Menu
What's new
By:
Filters Better Search

Tutorial How to setup a VPN Server with Asus routers 380.68 updated 08.24

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

yorgi said:
The fact that you changed the subent back to 10.8.0.0 I would default the Server then reboot the router and enter the data again and export a new .opvn
I would also try to disable the server 1 and use server 2. maybe something got corrupted.
Also to be sure, disable the firewall on one of the windows pc's and try to access a share with the firewall off, It should work instantly if its not a firewall related issue.
If all this doesn't work then I would do a factory reset on the router and unplug it from the wall and let the capacitors discharge.
then go and enter the data all over again. when upgrading a firmware if you miss the unplugging the unit from the wall it will never clear the VRAM and you may have old configuration that is corrupt and not allowing the router to do its job.
I have had same issues recently and I had to do some crazy trouble shooting but at the end it was a default and rebooting the router that fixed the it.
let me know if it works.
Click to expand...

Ok, Defaulted the router, then cleared nvram in router (unplugged for 5 min, then turned on while holding wpn), then rebooted router.
Created a VPN server on server 2, and exported new .ovpn file.
Connection once again, no problem.

But still running into same issue. I can ping the router (my VPN server) but I can't ping the computers behind the router. I CAN ping the client from a lan computer though
Obviously mapping a drive isn't working either, which is my end goal!
 
Last edited:
dtak said:
Ok, Defaulted the router, then cleared nvram in router (unplugged for 5 min, then turned on while holding wpn), then rebooted router.
Created a VPN server on server 2, and exported new .ovpn file.
Connection once again, no problem.

But still running into same issue. I can ping the router (my VPN server) but I can't ping the computers behind the router. I CAN ping the client from a lan computer though
Obviously mapping a drive isn't working either, which is my end goal!
Click to expand...
did you try to disable the firewall from the windows pc you are trying to access to make sure its not a firewall blocking the share?
even though you created the rule its good to try without any firewall and see what happens.
let me know how that goes
 
yorgi said:
did you try to disable the firewall from the windows pc you are trying to access to make sure its not a firewall blocking the share?
even though you created the rule its good to try without any firewall and see what happens.
let me know how that goes
Click to expand...

Yes sir I did. Completely disabled firewall on client and still couldn't access shares.
 
There seems to be a bug with the VPN server on ASUS routers
If you setup the DHCP pool to handle dynamic ip from range 100-254 the windows shares work fine through VPN
if you try to share from Static IP addresses range 0-99 you cannot access the shares. This worked fine with ver 66.4 but since 66.6 and 67 there is this bug
not sure if its ASUS or Merlin but if someone is getting the same issue let me know
I use an 87U could be a bug for that router only. My buddy has the same router and same problem.
 
I figured out the problem and updated the article.
Its best if the router handles the Static IP addresses via DHCP
The ARP table works better and it knows what computers have shares.
A computer that is on a VPN like PIA even if you connect to your VPN server you will not have access to the Shares of that computer.
One has to remote desktop to a computer that is not on a VPN client and then remote desktop to the VPN client PC to access the shares.
 
I'm trying to establish an OpenVPN using Asus routers on each end. I'm using the latest AsusWRT-Merlin firmware on each (380.67). I had no problem setting up either the server or the client, initially using the default settings, and later trying it using the settings outlined at the beginning of this thread. The .ovpn file I exported from the VPN server router works fine when I connect using the stand-alone OpenVPN client software on a Windows 10 machine. However, when I try to use my client side router as the OpenVPN Client, the router indicates it's connecting but a connection is never established.

