RT-AC87 - Has anyone gotten OpenVPN running?

[SylCoca]

Finally got this working. Thanks, everyone!

EDIT: I have to add, performance with OpenVPN set up is significantly faster with the RT-AC87R than it was with the RT-AC66R. I am seeing little to no loss of speed, indicating to me that the AC66R was definitely having issues with its CPU handling OpenVPN encryption.

Can you help me out, I am having some issues getting my router to connect to my VPN, PIA and a AC68U using the latest merlin.

I have my open file set up as listed by hackintoshr, with a different server, Texas


My error log
Error:
*rc_service: httpd 561:notify_rc start_vpnclient1
*You must define CA file (--ca) or CA path (--capath)
*Aug 8 17:22:15 openvpn[4907]: Use --help for more information.

Once i uoload the file, click apply, In the OpenVpn client tab, when I try to activate service state from off to ON (green), it won't engage and spits out the error above.

I have no idea what is the setting I am missing. Thanks for any help you can provide.

 

[SylCoca]

Figured it out. For those with similar issues, I had to open the ca.crt file in notepad, and copy the contents.

Go the OpenVpn client tab in merlin. Move down to the AUTHORIZATION MODE line. TLS should be in the prompt already from the ovpn file that was uploaded already..

Click on the (yellow font) Content modification of Keys and Certificates link,

Copy the contents of the ca.crt file into the Certificate Authority prompt.

click save. Click Apply back in the OpenVpn Client tab.

And now it all works great. Service state is green/on.

My speed drops hard though. Using the PIA client I get 40Mb down (out of 50Mb), using the router through VPN I get 25Mb down.

Is that mainly a by product of the processor in the AC68U vs say the 87U?

Thanks for the thread, and Merlin for the great firmware

 

[psychopomp1]

Hi,
I have a RT-AC87R running stock fw, can OpenVPN only be used on Merlin fw or can you use it on stock fw as well?

 

[RMerlin]

Hi,
I have a RT-AC87R running stock fw, can OpenVPN only be used on Merlin fw or can you use it on stock fw as well?

Stock FW also has OpenVPN support, albeith slightly more limited (for instance, you can only run one single server).

 

[psychopomp1]

Stock FW also has OpenVPN support, albeith slightly more limited (for instance, you can only run one single server).

Thanks Merlin. Sorry if I'm being a bit thick but if you can only connect to 1 VPN server at a time why would the multiple server option be useful?

 

[L&LD]

Stock firmware only lets you have one VPN server.

RMerlin's firmware allows multiple VPN's and they can be used consecutively.

 

[RMerlin]

Thanks Merlin. Sorry if I'm being a bit thick but if you can only connect to 1 VPN server at a time why would the multiple server option be useful?

Having two separate servers can be useful for cases where you are experimenting with different settings, or have different security requirements. I admit it's a pretty limited usefulness, but it came as a "free bonus" when I ported the Tomato code to Asuswrt-Merlin. Asus probably chose not to keep that particular feature for the sake of simplicity (or to reduce the amount of nvram consumed).

 

[corvus]

Hello all,

Total noob here. I'm using PIA and have been running it successfully with a basic Cisco e1200 running Tomato, but it's really slow. I just invested in this asus AC87R and having a hard time figuring out how to configure it. Pretty confused about it all. Is there a good tutorial or video someone can recommend that shows step by step set up. Any help would be appreciated.