Config help on AC68U Openvpn and Voip

[bobette]

Hi Guys

I am new to this OPENVPN world.
I did put Merlin firmware installation in my RT-AC68U and configure my VPN
client connection no problem there, everything work great.But my voip phone system did not work anymore.I did chat this issue with my voip supplier and they said... ''If you can only use our service with a VPN, please make sure that the communication is not blocked in the following ports: 5060 UDP and the RTP Range 10001-20000 UDP.''

So my question is since the AC68U have 4 ethernet port and 2 wifi (2 and 5g)
could i put OPENVPN on 3 ethernet port and the 2 wifi and only 1 ethernet port with my standard ISP setup?So this way i will have best of the two world without connecting in/out the VPN.

Maybe the creation of two distinctive lan? One for all the computer the other for voip? And addressing each of them their feature and port/wifi ?

Please help

Thanks
Bob

 

[huotg01]

Hi Guys

I am new to this OPENVPN world.
I did put Merlin firmware installation in my RT-AC68U and configure my VPN
client connection no problem there, everything work great.But my voip phone system did not work anymore.I did chat this issue with my voip supplier and they said... ''If you can only use our service with a VPN, please make sure that the communication is not blocked in the following ports: 5060 UDP and the RTP Range 10001-20000 UDP.''

So my question is since the AC68U have 4 ethernet port and 2 wifi (2 and 5g)
could i put OPENVPN on 3 ethernet port and the 2 wifi and only 1 ethernet port with my standard ISP setup?So this way i will have best of the two world without connecting in/out the VPN.

Maybe the creation of two distinctive lan? One for all the computer the other for voip? And addressing each of them their feature and port/wifi ?

Please help

Thanks
Bob

I won't answer your question, but ask you another one.
What are you using your vpn for ?

 

[bobette]

Sorry

Did not answer your question but is this making any difference in the initial question?

Bob

 

[CaptainSTX]

You can accomplish what you are describing by writing some custom iptables and other scripting. Search this site and you probably find most of the code you need.

If you don't want to spend the time and effort modifying/writing your own code consider switching your VPN provider to Astrill. Astrill has a very flexible app that runs under Merlin's firmware. With their app you can on a SSID basis and/or device basis, or an application basis route to local or VPN.

Whatever you do you probably don't want to run your VOIP application on the VPN because of the increased latency it usually introduces into your connection.

 

[bobette]

Since i am not a pro in telnet command
Could it be possible to have this feature without be client to Astrill?
Like an open source ?
That would be funtastic if Merlin put this feature in the FW.

Bob

 

[CaptainSTX]

Another option is to double NAT your AC68U behind another router. The first and primary router would handle your local traffic. Any device connected to this router by Ethernet or WiFi would go directly to your local ISP. Anything connected to your ASUS would be VPN traffic.

I have used this method previously and it works well.

 

[bobette]

Thanks Captain

I will give it a try.
Definitively more friendly the the telnet, script, command,stuff.


Regard
Bob

 

[huotg01]

Sorry

Did not answer your question but is this making any difference in the initial question?

Bob

Because
1- you said that you are new to openvpn
2- you setup an openvpn
3- you now have a problem
4- it is always better to have the whole picture before trying to solve someone else problems.

 

[cosmoxl]

I doubt you need to do any port opening/forwarding for the voip service to work. Afterall, I bet you didn't have to without VPN.

Usually the problem is a combination of latency and a UDP tunnel. Since UDP allows packets to arrive out of order, voip can be disrupted.

Try a TCP tunnel with your openvpn client and see if that helps.

 

[huotg01]

Hi Guys

I am new to this OPENVPN world.
I did put Merlin firmware installation in my RT-AC68U and configure my VPN
client connection no problem there, everything work great.But my voip phone system did not work anymore.I did chat this issue with my voip supplier and they said... ''If you can only use our service with a VPN, please make sure that the communication is not blocked in the following ports: 5060 UDP and the RTP Range 10001-20000 UDP.''

So my question is since the AC68U have 4 ethernet port and 2 wifi (2 and 5g)
could i put OPENVPN on 3 ethernet port and the 2 wifi and only 1 ethernet port with my standard ISP setup?So this way i will have best of the two world without connecting in/out the VPN.

Maybe the creation of two distinctive lan? One for all the computer the other for voip? And addressing each of them their feature and port/wifi ?

Please help

Thanks
Bob

What are your final findings ?

 

[bobette]

Hey guys thank you for you input.

Sorry for late reply
I did not have time to work on my voip problem.
I still will be out for few days. I will do my homework (learning stuff)
and get you back on my finding. If by any chance you have other idea
please comment.Greatly appreciated.

Best regard to you all.


Bob

 

[bobette]

A workaround seem to work...

Hi Guys

I did find this way for solving my problem.

http://www.dondeg.com/vpn/tut3a.html


The trick is to create a a rule in a script saying all traffic goes to VPN
except those IP number.

This way my voip adapter ip adress is exclude from de VPN.
Voila !

3 days running. No problem at this point !


Regard
Robert