The router log from the client side looks like this (IP address and sid replaced with x's and #'s):

Code: 
Aug 11 10:54:50 openvpn[4478]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 11 10:55:50 openvpn[4478]: [RT-N66U] Inactivity timeout (--ping-restart), restarting
Aug 11 10:55:50 openvpn[4478]: SIGUSR1[soft,ping-restart] received, process restarting
Aug 11 10:55:50 openvpn[4478]: Restart pause, 5 second(s)
Aug 11 10:55:55 openvpn[4478]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Aug 11 10:55:55 openvpn[4478]: TCP/UDP: Preserving recently used remote address: [AF_INET]##.###.###.###:1194
Aug 11 10:55:55 openvpn[4478]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Aug 11 10:55:55 openvpn[4478]: UDP link local: (not bound)
Aug 11 10:55:55 openvpn[4478]: UDP link remote: [AF_INET]##.###.###.###:1194
Aug 11 10:55:55 openvpn[4478]: TLS: Initial packet from [AF_INET]##.###.###.###:1194, sid=xx###xx# ####x#
Aug 11 10:55:55 openvpn[4478]: VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 11 10:55:55 openvpn[4478]: VERIFY KU OK
Aug 11 10:55:55 openvpn[4478]: Validating certificate extended key usage
Aug 11 10:55:55 openvpn[4478]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Aug 11 10:55:55 openvpn[4478]: VERIFY EKU OK
Aug 11 10:55:55 openvpn[4478]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain

The router log from the server side looks like this (IP address and sid replaced with x's and #'s):

Code: 
Aug 11 09:58:05 openvpn[5298]: ###.###.###.### TLS: Initial packet from [AF_INET6]::ffff:###.###.###.###:47407, sid=xx#xxx#x x#######
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 OpenSSL: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS_ERROR: BIO read tls_read_plaintext error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS object -> incoming plaintext read error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS handshake failed
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 SIGUSR1[soft,tls-error] received, client-instance restarting

As I said, the .ovpn file works perfectly with the stand-alone Windows client, but just won't connect with the Asus VPN client. I did change "Accept DNS Configuration" to "Exclusive" as outlined earlier in the thread for those running AsusWRT-Merlin.

Here's a screenshot of my client side configuration:

screenshot-192.168.1.1-2017-08-11-12-57-55.png


Any help would be greatly appreciated!
 
bnhf said:
I'm trying to establish an OpenVPN using Asus routers on each end. I'm using the latest AsusWRT-Merlin firmware on each (380.67). I had no problem setting up either the server or the client, initially using the default settings, and later trying it using the settings outlined at the beginning of this thread. The .ovpn file I exported from the VPN server router works fine when I connect using the stand-alone OpenVPN client software on a Windows 10 machine. However, when I try to use my client side router as the OpenVPN Client, the router indicates it's connecting but a connection is never established.

The router log from the client side looks like this (IP address and sid replaced with x's and #'s):

Code: 
Aug 11 10:54:50 openvpn[4478]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 11 10:55:50 openvpn[4478]: [RT-N66U] Inactivity timeout (--ping-restart), restarting
Aug 11 10:55:50 openvpn[4478]: SIGUSR1[soft,ping-restart] received, process restarting
Aug 11 10:55:50 openvpn[4478]: Restart pause, 5 second(s)
Aug 11 10:55:55 openvpn[4478]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Aug 11 10:55:55 openvpn[4478]: TCP/UDP: Preserving recently used remote address: [AF_INET]##.###.###.###:1194
Aug 11 10:55:55 openvpn[4478]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Aug 11 10:55:55 openvpn[4478]: UDP link local: (not bound)
Aug 11 10:55:55 openvpn[4478]: UDP link remote: [AF_INET]##.###.###.###:1194
Aug 11 10:55:55 openvpn[4478]: TLS: Initial packet from [AF_INET]##.###.###.###:1194, sid=xx###xx# ####x#
Aug 11 10:55:55 openvpn[4478]: VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 11 10:55:55 openvpn[4478]: VERIFY KU OK
Aug 11 10:55:55 openvpn[4478]: Validating certificate extended key usage
Aug 11 10:55:55 openvpn[4478]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Aug 11 10:55:55 openvpn[4478]: VERIFY EKU OK
Aug 11 10:55:55 openvpn[4478]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain

The router log from the server side looks like this (IP address and sid replaced with x's and #'s):

