OpenVPN for Asus DSL-AC68U?

edited August 2014 in VPN Setup Support Posts: 13
Been trying to get it working all night. Win7 64bit.

Have downloaded the openvpn files from main website, tried naming one (in settings) france, uploading the france ovpn file, and the ca file, put in username and pw, and it wont connect.

Any ideas? Going to bed will pick this up in 12 hours or so.

p.s my desktop client connects perfect, but I have a second computer, plus 5+ devices connecting wirelessly, would like them to be behind the vpn as well.

firmware 3.0.0.4.376.693 (latest I believe)

Much love, imonachair.

Comments

  • edited August 2014 Posts: 4,013
    Since you are already using Merlin firmware, I know of nothing else to suggest. Perhaps another user here with an AC68 knows something more to help you.

    When you get back, please check your log and see if it gives any clues to what the problem is.

    *Edit* This is where things go wrong here. I am mistaken about him running Merlin, and at this point I have no idea if his device(s) are even capable of running it.
    Post edited by OmniNegro on
  • I'm back!

    Logs run this over and over:

    g  5 23:47:54 openvpn[27154]: Options error: --crl-verify fails with 'crl.pem': No such file or directory
    Aug  5 23:47:54 openvpn[27154]: Options error: Please correct these errors.
    Aug  5 23:47:54 openvpn[27154]: Use --help for more information.
    Aug  5 23:50:14 rc_service: httpd 534:notify_rc restart_vpncall
    Aug  5 23:52:29 rc_service: httpd 534:notify_rc restart_vpncall
    Aug  5 23:52:31 openvpn[27311]: Options error: --crl-verify fails with 'crl.pem': No such file or directory
    Aug  5 23:52:31 openvpn[27311]: Options error: Please correct these errors.
    Aug  5 23:52:31 openvpn[27311]: Use --help for more information.
  • Posts: 861
    need to remove the line re crl.pem from the custom config
  • I am a slight noob at messing with things, I need a little more info, sorry ..
  • Posts: 861
    the custom config at the bottom of the openvpn client page.  remove the line that references crl.pem, then click apply.  Then try to start up the VPN.
  • This is really all I have


    It doesn't really allow me to edit anything. The manual setting shows up as this: http://imgur.com/pVU7Y4L

    Have I missed something completely !?

    Ugh.


  • Posts: 861
    well crap on me again.  for some reason I keep thinking y'all are using merlin firmware.

    edit the ovpn file on your computer, removing the line pertaining to crl.pem, then reload it into the openvpn client.

    but, I would encourage you to get the merlin asus firmware.
  • edited August 2014 Posts: 13
    I deleted the lines, still get the same error.

    I looked into custom firmware, the DSL Asus modems are not supported yet. The RT AC68U is but I have the DSL version.

    Edit, also I don't think merlin will ever be released for my modem, so unfortunately I am stuck with stock firmware.
    Post edited by imonachair on
  • Posts: 4,013
    The root of the miscommunications is mine alone. I said you were already on Merlin firmware, and clearly I am mistaken. I think I saw "firmware 3.0.0.4.*" and figured it must be Merlin since that is the current version of Merlin. (Too bad they do not change the number to make it more obvious.)

    Sadly, I cannot even find a reference to the model you have. Not even on the Asus site. (Nor Amazon.)

    And in most parts of the world, once you connect your modem to your ISP, they can and will install new firmware on it to make it work the way they want it. (Like they do for cable modems with the DOCSIS versions.) So unless the modem and router are two separate devices in one case, there is likely no way to ever use the router the way it was intended to be used.

    If you recently bought it, I suggest an immediate RMA. If it was provided by your ISP, then I have no idea what your real options even are.

    If you can help us find the device somewhere, we may be able to narrow down your options a bit. (For example if there is a support site out there somewhere that mentions the device(s) it may help us to figure out if the modem is actually a part of the router's SoC or just sharing the transformer block.)
  • edited August 2014 Posts: 380
    Is this the one?
    https://www.asus.com/Networking/DSLAC68U/

    Also, everyone seems impressed with this little baby...
    http://forums.whirlpool.net.au/archive/2272447

    No Merlin for it though...
    http://forums.smallnetbuilder.com/showthread.php?t=18261
    Post edited by heyitsme on
  • Posts: 4,013
    Is this the one?
    https://www.asus.com/Networking/DSLAC68U/

    Also, everyone seems impressed with this little baby...
    http://forums.whirlpool.net.au/archive/2272447

    No Merlin for it though...
    http://forums.smallnetbuilder.com/showthread.php?t=18261
    Wow. Not only did I screw up two days ago, but I also managed to fail finding the device on the Asus site. I should head to Vegas. :D

    The description of the device mentions this that makes me think it should be possible to load Merlin, but the forums make it clear it is not going to be supported.
    "By
    separating wired VDSL/ADSL and Wi-Fi networking into two compute modules
    with their own dedicated processing power, the DSL-AC68U achieves
    maximum performance for both connection types with no compromises."

    Sadly, there is a compromise. The device is a joined abomination that fails to do what a good router should do.
  • Posts: 4,013
    Odd. The manual for the device makes exactly zero mention of VPNs whatsoever. I wonder if they bundle a modem with the units that are defective and would not be able to handle the mathematics of encryption?

    This is probably a stupid question, but I see from the screenshots that you are in fact using the VPN client. Is there anything on the VPN server side of the interface that perhaps should be on the client side?
  • heyitsme linked the correct router.

    Also the VPN server page is a home server using their DDNS for PPTP. The OpenVPN server page only links to software that I download and connect to the PIA server from my desktop, but not the router:



    I also noticed the manual says nothing about VPN. Weird right.
  • Posts: 4,013
    The really odd part is that the normal AC68 has a full working OpenVPN install there. Yours seems not to.

