OpenVPN server setup

[Jimbo]

I'm trying to setup OpenVPN server on my Asus AC56U Merlin rev. 378.54.
This same router is also acting as a VPN client to my vpn provider.

Unfortunately, I get an error on the OpenVPN client saying something like "can't authenticate using self-signed certificate". I googled a bit, and looks to me it might have to do with invalid certificates. I'm using the exported file from the Asus GUI, as I followed the Asus link and tutorial, with the only modification of the WAN IP to the external IP, instead of the Asus WAN internal IP, and port.

Would anyone be able to quickly enlighten me on this OpenVPN certificate error?. Hopefully it's something really stupid I might be omitting. I'm a bit familiar with the standard process, as in dd-wrt, where all certificates need to be generated and not sure if this Asus GUI exported file and mechanism might be missing something.

 

[martinr]

I have, in the past, been able to resolve issues - my stupidity/ignorance - simply by opening the exported .ovpn config file in Notepad++ on a Windows machine, where the cause of the problem immediatelty stood out. You might just be similarly lucky.

Looks like you gave up on that FTP wild-goose chase!

 

[Jimbo]

I was not that lucky so far, other than changing port and IP. I will try some other server today.
Would you know if required on the router to open or forward any port?, I'd presume not, since the router itself is the VPN server and should know where or who to forward to.

PS. Yes I gave up on the FTP. Even if I'd sort it out, it'd still be very ugly regarding security, and constrained as opposed to a VPN access to my LAN.

 

[martinr]

Would you know if required on the router to open or forward any port?, I'd presume not, since the router itself is the VPN server and should know where or who to forward tO? .....

Deceptively easy. That's the only phrase I can use to describe my experience setting it up. No fancy stuff port forwarding etc. Similarly, setting up Asus' DDNS to give me the equivalent of a static IP - deceptively easy - so much so, that, having come from DDWRT, I wasted a lot of time not realising I'd already achieved my aim: I was looking for more, non-existent, settings. I simply set things up in the Advanced Settings page in VPN server on the router gui, exported the .ovpn config file to the client machine's app/program and, as if by magic, it all seemed to work without a flaw.


My VPN settings are at. https://www.dropbox.com/s/1qm7xtjflz0h6v0/file 12-06-2015 20 50 27.png?dl=0

 

[Jimbo]

Thanks and appreciated for the info. I'll give it a try with those settings as well!

 

[Jimbo]

And finally!!!!

Tried with different VPN server without touching anything else as you mentioned.
Managed to get my VPN / FTP running. Thanks!

 

[martinr]

I told you so!

...... it might be a blessing in disguise (not being able to WAN access via FTP); no bad thing if it makes you consider setting up a secure tunnel via ssh or a vpn ...... .

Glad to hear all is finally well, and no doubt you learned a few new tricks along the way.

Good luck.