Code: 
Aug 11 09:58:05 openvpn[5298]: ###.###.###.### TLS: Initial packet from [AF_INET6]::ffff:###.###.###.###:47407, sid=xx#xxx#x x#######
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 OpenSSL: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS_ERROR: BIO read tls_read_plaintext error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS object -> incoming plaintext read error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS handshake failed
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 SIGUSR1[soft,tls-error] received, client-instance restarting

As I said, the .ovpn file works perfectly with the stand-alone Windows client, but just won't connect with the Asus VPN client. I did change "Accept DNS Configuration" to "Exclusive" as outlined earlier in the thread for those running AsusWRT-Merlin.

Here's a screenshot of my client side configuration:

View attachment 10065

Any help would be greatly appreciated!
Click to expand...
Enable redirect internet traffic either to ALL and every device will be on the VPN or policy rules
depending on what you want from the router
 
yorgi said:
Enable redirect internet traffic either to ALL and every device will be on the VPN or policy rules
depending on what you want from the router
Click to expand...

Much closer! VPN status still shows as "Connecting...", but the OpenSSL and TLS errors are gone. Here's the log from the client side Asus:

Code: 
Aug 12 09:20:23 openvpn[17328]: OpenVPN 2.4.3 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 16 2017
Aug 12 09:20:23 openvpn[17328]: library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.08
Aug 12 09:20:23 openvpn[17329]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Aug 12 09:20:23 openvpn[17329]: TCP/UDP: Preserving recently used remote address: [AF_INET]##.###.###.###:1194
Aug 12 09:20:23 openvpn[17329]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Aug 12 09:20:23 openvpn[17329]: UDP link local: (not bound)
Aug 12 09:20:23 openvpn[17329]: UDP link remote: [AF_INET]##.###.###.###:1194
Aug 12 09:20:23 openvpn[17329]: TLS: Initial packet from [AF_INET]##.###.###.###:1194, sid=######## ########
Aug 12 09:20:23 openvpn[17329]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Aug 12 09:20:24 openvpn[17329]: VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 12 09:20:24 openvpn[17329]: VERIFY KU OK
Aug 12 09:20:24 openvpn[17329]: Validating certificate extended key usage
Aug 12 09:20:24 openvpn[17329]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Aug 12 09:20:24 openvpn[17329]: VERIFY EKU OK
Aug 12 09:20:24 openvpn[17329]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 12 09:21:23 openvpn[17329]: [RT-N66U] Inactivity timeout (--ping-restart), restarting
Aug 12 09:21:23 openvpn[17329]: SIGUSR1[soft,ping-restart] received, process restarting
Aug 12 09:21:23 openvpn[17329]: Restart pause, 5 second(s)

And a screenshot of the VPN status:

screenshot-192.168.50.1-2017-08-12-09-29-14.png


Is that message about "EKU (str) TLS Web Server Authentication" an issue?
 
Sorry I was wrong -- the errors were on the server side not the client side, and they're still the same as my original post:

Code: 
Aug 11 09:58:05 openvpn[5298]: ###.###.###.### TLS: Initial packet from [AF_INET6]::ffff:###.###.###.###:47407, sid=xx#xxx#x x#######
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 OpenSSL: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS_ERROR: BIO read tls_read_plaintext error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS object -> incoming plaintext read error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS handshake failed
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 SIGUSR1[soft,tls-error] received, client-instance restarting
 
bnhf said:
I'm trying to establish an OpenVPN using Asus routers on each end. I'm using the latest AsusWRT-Merlin firmware on each (380.67). I had no problem setting up either the server or the client, initially using the default settings, and later trying it using the settings outlined at the beginning of this thread. The .ovpn file I exported from the VPN server router works fine when I connect using the stand-alone OpenVPN client software on a Windows 10 machine. However, when I try to use my client side router as the OpenVPN Client, the router indicates it's connecting but a connection is never established.

