Recent content by keeka

Many thanks for your work supporting the N66. Appreciate your taking the time to detail it here on the forum too.

Earlier in the thread I posted an observation that, if you disabled user-password auth and instead used only client certs, the reconnect issue with 34E3+ is gone. With user-pass auth enabled, a second vpn login stops at the call to the pam plugin. This applies whether the 2nd attempt is from...

OK got it now. So, there would not be a conflict choosing 10.8.0.0/24 subnet for the router's vpn server. Unless that is the remote vpn server pushes an address to say, vpnclient1, that falls in that same range? Would that cause a conflict?

Hi Colin. Those two values, I am assuming from thier names, are involved in the router's own vpn_client process rather than the server.

Thanks! My networking knowledge is novice level. Still I hope I've grasped the network/host concept and private address ranges.

Yes, I occasionally use both the router's openvpn server and openvpn clients simultaneously. However, I also noticed that even with the vpn_client1 & 2 disabled, a remote client of vpn_server1 is still unable to reach the LAN (other than 192.168.0.1 - the router's LAN IP). As far as a...

When I configured openvpn server (merlin and john's fork) using the default subnet of 10.8.0.0/24, I found I was unable to reach LAN clients (192.168.0.0/24) from a vpn client. Using another subnet in the vpnserver details webpage, such as 10.1.0.0/24 (or any 192.168.X.0/24 network other than...

Don't get me wrong. I think your observations are Helpful. I'm going to try upgrading to 34E7 again but this time resetting nvram, when I get a chance. Thanks.

When I installed 33E7, I did a full reset. Though I did restore my config using the nvram restore scripts rather than key everything in again. I didn't encounter the user/password corruption mentioned by jpedty. Subsequent up/downgrades back and forth between 33E and 35E, I haven't reset nvram.

I flashed 34X3. I see the same results as with 34E3 and 35E5. Previously, I'd never enabled DNSSEC or DNSCRYPT. I left these features disabled but I did try vpnserver again with the new DoT option enabled (a single server selected). Same results. Had this only affected me, I would have...

Certifcate only connection work fine. I tested the following OS/openvpn/auth clients against openvpn server on 34E3 using similar client configs. I disabled vpnclients on the router. Then attempted to connect each client (via LAN). Android 6.0.1, OpenVPN for Android 0.7.5 (Openvpn...

On the first failed connection (following disconnecting a successful session at the client), the router's openvpn log stops just short of logging the call to the auth plugin: openvpn[548]: 192.168.0.53:57547 VERIFY OK: depth=0, CN=client1 openvpn[548]: 192.168.0.53:57547 peer info...

Thanks john9527. I'd been leaning towards it being something amiss with my RT-N66U. I've recently experienced filesystem corruption with an otherwise reliable thumbdrive. I disabled entware and removed the thumbdrive whilst I tried to resolve the VPN. Then I saw the other two users' report a...

You do not need jffs for the default openvpn server setup. The autogenerated ca, cert and key are saved to nvram. I'm using the other android vpn client that you mention so logs are different. But I think my unsuccessful (2nd) connection attempt stops around the same point as indicated in your...

I'm seeing something similar. I posted my details here. I am also using an RT-N66U. 33E7 works for me where as with 34E3, only the first connection is successful. I am also using android, though a different client app from the looks of things (OpenVPN for Android).