dd-wrt client to Netgear server

radu

Hi Guys,

I'm posting cause i couldnt find a solution over the past two days. There was a post very similar to mine somewhere on this forum, but no reply.

So what I have is a Netgear R7000 (stock firmware) in my home location as OpenVPN server using 192.168.1.1 as IP; in my roaming location a have a cable modem using 192.168.0.1 behind which I have a TP-Link Archer C7 v2 (dd-wrt) using 192.168.2.1 acting as a OpenVPN client.
Connection to the OpenVPN server with Windows client works just fine, but for some reason i cannot get the router to run. I'm using on the client router the certificates i've created for the laptop, if that makes any differences. Here are the client router log and some screenshots:

State
Server: : Local Address: Remote Address: Client: CONNECTED: SUCCESS Local Address: Remote Address:

Status

Log
Serverlog Clientlog 20151108 15:17:38 I OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on May 23 2014
20151108 15:17:38 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20151108 15:17:38 W WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
20151108 15:17:38 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20151108 15:17:38 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible
20151108 15:17:38 Socket Buffers: R=[172032->131072] S=[172032->131072]
20151108 15:17:38 I UDPv4 link local: [undef]
20151108 15:17:38 I UDPv4 link remote: [AF_INET]x.x.x.x:12974
20151108 15:17:38 TLS: Initial packet from [AF_INET]x.x.x.x:12974 sid=b8af99ab 2bcfd92b
20151108 15:17:38 VERIFY OK: depth=1 C=TW ST=TW L=Taipei O=netgear OU=netgear CN=netgear emailAddress=mail@netgear.com
20151108 15:17:38 VERIFY OK: depth=0 C=TW ST=TW O=netgear OU=netgear CN=netgear emailAddress=mail@netgear.com
20151108 15:17:39 NOTE: --mute triggered...
20151108 15:17:39 5 variation(s) on previous 3 message(s) suppressed by --mute
20151108 15:17:39 I [netgear] Peer Connection Initiated with [AF_INET]x.x.x.x:12974
20151108 15:17:41 SENT CONTROL [netgear]: 'PUSH_REQUEST' (status=1)
20151108 15:17:41 PUSH: Received control message: 'PUSH_REPLY route 192.168.1.1 255.255.255.0 route-delay 5 route 64.0.0.0 192.0.0.0 192.168.1.1 route 32.0.0.0 224.0.0.0 192.168.1.1 route 16.0.0.0 240.0.0.0 192.168.1.1 route 8.0.0.0 248.0.0.0 192.168.1.1 route 4.0.0.0 252.0.0.0 192.168.1.1 route 2.0.0.0 254.0.0.0 192.168.1.1 route 1.0.0.0 255.0.0.0 192.168.1.1 redirect-gateway def1 route-gateway dhcp ping 10 ping-restart 120'
20151108 15:17:41 OPTIONS IMPORT: timers and/or timeouts modified
20151108 15:17:41 NOTE: --mute triggered...
20151108 15:17:41 2 variation(s) on previous 3 message(s) suppressed by --mute
20151108 15:17:41 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=30:b5:c2:08:c0:9f
20151108 15:17:41 W OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
20151108 15:17:41 W OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.1.1
20151108 15:17:41 I TUN/TAP device tap1 opened
20151108 15:17:41 TUN/TAP TX queue length set to 100
20151108 15:17:46 W NOTE: unable to redirect default gateway -- VPN gateway parameter (--route-gateway or --ifconfig) is missing
20151108 15:17:46 /sbin/route add -net 64.0.0.0 netmask 192.0.0.0 gw 192.168.1.1
20151108 15:17:46 W ERROR: Linux route add command failed: external program exited with error status: 255
20151108 15:17:46 /sbin/route add -net 32.0.0.0 netmask 224.0.0.0 gw 192.168.1.1
20151108 15:17:46 W ERROR: Linux route add command failed: external program exited with error status: 255
20151108 15:17:46 /sbin/route add -net 16.0.0.0 netmask 240.0.0.0 gw 192.168.1.1
20151108 15:17:46 W ERROR: Linux route add command failed: external program exited with error status: 255
20151108 15:17:46 /sbin/route add -net 8.0.0.0 netmask 248.0.0.0 gw 192.168.1.1
20151108 15:17:46 W ERROR: Linux route add command failed: external program exited with error status: 255
20151108 15:17:46 /sbin/route add -net 4.0.0.0 netmask 252.0.0.0 gw 192.168.1.1
20151108 15:17:46 W ERROR: Linux route add command failed: external program exited with error status: 255
20151108 15:17:46 /sbin/route add -net 2.0.0.0 netmask 254.0.0.0 gw 192.168.1.1
20151108 15:17:46 W ERROR: Linux route add command failed: external program exited with error status: 255
20151108 15:17:46 /sbin/route add -net 1.0.0.0 netmask 255.0.0.0 gw 192.168.1.1
20151108 15:17:46 W ERROR: Linux route add command failed: external program exited with error status: 255
20151108 15:17:46 I Initialization Sequence Completed
20151108 15:18:02 Extracted DHCP router address: 192.168.1.1
20151108 15:18:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151108 15:18:07 D MANAGEMENT: CMD 'state'
20151108 15:18:07 MANAGEMENT: Client disconnected
20151108 15:18:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151108 15:18:07 D MANAGEMENT: CMD 'state'
20151108 15:18:07 MANAGEMENT: Client disconnected
20151108 15:18:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151108 15:18:07 D MANAGEMENT: CMD 'state'
20151108 15:18:07 MANAGEMENT: Client disconnected
20151108 15:18:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20151108 15:18:07 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00