    If you cannot return it, I would start a complaint a day hobby for Asus.
  • I had the same problem.

    https://www.privateinternetaccess.com/forum/index.php?p=/discussion/3304/openvpn-client-on-asus-rt-ac68u-won039t-work#Item_7

    "I did manage to get it to work the other night by editing the ovpn, I deleted crl-verify crl.pem and left all four return characters at the end (the one before and the three after). It connects now! Thanks for the help."
  • edited August 2014 Posts: 13
    Thanks for the reply! I did try that before but nothing worked, this is the system log:

    Aug 18 23:48:06 rc_service: httpd 534:notify_rc restart_vpncall
    Aug 18 23:48:08 openvpn[1004]: Options error: No client-side authentication method is specified.  You must use either --cert/--key, --pkcs12, or --auth-user-pass
    Aug 18 23:48:08 openvpn[1004]: Use --help for more information.

    This is the last few lines of the Swiss ovpn: 

    1reneg-sec 0crl-verify crl.pem

    I tried deleting from the crl up, and from the 0. 

    I'm not overly too fussed, I have the app on the phone and tablet, and don't always need the vpn connected.

    Cheers!


    EDIT: I got it...!!

    I was editing in text editor, I opened it up in word, and enabled paragraph to see what was going on, and made sure there were only three spaces of lines, saved it, loaded it and it went.  Wow, so much hassle! haha thanks man.
    Heres a screen of the text, for anyone else out there who had the same issue!

    Post edited by imonachair on
  • edited August 2014 Posts: 13
    * While I have my router connecting to the VPN it seems to kill my internet completely (requiring full reboot), and won't run netflix on my ps4.

    *Edit
    The main purpose for wanting the ovpn to work on the router, was to be able to set netflix on the ps3/4 up, I have the app downloaded on the devices, all I need them to do is connect to the US-East ovpn I created in the router settings - The router connects, but my ps4 thinks I am ... in china? Or at least, not in the US-East. Either way, once I have that connection (the ovpn connected) I lose all internet on my desktop computer on all my devices. Is that weird?

    Post edited by imonachair on
  • EDIT: I got it...!!
    I was editing in text editor, I opened it up in word, and enabled paragraph to see what was going on, and made sure there were only three spaces of lines, saved it, loaded it and it went.  Wow, so much hassle! haha thanks man.Heres a screen of the text, for anyone else out there who had the same issue!
    http://imgur.com/WP1ZlNb

    I have the DSL-AC68R as well and I too cannot get PIA to connect in the routers
    VPN area.  I have deleted the last line of the ovpn file, and have kept
    the last 3 lines empty.  It does connect and shows a tick to say
    "status connected" but when I try and go to any URL it times out and
    can't resolve the host.

    I then turn off the VPN, and my internet won't work so I have to reboot the router...

    My logs appear to say everything is working perfectly??  I have the default asus firmware. Anyone got any ideas?

    openvpn[1694]: OpenVPN 2.3.2 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Dec 16 2014
    openvpn[1701]: Attempting to establish TCP connection with [AF_INET]50.23.115.113:443 [nonblock]
    openvpn[1701]: TCP connection established with [AF_INET]50.23.115.113:443
    openvpn[1701]: TCPv4_CLIENT link local: [undef]
    openvpn[1701]: TCPv4_CLIENT link remote: [AF_INET]50.23.115.113:443
    openvpn[1701]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    openvpn[1701]: [Private Internet Access] Peer Connection Initiated with [AF_INET]50.23.115.113:443
    openvpn[1701]: TUN/TAP device tun11 opened
    openvpn[1701]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
    openvpn[1701]: /sbin/ifconfig tun11 10.30.1.18 pointopoint 10.30.1.17 mtu 1500
    openvpn[1701]: Initialization Sequence Completed

  • Hello,

    I am using DSL-AC68U and have exactly same problem. I can see it is connected successfully but i can not browse anything.

  • Posts: 861
    DNS problems no doubt.  In the WAN section, click "no" for connect to DNS server automatically, and enter in 8.8.4.4 and 8.8.8.8 in the two slots.

    Then try your VPN again.
  • heh, it worked.
    DNS problems no doubt.  In the WAN section, click "no" for connect to DNS server automatically, and enter in 8.8.4.4 and 8.8.8.8 in the two slots.

    Then try your VPN again.

  • edited February 2015 Posts: 2
    BOOM!  Changing the DNS has worked for me as well perfectly thanks!

    Does everyone notice a speed decrease in general when using the VPN?  My speed goes from 5.73 Mbps to 545kbps haha..... anyway to fix that???

    Also - with the ASUS router is there anyway to add this new VPN setting as a new SSID? So you can have your normal local internet as one SSID, and then just change over to the other wifi address that is your VPN so that the router isn't pushing all traffic through the VPN?
    Post edited by asus_ac68 on
  • Posts: 5
    I am also trying to get the Asus DSL AC68U to work and researching a way to do it, I wouldn't set up DNS to Googles servers, surely they should be set for PIA servers because the whole point of VPNs is to protect your privacy and setting to Google would be a leak, at least that's what they say over at the Merlin forums, unfortunately the DSL version will never be supported.

    It should work and I am considering leaving PIA for another VPN provider because if they can support Merlin which isn't that different f on the stock firmware then we should see some support for the stock Asus firmware, okay I understand it's not really PIA's job but maybe some instructions would be handy, some help nice.


  • Posts: 5
    The advice as given on this thread works perfectly for all those using a DSL Asus router/Modem.

    https://www.privateinternetaccess.com/forum/discussion/17619/connect-an-asus-dsl-ac68u-to-openvpn-client-with-asus-asuswrt-firmware

    I will be staying with PIA.
Sign In or Register to comment.