Wireless Router Mode and VPN

[resetter]

Hi,
I am trying to use a VPN client on my ASUS RT-AX88U, this router is connected to a modem/router elsewhere via ethernet.
I cannot use the WAN port for the connection (ip conflict reported), but the LAN ports work. Thing is, the router WAN LED is always red and there is no internal (web interface) access to the internet. i.e. Network tools cannot see the net, via ping, etc.
I am able to access the net through the router as is but I need VPN client which is disabled in AP mode.
How might I go about getting the VPN functionality working in this setup?

 

[CaptainSTX]

Hi,
I am trying to use a VPN client on my ASUS RT-AX88U, this router is connected to a modem/router elsewhere via ethernet.
I cannot use the WAN port for the connection (ip conflict reported), but the LAN ports work. Thing is, the router WAN LED is always red and there is no internal (web interface) access to the internet. i.e. Network tools cannot see the net, via ping, etc.
I am able to access the net through the router as is but I need VPN client which is disabled in AP mode.
How might I go about getting the VPN functionality working in this setup?

Put the AX88 back in router mode and double NAT it behind your other router. In a double NAT setup the AX88 needs to be in a different subnet than your primary router. A LAN port on your primary router will connect to the WAN port on the AX88. Complete procedure attached. The double NAT setup works just fine with no measurable impact on performance.

 

[resetter]

I have been able to get system tools working by following this post:
https://www.snbforums.com/threads/internet-access-for-the-router-entware-in-ap-mode.59525/
But this requires setting a route and dns manually. Worked for the diagnostic tools but not for vpn.
Are there any alternatives to double NAT?

 

[ColinTaylor]

The VPN client works by routing certain traffic through the VPN tunnel. Therefore the Asus must be in router mode for this to be possible.

 

[CaptainSTX]

For most users and most applications there is no disadvantage to a double NAT setup. Prior to Merlin's most current firmware setting up a VPN client was an issue but now it is much less so. There has never been a problem running a VPN client.

Attached are my test results demonstrating that there isn't a throughput impact from double NATing.