Help

Firmware: DD-WRT v24-sp2 (05/23/14) std
Time: 15:20:30 up 3 min, load average: 0.16, 0.12, 0.05
WAN IP: 192.168.0.49

Any suggestions?

Traffic

No server config file ?

However, we can see the problem here:

radu wrote20151108 15:17:41 PUSH: Received control message: 'PUSH_REPLY route 192.168.1.1 255.255.255.0 route-delay 5 route 64.0.0.0 192.0.0.0 192.168.1.1 route 32.0.0.0 224.0.0.0 192.168.1.1 route 16.0.0.0 240.0.0.0 192.168.1.1 route 8.0.0.0 248.0.0.0 192.168.1.1 route 4.0.0.0 252.0.0.0 192.168.1.1 route 2.0.0.0 254.0.0.0 192.168.1.1 route 1.0.0.0 255.0.0.0 192.168.1.1 redirect-gateway def1 route-gateway dhcp ping 10 ping-restart 120'

Your server is not pushing an IP address to your client ..

20151108 15:17:41 OPTIONS IMPORT: timers and/or timeouts modified
<..>
20151108 15:17:41 W OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
20151108 15:17:41 W OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.1.1
20151108 15:17:41 I TUN/TAP device tap1 opened
20151108 15:17:41 TUN/TAP TX queue length set to 100
20151108 15:17:46 W NOTE: unable to redirect default gateway -- VPN gateway parameter (--route-gateway or --ifconfig) is missing

radu

Thanks a lot, Taffic.
Meanwhile I figured out that it's the server config and that I have to do some pushing in it. The thing is that it is using the stock NetGear distribution of OpenVPN server, which is not configurable, so I would need to install dd-wrt on it and configure and run my own server.
But I wouldn't wanna do that online, so I'll have to wait till I get to my home location and can approach the issue hands on.

radu

Hello again,
...and happy new year!

Meanwhile I got to my home location and installed dd-wrt in the home location router, but now - on my roaming location - can't get it to work...

