Asus AC86U - OpenVPN- Connected - Fast DL , Super slow UL?

[Ryancope123]

Hi guys,
I have been desperate to sign an account here for days and finally the recaptcha is working .

Just wondering if anybody would be so kind to help me out, so far had no luck and despite being a developer by trade my networking skills are very very limited.

Just purchased an Asus AC86U for the OPENVPN + NAS USB side, i have setup the OpenVPN (IPVANISH) and connected to the server and the download is great on a 60/40 connection. i pull 55 over wireless, but i only pull 0.50mb upload when i had 20mbs before.


Tried the same server from my desktop client and i can pull full speeds so i know it isn't the IPvanish server, i have documented the steps i have done below exactly.


Started up AC86U - Ran through the quick setup to get me on the internet.
Latest factory firmware updated.
Disabled QOS
Disabled the AI+Trendnet security ( testing purposes)
Added Googles DNS to the DNS page - 8.8.8.8 and 8.8.4.4
Added OpenVPN client which says connected successfully.
Ran a speed test to see tiny upload speeds ?

I have attached the system log, any help would be super appreciated i bought this router as it has the horsepower i finally wanted from a router for OpenVPN.

Kindest regards,
Ryan

 

[JJQuin]

I had this issue with PIA. I contacted their support and they sent me new custom config commands. Check them out at:

https://www.snbforums.com/threads/a...eds-but-only-over-wireless.42062/#post-373853

Also I highly recommend you don't use google's DNS servers. They track every website you go to. I have OpenDNS set for mine but only used by the 1 or 2 devices not going through my OpenVPN connection.

 

[Ryancope123]

I had this issue with PIA. I contacted their support and they sent me new custom config commands. Check them out at:

https://www.snbforums.com/threads/a...eds-but-only-over-wireless.42062/#post-373853

Also I highly recommend you don't use google's DNS servers. They track every website you go to. I have OpenDNS set for mine but only used by the 1 or 2 devices not going through my OpenVPN connection.

Hi mate, i just checked the wired connected when it's on OpenVPN and it works perfect ! so it seems we have the exact same issue, i have no idea how to apply those settings in your post to my files?

 

[JJQuin]

Note: I'm assuming you're using Asus Merlin firmware on your router and your not the default Asus firmware that came with your router.

Go to VPN in the left menu. Click on the VPN Client tab. Scroll to the bottom of the page. There's a custom configuration area where you can enter custom commands. Open Notepad on your PC and copy the commands in the field into Notepad (backup just in case!) Cut and REPLACE the commands that are in the field with the ones in my previous posting:

https://www.snbforums.com/threads/a...eds-but-only-over-wireless.42062/#post-373853

Click Apply and hopefully you should have your speed back!

P.S. The commands I posted are for PIA. If your using a different VPN service you'll want to compare the commands that you copied into Notepad to the ones in the field. The new custom configuration should only have additional commands to the original. If you see that there are conflicts (same command but a different number right after it) then you may have to copy just the differences back, but test the new configuration first.

 

[Ryancope123]

Note: I'm assuming you're using Asus Merlin firmware on your router and your not the default Asus firmware that came with your router.

Go to VPN in the left menu. Click on the VPN Client tab. Scroll to the bottom of the page. There's a custom configuration area where you can enter custom commands. Open Notepad on your PC and copy the commands in the field into Notepad (backup just in case!) Cut and REPLACE the commands that are in the field with the ones in my previous posting:

https://www.snbforums.com/threads/a...eds-but-only-over-wireless.42062/#post-373853

Click Apply and hopefully you should have your speed back!

P.S. The commands I posted are for PIA. If your using a different VPN service you'll want to compare the commands that you copied into Notepad to the ones in the field. The new custom configuration should only have additional commands to the original. If you see that there are conflicts (same command but a different number right after it) then you may have to copy just the differences back, but test the new configuration first.

I had a look for the custom firmware yesterday but couldn't find it, i will have a look again now based of your "Merlin 382.2_beta3" awaiting a reply from IPVANISH, I did get a super fast response back from them but nothing special.

Huge thank you so far, i am really not good with networking and you all have been a great help.

 

[Ryancope123]

Note: I'm assuming you're using Asus Merlin firmware on your router and your not the default Asus firmware that came with your router.

Go to VPN in the left menu. Click on the VPN Client tab. Scroll to the bottom of the page. There's a custom configuration area where you can enter custom commands. Open Notepad on your PC and copy the commands in the field into Notepad (backup just in case!) Cut and REPLACE the commands that are in the field with the ones in my previous posting:

https://www.snbforums.com/threads/a...eds-but-only-over-wireless.42062/#post-373853

Click Apply and hopefully you should have your speed back!

