The VPN Client, can't get it to work

[TobbeWilson]

Hi (again),
Anyone got a grip on how to configure the VPN client?
I have it running in 376.47, no errors at all but still "it's not used", because if checking i can see my real ip. I have set it up together with the VPN provider and according to the Tomato manuals and now i'm close to giving up.
I don't know where to look for errors...
If you know anything, please tell!
Thanks in advance!

I'm not sure how much of this information i should show.

 

[octopus]

One thing I can se is you have setup CA and statick key but you have Username and password auth only ticked to yes, therefore your CA and statick key never been used.

Your CA cert looking weird, have you mask it? make sure they don't have CR in the end of keyfile.

 

[TobbeWilson]

One thing I can se is you have setup CA and statick key but you have Username and password auth only ticked to yes, therefore your CA and statick key never been used.

Ok, thanks for noticing.
Changed, no changes to (u)nfunctionality.

Your CA cert looking weird, have you mask it? make sure they don't have CR in the end of keyfile.

No, just zoomed the view so it would fit here.

 

[TobbeWilson]

Forgot to mention that i'm also using my VPN providers DNS Servers as they told me.

 

[cosmoxl]

the one log capture you have shows it's all good but I guess it just waits there doing nothing more?

you should probably change switch to "verb 4" or "verb 5" for debugging.

 

[TobbeWilson]

the one log capture you have shows it's all good but I guess it just waits there doing nothing more?

Correct!

you should probably change switch to "verb 4" or "verb 5" for debugging.

I will do that when i get home later this afternoon.

 

[TobbeWilson]

Correct!


I will do that when i get home later this afternoon.

And here we go, the log with verb 5, still no errors that i can see...

 

[TobbeWilson]

And here we go, the log with verb 5, still no errors that i can see...

Wait!
Just after posting the logfile, it was updated with this...attached
It has the following errors:
Oct 22 22:17:16 openvpn[9298]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Oct 22 22:17:16 openvpn[9298]: TLS Error: TLS handshake failed
Oct 22 22:17:16 openvpn[9298]: TCP/UDP: Closing socket
Oct 22 22:17:16 openvpn[9298]: SIGUSR1[soft,tls-error] received, process restarting

 

[TobbeWilson]

And port 1194 is open according to the router, but not according to netstat -a

 

[cosmoxl]

because you have the static key I think you need to change extra HMAC authorization to outgoing instead of disabled.

 

[TobbeWilson]

Ok, thanks. I have set it to Outgoing.

I must admit that i'm getting more than a little confused now. I have gone thru and changed almost everything there is to change on the router and i think i have gotten a bit further. Now, as far as i can see the handshake is ok but then there's an error.
And unlike before, the VPN Client shuts off again, before it stayed active.
New log...

Oct 23 08:30:01 openvpn[2416]: Linux ip addr add failed: external program exited with error status: 2
Oct 23 08:30:01 openvpn[2416]: Exiting due to fatal error

 

[TobbeWilson]

I contacted my VPN provider and he said that the error was on my side when they try to give me an ipv6 address.
Ipv6 is inactive in my router because my is does not support it.

 

[RMerlin]

IPv6 is not supported by OpenVPN.

 

[TobbeWilson]

My VPN provider says it does support ipv6 and the problem is that my router use an old version of it.

 

[cosmoxl]

Is mullvad saying the only connections they support now are IPv6?

 

[cosmoxl]

your router is using openvpn version 2.3.4. I see in the log you posted. It also explicitly states IPv6 capability in that same line.

so, perhaps IPv6 needs needs to be enabled on your router even though your ISP doesn't support it. then maybe it'll understand the IPv6 address the VPN provider is trying to give you. just a guess.

 

[RMerlin]

It does need to be enabled by the user in the configuration, OpenVPN by default doesn't enable IPv6 support. However I have no idea if the rest of the firmware is able to support it, I had no way of testing it.

 

[TobbeWilson]

Is mullvad saying the only connections they support now are IPv6?

Not Mullvad, OVPN.se

 

[TobbeWilson]

It does need to be enabled by the user in the configuration, OpenVPN by default doesn't enable IPv6 support. However I have no idea if the rest of the firmware is able to support it, I had no way of testing it.

Ok, it was disabled because my ISP does not support it.
I have tried to enable it now, and the router does not respond at all.

I only changed the ipv6 from Disabled to Native, and hit Apply.
I have tried this once before with the same result, and if i cut the power and restart, it will start up so i can disable it again.

 

[RMerlin]

Ok, it was disabled because my ISP does not support it.
I have tried to enable it now, and the router does not respond at all.

I only changed the ipv6 from Disabled to Native, and hit Apply.
I have tried this once before with the same result, and if i cut the power and restart, it will start up so i can disable it again.

If your ISP does not support IPv6 then enabling it as Native is a bad idea to begin with.