[Help] Asus RT-AC68U PIA VPN

[omnigear]

I have been trying to connect to PIA with my router and have been failing miserably .
I go here to get https://helpdesk.privateinternetacc...ings-should-I-use-for-ports-on-your-gateways- the proper .crt for the port i am using in this list https://helpdesk.privateinternetacc...een-the-OpenVPN-config-files-on-your-website-

I am not sure what steps to fix this >_<

 

[Jack Yaz]

I have been trying to connect to PIA with my router and have been failing miserably .
I go here to get https://helpdesk.privateinternetacc...ings-should-I-use-for-ports-on-your-gateways- the proper .crt for the port i am using in this list https://helpdesk.privateinternetacc...een-the-OpenVPN-config-files-on-your-website-

I am not sure what steps to fix this >_<

You need to open the crl.XXXX.pem file and pasted the contents into the certificate revocation list. There should be an option to "Manually modify" which lets you paste things in.

 

[omnigear]

i dont know where to put the .pem file info at, I tried to put it in the 4 options provided but i get this error. I have the .ca pasted on the Certificate Authority that I got from PIA .


Feb 14 19:50:49 rc_service: httpd 18981:notify_rc restart_vpncall
Feb 14 19:50:51 rc_service: httpd 18981:notify_rc restart_vpncall
Feb 14 19:50:53 rc_service: httpd 18981:notify_rc restart_vpncall
Feb 14 19:50:53 rc_service: waitting "restart_vpncall" via httpd ...
Feb 14 19:50:58 rc_service: httpd 18981:notify_rc restart_vpncall
Feb 14 19:50:58 rc_service: waitting "restart_vpncall" via httpd ...
Feb 14 19:50:58 openvpn[4035]: Options error: --crl-verify fails with 'crl.rsa.2048.pem': No such file or directory
Feb 14 19:50:58 openvpn[4035]: Options error: Please correct these errors.
Feb 14 19:50:58 openvpn[4035]: Use --help for more information.

You need to open the crl.XXXX.pem file and pasted the contents into the certificate revocation list. There should be an option to "Manually modify" which lets you paste things in.

 

[RMerlin]

Remove "--crl-verify" from your custom settings.

 

[omnigear]

I can connect , but the DNS server error comes up and i have to reboot the router to sort it back to square one.

Remove "--crl-verify" from your custom settings.

 

[Striker317]

Is there a reason you're not following this guide?
https://www.snbforums.com/threads/h...a-and-other-vpn-providers-380-68-09-12.30851/

 

[RMerlin]

Set DNS mode to "Exclusive".

 

[omnigear]

Is there a reason you're not following this guide?
https://www.snbforums.com/threads/h...a-and-other-vpn-providers-380-68-09-12.30851/

i dont have that version

Set DNS mode to "Exclusive".

I updated to the latest version RT-AC68U_384.3_0.zip , removed the crl and added the dns for pia . So far it is working thank you for the help.

but i cannot set more than one openvpn profile >_<

 

[Striker317]

Ah you are setting up a server not a client. Sorry

 

[omnigear]

Ah you are setting up a server not a client. Sorry

Im setting up a client, i got it sorted out. but the speeds are horrendous at best 20/20 , if i use the desktop client i get 120/130

 

[CaptainSTX]

Im setting up a client, i got it sorted out. but the speeds are horrendous at best 20/20 , if i use the desktop client i get 120/130

I don't do much better on my AC1900P which has a 1400Mhz processor. Most all SOHO routers are limited by their processor when handling encryption.

Without buying a VPN appliance, Pfsense box or a router such as the N86 you are not going to do much better. To maximize speed with your existing router you will need to minimize the use of other processor intensive applications and connect to a nearby server as possible.