The router log from the client side looks like this (IP address and sid replaced with x's and #'s):

Code: 
Aug 11 10:54:50 openvpn[4478]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 11 10:55:50 openvpn[4478]: [RT-N66U] Inactivity timeout (--ping-restart), restarting
Aug 11 10:55:50 openvpn[4478]: SIGUSR1[soft,ping-restart] received, process restarting
Aug 11 10:55:50 openvpn[4478]: Restart pause, 5 second(s)
Aug 11 10:55:55 openvpn[4478]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Aug 11 10:55:55 openvpn[4478]: TCP/UDP: Preserving recently used remote address: [AF_INET]##.###.###.###:1194
Aug 11 10:55:55 openvpn[4478]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Aug 11 10:55:55 openvpn[4478]: UDP link local: (not bound)
Aug 11 10:55:55 openvpn[4478]: UDP link remote: [AF_INET]##.###.###.###:1194
Aug 11 10:55:55 openvpn[4478]: TLS: Initial packet from [AF_INET]##.###.###.###:1194, sid=xx###xx# ####x#
Aug 11 10:55:55 openvpn[4478]: VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain
Aug 11 10:55:55 openvpn[4478]: VERIFY KU OK
Aug 11 10:55:55 openvpn[4478]: Validating certificate extended key usage
Aug 11 10:55:55 openvpn[4478]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Aug 11 10:55:55 openvpn[4478]: VERIFY EKU OK
Aug 11 10:55:55 openvpn[4478]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=me@myhost.mydomain

The router log from the server side looks like this (IP address and sid replaced with x's and #'s):

Code: 
Aug 11 09:58:05 openvpn[5298]: ###.###.###.### TLS: Initial packet from [AF_INET6]::ffff:###.###.###.###:47407, sid=xx#xxx#x x#######
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 OpenSSL: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS_ERROR: BIO read tls_read_plaintext error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS object -> incoming plaintext read error
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 TLS Error: TLS handshake failed
Aug 11 09:58:05 openvpn[5298]: 000.000.000.000 SIGUSR1[soft,tls-error] received, client-instance restarting

As I said, the .ovpn file works perfectly with the stand-alone Windows client, but just won't connect with the Asus VPN client. I did change "Accept DNS Configuration" to "Exclusive" as outlined earlier in the thread for those running AsusWRT-Merlin.

Here's a screenshot of my client side configuration:

View attachment 10065

Any help would be greatly appreciated!
Click to expand...

OK, I figured out what was going wrong. Somehow only my Certificate Authority and not my Client Certificate or my Client Key got loaded in when I uploaded my .ovpn file to the client router. It's the same one I used to test the stand-alone Windows OpenVPN client -- so all the keys and certificates were there. It was only when I looked at the stand-alone client's config file, that I noticed there were 3 certificates and not just the 1 I'd seen on the router. Uploading the .ovpn file again took care of the issue!
 
Yorgi, when you wrote in the first post:
"I suggest that every time you update to a new firmware do a Default on OpenVPN server then reboot the router and enter the data again. ", how exactly does one do a default on OpenVPN server (without doing a complete factory default reset)?
 
martinr said:
Yorgi, when you wrote in the first post:
"I suggest that every time you update to a new firmware do a Default on OpenVPN server then reboot the router and enter the data again. ", how exactly does one do a default on OpenVPN server (without doing a complete factory default reset)?
Click to expand...

Forget it: I've just seen the Default button at the bottom of the page. I hadn't updated for quite a while, so I hadn't seen the button before. Lame excuse, I know.

But thanks for the excellent tutorial.
 
Hi Just discovered this forum and seems like a wealth of information here. Hoping someone can help.

Im using an Asus AC1900 (3.0.0.4.376) to setup an OpenVPN Server. My ISP speeds at my server side are 330Mbps download/25Mbps upload
My ISP speeds at my client side are 25Mbps download/5Mbps Upload.

My issue is that I am barely getting 2Mbps transfer speeds between the two. I have tried both TUN and TAP and still only getting about 2Mbps

Currently, my server is setup as TAP-UDP. Im using TAP because there are some media devices (that use UPnP) on my server that I want to access from my Client side (windows)
Im not sure if thats possible using TUN.

