VPN Client on asus rt-86u

[zwenneke]

Good day all.

I have a problem with my asus rt-86u running merlin's build 384.3. The asus is behind the router from my isp. When i setup the vpn client on the router it only connects with my vpn provider when i put a networkcable in the wan port of the asus. ( wan asus - lan isp modem)
When i try to set it up through the lan of the asus it doesnt connect. (lan asus - lan isp modem)

I believe i have set it up correctly to work through lan connection. ip range isp modem is the same on my asus, same subnet, dhcp only activated on the isp modem. I have got internet connection, can browse the web but my vpn client can't connect.

Any help is much appreciated.
Grtz Peter.

 

[ColinTaylor]

That's expected behaviour. The VPN client tries to connect over the WAN port, which you have disconnected.

 

[zwenneke]

That's expected behaviour. The VPN client tries to connect over the WAN port, which you have disconnected.

Thx for the anwser, i know. But i would like to get it to work through lan connection. Is that even possible?

 

[CaptainSTX]

Probably not going to be able to get to work by connecting through a LAN port on your ASUS as it is then operating as an AP.

Easiest and a very workable solution is to double NAT your ASUS behind your ISP modem. Unless you have a very complicated/ unique setup double NATing doesn't create network problems for most people. I personally run in a double NAT setup specifically because of some advantages it offers. I run a VPN client on the second router and it works fine. On the other hand trying to run a VPN server on the double NATed router hasn't worked for me. This is the only thing I haven't been able to do in a double NAT setup using either ASUS stock firmware or Merlin's adaptation.

FYI if you do run in a double NAT their is no need to put your second router in the DMZ and probably only rare situations where you will need to forward ports on both routers.

 

[zwenneke]

Probably not going to be able to get to work by connecting through a LAN port on your ASUS as it is then operating as an AP.

Easiest and a very workable solution is to double NAT your ASUS behind your ISP modem. Unless you have a very complicated/ unique setup double NATing doesn't create network problems for most people. I personally run in a double NAT setup specifically because of some advantages it offers. I run a VPN client on the second router and it works fine. On the other hand trying to run a VPN server on the double NATed router hasn't worked for me. This is the only thing I haven't been able to do in a double NAT setup using either ASUS stock firmware or Merlin's adaptation.

FYI if you do run in a double NAT their is no need to put your second router in the DMZ and probably only rare situations where you will need to forward ports on both routers.

OK Thx. And how do i do that on the asus? I'm just a beginner in networking. I don't have a difficult setup, it's pretty straight forward. Isp modem/router connected to my asus. All my devices connect through the asus.

 

[CaptainSTX]

OK Thx. And how do i do that on the asus? I'm just a beginner in networking. I don't have a difficult setup, it's pretty straight forward. Isp modem/router connected to my asus. All my devices connect through the asus.

ISP modem connected to ISP router from Ethernet port on modem to WAN port on ISP router. Connect to your ISP router and then log into the administration screens. Use an Ethernet cable if possible. Leave or set the WAN connection type to Automatic. (This is probably the default and what it is set at already. If it is something else leave it alone. No need to change what is working.)

On the ISP router leave the LAN subnet as is. Most common is 192.168.1.1 - 192.168.1.254 but it could be something else.

Now connect to your ASUS router using an Ethernet connection to any of the LAN ports. On your ASUS router set the WAN IP to automatic. (It will get an IP from the ISP router's subnet.) Again automatic is the default.

On your ASUS router change the LAN subnet. For instance you could assign the ASUS router the IP 192.168.50.1 and then it and all the devices connecting to it will be in the subnet 192.168.50.1 - 192.168.50.254. The if the router reboots automatically or you reboot it after saving the changes you will need to reconnect to what ever new IP you assigned it. In my example this would be 192.168.50.1.

Turn off the power to your ASUS router.

Run an Ethernet cable from any LAN port on your ISP router to the WAN port on your ASUS.

Turn the power back on to your ASUS router. You are done and the ASUS is double NATed behind your ISP's router.

You now can setup the ASUS as if it were directly connected to the Internet including VPN client(s).

 

[zwenneke]

ISP modem connected to ISP router from Ethernet port on modem to WAN port on ISP router. Connect to your ISP router and then log into the administration screens. Use an Ethernet cable if possible. Leave or set the WAN connection type to Automatic. (This is probably the default and what it is set at already. If it is something else leave it alone. No need to change what is working.)

On the ISP router leave the LAN subnet as is. Most common is 192.168.1.1 - 192.168.1.254 but it could be something else.

Now connect to your ASUS router using an Ethernet connection to any of the LAN ports. On your ASUS router set the WAN IP to automatic. (It will get an IP from the ISP router's subnet.) Again automatic is the default.

On your ASUS router change the LAN subnet. For instance you could assign the ASUS router the IP 192.168.50.1 and then it and all the devices connecting to it will be in the subnet 192.168.50.1 - 192.168.50.254. The if the router reboots automatically or you reboot it after saving the changes you will need to reconnect to what ever new IP you assigned it. In my example this would be 192.168.50.1.

Turn off the power to your ASUS router.

Run an Ethernet cable from any LAN port on your ISP router to the WAN port on your ASUS.

Turn the power back on to your ASUS router. You are done and the ASUS is double NATed behind your ISP's router.

You now can setup the ASUS as if it were directly connected to the Internet including VPN client(s).

Did what you described and it's working now. Thx for the quick respons, much appreciated. Grtz Peter