I've been running Asus-Merlin firmware for a while but I haven't tried to set up OpenVPN on it before. I've got my OVPN file from NordVPN and setting it up per their tutorial here but so far I haven't had any luck getting it to connect successfully. My settings are set like this:
This gets me the error shown, no matter what server I use on UDP.
I tried TCP instead and got a different failure (this error is from a previous attempt on a different server):
I'm not sure what's going on here, but any insight that could help me out would be appreciated!
Code:
remote-random
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0
remote-cert-tls server
pull
fast-ioThis gets me the error shown, no matter what server I use on UDP.
Code:
Apr 24 17:52:05 openvpn[10123]: OpenVPN 2.4.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Mar 29 2017
Apr 24 17:52:05 openvpn[10123]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.08
Apr 24 17:52:06 openvpn[10124]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Apr 24 17:52:06 openvpn[10124]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Apr 24 17:52:06 openvpn[10124]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 24 17:52:06 openvpn[10124]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 24 17:52:06 openvpn[10124]: TCP/UDP: Preserving recently used remote address: [AF_INET]173.234.12.85:1194
Apr 24 17:52:06 openvpn[10124]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Apr 24 17:52:06 openvpn[10124]: UDP link local: (not bound)
Apr 24 17:52:06 openvpn[10124]: UDP link remote: [AF_INET]173.234.12.85:1194
Apr 24 17:53:06 openvpn[10124]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Apr 24 17:53:06 openvpn[10124]: TLS Error: TLS handshake failed
Apr 24 17:53:06 openvpn[10124]: SIGUSR1[soft,tls-error] received, process restarting
Apr 24 17:53:06 openvpn[10124]: Restart pause, 5 second(s)I tried TCP instead and got a different failure (this error is from a previous attempt on a different server):
Code:
Apr 24 00:51:58 openvpn[9018]: OpenVPN 2.4.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Mar 29 2017
Apr 24 00:51:58 openvpn[9018]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.08
Apr 24 00:51:58 openvpn[9019]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Apr 24 00:51:58 openvpn[9019]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Apr 24 00:51:58 openvpn[9019]: NOTE: --fast-io is disabled since we are not using UDP
Apr 24 00:51:58 openvpn[9019]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 24 00:51:58 openvpn[9019]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 24 00:51:58 openvpn[9019]: TCP/UDP: Preserving recently used remote address: [AF_INET]173.234.12.85:443
Apr 24 00:51:58 openvpn[9019]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Apr 24 00:51:58 openvpn[9019]: Attempting to establish TCP connection with [AF_INET]173.234.12.85:443 [nonblock]
Apr 24 00:51:59 openvpn[9019]: TCP connection established with [AF_INET]173.234.12.85:443
Apr 24 00:51:59 openvpn[9019]: TCP_CLIENT link local: (not bound)
Apr 24 00:51:59 openvpn[9019]: TCP_CLIENT link remote: [AF_INET]173.234.12.85:443
Apr 24 00:51:59 openvpn[9019]: Connection reset, restarting [0]
Apr 24 00:51:59 openvpn[9019]: SIGUSR1[soft,connection-reset] received, process restarting
Apr 24 00:51:59 openvpn[9019]: Restart pause, 5 second(s)I'm not sure what's going on here, but any insight that could help me out would be appreciated!
