Hello,
Looking for guidance with setting up openvpn using ExpressVPN on a R9000 running Version (Voxel) V1.0.4.39.1HF firmware. I had been using Kong’s last DDWT which began being a bit troublesome lately. Followed the process to transition back to the latest Netgear firmware successfully. Next installed Voxel V1.0.4.39.1HF firmware, followed the first semiautomatic install method of OpenVpn using a USB stick. At this point the router has internet connectivity and OpenVPN client fails to start. I opted to install the Kamoj add-on V5 to take take advantage of the many enhancement it makes available. This add-on is fantastic! The error log is consistent with the “Client:Error: OpenVPN client start failed. No process or tun21 found”. I am completely stuck here. Got past some of the nuances V5 of the add-on brought with using authentication file. Below is the log section for last attempt to get the client working and further information on the network setup.
Main Router is a Cisco RV345
- Currently have UNPN enabled
- Disable firewall to test if it was causing the problem…erorred with same notice
- Port 1195 UDP & TCP forwarding to 172.16.9.1
Netgear R9000 is a VPN Only router
- Currently have UNPN enabled
- DNS is set to ExpressVPN’s recommendation
- 8.8.8.8
- 8.8.4.4
- 156.154.70.1
- Mode is Router
- Router has DHCP enabled.
- Only MacBook connected to router with WIFI and an Ethernet slot
- SSH enabled and working with key pairs.
- Kamoj add-on V5 installed
Session Log Section
2020-04-15 15:08:19 [OpenVPN] Client:Existing OpenVPN nvram configuration found: expressvpnDenver.ovpn
2020-04-15 15:08:19 [OpenVPN] Client:Check if DNS is already working
2020-04-15 15:08:19 [OpenVPN] Client password file given and exist.
2020-04-15 15:08:19 [OpenVPN] Client:Copy /etc/openvpn/config/client/expressvpnDenver.ovpn and change dev to: tun21
2020-04-15 15:08:19 [OpenVPN] Client:******* ip route before START:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:19 [OpenVPN] Client:Starting OpenVPN client expressvpnDenver.ovpn, device: tun21. Please wait...
Wed Apr 15 15:08:19 2020 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6
Wed Apr 15 15:08:19 2020 OpenVPN 2.4.8 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Wed Apr 15 15:08:19 2020 library versions: OpenSSL 1.1.1e 17 Mar 2020, LZO 2.10
Wed Apr 15 15:08:19 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Apr 15 15:08:19 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:19 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:20 2020 nice -20 succeeded
Wed Apr 15 15:08:20 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Wed Apr 15 15:08:20 2020 UDP link local: (not bound)
Wed Apr 15 15:08:20 2020 UDP link remote: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 TLS: Initial packet from [AF_INET]70.39.102.170:1195, sid=549c09f2 03891a11
2020-04-15 15:08:41 [OpenVPN] Client:INFO: OpenVPN client pid:6138/PID:6138 started with: /usr/sbin/openvpn--devtun21--fast-io--nice-20--auth-nocache--sndbuf786432--rcvbuf786432--tun-mtu1500--mssfix1460--txqueuelen1000--writepid/var/run/openvpn-client.pid--cd/etc/openvpn/config/client--log-append/var/log/openvpn-client.log--config/tmp/openvpn_conf/expressvpnDenver.ovpn--script-security2--up/etc/openvpn/ovpnclient-up.sh--down/etc/openvpn/ovpnclient-down.sh--daemon--pushsndbuf 786432--pushrcvbuf 786432
2020-04-15 15:08:41 [OpenVPN] Client:Error: OpenVPN client start failed. No process or tun21 found
2020-04-15 15:08:41 [OpenVPN] Client:Connection is DOWN:
Wed Apr 15 15:08:41 2020 event_wait : Interrupted system call (code=4)
Wed Apr 15 15:08:41 2020 SIGTERM[hard,] received, process exiting
2020-04-15 15:08:41 [OpenVPN] Client:Optimize Stop. Turning Turbo mode off
2020-04-15 15:08:41 [OpenVPN] Client:Stopped. Restarting Firewall
2020-04-15 15:08:41 [OpenVPN] Client:Remove bad entry from ip route after stop: ip route del:
2020-04-15 15:08:41 [OpenVPN] Client:[OpenVPN] Client:******* ip route before STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:******* ip route after STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:Stop completed
Full VPN Log Section
2020-04-15 15:08:19 [OpenVPN] Client:Starting OpenVPN client expressvpnDenver.ovpn, device: tun21. Please wait...
Wed Apr 15 15:08:19 2020 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6
Wed Apr 15 15:08:19 2020 OpenVPN 2.4.8 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Wed Apr 15 15:08:19 2020 library versions: OpenSSL 1.1.1e 17 Mar 2020, LZO 2.10
Wed Apr 15 15:08:19 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Apr 15 15:08:19 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:19 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:20 2020 nice -20 succeeded
Wed Apr 15 15:08:20 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Wed Apr 15 15:08:20 2020 UDP link local: (not bound)
Wed Apr 15 15:08:20 2020 UDP link remote: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 TLS: Initial packet from [AF_INET]70.39.102.170:1195, sid=549c09f2 03891a11
2020-04-15 15:08:41 [OpenVPN] Client:INFO: OpenVPN client pid:6138/PID:6138 started with: /usr/sbin/openvpn--devtun21--fast-io--nice-20--auth-nocache--sndbuf786432--rcvbuf786432--tun-mtu1500--mssfix1460--txqueuelen1000--writepid/var/run/openvpn-client.pid--cd/etc/openvpn/config/client--log-append/var/log/openvpn-client.log--config/tmp/openvpn_conf/expressvpnDenver.ovpn--script-security2--up/etc/openvpn/ovpnclient-up.sh--down/etc/openvpn/ovpnclient-down.sh--daemon--pushsndbuf 786432--pushrcvbuf 786432
2020-04-15 15:08:41 [OpenVPN] Client:Error: OpenVPN client start failed. No process or tun21 found
2020-04-15 15:08:41 [OpenVPN] Client:Connection is DOWN:
Wed Apr 15 15:08:41 2020 event_wait : Interrupted system call (code=4)
Wed Apr 15 15:08:41 2020 SIGTERM[hard,] received, process exiting
2020-04-15 15:08:41 [OpenVPN] Client:Optimize Stop. Turning Turbo mode off
2020-04-15 15:08:41 [OpenVPN] Client:Stopped. Restarting Firewall
2020-04-15 15:08:41 [OpenVPN] Client:Remove bad entry from ip route after stop: ip route del:
2020-04-15 15:08:41 [OpenVPN] Client:[OpenVPN] Client:******* ip route before STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:******* ip route after STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:Stop completed
Looking forward to using the firmware and add-ons. Looks like huge amount of great work putting this together!