Help Needed: Configuring OpenVPN Server and Instant Guard on Asus GT-AX11000 with Technicolor CobraXh Modem Router

[Sunny786]

I have an Asus GT-AX11000 router (IP address 192.168.2.1) and a root AP, which is a Technicolor CobraXh modem router (IP address 192.168.1.1). When I log in to my root AP, my Asus router's IP address is listed as 192.168.1.103. I want to run an OpenVPN server and/or use the Instant Guard feature to connect to my local network from an outside network. However, I don't know how to configure this. Please check attached screenshots.

 

[Sunny786]

on my phone Instant Guard app displays this attached screenshot.

 

[bluzfanmr1]

There's another screen when you click on the dropdown for VPN Details called Advanced Settings. Did you check and set those setttings as well?

 

[eibgrad]

Most likely you exported the config file from the GT-AX11000 which is pointing to your *private* IP on the WAN! You need to change the remote directive in that config file to point to the *public* IP (or DDNS if you're using it) of the primary router.

 

[Sunny786]

There's another screen when you click on the dropdown for VPN Details called Advanced Settings. Did you check and set those setttings as well?

don't know which one you are referring to, please guide me step by step because i don't have much knowledge about this.

 

[bluzfanmr1]

don't know which one you are referring to, please guide me step by step because i don't have much knowledge about this.

VPN Server Tab, click on the dropdown for VPN Details and choose Advanced Settings. You will see another page of configurations.

 

[Sunny786]

Most likely you exported the config file from the GT-AX11000 which is pointing to your *private* IP on the WAN! You need to change the remote directive in that config file to point to the *public* IP (or DDNS if you're using it) of the primary router.

how to do that?

 

[eibgrad]

how to do that?

I assume you exported the OpenVPN client config file using the OpenVPN server's export function. That file can be edited w/ any text editor. Just change the remote directive from the private IP (192.168.1.103) to your public IP (or DDNS name if you're using it), save it, and use that modified config file when importing to the OpenVPN client device.

 

[Sunny786]

There's another screen when you click on the dropdown for VPN Details called Advanced Settings. Did you check and set those setttings as well?

 

[Sunny786]

I assume you exported the OpenVPN client config file using the OpenVPN server's export function. That file can be edited w/ any text editor. Just change the remote directive from the private IP (192.168.1.103) to your public IP (or DDNS name if you're using it), save it, and use that modified config file when importing to the OpenVPN client device.

My ISP keeps changing my public IP address

 

[Sunny786]

I edited the file and added the Asus DDNS address. Thanks for the help, guys. Much appreciated!

 

[eibgrad]

My ISP keeps changing my public IP address

That's why you should be using DDNS to keep a *dynamic* host name updated w/ your primary router's public IP.

Go to WAN->DDNS on the ASUS router and configure it w/ www.asus.com and your preferred hostname (provided it isn't already registered by someone else). It will automatically detect that your WAN ip is in the private IP space and use an external IP checker to keep that hostname updated w/ the current public IP on the primary router. Then use that hostname in your config file (e.g., Sunny786.asuscomm.com).

If you do this and re-export the config file, you'll find it's smart enough to use that DDNS hostname in the config file rather than your private IP!