Open VPN Client setup on Asus RT-N66W
I had a bear of a time setting up PIA on my Asus router. I had previously run DDWRT on a Linksys AC1200 but had a lightning strike take out my dsl modem and router. I got a decent UPS and a new modem and the Asus to replace it.
I am using the factory firmware on the Asus (as of 8/12/2017: 3.0.0.4.376)
First things first (which is the last thing I did to get it to work):
Set DNS servers manually on the router to 209.222.18.222 and 209.222.18.218. Do this even if you set them manually on the modem. The DHCP on the modem would not push them down for me.
Next. Make sure your router has the correct time. I use time.nist.gov. I had typed time.nist.giv and it took me a few hours to figure it out. The certificate given by PIA is time sensitive and a router with the wrong time will throw a [handshake/cert not valid yet] error.
Next. Edit the OVPN file and remove the line:
crl-verify crl.rsa.2048.pem
Leaving this line in caused my router to throw a [cannot find crl.rsa.2048.pem file] error.
Now it is working.
As a side note. The GUI on my router is a little messed up. When you click the OpenVPN tab to set up your client, the top of the PPTP setup tab stays in place so it looks like it is asking for a description and a server name. Leave those blank. Just fill in a description above username and password and go from there.
Hope this helps.
-RB
I am using the factory firmware on the Asus (as of 8/12/2017: 3.0.0.4.376)
First things first (which is the last thing I did to get it to work):
Set DNS servers manually on the router to 209.222.18.222 and 209.222.18.218. Do this even if you set them manually on the modem. The DHCP on the modem would not push them down for me.
Next. Make sure your router has the correct time. I use time.nist.gov. I had typed time.nist.giv and it took me a few hours to figure it out. The certificate given by PIA is time sensitive and a router with the wrong time will throw a [handshake/cert not valid yet] error.
Next. Edit the OVPN file and remove the line:
crl-verify crl.rsa.2048.pem
Leaving this line in caused my router to throw a [cannot find crl.rsa.2048.pem file] error.
Now it is working.
As a side note. The GUI on my router is a little messed up. When you click the OpenVPN tab to set up your client, the top of the PPTP setup tab stays in place so it looks like it is asking for a description and a server name. Leave those blank. Just fill in a description above username and password and go from there.
Hope this helps.
-RB
Comments
Just thought I would add this. Info - http://www.pool.ntp.org/en/