OpenVPN for Asus DSL-AC68U?

imonachair

Been trying to get it working all night. Win7 64bit.

Have downloaded the openvpn files from main website, tried naming one (in settings) france, uploading the france ovpn file, and the ca file, put in username and pw, and it wont connect.

Any ideas? Going to bed will pick this up in 12 hours or so.

p.s my desktop client connects perfect, but I have a second computer, plus 5+ devices connecting wirelessly, would like them to be behind the vpn as well.

firmware 3.0.0.4.376.693 (latest I believe)

Much love, imonachair.

OmniNegro

Since you are already using Merlin firmware, I know of nothing else to suggest. Perhaps another user here with an AC68 knows something more to help you.

When you get back, please check your log and see if it gives any clues to what the problem is.

*Edit* This is where things go wrong here. I am mistaken about him running Merlin, and at this point I have no idea if his device(s) are even capable of running it.

imonachair

I'm back!

Logs run this over and over:

g  5 23:47:54 openvpn[27154]: Options error: --crl-verify fails with 'crl.pem': No such file or directory

Aug  5 23:47:54 openvpn[27154]: Options error: Please correct these errors.

Aug  5 23:47:54 openvpn[27154]: Use --help for more information.

Aug  5 23:50:14 rc_service: httpd 534:notify_rc restart_vpncall

Aug  5 23:52:29 rc_service: httpd 534:notify_rc restart_vpncall

Aug  5 23:52:31 openvpn[27311]: Options error: --crl-verify fails with 'crl.pem': No such file or directory

Aug  5 23:52:31 openvpn[27311]: Options error: Please correct these errors.

Aug  5 23:52:31 openvpn[27311]: Use --help for more information.

cosmoxl

need to remove the line re crl.pem from the custom config

imonachair

I am a slight noob at messing with things, I need a little more info, sorry ..

cosmoxl

the custom config at the bottom of the openvpn client page.  remove the line that references crl.pem, then click apply.  Then try to start up the VPN.

imonachair

This is really all I have

http://imgur.com/tGUme4m

It doesn't really allow me to edit anything. The manual setting shows up as this: http://imgur.com/pVU7Y4L

Have I missed something completely !?

Ugh.

cosmoxl

well crap on me again.  for some reason I keep thinking y'all are using merlin firmware.

edit the ovpn file on your computer, removing the line pertaining to crl.pem, then reload it into the openvpn client.

but, I would encourage you to get the merlin asus firmware.

imonachair

I deleted the lines, still get the same error.

I looked into custom firmware, the DSL Asus modems are not supported yet. The RT AC68U is but I have the DSL version.

Edit, also I don't think merlin will ever be released for my modem, so unfortunately I am stuck with stock firmware.

OmniNegro

The root of the miscommunications is mine alone. I said you were already on Merlin firmware, and clearly I am mistaken. I think I saw "firmware 3.0.0.4.*" and figured it must be Merlin since that is the current version of Merlin. (Too bad they do not change the number to make it more obvious.)

Sadly, I cannot even find a reference to the model you have. Not even on the Asus site. (Nor Amazon.)

And in most parts of the world, once you connect your modem to your ISP, they can and will install new firmware on it to make it work the way they want it. (Like they do for cable modems with the DOCSIS versions.) So unless the modem and router are two separate devices in one case, there is likely no way to ever use the router the way it was intended to be used.

If you recently bought it, I suggest an immediate RMA. If it was provided by your ISP, then I have no idea what your real options even are.

If you can help us find the device somewhere, we may be able to narrow down your options a bit. (For example if there is a support site out there somewhere that mentions the device(s) it may help us to figure out if the modem is actually a part of the router's SoC or just sharing the transformer block.)

heyitsme

Is this the one?
https://www.asus.com/Networking/DSLAC68U/

Also, everyone seems impressed with this little baby...
http://forums.whirlpool.net.au/archive/2272447

No Merlin for it though...
http://forums.smallnetbuilder.com/showthread.php?t=18261

OmniNegro

Is this the one?
https://www.asus.com/Networking/DSLAC68U/

Also, everyone seems impressed with this little baby...
http://forums.whirlpool.net.au/archive/2272447

No Merlin for it though...
http://forums.smallnetbuilder.com/showthread.php?t=18261

Wow. Not only did I screw up two days ago, but I also managed to fail finding the device on the Asus site. I should head to Vegas.

The description of the device mentions this that makes me think it should be possible to load Merlin, but the forums make it clear it is not going to be supported.
"By
separating wired VDSL/ADSL and Wi-Fi networking into two compute modules
with their own dedicated processing power, the DSL-AC68U achieves
maximum performance for both connection types with no compromises."

Sadly, there is a compromise. The device is a joined abomination that fails to do what a good router should do.

OmniNegro

Odd. The manual for the device makes exactly zero mention of VPNs whatsoever. I wonder if they bundle a modem with the units that are defective and would not be able to handle the mathematics of encryption?

This is probably a stupid question, but I see from the screenshots that you are in fact using the VPN client. Is there anything on the VPN server side of the interface that perhaps should be on the client side?

imonachair

heyitsme linked the correct router.

Also the VPN server page is a home server using their DDNS for PPTP. The OpenVPN server page only links to software that I download and connect to the PIA server from my desktop, but not the router:

http://imgur.com/uN74TrG

http://imgur.com/LgZQBhs

I also noticed the manual says nothing about VPN. Weird right.

OmniNegro

The really odd part is that the normal AC68 has a full working OpenVPN install there. Yours seems not to.

