Can't get openvpn server working on Asuswrt-Merlin

[regder]

I have followed a number of how to's and can't seem to get it to work. For whatever reason, Tunnelblick on OS-X, cannot resolve my host address. I have tried using my IP address as well as my domain that is forwarded to my ip.

I have exhausted my abilities here.

My opvn file as generated by Asuswrt, I have removed the IP address: https://pastebin.com/6Ru2LZVk

The tunnelblick log, IP address removed again: https://pastebin.com/mZtVjYYi

I appreciate any help

 

[Xentrk]

What firmware version are you using? In 380.65, OpenVPN 2.4 was introduced. Make sure the version of tunnelblick is compatible with OpenVPN 2.4.

I don't have this line in my ovpn config file.
ncp-ciphers AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC

Please post a pic of your OpenVPN Server screen.

Also, how are you testing? e.g. are you connecting to another router before attempting the connection to the openvpn server?

 

[RMerlin]

don't have this line in my ovpn config file.
ncp-ciphers AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC

This setting is new to 2.4, it's used for cipher negotiation.

 

[sfx2000]

I have followed a number of how to's and can't seem to get it to work. For whatever reason, Tunnelblick on OS-X, cannot resolve my host address. I have tried using my IP address as well as my domain that is forwarded to my ip.

Watch the version of Tunnelblick...

older versions can get confused when running into a OVPN 2.4...

 

[Xentrk]

This setting is new to 2.4, it's used for cipher negotiation.

I do have cipher negotiation set to disabled so that explains it. I have opted not to use the new feature on the client and server side for the time being.

 

[yorgi]

I have followed a number of how to's and can't seem to get it to work. For whatever reason, Tunnelblick on OS-X, cannot resolve my host address. I have tried using my IP address as well as my domain that is forwarded to my ip.

I have exhausted my abilities here.

My opvn file as generated by Asuswrt, I have removed the IP address: https://pastebin.com/6Ru2LZVk

The tunnelblick log, IP address removed again: https://pastebin.com/mZtVjYYi

I appreciate any help

make sure that you enable Respond to DNS and Advertise DNS to clients.
Also use legacy cipher. I had a hard time setting it up with the new cipher.
Also check out my guide all info is there on how to setup a VPN Server

https://www.snbforums.com/threads/h...th-asus-routers-380-66-4-updated-06-06.33638/