OpenVPN Client Torguard Issue

[bobpow]

Hi
I setup an Open VPN Client Torguard on my rt 1900P router and I got some warning msgs regarding the cipher level. I spoke to Torguard and they told my to change it to AES 256 or AES 128 , but for the like of me I cannot find the cipher level on the VPN client page. Can Anyone direct my to the location?
Thanks

 

[skeal]

Hi
I setup an Open VPN Client Torguard on my rt 1900P router and I got some warning msgs regarding the cipher level. I spoke to Torguard and they told my to change it to AES 256 or AES 128 , but for the like of me I cannot find the cipher level on the VPN client page. Can Anyone direct my to the location?
Thanks

Look at these as an example:

 

[bobpow]

Thanks That did it.

 

[bobpow]

I am trying to get my Amazon firestick to bypass the toguard vpn and have follow a link by Marin on open vpn and set the option on the vpn client page Redirect internet traffic to Policy rules And added the IP address to point to wan interface but it does seems to working. When I apply and reboot , I check my iPad and it gives me my isp address . Meanwhile on the vpn client page it shows the vpn address. But all my traffic seems to be redirected to my isp.
Any help would be appreciated.
Thanks

 

[skeal]

I am trying to get my Amazon firestick to bypass the toguard vpn and have follow a link by Marin on open vpn and set the option on the vpn client page Redirect internet traffic to Policy rules And added the IP address to point to wan interface but it does seems to working. When I apply and reboot , I check my iPad and it gives me my isp address . Meanwhile on the vpn client page it shows the vpn address. But all my traffic seems to be redirected to my isp.
Any help would be appreciated.
Thanks

To use the VPN provided DNS use the "accept dns configuration to exclusive" Then use DNSFilter to direct the firesticks to the prefered DNS server you want. I use "accept DNS configuration to disabled" This makes the VPN use the router as DNS so if the router is setup to use DoT then the DoT works through the VPN and Diversion etc. My firesticks only seem to work well using generic 1.1.1.1 DNS so I have a DNSFilter rule set for both my firesticks to use 1.1.1.1 even though they run through my VPN.

 

[bobpow]

Thanks Skeal.
I set the vpn dns to exclusive and the DNS filter as below , doesn.t work.Any help would be appreciated

 

[skeal]

Thanks Skeal.
I set the vpn dns to exclusive and the DNS filter as below , doesn.t work.Any help would be appreciated

With it setup like you show, the firestick should use 1.1.1.1 as it's DNS. Make sure that the devices you have set in the VPN client are set to route through the VPN not WAN. If you want WAN access for a device leave it out of the VPN client configuration entirely. If the "accept dns configuration set to exclusive" in the VPN client then any device routed through the VPN will use the VPN provider's DNS. To make this work I had to set the "DNS Server one" on the WAN page to the router's IP, "DNS Server two" is blank. So basically set only devices needing the VPN to route through the VPN interface. I know there is a WAN ability there but don't use it, in this case. Choose the VPN interface for your devices.

 

[skeal]

For me my firestick runs through my Torguard VPN but uses 1.1.1.1 as it's DNS, in spite of the fact the "accept dns is set to disabled".

 

[bobpow]

Thanks for all your help.
but still no luck, every time i set the vpn dns to disable and set other parameters all my devices use my isp address not the vpn address and the firestick still gets blocked. If I set the vpn to exclusive it gets the vpn addy and I can not get the firestick routed around the vpn.
Thanks for your assistance

 

[skeal]

and set other parameters

What are the other parameters?

 

[skeal]

firestick still gets blocked

In what way are you blocked?

 

[bobpow]

The Wan DNS to yes
And adding the Firestick to the DNS filter set to 1.1.1.1

 

[bobpow]

setting disabled DNS sends me out to the internet via ny isp address
and setting it to exclusive blocks the fire stick . amazon says I have a VPN or proxy up

 

[skeal]

Basic accepted knowledge:
Choosing "accept dns configuration disabled," will force the vpn to use your routers DNS. If that is set as your isp dns, then that's what you will see.
Use policy rules (strict) to ensure your routing wishes are respected.
If a device routed through the vpn needs to have a different dns (like my firestick) you set that in DNSFilter.

In my opinion your test is accurate. With the VPN DNS set to disabled you are seeing your isp dns as defined on the WAN page.
If Netflix is blocking you it may be because of a blocked IP range. I pay an extra 3$ CDN a month to have a non-blacklisted streaming ip based in the USA. That means that my devices are being dumped into the USA. When I use DNSFilter to direct the device to use 1.1.1.1 the device thinks it's in the USA so it uses USA based Cloudflare DNS Servers so I get around the Netflix proxy detection.

 

[bobpow]

actually I am using stubby and my dns servers are Cloudflare. The address that I am exposing is my ISP IP address not my dns

 

[skeal]

The address that I am exposing is my ISP IP address not my dns

I follow so far but not sure what you mean by this.

 

[bobpow]

the address exposed is the isp wan address on the router interface. like in whats my ip

 

[skeal]

Is your VPN connected? Is the device you are using to test with, routed the same way as the device you are checking for? To check the VPN you have to be routed through the VPN. If the VPN connects, and the test machine is routed through the VPN, you will see the VPN providers IP. Lets get that working first.

 

[bobpow]

Yes the vpn is up and working. I have a Torguard IP address. All my devices are going thru the VPN

 

[skeal]

Yes the vpn is up and working. I have a Torguard IP address. All my devices are going thru the VPN

If you have policy rules strict and routing all through the VPN you should see in a ipleak.net test the IP of your Torguard client. If not then something isn't right with your policy routing.