Netgear Nighhawk R7000 client doesn't connect

timokirschner

HI everyone,
I am using a Netgear R7000 with DD-WRT v3.0-r28000M (10/24/15) installed.

I installed an openvpn access on my web server and connecting with mobile and desktop client works fine. However, when connecting with my router it doesn't work.
See the protocol below.

Here is what I did to setup the router - I would appreciate any hint to understand what I did wrong.

1. I downloaded the connection profile: Yourself (user-locked profile)

2. I entered the following into the router's configuration
Server IP/Name: MyIPADRESS
Connecting port 1194
Tunnel Device: TUN
Tunnel Protocol: UDP
Encryption Cipher: Blowfish CBC
Hash Algorithm: MD5
User Pass Authentication: Enable
Username: MYUSERNAME
Password: MYPASSWORD

3. I opened the OpenVPN connection profile in a text editor and copied:

The following (without the <ca> and </ca> into the CA Cert field of the router configuration:

<ca>
-----BEGIN CERTIFICATE-----
A LOT OF TEXT
-----END CERTIFICATE-----
</ca>

The following (without the <cert> and </cert> into the Public Client Cert field of the router configuration:

<cert>
-----BEGIN CERTIFICATE-----
A LOT OF TEXT
-----END CERTIFICATE-----
</cert>

The following (without the <key> and </key> into the Private Client Key field of the router configuration:

<key>
-----BEGIN CERTIFICATE-----
A LOT OF TEXT
-----END CERTIFICATE-----
</key>

I restarted the router and this is what the log shows:

Log
Clientlog:
20151107 09:25:19 I OpenVPN 2.3.8 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Oct 24 2015
20151107 09:25:19 I library versions: OpenSSL 1.0.2d 9 Jul 2015 LZO 2.09
20151107 09:25:19 W WARNING: file '/tmp/openvpncl/credentials' is group or others accessible
20151107 09:25:19 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20151107 09:25:19 W WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
20151107 09:25:19 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20151107 09:25:19 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible
20151107 09:25:19 Socket Buffers: R=[180224->131072] S=[180224->131072]
20151107 09:25:19 I UDPv4 link local: [undef]
20151107 09:25:19 I UDPv4 link remote: [AF_INET]MYIPADRESS:1194
20151107 09:25:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151107 09:25:24 D MANAGEMENT: CMD 'state'
20151107 09:25:24 MANAGEMENT: Client disconnected
20151107 09:25:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151107 09:25:24 D MANAGEMENT: CMD 'state'
20151107 09:25:24 MANAGEMENT: Client disconnected
20151107 09:25:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151107 09:25:24 D MANAGEMENT: CMD 'state'
20151107 09:25:24 MANAGEMENT: Client disconnected
20151107 09:25:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151107 09:25:24 D MANAGEMENT: CMD 'status 2'
20151107 09:25:24 MANAGEMENT: Client disconnected
20151107 09:25:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151107 09:25:24 D MANAGEMENT: CMD 'log 500'
19700101 01:00:00

ca /tmp/openvpncl/ca.crt cert /tmp/openvpncl/client.crt key /tmp/openvpncl/client.key management 127.0.0.1 16 management-log-cache 100 verb 3 mute 3 syslog writepid /var/run/openvpncl.pid client resolv-retry infinite nobind persist-key persist-tun script-security 2 dev tun1 proto udp cipher bf-cbc auth md5 auth-user-pass /tmp/openvpncl/credentials remote MyIPAdress 1194 comp-lzo adaptive tun-mtu 1500 fragment 1300 mssfix fast-io tun-ipv6