I have tried messing around with fragment, tun-mtu, mssfix, sndbuf, rcvbuf and txqueuelen but nothing has helped me get better speed.

Here is my current configuration

7ubzGMx.png


and my client config is generated by the router. Is there anything i can adjust to get better speeds between the two? Thanks
 
wacind said:
Hi Just discovered this forum and seems like a wealth of information here. Hoping someone can help.

Im using an Asus AC1900 (3.0.0.4.376) to setup an OpenVPN Server. My ISP speeds at my server side are 330Mbps download/25Mbps upload
My ISP speeds at my client side are 25Mbps download/5Mbps Upload.

My issue is that I am barely getting 2Mbps transfer speeds between the two. I have tried both TUN and TAP and still only getting about 2Mbps

Currently, my server is setup as TAP-UDP. Im using TAP because there are some media devices (that use UPnP) on my server that I want to access from my Client side (windows)
Im not sure if thats possible using TUN.

I have tried messing around with fragment, tun-mtu, mssfix, sndbuf, rcvbuf and txqueuelen but nothing has helped me get better speed.

Here is my current configuration

7ubzGMx.png


and my client config is generated by the router. Is there anything i can adjust to get better speeds between the two? Thanks
Click to expand...
Did you try the default port 1194?
Tun should work for all your devices as long as they have a static IP done by the DHCP server.
You should also have username and password enabled.
Auth Digest should be at SHA1
From what I see you are using the firmware from ASUS?
I would try Merlin firmware. I don't think the client configurations is helping you out much.
You should be able to get good speeds without having to add all these switches.
You should also enable compression.
Try these and let me know how it goes.
 
wacind said:
Hi Just discovered this forum and seems like a wealth of information here. Hoping someone can help.

Im using an Asus AC1900 (3.0.0.4.376) to setup an OpenVPN Server. My ISP speeds at my server side are 330Mbps download/25Mbps upload
My ISP speeds at my client side are 25Mbps download/5Mbps Upload.

My issue is that I am barely getting 2Mbps transfer speeds between the two. I have tried both TUN and TAP and still only getting about 2Mbps

Currently, my server is setup as TAP-UDP. Im using TAP because there are some media devices (that use UPnP) on my server that I want to access from my Client side (windows)
Im not sure if thats possible using TUN.

I have tried messing around with fragment, tun-mtu, mssfix, sndbuf, rcvbuf and txqueuelen but nothing has helped me get better speed.

Here is my current configuration

7ubzGMx.png


and my client config is generated by the router. Is there anything i can adjust to get better speeds between the two? Thanks
Click to expand...
Merlin gives you more options and I think it will work better.
You should try that and see how it goes.
If you use Merlin, look at the guide and make sure to enable push lan to clients along with Respond to DNS and Advertise DNS to clients.
There is a section in the guide that explains how to setup the DHCP so that you get all your devises to work properly.
give us an update on your results
 
wacind said:
Hi Just discovered this forum and seems like a wealth of information here. Hoping someone can help.

Im using an Asus AC1900 (3.0.0.4.376) to setup an OpenVPN Server. My ISP speeds at my server side are 330Mbps download/25Mbps upload
My ISP speeds at my client side are 25Mbps download/5Mbps Upload.

My issue is that I am barely getting 2Mbps transfer speeds between the two. I have tried both TUN and TAP and still only getting about 2Mbps

Currently, my server is setup as TAP-UDP. Im using TAP because there are some media devices (that use UPnP) on my server that I want to access from my Client side (windows)
Im not sure if thats possible using TUN.

I have tried messing around with fragment, tun-mtu, mssfix, sndbuf, rcvbuf and txqueuelen but nothing has helped me get better speed.

Here is my current configuration

7ubzGMx.png


and my client config is generated by the router. Is there anything i can adjust to get better speeds between the two? Thanks
Click to expand...