The server log looks like this:

State
Server: CONNECTED SUCCESS
Local Address: 10.1.1.1
Remote Address:

Status
VPN Server Stats: nclients=1, bytesin=28508, bytesout=7358
Client Remote IP:Port Bytes Received Bytes Sent Connected Since
Archer y.y.y.y:61099 28508 7358 Sun Jan 10 21:04:13 2016

VPN Server Routing Table
Client Virtual Address Real Address Last Ref
Archer 10.1.1.2 y.y.y.y:61099 Sun Jan 10 21:05:44 2016

Log
Serverlog:
20160110 21:03:34 I OpenVPN 2.3.8 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jan 2 2016
20160110 21:03:34 I library versions: OpenSSL 1.0.2e 3 Dec 2015 LZO 2.09
20160110 21:03:34 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
20160110 21:03:34 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20160110 21:03:34 Diffie-Hellman initialized with 1024 bit key
20160110 21:03:34 Socket Buffers: R=[87380->131072] S=[16384->131072]
20160110 21:03:34 I TUN/TAP device tun0 opened
20160110 21:03:34 TUN/TAP TX queue length set to 100
20160110 21:03:34 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20160110 21:03:34 I /sbin/ifconfig tun0 10.1.1.1 netmask 255.255.255.0 mtu 1500 broadcast 10.1.1.255
20160110 21:03:34 I Listening for incoming TCP connection on [undef]
20160110 21:03:34 I TCPv4_SERVER link local (bound): [undef]
20160110 21:03:34 I TCPv4_SERVER link remote: [undef]
20160110 21:03:34 MULTI: multi_init called r=256 v=256
20160110 21:03:34 IFCONFIG POOL: base=10.1.1.2 size=252 ipv6=0
20160110 21:03:34 I ifconfig_pool_read() in='Archer 10.1.1.2' TODO: IPv6
20160110 21:03:34 I succeeded -> ifconfig_pool_set()
20160110 21:03:34 IFCONFIG POOL LIST
20160110 21:03:34 Archer 10.1.1.2
20160110 21:03:34 MULTI: TCP INIT maxclients=1024 maxevents=1028
20160110 21:03:34 I Initialization Sequence Completed
20160110 21:03:39 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:39 D MANAGEMENT: CMD 'state'
20160110 21:03:39 MANAGEMENT: Client disconnected
20160110 21:03:39 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:39 D MANAGEMENT: CMD 'state'
20160110 21:03:39 MANAGEMENT: Client disconnected
20160110 21:03:39 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:39 D MANAGEMENT: CMD 'state'
20160110 21:03:39 MANAGEMENT: Client disconnected
20160110 21:03:39 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:39 MANAGEMENT: Client disconnected
20160110 21:03:39 NOTE: --mute triggered...
20160110 21:03:39 1 variation(s) on previous 3 message(s) suppressed by --mute
20160110 21:03:39 D MANAGEMENT: CMD 'status 2'
20160110 21:03:39 MANAGEMENT: Client disconnected
20160110 21:03:39 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:39 D MANAGEMENT: CMD 'status 2'
20160110 21:03:39 MANAGEMENT: Client disconnected
20160110 21:03:39 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:39 D MANAGEMENT: CMD 'log 500'
20160110 21:03:39 MANAGEMENT: Client disconnected
20160110 21:03:49 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:49 D MANAGEMENT: CMD 'state'
20160110 21:03:49 MANAGEMENT: Client disconnected
20160110 21:03:49 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:49 D MANAGEMENT: CMD 'state'
20160110 21:03:49 MANAGEMENT: Client disconnected
20160110 21:03:49 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:49 D MANAGEMENT: CMD 'state'
20160110 21:03:49 MANAGEMENT: Client disconnected
20160110 21:03:49 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:49 MANAGEMENT: Client disconnected
20160110 21:03:49 NOTE: --mute triggered...
20160110 21:03:49 1 variation(s) on previous 3 message(s) suppressed by --mute
20160110 21:03:49 D MANAGEMENT: CMD 'status 2'
20160110 21:03:49 MANAGEMENT: Client disconnected
20160110 21:03:49 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:49 D MANAGEMENT: CMD 'status 2'
20160110 21:03:49 MANAGEMENT: Client disconnected
20160110 21:03:49 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160110 21:03:49 D MANAGEMENT: CMD 'log 500'
19700101 02:00:00

dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem keepalive 10 120 verb 3 mute 3 syslog writepid /var/run/openvpnd.pid management 127.0.0.1 14 management-log-cache 100 topology subnet script-security 2 port 443 proto tcp-server cipher bf-cbc auth sha1 client-connect /tmp/openvpn/clcon.sh client-disconnect /tmp/openvpn/cldiscon.sh client-config-dir /tmp/openvpn/ccd comp-lzo adaptive tls-server ifconfig-pool-persist /tmp/openvpn/ip-pool 86400 client-to-client tcp-nodelay tun-mtu 1500 mtu-disc yes server 10.1.1.0 255.255.255.0 dev tun2 tun-ipv6 push "route 192.168.1.0 255.255.255.0" push "dhcp-option DNS 8.8.8.8" push "redirect-gateway def1" server 10.1.1.0 255.255.255.0 dev tun0 proto tcp keepalive 10 120 dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem

and the client log is:
State
Server: : Local Address: Remote Address: Client: CONNECTED: SUCCESS Local Address: 10.1.1.2 Remote Address: 10.1.1.2

Status

Log
Serverlog Clientlog 20160110 21:04:13 I OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on May 23 2014
20160110 21:04:13 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20160110 21:04:13 W WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
20160110 21:04:13 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20160110 21:04:13 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible
20160110 21:04:13 Socket Buffers: R=[87380->131072] S=[16384->131072]
20160110 21:04:13 N RESOLVE: Cannot resolve host address: nonononono.mynetgear.com: Name or service not known
20160110 21:04:13 I Attempting to establish TCP connection with [AF_INET]z.z.z.z:443 [nonblock]
20160110 21:04:14 I TCP connection established with [AF_INET]z.z.z.z:443
20160110 21:04:14 I TCPv4_CLIENT link local: [undef]
20160110 21:04:14 I TCPv4_CLIENT link remote: [AF_INET]z.z.z.z:443
20160110 21:04:14 TLS: Initial packet from [AF_INET]z.z.z.z:443 sid=122e3c6f 0ab37fcb
20160110 21:04:15 VERIFY OK: depth=1 C=RO ST=GJ L=Targu-Jiu O=Radu OU=HomeServer CN=HomeServer name=HomeServer emailAddress=radusendroiu@outlook.com
20160110 21:04:15 VERIFY OK: depth=0 C=RO ST=GJ L=Targu-Jiu O=Radu OU=HomeServer CN=NightHawk name=NightHawk emailAddress=radusendroiu@outlook.com
20160110 21:04:17 NOTE: --mute triggered...
20160110 21:04:17 5 variation(s) on previous 3 message(s) suppressed by --mute
20160110 21:04:17 I [NightHawk] Peer Connection Initiated with [AF_INET]z.z.z.z:443
20160110 21:04:19 SENT CONTROL [NightHawk]: 'PUSH_REQUEST' (status=1)
20160110 21:04:19 PUSH: Received control message: 'PUSH_REPLY route 192.168.1.0 255.255.255.0 dhcp-option DNS 8.8.8.8 redirect-gateway def1 route-gateway 10.1.1.1 topology subnet ping 10 ping-restart 120 socket-flags TCP_NODELAY ifconfig 10.1.1.2 255.255.255.0'
20160110 21:04:19 OPTIONS IMPORT: timers and/or timeouts modified
20160110 21:04:19 NOTE: --mute triggered...
20160110 21:04:19 1 variation(s) on previous 3 message(s) suppressed by --mute
20160110 21:04:19 Socket flags: TCP_NODELAY=1 succeeded
20160110 21:04:19 OPTIONS IMPORT: --ifconfig/up options modified
20160110 21:04:19 OPTIONS IMPORT: route options modified
20160110 21:04:19 OPTIONS IMPORT: route-related options modified
20160110 21:04:19 NOTE: --mute triggered...
20160110 21:04:19 1 variation(s) on previous 3 message(s) suppressed by --mute
20160110 21:04:19 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=30:b5:c2:08:c0:9f
20160110 21:04:19 I TUN/TAP device tun1 opened
20160110 21:04:19 TUN/TAP TX queue length set to 100
20160110 21:04:19 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20160110 21:04:19 I /sbin/ifconfig tun1 10.1.1.2 netmask 255.255.255.0 mtu 1500 broadcast 10.1.1.255
20160110 21:04:19 /sbin/route add -net z.z.z.z netmask 255.255.255.255 gw 192.168.0.1
20160110 21:04:19 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.1.1.1
20160110 21:04:19 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.1.1.1
20160110 21:04:19 /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.1.1.1
20160110 21:04:19 I Initialization Sequence Completed
20160110 21:04:28 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:04:28 D MANAGEMENT: CMD 'state'
20160110 21:04:28 MANAGEMENT: Client disconnected
20160110 21:04:28 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:04:28 D MANAGEMENT: CMD 'state'
20160110 21:04:28 MANAGEMENT: Client disconnected
20160110 21:04:28 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:04:28 D MANAGEMENT: CMD 'state'
20160110 21:04:28 MANAGEMENT: Client disconnected
20160110 21:04:28 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:04:28 D MANAGEMENT: CMD 'log 500'
20160110 21:04:28 MANAGEMENT: Client disconnected
20160110 21:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:14:37 D MANAGEMENT: CMD 'state'
20160110 21:14:37 MANAGEMENT: Client disconnected
20160110 21:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:14:37 D MANAGEMENT: CMD 'state'
20160110 21:14:37 MANAGEMENT: Client disconnected
20160110 21:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:14:38 D MANAGEMENT: CMD 'state'
20160110 21:14:38 MANAGEMENT: Client disconnected
20160110 21:14:38 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160110 21:14:38 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00