P.S. The commands I posted are for PIA. If your using a different VPN service you'll want to compare the commands that you copied into Notepad to the ones in the field. The new custom configuration should only have additional commands to the original. If you see that there are conflicts (same command but a different number right after it) then you may have to copy just the differences back, but test the new configuration first.

I just flashed now, WoW that's some serious changes... looks awesome !!!

Are there any tweaks i should also do ? i changed from google dns to open dns like you said was a good move. Doesn this firmware have a kill switch on it or anything like that

 

[JJQuin]

Yes it has killswitch right above the custom configuration. It only works if you have policy rules or policy rules (strict) set (the option right above it). You have to set a policy rule. Read the wiki page to see how to set it up:

https://github.com/RMerl/asuswrt-merlin/wiki/Policy-based-routing

If you want your whole network to go through VPN just follow the wiki page and set a rule like 192.168.50.0/24 (if that is your current network setup that's the default). Read up in the wiki and the other link I sent you the thread on it.

 

[JJQuin]

@Xentrk wrote a great write up on how to setup TorGuard in Asus Merlin. It's a different service than you have but it is a great explanation of the different options:

https://www.snbforums.com/threads/t...for-asus-merlin-380-65-380-65_2-part-i.38281/

Also yorgi wrote great instructions on Policy rules. Again its for a different service but the policy rule section should be the same:

https://www.snbforums.com/threads/h...a-and-other-vpn-providers-380-68-09-12.30851/

If you like Asus Merlin I would recommend you throw a few bucks at @RMerlin. He created this awesome software all in his spare time. He has a donate link on the Asus Merlin website at:

https://asuswrt.lostrealm.ca/

Have fun learning!

Edit: Oh, one quick tip. If you didn't do a factory reset right after you installed Asus Merlin I recommend you do so now. You'll run into less issues with a reset that clears all the settings from the original/factory firmware.

 

[Ryancope123]

@Xentrk wrote a great write up on how to setup TorGuard in Asus Merlin. It's a different service than you have but it is a great explanation of the different options:

https://www.snbforums.com/threads/t...for-asus-merlin-380-65-380-65_2-part-i.38281/

Also yorgi wrote great instructions on Policy rules. Again its for a different service but the policy rule section should be the same:

https://www.snbforums.com/threads/h...a-and-other-vpn-providers-380-68-09-12.30851/

If you like Asus Merlin I would recommend you throw a few bucks at @RMerlin. He created this awesome software all in his spare time. He has a donate link on the Asus Merlin website at:

https://asuswrt.lostrealm.ca/

Have fun learning!

Edit: Oh, one quick tip. If you didn't do a factory reset right after you installed Asus Merlin I recommend you do so now. You'll run into less issues with a reset that clears all the settings from the original/factory firmware.

Thanks for all the guides.

1. Your config worked for me thank you.
2. also setup Kill Switch against everything - again thank you.
3. I will also be donating to @RMerlin , superb work thank you.

1 final question if i may - How do i know those configs are not causing any issues although it's working?

 

[JJQuin]

What I do is I setup a single IP address to bypass the firewall then use a simple script to change my IP on my windows PC when I need to test. If you're having an issue and you don't know if its the VPN or not you can easily test without it.

1. First you need to change your DHCP so its not set to include all of the IP addresses in your range. I set mine to 100-199. Unless you have over 100 devices that is more that you need.

2. Next you need to add an exception for a single IP address to your OpenVPN Client policy rules. Choose an address like 192.168.50.250. An address you know will not normally be used. Then enter a new policy rule with that IP address as the source, leave the destination blank and set the iface to WAN. Don't forget to hit + and then Apply.

3. Now there is a simple script on the wiki that you can use in Windows to easily change your IP address between an manually set one and dhcp. The page is:

https://github.com/RMerl/asuswrt-me...thod)#vpn-or-local-isp-batch-file-for-windows

It's all the way at the bottom of the page. You'll want to make 3 changes. Under A: change the IP address in the first netsh command to the one you entered in the OpenVPN Client policy rules. Change the IP address in the next command to your router's address, the default is 192.168.50.1. If your not sure of your router IP address, it should be the same as the other IP address but ending in a .1

Now because your using the manual IP address for your local ISP (bypass VPN) and DHCP for normal use, you need to reverse the echo commands at the top. They should read

echo [A] Local ISP
echo [B] VPN

Save the file to your hard drive (your documents folder is fine). Create a shortcut on your desktop to run it (right-click the file and choose create shortcut then copy it to your desktop). Open the shortcuts properties (right-click on it then choose properties) and then click the Advanced button. You need to check the box to Run as Administrator or it won't be able to change your IP address.

Now all you have to do is run the script when you want to test without your VPN, then run it again when your done!

 

[Ryancope123]

thanks again buddy