I'm with @yorgi, you should upgrade your firmware first. The version you're using is from 2014 -- lots and lots of improvements since then. If by chance the reason your firmware is so old is because it's the T-Mobile version of the router, it's worth going through the process to re-flash it, first to stock Asus and then to AsusWRT-Merlin.

Keep in mind too that your server side upload speeds are the max you could ever get on the client download side for VPN traffic. And, of course, you'll never see that maximum due to VPN overhead and sever side router processing power limitations. Getting the latest firmware should help close the gap though.
 
My OpenVPN implementation is also more optimized than the stock one (I compile OpenSSL and OpenVPN with higher levels of optimization).
 
bnhf said:
I'm with @yorgi, you should upgrade your firmware first. The version you're using is from 2014 -- lots and lots of improvements since then. If by chance the reason your firmware is so old is because it's the T-Mobile version of the router, it's worth going through the process to re-flash it, first to stock Asus and then to AsusWRT-Merlin.

Keep in mind too that your server side upload speeds are the max you could ever get on the client download side for VPN traffic. And, of course, you'll never see that maximum due to VPN overhead and sever side router processing power limitations. Getting the latest firmware should help close the gap though.
Click to expand...
You dont have to put Asus new firmware before upgrading to Merlin. You can do that one shot.
Upload new firmware and then do a factory default and you are good to go :)
 
yorgi said:
You dont have to put Asus new firmware before upgrading to Merlin. You can do that one shot.
Upload new firmware and then do a factory default and you are good to go :)
Click to expand...

Just a clarification here -- if @wacind is on the T-Mobile version of the AC1900, which I think he might be based on the vintage of his firmware, there's a very specialized process for re-flashing. The bootloader is locked, so he can't just go right to AsusWRT-Merlin. One of the steps in the process is to load an old version of the Asus factory stuff. Here's a quote from the re-flashing guide:

"Asus firmware 376.3626 (recommended after you get the new CFE loaded): http://dlcdnet.asus.com/pub/ASUS/...763626.zip
**NOTE: ASUS 376.3626 will expand your rootfs partition from 32M to 64M. This is needed for newer 376.xxxx, all 378 and all 380 versions of Asus / Merlin firmware to load**"

If his AC1900 isn't the T-Mobile version then yes, he should be able to jump right to the latest Merlin.
 
Thanks @bnhf and @yorgi . I was on the t-mobile version and over the weekened flashed it over to Merlin 360.68. However I am still having the same issues. My file transfer speed between server and client is still about 2Mbps. I have tried both TUN and TAP and get about the same speed with both of them.

My serverside download/upload is 330Mbps/25Mbps
My clientside download/upload is 25Mbps/5Mbps

Here are my server settings:
eIZzCbu.png


any recomendations?

Thanks for your help guys
 
You must log in or register to reply here.

Similar threads

gdgross
More VPN server questions
Replies
8
Views
683
gdgross
gdgross
T
[Help] Problems setting up OpenVPN
Replies
7
Views
335
Thookie
T
C
OVPN server setup problem
Replies
7
Views
386
cliver
C
M
OpenVPN Server - route back to client
Replies
7
Views
199
mekabe remain
M
B
Unable to establish VPN connection to my PiVPN (ovpn) from my Asus RT-AC86U running Asuswrt-Merlin 386.14
Replies
1
Views
237
eibgrad
eibgrad
Similar threads
Thread starter Title Forum Replies Date
L VPN included with router or extra fees? VPN 4
Paul Short Frustrating VPN Double NAT Issues VPN 5
S One website cannot be accessed when VPN is on VPN 7
L VPN service question VPN 9
B VPN router with Wifi to internet router VPN 7
gdgross More VPN server questions VPN 8
pusb87 Which VPN Providers provide Wireguard config files VPN 7
J CVE-2024-3661 Attackers can use TunnelVision to snoop on users’ VPN traffic. VPN 1
gdgross Setting up VPN server (router?) for offsite access VPN 13
C Instant Guard IPsec VPN Log Showing Regular Access Attempts VPN 3

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 799 (members: 34, guests: 765)
Top