...I just can't figure out what is that i'm doing wrong...
any sugestions?

Traffic

According to your log:

radu wroteClientlog 20160110 21:04:13 I

OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on May 23 2014
<..>
20160110 21:04:13 N RESOLVE: Cannot resolve host address: nononononp.mynetgear.com: Name or service not known
20160110 21:04:13 I Attempting to establish TCP connection with [AF_INET]---:443 [nonblock]
20160110 21:04:14 I TCP connection established with [AF_INET]---:443
<..>
20160110 21:04:17 I [NightHawk] Peer Connection Initiated with [AF_INET]---:443
20160110 21:04:19 SENT CONTROL [NightHawk]: 'PUSH_REQUEST' (status=1)
20160110 21:04:19 PUSH: Received control message: 'PUSH_REPLY route 192.168.1.0 255.255.255.0 dhcp-option DNS 8.8.8.8 redirect-gateway def1 route-gateway 10.1.1.1 topology subnet ping 10 ping-restart 120 socket-flags TCP_NODELAY ifconfig 10.1.1.2 255.255.255.0'
20160110 21:04:19 OPTIONS IMPORT: timers and/or timeouts modified
20160110 21:04:19 NOTE: --mute triggered...
20160110 21:04:19 1 variation(s) on previous 3 message(s) suppressed by --mute
20160110 21:04:19 Socket flags: TCP_NODELAY=1 succeeded
20160110 21:04:19 OPTIONS IMPORT: --ifconfig/up options modified
20160110 21:04:19 OPTIONS IMPORT: route options modified
20160110 21:04:19 OPTIONS IMPORT: route-related options modified
20160110 21:04:19 NOTE: --mute triggered...
20160110 21:04:19 1 variation(s) on previous 3 message(s) suppressed by --mute
20160110 21:04:19 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=30:b5:c2:08:c0:9f
20160110 21:04:19 I TUN/TAP device tun1 opened
20160110 21:04:19 TUN/TAP TX queue length set to 100
20160110 21:04:19 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20160110 21:04:19 I /sbin/ifconfig tun1 10.1.1.2 netmask 255.255.255.0 mtu 1500 broadcast 10.1.1.255
20160110 21:04:19 /sbin/route add -net 79.113.134.212 netmask 255.255.255.255 gw 192.168.0.1
20160110 21:04:19 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.1.1.1
20160110 21:04:19 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.1.1.1
20160110 21:04:19 /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.1.1.1
20160110 21:04:19 I Initialization Sequence Completed

