Unable to get OpenVPN Server to work on RT-AC86U with ASUSWRT-Merin

[punkinpun]

My Router: RT-AC86U

Without ASUSWRT-MERLIN, the OpenVPN server with the ASUSWRT works perfectly. But it doesn't work after I have upgraded with ASUSWRT-MERLIN firmware. I tried 384.15 and 384.13 with no avail! If I reverted it back to ASUSWRT 3.0.0.4_384_81351 or RT-AC86U_3.0.0.4_384_81049, the OpenVPN server on router works again. All settings remain unchanged as-is in either firmware.

In the system log, I found TLS Error with ASUSWRT-MERLIN firmware when the client was trying to connect.

Feb 16 01:18:18 ovpn-server1[1503]: 192.168.1.212:53631 TLS: Initial packet from [AF_INET]192.168.1.212:53631, sid=20cb05c9 6714b29d
Feb 16 01:19:18 ovpn-server1[1503]: 192.168.1.212:53631 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Feb 16 01:19:18 ovpn-server1[1503]: 192.168.1.212:53631 TLS Error: TLS handshake failed
Feb 16 01:19:18 ovpn-server1[1503]: 192.168.1.212:53631 SIGUSR1[soft,tls-error] received, client-instance restarting
Feb 16 01:19:23 ovpn-server1[1503]: 192.168.1.212:63868 TLS: Initial packet from [AF_INET]192.168.1.212:63868, sid=4a8ecf69 8b8cf5d5

Any suggestion or help to fix? Thanks.

 

[L&LD]

After flashing the RMerlin firmware (384.15_0 recommended), did you do a full reset to factory defaults followed by a minimal and manual configuration to secure the router and connect to your ISP?

See the M&M Config and the Nuclear Reset guides to get your router to a good/known state.

 

[ColinTaylor]

Test the connection from outside your LAN and it should work.

 

[punkinpun]

Test the connection from outside your LAN and it should work.

Yes, it works! Testing from outside works like a charm
Many thanks.

 

[slytho]

My Router: RT-AC86U

In the system log, I found TLS Error with ASUSWRT-MERLIN firmware when the client was trying to connect.

Any suggestion or help to fix? Thanks.

Thank you for your post. I have the same problem but no time yet time to write a post.

Test the connection from outside your LAN and it should work.

May I ask what is the reason for that from the network's point of view? I also created a forward rule, reverted changed settings like DNS to standard ... but to no avail, I had the same error as punkinpun posted.