If you cannot return it, I would start a complaint a day hobby for Asus.

asushelp

I had the same problem.

https://www.privateinternetaccess.com/forum/index.php?p=/discussion/3304/openvpn-client-on-asus-rt-ac68u-won039t-work#Item_7

"I did manage to get it to work the other night by editing the ovpn, I deleted crl-verify crl.pem and left all four return characters at the end (the one before and the three after). It connects now! Thanks for the help."

imonachair

Thanks for the reply! I did try that before but nothing worked, this is the system log:

Aug 18 23:48:06 rc_service: httpd 534:notify_rc restart_vpncall

Aug 18 23:48:08 openvpn[1004]: Options error: No client-side authentication method is specified.  You must use either --cert/--key, --pkcs12, or --auth-user-pass

Aug 18 23:48:08 openvpn[1004]: Use --help for more information.

This is the last few lines of the Swiss ovpn: 

1reneg-sec 0crl-verify crl.pem

I tried deleting from the crl up, and from the 0. 

I'm not overly too fussed, I have the app on the phone and tablet, and don't always need the vpn connected.

Cheers!

EDIT: I got it...!!

I was editing in text editor, I opened it up in word, and enabled paragraph to see what was going on, and made sure there were only three spaces of lines, saved it, loaded it and it went.  Wow, so much hassle! haha thanks man.

Heres a screen of the text, for anyone else out there who had the same issue!

http://imgur.com/WP1ZlNb

imonachair

* While I have my router connecting to the VPN it seems to kill my internet completely (requiring full reboot), and won't run netflix on my ps4.

*Edit

The main purpose for wanting the ovpn to work on the router, was to be able to set netflix on the ps3/4 up, I have the app downloaded on the devices, all I need them to do is connect to the US-East ovpn I created in the router settings - The router connects, but my ps4 thinks I am ... in china? Or at least, not in the US-East. Either way, once I have that connection (the ovpn connected) I lose all internet on my desktop computer on all my devices. Is that weird?

asus_ac68

EDIT: I got it...!!

I was editing in text editor, I opened it up in word, and enabled paragraph to see what was going on, and made sure there were only three spaces of lines, saved it, loaded it and it went.  Wow, so much hassle! haha thanks man.

Heres a screen of the text, for anyone else out there who had the same issue!

http://imgur.com/WP1ZlNb

I have the DSL-AC68R as well and I too cannot get PIA to connect in the routers
VPN area.  I have deleted the last line of the ovpn file, and have kept
the last 3 lines empty.  It does connect and shows a tick to say
"status connected" but when I try and go to any URL it times out and
can't resolve the host.

I then turn off the VPN, and my internet won't work so I have to reboot the router...

My logs appear to say everything is working perfectly??  I have the default asus firmware. Anyone got any ideas?

openvpn[1694]: OpenVPN 2.3.2 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Dec 16 2014
openvpn[1701]: Attempting to establish TCP connection with [AF_INET]50.23.115.113:443 [nonblock]
openvpn[1701]: TCP connection established with [AF_INET]50.23.115.113:443
openvpn[1701]: TCPv4_CLIENT link local: [undef]
openvpn[1701]: TCPv4_CLIENT link remote: [AF_INET]50.23.115.113:443
openvpn[1701]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
openvpn[1701]: [Private Internet Access] Peer Connection Initiated with [AF_INET]50.23.115.113:443
openvpn[1701]: TUN/TAP device tun11 opened
openvpn[1701]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
openvpn[1701]: /sbin/ifconfig tun11 10.30.1.18 pointopoint 10.30.1.17 mtu 1500
openvpn[1701]: Initialization Sequence Completed

Elestar

Hello,

I am using DSL-AC68U and have exactly same problem. I can see it is connected successfully but i can not browse anything.

cosmoxl

DNS problems no doubt.  In the WAN section, click "no" for connect to DNS server automatically, and enter in 8.8.4.4 and 8.8.8.8 in the two slots.

Then try your VPN again.

imonachair

heh, it worked.

DNS problems no doubt.  In the WAN section, click "no" for connect to DNS server automatically, and enter in 8.8.4.4 and 8.8.8.8 in the two slots.

Then try your VPN again.

asus_ac68

BOOM!  Changing the DNS has worked for me as well perfectly thanks!

Does everyone notice a speed decrease in general when using the VPN?  My speed goes from 5.73 Mbps to 545kbps haha..... anyway to fix that???

Also - with the ASUS router is there anyway to add this new VPN setting as a new SSID? So you can have your normal local internet as one SSID, and then just change over to the other wifi address that is your VPN so that the router isn't pushing all traffic through the VPN?

Cat69

I am also trying to get the Asus DSL AC68U to work and researching a way to do it, I wouldn't set up DNS to Googles servers, surely they should be set for PIA servers because the whole point of VPNs is to protect your privacy and setting to Google would be a leak, at least that's what they say over at the Merlin forums, unfortunately the DSL version will never be supported.

It should work and I am considering leaving PIA for another VPN provider because if they can support Merlin which isn't that different f on the stock firmware then we should see some support for the stock Asus firmware, okay I understand it's not really PIA's job but maybe some instructions would be handy, some help nice.

Cat69

The advice as given on this thread works perfectly for all those using a DSL Asus router/Modem.

https://www.privateinternetaccess.com/forum/discussion/17619/connect-an-asus-dsl-ac68u-to-openvpn-client-with-asus-asuswrt-firmware

I will be staying with PIA.