It looks like you are connected .. however, nonononono.mynetgear.com is not a valid DDNS name.

radu

Yep, for some reason no-ip disabled my account, probably afler flashing the router and removing stock firmware that allowed me to create the account - but now it's reactivated. Is there a way to edit my previous post and remove personal information which I dumbly posted in plain text? Don't wanna have the email flooded with spam...
Anyways, OpenVPN server on the router won't start now, no matter what I do.

Traffic

radu wroteYep, for some reason no-ip disabled my account, probably afler flashing the router and removing stock firmware that allowed me to create the account - but now it's reactivated

I presume you mean your problem is fixed ?

radu wroteIs there a way to edit my previous post and remove personal information

I will notify a mod .. I am sure they will oblige you.

Regards

radu

Traffic wroteI presume you mean your problem is fixed ?

Nope... so it says "success" everywhere, the connection to the client router says "internet", but in routers logs it says:
"20160111 23:04:56 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160111 23:04:56 D MANAGEMENT: CMD 'state'
20160111 23:04:56 MANAGEMENT: Client disconnected
20160111 23:04:56 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160111 23:04:56 D MANAGEMENT: CMD 'log 500' "

...and online stuff (websites, TeamViewer, OneDrive) won't work. I also connected with the OpenVPN application, it connects but can't open anything on the internet. When websites got stuck at "resolving hosts" I thought it's the dns and changed several times the google dns with the one from my provider, but no success.

maybe there's something wrong with the dd-wrt installation/realease; will try again tomorrow. Meanwhile, settings and logs here:

SERVER CONFIG (NightHawk router0:

Start Type: System
Config as: Server
Server Mode: Router (TUN)
Network: 10.1.1.0
Netmask: 255.255.255.0
Port: 443
Tunnel Protocol: TCP
Encryptions Cipher: Blowfish CBC
Hash Algorithm: SHA1
Advanced Options: Disable
Additional Config:
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS [provider dns]"
push "redirect-gateway def1"
server 10.1.1.0 255.255.255.0
dev tun0
proto tcp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

SERVER LOG (NightHawk router):

