CyberGhost with AC86U Merlin

[abiedster]

Hello Everyone,

I'm trying to setup a VPN with Cyberghost through OpenVPN,

however when I create the profile on Cyberghost I have these both options :

OpenVPN or OpenVPN <=2.3

the second option has way less servers and doesn't have servers for the country I'm trying to connect to, but it's the only option working for me,

when I select the first option to create a profile I have this error on the log :

Apr 22 12:36:02 rc_service: httpd 24002:notify_rc restart_vpnclient2;restart_dnsmasq
Apr 22 12:36:02 custom_script: Running /jffs/scripts/service-event (args: restart vpnclient2)
Apr 22 12:36:02 openvpn-routing: Clearing routing table for VPN client 2
Apr 22 12:36:02 ovpn-client2[28837]: Options error: Unrecognized option or missing or extra parameter(s) in config.ovpn:32: ncp-disable (2.6.0)
Apr 22 12:36:02 ovpn-client2[28837]: Use --help for more information.
Apr 22 12:36:02 openvpn: Starting OpenVPN client 2 failed!
Apr 22 12:36:02 openvpn-routing: Clearing routing table for VPN client 2

do you have any idea what's the difference between both and if it's possible for me to get connected on the normal OpenVPN instead of the <=2.3 ?

Thank you

 

[RMerlin]

Asuswrt-Merlin uses OpenVPN 2.6, so you need the first option. However it seems that config file is still way outdated, as they try to disable NCP, which is now mandatory with 2.6, and has been the proper way to handle ciphers for like 4-5 years now. Tell your provider to update their config files to something more modern.

 

[Kritiker]

I found that I had to remove the line
ncp-disable
from the openvpn.ovpn file that Cyberghost provided me.
After that it worked for me.
I asked Cyberghost to update its recommendations. That hasn’t happened yet.

The openvpn.ovpn file provided me by Cyberghost contains:

resolv-retry infinite
redirect-gateway def1
persist-key
persist-tun
nobind
cipher AES-256-CBC
ncp-disable
auth SHA256
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5
verb 4

which enters

resolv-retry infinite
redirect-gateway def1
cipher AES-256-CBC
ncp-disable
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5

When I used that I got an error message like yours.

When I removed the line
ncp-disable
before installing the file I got everything to work.

My installed openvpn.ovpn file now looks like:

resolv-retry infinite
redirect-gateway def1
cipher AES-256-CBC
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5

The other lines were used to configure their respective entries.

The client instance now activates and seems to work properly.