smarter than I will explain how to get the Internet's DNS servers to recognise that traffic to .....asus.comm.com is to be directed to your B Box gateway.



Martin

 

[martinr]

Is there perhaps a setting in the B Box where you can tell it what your DDNS address is?

 

[veli]

Hello martinr.,


Thanks for your intervention and valued explanations.
I have finally installed and managed the openVPN server and client on my laptop!(client).

Thank you for your patience!

But I have another question!

The log file of openVPN client has a comment :
-auth noache option (has something to do with an additional security?)

Sincerly
veli.

 

[martinr]

Are you saying it's working?

If so, how did you get your DDNS to be"registered" as the B Box address?

I Googled your auth-nocache. It seems to be nothing to worry about. On a cursory glance, it seems to be to do with whether your username/password are temporarily cached in memory in case the OpenVPN connection needs to be reset. (It can then be done automatically and you won't even know). You might want to Google it yourself and read up a few different discussions to satisy yourself.

Eg. https://groups.google.com/forum/m/#!topic/tunnelblick-discuss/dcIymwMtCgk

What exactly does the line/details in the logfile say?

 

[veli]

martinr.
Hello,

After registration and verification of Proximus B Box 3 is, to configure DYNDNS, no more possible for free (I also looked around on forums), and must be paid.

How is it possible that openVPN client works for me, is a mystery!
Myself have obtained a free DNS by : https://www.changeip.com/services/free-dynamic-dns/ for my Synology DS 211+.

Is it possible for B BOX 3 to install a free dynamic DNS?

Forums related to B Box 3 say so.

sincerly,

veli.

 

[martinr]

Not quite sure I understand, but you've got OpenVPN working. And just for interest, which DDNS address is on Line 4 of the .ovpn config file you exported into the laptop?

Frankly, if you can now connect via OpenVPN, even if you have to pay for the DDNS service, I think it's a small price to pay; I wasn't sure we'd ever get there!