Using 2 different VPN configs and providers

[Fingers]

I have a RT5300 running Merlin 380.65.4 I had set up a vpn connection with PIA using these settings:

https://helpdesk.privateinternetacc...ing-up-an-Asus-Router-running-Merlin-Firmware

Everything was running ok.

Then I entered another VPN providers config as PIA didnt have the country I needed for the devices I wanted to connect. As soon as I introduced this new VPN, the PIA one stopped woking and will not even start. I dindnt alter any settings apart from introdunce the new vpn. (that works great).

These are the logs when I try to start the PIA vpn:

Apr  9 00:40:08 custom config: Found /jffs/configs/dnsmasq.conf.add, but custom configs are disabled!
Apr  9 00:45:06 rc_service: httpd 559:notify_rc start_vpnclient1
Apr  9 00:45:07 openvpn[5507]: Options error: If you use one of --cert or --key, you must use them both
Apr  9 00:45:07 openvpn[5507]: Use --help for more information.
Apr  9 00:45:08 kernel: EMF_ERROR: Interface tap11 doesn't exist
Apr  9 00:45:08 kernel: EMF_ERROR: Interface tun11 doesn't exist
Apr  9 00:45:08 custom config: Found /jffs/configs/dnsmasq.conf.add, but custom configs are disabled!
Apr  9 00:46:36 rc_service: httpd 559:notify_rc start_vpnclient1
Apr  9 00:46:38 openvpn[5810]: Options error: If you use one of --cert or --key, you must use them both
Apr  9 00:46:38 openvpn[5810]: Use --help for more information.
Apr  9 00:46:38 kernel: EMF_ERROR: Interface tap11 doesn't exist
Apr  9 00:46:38 kernel: EMF_ERROR: Interface tun11 doesn't exist
Apr  9 00:46:38 custom config: Found /jffs/configs/dnsmasq.conf.add, but custom configs are disabled!
Apr  9 00:47:44 rc_service: httpd 559:notify_rc start_vpnclient1
Apr  9 00:47:46 openvpn[6029]: Options error: If you use one of --cert or --key, you must use them both
Apr  9 00:47:46 openvpn[6029]: Use --help for more information.
Apr  9 00:47:46 kernel: EMF_ERROR: Interface tun11 doesn't exist
Apr  9 00:47:46 kernel: EMF_ERROR: Interface tap11 doesn't exist
Apr  9 00:47:46 custom config: Found /jffs/configs/dnsmasq.conf.add, but custom configs are disabled!
Apr  9 01:00:14 disk_monitor: Got SIGALRM...
Apr  9 09:39:59 rc_service: httpd 559:notify_rc start_vpnclient1
Apr  9 09:40:00 openvpn[30970]: Options error: If you use one of --cert or --key, you must use them both
Apr  9 09:40:00 openvpn[30970]: Use --help for more information.
Apr  9 09:40:01 kernel: EMF_ERROR: Interface tap11 doesn't exist
Apr  9 09:40:01 kernel: EMF_ERROR: Interface tun11 doesn't exist
Apr  9 09:40:01 custom config: Found /jffs/configs/dnsmasq.conf.add, but custom configs are disabled!

Apr  9 00:28:31 rc_service: httpd 559:notify_rc start_vpnclient1
Apr  9 00:28:33 openvpn[2459]: OpenVPN 2.4.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Mar 29 2017
Apr  9 00:28:33 openvpn[2459]: library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.08
Apr  9 00:28:33 openvpn[2460]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Apr  9 00:28:33 openvpn[2460]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Apr  9 00:29:03 openvpn[2460]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 00:29:33 openvpn[2460]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 00:30:08 openvpn[2460]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 00:30:43 openvpn[2460]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 00:31:18 openvpn[2460]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 00:31:43 rc_service: httpd 559:notify_rc stop_vpnclient1
Apr  9 00:31:48 openvpn[2460]: RESOLVE: signal received during DNS resolution attempt
Apr  9 00:31:48 openvpn[2460]: Could not determine IPv4/IPv6 protocol
Apr  9 00:31:48 openvpn[2460]: SIGHUP[hard,close_context usr1 to hup] received, process restarting
Apr  9 00:31:48 openvpn[2460]: OpenVPN 2.4.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Mar 29 2017
Apr  9 00:31:48 openvpn[2460]: library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.08
Apr  9 00:31:54 kernel: EMF_ERROR: Interface tun11 doesn't exist
Apr  9 00:31:54 kernel: EMF_ERROR: Interface tap11 doesn't exist
Apr  9 00:31:54 custom config: Found /jffs/configs/dnsmasq.conf.add, but custom configs are disabled!

