Openvpn not opening Asus Lan IP

[dmr24]

Running RT-AX86U firmware 3004.388.9_2

I used to be able to run openvpn from my smartphone and access 192.168.50.1 from mobile data but tried recently and to no avail. I have Client will use VPN to access to Both. Anyone else have this issue?

 

[bbunge]

Is your DDNS name resolving correctly?

 

[dmr24]

Is your DDNS name resolving correctly?

I'm using a ddns.net from noip ddns with let's Encrypt. Doesn't seem to be an issue but how do I check?

 

[dmr24]

I'm using a ddns.net from noip ddns with let's Encrypt. Doesn't seem to be an issue but how do I check?

I also changed the ovpn file to the wan ip and removed the ddns but still same issue.

 

[GSpock]

Hi,
no problem here with openvpn server on AX86U with same firmware as yours.
have you tried to connect with another device than your smartphone ?

 

[ColinTaylor]

Working fine here using the same router and firmware.

Is it only a problem getting to the router's web interface, or can you not access the other devices on your LAN?

Given the problems in your previous thread I'd check again that your WAN IP address hasn't changed.

 

[dmr24]

Working fine here using the same router and firmware.

Is it only a problem getting to the router's web interface, or can you not access the other devices on your LAN?

Given the problems in your previous thread I'd check again that your WAN IP address hasn't changed.

I've just factory reset and did not enable ddns, just using the wan ip but same issue. I've tried other devices and cannot access the gui through open vpn. Does rsa 1024 or 2048 make a difference? I will try wireguard and see if same issue.

 

[ColinTaylor]

I've just factory reset and did not enable ddns, just using the wan ip but same issue. I've tried other devices and cannot access the gui through open vpn. Does rsa 1024 or 2048 make a difference? I will try wireguard and see if same issue.

If you have an RSA mismatch you will have an error trying to connect to the server.

What do you see in the router System Log when you connect?

Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, OU=Home/Office, CN=RT-AX86U, [email protected]
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, OU=Home/Office, CN=client, [email protected]
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_VER=3.11.1
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_PLAT=android
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_NCP=2
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_TCPNL=1
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_PROTO=8094
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_MTU=1600
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_CIPHERS=AES-128-GCM:AES-192-GCM:AES-256-GCM:CHACHA20-POLY1305
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_AUTO_SESS=1
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_GUI_VER=net.openvpn.connect.android_3.7.1-10568
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_SSO=webauth,crtext
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 peer info: IV_BS64DL=1
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 TLS: tls_multi_process: initial untrusted session promoted to trusted
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519
Aug 25 11:34:34 ovpn-server1[6890]: 82.132.221.83:15812 [client] Peer Connection Initiated with [AF_INET]82.132.221.83:15812 (via [AF_INET]86.200.66.190%eth0)
Aug 25 11:34:34 ovpn-server1[6890]: client/82.132.221.83:15812 MULTI_sva: pool returned IPv4=10.8.100.2, IPv6=(Not enabled)
Aug 25 11:34:34 ovpn-server1[6890]: client/82.132.221.83:15812 MULTI: Learn: 10.8.100.2 -> client/82.132.221.83:15812
Aug 25 11:34:34 ovpn-server1[6890]: client/82.132.221.83:15812 MULTI: primary virtual IP for client/82.132.221.83:15812: 10.8.100.2
Aug 25 11:34:34 ovpn-server1[6890]: client/82.132.221.83:15812 SENT CONTROL [client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0 vpn_gateway 500,dhcp-option DOMAIN home.lan,dhcp-option DNS 192.168.1.1,redirect-gateway def1,route-gateway 10.8.100.1,topology subnet,ping 15,ping-restart 60,ifconfig 10.8.100.2 255.255.255.0,peer-id 0,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt,tun-mtu 1500' (status=1)
Aug 25 11:34:34 ovpn-server1[6890]: client/82.132.221.83:15812 PUSH: Received control message: 'PUSH_REQUEST'
Aug 25 11:34:35 ovpn-server1[6890]: client/82.132.221.83:15812 Data Channel: cipher 'AES-256-GCM', peer-id: 0
Aug 25 11:34:35 ovpn-server1[6890]: client/82.132.221.83:15812 Timers: ping 15, ping-restart 120
Aug 25 11:34:35 ovpn-server1[6890]: client/82.132.221.83:15812 Protocol options: protocol-flags cc-exit tls-ekm dyn-tls-crypt

 

[ColinTaylor]

Can you copy and paste the text from the log rather than posting pictures. It's difficult to interpret otherwise.

Is it only a problem getting to the router's web interface? Can you access other devices on your LAN?

 

[ColinTaylor]

Thanks. There doesn't appear to be anything wrong according to your logs so I'm somewhat at a loss.

I see you tried two different ways of connecting. One from the internet and one from your LAN. Did they both have the same problem trying to connect to the router?

EDIT:

When you say you can't access the router, what exactly is happening? What error messages do you see?

Can you access other devices on your LAN, e.g. the web interface of a network printer?

 

[dmr24]

Thanks. There doesn't appear to be anything wrong according to your logs so I'm somewhat at a loss.

I see you tried two different ways of connecting. One from the internet and one from your LAN. Did they both have the same problem trying to connect to the router?

EDIT:

When you say you can't access the router, what exactly is happening? What error messages do you see?

Can you access other devices on your LAN, e.g. the web interface of a network printer?

OK, so i just tested from a public wifi and it worked no issue, so it's something to do with my smartphone data IP when not on wifi, strange

 

[ColinTaylor]

OK, so i just tested from a public wifi and it worked no issue, so it's something to do with my smartphone data IP when not on wifi, strange

I suggest you change the server port to something other than 1194. Some internet providers may block this as it's the default OpenVPN port. Try a random, non-obvious port from 5001 to 32767.

Are you saying that you didn't have the problem when connected to your home Wi-Fi?

 

[dmr24]

I suggest you change the server port to something other than 1194. Some internet providers may block this as it's the default OpenVPN port. Try a random, non-obvious port between 5001 to 32767.

Are you saying that you didn't have the problem when connected to your home Wi-Fi?

I will try another port. Correct, home wifi was fine, just using my cell data was the issue.

 

[Ballesteros]

Might not be the same cause but I get similar symptoms since my mobile provider transitioned to ipv6.

My AX86U on 3004.388.9_2 is running OpenVPN server, on my home ISP which is ipv4 only.

The openvpn client on my phone shows as "connected" to my AX86U openvpn server, but if my phone is on mobile data then I cannot ping or browse to anything on my LAN from my phone, not even the router homepage. However if my phone is connected via wi-fi on an ipv4 network (eg on hotel wi-fi) , then the openvpn connection from my phone behaves as expected, and I can see my router and server on my home network.

 

[dmr24]

I suggest you change the server port to something other than 1194. Some internet providers may block this as it's the default OpenVPN port. Try a random, non-obvious port from 5001 to 32767.

Are you saying that you didn't have the problem when connected to your home Wi-Fi?

I just read my isp blocks 1194.

 

[dmr24]

Switched to tcp and all works fine.