Can't connect to OpenVPN

[nfshp253]

Hmm then why doesn't it work as expected? Would having a router behind a router be an issue?

 

[przemekwawa]

i have problem with configuering open vpn too....i do not know what i am doing wrong....here is log if someone can got solution for solve my problem....

Feb  8 14:51:54 openvpn[1202]: 89.142.232.152:54330 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Feb  8 14:51:54 openvpn[1202]: 89.142.232.152:54330 TLS Error: TLS handshake failed
Feb  8 14:51:54 openvpn[1202]: 89.142.232.152:54330 SIGUSR1[soft,tls-error] received, client-instance restarting

This is the answer, you have something wrong with TLS negotiation, probably wrong key/certifiate put in wrong field, or something wrong with generated keys.

 

[nfshp253]

Yea, that issue has nothing to do with mine. The router connects to the VPN server properly, but it's the selective routing that isn't working.

 

[scaramonga]

Is it possible that there's some complications caused by the fact that my desktop is behind another wireless router but with DHCP disabled (AC68U assigns its IP address)?

Possibly. Does it work when only the AC68U is connected to desktop?

 

[bayern1975]

I have only one device going through the VPN, set as follows:

I have ac68u router but can not find this settings?

sent from Kodi 17 Krypton

 

[scaramonga]

I have ac68u router but can not find this settings?

sent from Kodi 17 Krypton

Available when below option is set

 

[nfshp253]

Possibly. Does it work when only the AC68U is connected to desktop?

I can't try that. Router is in the backyard with the Fibre terminal while my desktop is in my room.

 

[bayern1975]

Available when below option is set

What excatly mean this rule?I am new with openvpn and do not know much about it....

sent from Kodi 17 Krypton

 

[scaramonga]

What excatly mean this rule?I am new with openvpn and do not know much about it....

sent from Kodi 17 Krypton

Using the “Policy rules” option allows you to specify which devices connect to the Internet through VPN, and which devices connect directly.

 

[bayern1975]

here is my log from router....i think there is one warning but i don`t have any idea how to solved? i have configured openvpn server but have problems to setup openvpn clients over webgui...if i put exported client1.ovpn file to client1 i lost internet completly.....i got error router conflict....what should i put at client1 side....is there some valid settings?

Feb 11 17:09:36 openvpn[1017]: OpenVPN 2.3.8 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec 24 2015
Feb 11 17:09:36 openvpn[1017]: library versions: OpenSSL 1.0.2e 3 Dec 2015, LZO 2.08
Feb 11 17:09:36 openvpn[1018]: PLUGIN_INIT: POST /usr/lib/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn-plugin-auth-pam.so] [openvpn]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Feb 11 17:09:36 openvpn[1018]: Diffie-Hellman initialized with 2048 bit key
Feb 11 17:09:36 openvpn[1018]: WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Feb 11 17:09:36 openvpn[1018]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Feb 11 17:09:36 openvpn[1018]: TUN/TAP device tun21 opened
Feb 11 17:09:36 openvpn[1018]: TUN/TAP TX queue length set to 100
Feb 11 17:09:36 openvpn[1018]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Feb 11 17:09:36 openvpn[1018]: /usr/sbin/ip link set dev tun21 up mtu 1500
Feb 11 17:09:36 kernel: ADDRCONF(NETDEV_CHANGE): tun21: link becomes ready
Feb 11 17:09:36 openvpn[1018]: /usr/sbin/ip addr add dev tun21 10.8.0.1/24 broadcast 10.8.0.255
Feb 11 17:09:36 openvpn[1018]: UDPv4 link local (bound): [undef]
Feb 11 17:09:36 openvpn[1018]: UDPv4 link remote: [undef]
Feb 11 17:09:36 openvpn[1018]: MULTI: multi_init called, r=256 v=256
Feb 11 17:09:36 openvpn[1018]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Feb 11 17:09:36 openvpn[1018]: Initialization Sequence Completed

 

[bayern1975]

ok, i setup openvpn server and running i think well. so, i would like to configuered three clients now, PC and two phones to connect on openvpn server....one of phones should be connect to my openvpn outside from my network....how can i do that?

 

[bayern1975]

still do not know how to setup openvpn clients to connect on openvpn server? server is working and i would like to add my computer and phone to use connection from open vpn server.

 

[Martineau]

still do not know how to setup openvpn clients to connect on openvpn server? server is working and i would like to add my computer and phone to use connection from open vpn server.

Click the export button on the Router VPN Server GUI

Then the .opvn file must be imported onto your client device e.g. phone.

e.g. The most secure method is to copy the .opvn to a usb flash drive and attach that to the device or a less secure way is to email it to the device.

For a PC then simply copy the .opvn from your downloads folder to C:\Program Files\OpenVPN\config if you are using the OpenVPN GUI applet.

 

[bayern1975]

for what we need this openvpn clients page for?

 

[Martineau]

perhaps

for what we need this openvpn clients page for?

For outbound VPN connections e.g. Selective routing for say USA Netflix on VPN Client 1 and perhaps UK VPN Client 2 to watch BBC if you are outside the UK etc.

 

[Bogey]

perhaps

For outbound VPN connections e.g. Selective routing for say USA Netflix on VPN Client 1 and perhaps UK VPN Client 2 to watch BBC if you are outside the UK etc.

Hi Martineau, that's still my objective. Remember me? About a year ago we went through a lot to get this fixed on a RT-AC68U and every single time both tables were the same.
With that router I've never been able to fix it. BUT as of today I'm using a RT-AC87U and .... guess what? It's still not working! The problem must be behind the keyboard!
However, I still like to give it a shot. There are no scripts installed, just a brand new router with two AirVPN clients. Can you guide me?

 

[Trev]

hey guys.. newbie to the forum. I got ac68u on ddwrt fw.. but getting pretty low speeds. 115mb connection getting 25mbs with PIA. Runs 60-70mbs on PC. Thinking of switching to merlin see what happens.. also like the idea of vpn policy for letting my work laptop connect direct.
Any of you guys get decent speeds running VPN on the 68u?
cheers

 

[RMerlin]

hey guys.. newbie to the forum. I got ac68u on ddwrt fw.. but getting pretty low speeds. 115mb connection getting 25mbs with PIA. Runs 60-70mbs on PC. Thinking of switching to merlin see what happens.. also like the idea of vpn policy for letting my work laptop connect direct.
Any of you guys get decent speeds running VPN on the 68u?
cheers

An RT-AC68U should be able to hit about 50 Mbps if using AES-128-CBC.

 

[Trev]

hmm ok- how similar is this to the stock fw? reason I ask is reason I had to move from asus fw is that crappy check it does when setting up not allowing another router on same subnet. complains of collision where there is none. I wanna run my ISP router on .1 and the asus on .99 i nsame subnet- asus didnt allow me to do that.

 

[RMerlin]

hmm ok- how similar is this to the stock fw? reason I ask is reason I had to move from asus fw is that crappy check it does when setting up not allowing another router on same subnet. complains of collision where there is none. I wanna run my ISP router on .1 and the asus on .99 i nsame subnet- asus didnt allow me to do that.

VPN performance would be slightly better with my firmware, but not by that much, now that Asus is also using the (much faster) OpenSSL 1.0.2 like me.