20160111 23:52:54 I TCP connection established with [AF_INET][IP]:29476
20160111 23:52:55 [IP]:29476 TLS: Initial packet from [AF_INET][IP]:29476 sid=323dbbfc 566e692e
20160111 23:52:57 [IP]:29476 VERIFY OK: [certificate]
20160111 23:52:57 [IP]:29476 VERIFY OK: [certificate]
20160111 23:52:57 [IP]:29476 NOTE: --mute triggered...
20160111 23:52:57 [IP]:29476 5 variation(s) on previous 3 message(s) suppressed by --mute
20160111 23:52:57 I [IP]:29476 [Archer] Peer Connection Initiated with [AF_INET]95.91.236.233:29476
20160111 23:52:57 I Archer/[IP]:29476 MULTI_sva: pool returned IPv4=10.1.1.2 IPv6=(Not enabled)
20160111 23:52:57 Archer/[IP]:29476 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_bcd0f31edd6d739cf11b43000f52b773.tmp
20160111 23:52:57 Archer/[IP]:29476 MULTI: Learn: 10.1.1.2 -> Archer/[IP]:29476
20160111 23:52:57 Archer/[IP]:29476 MULTI: primary virtual IP for Archer/[IP]:29476: 10.1.1.2
20160111 23:52:59 Archer/[IP]:29476 PUSH: Received control message: 'PUSH_REQUEST'
20160111 23:52:59 I Archer/[IP]:29476 send_push_reply(): safe_cap=940
20160111 23:52:59 Archer/[IP]:29476 SENT CONTROL [Archer]: 'PUSH_REPLY route 192.168.1.0 255.255.255.0 dhcp-option DNS [provider dns] redirect-gateway def1 route-gateway 10.1.1.1 topology subnet ping 10 ping-restart 120 socket-flags TCP_NODELAY ifconfig 10.1.1.2 255.255.255.0' (status=1)
20160111 23:54:43 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160111 23:54:43 D MANAGEMENT: CMD 'state'
20160111 23:54:43 MANAGEMENT: Client disconnected
20160111 23:54:44 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160111 23:54:44 D MANAGEMENT: CMD 'state'
20160111 23:54:44 MANAGEMENT: Client disconnected
20160111 23:54:44 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160111 23:54:44 D MANAGEMENT: CMD 'state'
20160111 23:54:44 MANAGEMENT: Client disconnected
20160111 23:54:44 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160111 23:54:44 MANAGEMENT: Client disconnected
20160111 23:54:44 NOTE: --mute triggered...
20160111 23:54:44 1 variation(s) on previous 3 message(s) suppressed by --mute
20160111 23:54:44 D MANAGEMENT: CMD 'status 2'
20160111 23:54:44 MANAGEMENT: Client disconnected
20160111 23:54:44 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160111 23:54:44 D MANAGEMENT: CMD 'status 2'
20160111 23:54:44 MANAGEMENT: Client disconnected
20160111 23:54:44 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20160111 23:54:44 D MANAGEMENT: CMD 'log 500'
19700101 02:00:00

dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem keepalive 10 120 verb 3 mute 3 syslog writepid /var/run/openvpnd.pid management 127.0.0.1 14 management-log-cache 100 topology subnet script-security 2 port 443 proto tcp-server cipher bf-cbc auth sha1 client-connect /tmp/openvpn/clcon.sh client-disconnect /tmp/openvpn/cldiscon.sh client-config-dir /tmp/openvpn/ccd comp-lzo adaptive tls-server ifconfig-pool-persist /tmp/openvpn/ip-pool 86400 client-to-client tcp-nodelay tun-mtu 1500 mtu-disc yes server 10.1.1.0 255.255.255.0 dev tun2 tun-ipv6 push "route 192.168.1.0 255.255.255.0" push "dhcp-option DNS [provider dns]" push "redirect-gateway def1" server 10.1.1.0 255.255.255.0 dev tun0 proto tcp keepalive 10 120 dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem

CLIENT CONFIG (Archer router):

Server IP/Name: [ddns]
Port: 443
Tunnel Device: TUN
Tunnel Protocol: TCP
Encryption Cipher: Blowfish CBC
Hash Algorithm: SHA1
Advanced Options: Disable

CLIENT LOG (Archer Router):

State
Server: : Local Address: Remote Address: Client: CONNECTED: SUCCESS Local Address: 10.1.1.2 Remote Address: 10.1.1.2

