Voxel, thank you for your great work!
It's my first NG router and without your firmware & Kamoj's improvements for OpenVPN, I would have returned the box after day 1. Netgear should do something nice for you (yeah, sure
), as you help them to not refund their fancy marketed routers to people who would like to use more than 10% from their capabilities.
Installation & basic configuration was not difficult, I can mention only the false warning:
"You are trying to download firmware with version V1.0.2.54SF which is older than the firmware with version V1.0.2.36 you had.". Fortunately it was just a warning so I could press <OK> and continue.
For the advanced configuration, I had some small challenges - that maybe you will take some in consideration and update the ReadMe document with proper info for those not so experienced with Linux (or too lazy to use google):
- what is the preferred filesystem if you want to use USB stick or USB HDD (ext2, etx3, ext4, etc.) and what procedures must be followed when some wants to turn off the router or just eject the storage without causing issues.
@kamoj: maybe an eject button in the improved debug.htm add-on?
Or
@Voxel: maybe an option to use the WPS button to eject the storage and turn off USB LEd when is ejected succesfully? (for those who doesn't need WPS)
- an workaround for those which don't have a Linux machine nearby to partition & format the USB storage correctly (if possible, using the router itself, after activating telnet from debug.htm), and commands to download & extract the setssh.tar directly with the router.
- for those with a strange internet connection (e.g.: 4G/LTE), OpenVPN server will require some troubleshooting and not everyone has access or knowledge to use packet capture traffic for that, and on both ends of the connection (client & server). For me, traffic started to work bi-directional after I've added (in the /etc/init.d/openvpn script) the option mssfix 1394 (and then restart). I've tried initially with option link-mtu 1394 (and fragment) but it didn't solve the issue, so I replaced that with mssfix - and frankly I'm glad that it didn't work out the box, as PMTUD sometimes is ignored by some clients, and I didn't wanted OpenVPN to fragment 1500bytes traffic that will uselessly will multiply the VPN packets.
I had the clients connected via LTE, and the R7800 with ADSL. For the LTE connection I had decreased the MTU size of EdgeRouter X's WAN interface to 1420 also (after checking with ping -do-not-fragment from which size the ping to next hop router will work, while decreasing the size of ICMP packets **).
And at the very beginning I've changed the ports of the OpenVPN server to use one within the range of UDP traceroute by Linux/Cisco devices (33434 to 33464), as some small providers might block others/well known ports used for various servers & services.
On my to-do list I have left for the moment:
- configure Entware crontab to do an automatic backup of the config files I've changed since last backup + some files from USB storage and copy them with scp to a NAS
- configure automatic reboot once a week
@kamoj: maybe an option to see Entware crontab content in the debug add-on?
- configure syslog to be sent to a syslog server
- check for alternatives of using WDS with a good old WRT54GL (with dd-wrt) that was offering slow Wifi in the garden. I was a little bit surprised that NG removed WDS support from their latest models, but.. it might be safer for the users (and better for their WLAN extenders business
)
Once again, a big thank you to you and your team!
________
** For reference, the Windows command is: ping -n 3 -w 100 -l 1420 -f aaa.bbb.ccc.ddd , where: aaa.bbb.ccc.ddd - is the next-hop router (provider gateway or other public IP closer to you that is normally ping-able with small packets), and the parameter -l (L : packet size) should be changed (up or down) until the ping answers changed from "Reply from aaa.bbb.ccc.ddd: bytes=..." to "Request timed out." (or the other way around). The last value that had a ping answers is the MTU of your internet connection. More about the subject here:
MTU Size Issues | Network World