Any help would be appreciated, is this a bug when using two different providers?

 

[Martineau]

... is this a bug when using two different providers?

Use of multiple concurrent VPN connections using two different VPN providers is perfectly valid (However, I don't use TAP so this may require custom tweaks?)

Apr  9 00:31:54 custom config: Found /jffs/configs/dnsmasq.conf.add, but custom configs are disabled!

Have you accidentally disabled the custom script execution?

 

[Fingers]

I have to say, I have no idea about that setting, I have never touched it. I have now enabled it but still no success. Its strange that it was working fine before I added the other VPN. When I try to start the PIA vpn now I get this in the log:

Apr  9 09:57:28 rc_service: httpd 559:notify_rc start_vpnclient5
Apr  9 09:57:29 openvpn[2045]: OpenVPN 2.4.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Mar 29 2017
Apr  9 09:57:29 openvpn[2045]: library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.08
Apr  9 09:57:29 openvpn[2046]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Apr  9 09:57:29 openvpn[2046]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Apr  9 09:57:29 openvpn[2046]: CRL: cannot read CRL from file crl.pem
Apr  9 09:57:59 openvpn[2046]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 09:58:29 openvpn[2046]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 09:59:04 openvpn[2046]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 09:59:39 openvpn[2046]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 10:00:15 openvpn[2046]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 10:00:50 openvpn[2046]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 10:01:25 openvpn[2046]: RESOLVE: Cannot resolve host address: uk-london.privateinternetaccess.com:1198 (Name or service not known)
Apr  9 10:01:25 openvpn[2046]: Could not determine IPv4/IPv6 protocol
Apr  9 10:01:25 openvpn[2046]: SIGUSR1[soft,init_instance] received, process restarting
Apr  9 10:01:28 rc_service: httpd 559:notify_rc stop_vpnclient5

 

[Martineau]

I have to say, I have no idea about that setting, I have never touched it. I have now enabled it [/CODE]

Well the file '/jffs/configs/dnsmasq.conf.add' has now presumably been processed i.e. merged into '/etc/dnsmasq.conf' ?, but 'jffs/configs/dnsmasq.conf.add' is not included in the firmware so must have been created by you and without enabling the 'custom scripts' option the merge could never happen.

So if you have imported the config.ovpn into VPN Client 5, then there is probably something wrong with the provided config?

First I would remove ALL custom config directives from VPN Cient 5 and retry.

If it still fails then check the contents of /etc/openvpn/client5/config.ovpn

 

[Fingers]

Not sure if these screen shots can be made out due to the resoloution of mthe screen but here are the settings that were previosley working and are untouched:

 

[Fingers]

Ok Will try what you recommend, thanks for the help

 

[Fingers]

Ok well time is not on my side today, but it appears that it is not possible to run 2 different openvpn from 2 different companys. I have tried everything I know and PIA will not connect when I am also connected with a config file from Exa VPN. I am not an expert, but PIA was working fine, then I added EXA config (that works fine) but then PIA refuses to connect without any changes in settings. Clearly a bug somewhere. But as I said I am a noob with routing/networks so I am limited by my knowledge.

As a work around I have installed the PIA windows app to at least use on my PC.

 

[Martineau]

... but it appears that it is not possible to run 2 different openvpn from 2 different companys.

Well here someone confirms that PIA does apparently seem to co-exist concurrently with a different VPN provider

https://www.snbforums.com/threads/v...lin-380-65-not-functioning.37800/#post-311673

However, there does seem to be performance/speed issues?

Is it a coincidence that PIA does seem to be the common factor causing problems in a dual-vendor VPN client configuration?

P.S. Did you try configuring PIA with the real I/P address of 'uk-london.privateinternetaccess.com' as it would possibly appear that there is a DNS resolution issue as the root cause of your connection failure?

 

[john9527]

If you are using 'exclusive' for accept DNS configuration on either one, try changing it to 'strict' on both.

 

[Fingers]

Thank you,

This is now the situation:

Both vpn configs stipulate 'Accept DNS Configuration - Strict'

When I do this, only one will connect at once. If I turn both off and set to both to 'Relaxed' and turn one on at a time, neither will work.

The only way I can get them to work is I set them both to 'Strict' then set one to 'Relaxed' while it is running without disabling it. It then connects as it should. I have tried this with EXA VPN, PIA, & IP Vanish.

Bit of a hassle messing, I would have liked to just click on and off.

 

[Fingers]

Quick update:

All will report connected but only one VPN will actuall have a connection at any one time. I cannot find away for all to connect at the same time. Using one VPN provider with 3 different configs work fine, just not with different VPN providers.