Serverlog Clientlog 20160111 23:52:54 I OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on May 23 2014
20160111 23:52:54 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20160111 23:52:54 W WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
20160111 23:52:54 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20160111 23:52:54 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible
20160111 23:52:54 Socket Buffers: R=[87380->131072] S=[16384->131072]
20160111 23:52:54 I Attempting to establish TCP connection with [AF_INET][IP]:443 [nonblock]
20160111 23:52:55 I TCP connection established with [AF_INET][IP]:443
20160111 23:52:55 I TCPv4_CLIENT link local: [undef]
20160111 23:52:55 I TCPv4_CLIENT link remote: [AF_INET][IP]:443
20160111 23:52:55 TLS: Initial packet from [AF_INET][IP]:443 sid=8b531306 bbb13aa2
20160111 23:52:56 VERIFY OK:[certificate]
20160111 23:52:56 VERIFY OK: [certificate]
20160111 23:52:57 NOTE: --mute triggered...
20160111 23:52:57 5 variation(s) on previous 3 message(s) suppressed by --mute
20160111 23:52:57 I [NightHawk] Peer Connection Initiated with [AF_INET][IP]:443
20160111 23:52:59 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160111 23:52:59 SENT CONTROL [NightHawk]: 'PUSH_REQUEST' (status=1)
20160111 23:52:59 D MANAGEMENT: CMD 'state'
20160111 23:52:59 MANAGEMENT: Client disconnected
20160111 23:52:59 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160111 23:52:59 D MANAGEMENT: CMD 'state'
20160111 23:52:59 MANAGEMENT: Client disconnected
20160111 23:52:59 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160111 23:52:59 D MANAGEMENT: CMD 'state'
20160111 23:52:59 MANAGEMENT: Client disconnected
20160111 23:52:59 PUSH: Received control message: 'PUSH_REPLY route 192.168.1.0 255.255.255.0 dhcp-option DNS [provider dns] redirect-gateway def1 route-gateway 10.1.1.1 topology subnet ping 10 ping-restart 120 socket-flags TCP_NODELAY ifconfig 10.1.1.2 255.255.255.0'
20160111 23:52:59 OPTIONS IMPORT: timers and/or timeouts modified
20160111 23:52:59 OPTIONS IMPORT: --socket-flags option modified
20160111 23:52:59 Socket flags: TCP_NODELAY=1 succeeded
20160111 23:52:59 OPTIONS IMPORT: --ifconfig/up options modified
20160111 23:52:59 OPTIONS IMPORT: route options modified
20160111 23:52:59 OPTIONS IMPORT: route-related options modified
20160111 23:52:59 NOTE: --mute triggered...
20160111 23:52:59 1 variation(s) on previous 3 message(s) suppressed by --mute
20160111 23:52:59 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=30:b5:c2:08:c0:9f
20160111 23:52:59 I TUN/TAP device tun1 opened
20160111 23:52:59 TUN/TAP TX queue length set to 100
20160111 23:52:59 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20160111 23:52:59 I /sbin/ifconfig tun1 10.1.1.2 netmask 255.255.255.0 mtu 1500 broadcast 10.1.1.255
20160111 23:52:59 /sbin/route add -net [IP] netmask 255.255.255.255 gw 192.168.0.1
20160111 23:52:59 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.1.1.1
20160111 23:52:59 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.1.1.1
20160111 23:52:59 /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.1.1.1
20160111 23:52:59 I Initialization Sequence Completed
20160111 23:52:59 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20160111 23:52:59 D MANAGEMENT: CMD 'log 500'

Traffic

Your OpenVPN connection is working.

For the other requirements you need to read the documentation.

radu wroteit connects but can't open anything on the internet. When websites got stuck at "resolving hosts"

See this HOWTO:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

radu

Hi Traffic,

Thanks for your reply - it showed me I was looking in the wrong place.
It works perfectly now, and the only thing I did was to change "proto tcp" to "proto tcp-server". I'll post my config here for other users that have the same situation:

SERVER CONFIG (Home Location router); LAN IP: 192.168.1.1

Start Type: System
Config as: Server
Server Mode: Router (TUN)
Network: 10.1.1.0
Netmask: 255.255.255.0
Port: 443
Tunnel Protocol: TCP
Encryptions Cipher: Blowfish CBC
Hash Algorithm: SHA1
Advanced Options: Disable

Additional Config:
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS [provider dns]"
push "dhcp-option DNS [2nd provider dns]"
push "redirect-gateway def1"
server 10.1.1.0 255.255.255.0
dev tun0
proto tcp-server
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

CLIENT CONFIG (roaming location router); LAN IP: 192.168.2.1

Server IP/Name: [ddns link]
Port: 443
Tunnel Device: TUN
Tunnel Protocol: TCP
Encryption Cipher: Blowfish CBC
Hash Algorithm: SHA1
Advanced Options: Disable

radu

Traffic, how do I send a private message to an admin, to allow me to edit my previous post and remove private info?