OpenVPN and Asus RT-AC86U doesn´t work

[Asus_fan]

Hi all,
i´ve changed my Router from AC68U to AC86U. On my AC68U everything works fine with OpenVPN Client, but only to Merlin FW 380.64_2. Every newer Firmware didn´t work. For my AC86U only exist 382.1.
There are Problems, connect the Client to Perfect-Privacy. Original FW doesn´t work too.
Here is my Log and Settings

 

[doczenith1]

Have you tried getting an updated ovpn file from your vpn provider? I think the openvpn version might have changed from 2.3 to 2.4 between your old router firmware and the current firmware. That might be part of the problem.

 

[RMerlin]

Add this to your configuration:

pull-filter ignore "ifconfig-ipv6"
pull-filter ignore "route-ipv6"

EDIT: fixed typo.

 

[Asus_fan]

It seems like, there is not enough space in Custom Configuration.
There is only space for 180 Charakter. Any idea to expand the field?
This commands are from ovpn file

tun-mtu 1500
fragment 1300
mssfix
ignore-unknown-option ncp-disable
hand-window 120
inactive 604800
mute-replay-warnings
ns-cert-type server
persist-remote-ip
ping 5
ping-restart 120

 

[RMerlin]

There is only space for 180 Charakter. Any idea to expand the field?

You can't. This was a low-level limitation of the platform, you will have to wait for a future version that can expand it a bit more (but it will still have a lower limitation than other router models).

There's a lot of useless entries in there that you could remove. Remove these:

persist-remote-ip
ping 5
ping-restart 120
fragment 1300
hand-window 120
ignore-unknown-option ncp-disable

 

[Asus_fan]

now the connection is possible, but i can´t open a website and ping got no answer.
I have not configured an ipv6. Here`s the Log.

 

[Asus_fan]

no one an idea? Please help

 

[RMerlin]

Your server pushes a DNS. Make sure you set DNS mode to "Exclusive", in case your tunnel provider blocks DNS requests sent to other servers.

 

[Asus_fan]

i´ve changed to exlusive. But the same problem and now the router GUI loads very slowly.
Sorry, i can´t upload txt file, forum seems to be bugy.

 

[Asus_fan]

can no one help me???

 

[Martineau]

can no one help me???

The IPv6 filter option @RMerlin provided is incorrect

..as shown in your OpenVPN log:

Jan  2 23:52:44 openvpn[5456]:   Pull filters:
Jan  2 23:52:44 openvpn[5456]:     ignore "ifconfig-ipv6"
Jan  2 23:52:44 openvpn[5456]:     ignore "router-ipv6"

I suggest that you correct the typo and ensure the first 3 commands in your Custom Configuration are:

remote-cert-tls server
pull-filter ignore "ifconfig-ipv6"
pull-filter ignore "route-ipv6"

 

[RMerlin]

Thanks, typo fixed in my post.

 

[Asus_fan]

It don´t want to connect
TLS Error.
Thats my Config

remote-cert-tls server
pull-filter ignore "ifconfig-ipv6"
pull-filter ignore "route-ipv6"
tun-mtu 1500
mssfix
inactive 604800
mute-replay-warnings
ns-cert-type server

 

[JJQuin]

I googled the error in this part of the log:

Jan 11 17:52:28 openvpn[12971]: TLS_ERROR: BIO read tls_read_plaintext error
Jan 11 17:52:28 openvpn[12971]: TLS Error: TLS object -> incoming plaintext read error

It looks like there's a problem with your certificate authority. Was the Certificate Authority part of the opvn file or did you cut and paste it in the field? I would check Perfect Privacy's website for an updated certificate. Also if your cut and pasting it into the field make sure there are no carriage returns. You can use notepad, just turn off word wrap to check.

RT-AC86U - Merlin 382_beta3 unofficial

 

[Asus_fan]

It was part of the ovpn file. I´ve tried different ovpn files. Always the same error.
The Ovpn file conatains
Static Key
Certificate Authority
Client Certificate
Client Key

 

[Asus_fan]

I solved the problem

 

[JJQuin]

Can you describe how you solved it? Someone else may run into the same issue and you could be saving them hours or days of figuring it out!

 

[Asus_fan]

i found this hint

Gesendet von meinem SM-G930F mit Tapatalk

 

[Ryancope123]

Hi guys, i also have an AC 86U, connected to the VPN superb download upload should be 20mb getting 0.34, clearly something wrong , same server from PC is working perfectly ? any ideas

 

[Asus_fan]

Hi guys, i also have an AC 86U, connected to the VPN superb download upload should be 20mb getting 0.34, clearly something wrong , same server from PC is working perfectly ? any ideas

Try to deactivate NAT acceleration. Otherwhile it slow down the CPU.