droujav wrote
Hello,
did you find a solution ?
PickledNewt wrote
Hi All,
I have setup OpenVPN on my Raspberry Pi (PiVPN -
https://github.com/pivpn/pivpn). All works fine. I can connect to it on my phone and laptop.
I would like to setup a wireless router that is permanently connected to the VPN, so I can connect any wifi device to the VPN (the Pi and the router are at different properties)...
I bought an Asus RT-AC68U wireless router, with AsusWRT, which has inbuilt support for OpenVPN Server and Client.
The problem - when I use the exact same .ovpn connection file I use on my phone and laptop, it jut says "connection failed".
Any ideas at all?
Redacted version of .ovpn file below.
Thank you for any and all help!
client
dev tun
proto udp
remote ******************.com PORTNUMBER
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server name
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 1
<ca>
-----BEGIN CERTIFICATE-----
******************
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
******************
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
******************
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
******************
-----END OpenVPN Static key V1-----
</tls-auth>
I have exactly same configuration and issue. I have found solution. I have installed Asus Merlin firmware. Very easy
https://techcyn.com/guides/asus-merlin-firmware-guide-how-to-flash-your-asus-wireless-router-to-asus-merlin-firmware/ I assume standard one also works but setup aren't so clear for me, I prefered "Merlin".
First PIVPN setup server very easly, secure and quick but It' s hard to understand what it does. When creating an user using pivpn adduser I really used "pivpn adduser nopass" When creating pivpn user, you are really adding an
user/password to the certificate key. When you enter in Asus setup you see user/password but it isn't the same field. piVPN doesn't use user/password authentification, it use a certificate key with a password. Quite confusing. If you want to connect in Asus to piVPN with standard setup you need to add special custom command "askpass %path file with user/password" in ASUS that I didn't work for me. Any case Asus Router has password to enter in Admin web so no sense to include extra password.
So steps I have done. Create user in piVPN "pivpn adduser nopass"
In Asus router, go to VPN, OpenVPN client and import fileuser.ovpn generated after pivpn adduser nopass
Then ensure this setup in options:
Authorization Mode: TLS
User/password authentification: NO
TLS control cypt channel: Encrypt channel
Auth digest: SHA256 (or the one used, it's recommended standard when installed piVPN)
Cypher negatiotion: Enable with fallback
Negatiotion cypher: AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC
Legacy/fallback: AES-256-CBC
Regards.
