Hi, First, sorry for my bad english... I have a little problem with my config. I have a pivpn server on one network. This pivpn generate a file : client.ovpn, and I have a password. The file : [code]client dev tun proto udp remote xxxxxx..ddns.net 59*** resolv-retry infinite nobind remote-cert-tls server tls-version-min 1.2 verify-x509-name raspberrypi_84a4614d-1b39-489f-a52c-691c5f1347e1 name cipher AES-256-CBC auth SHA256 auth-nocache verb 3 -----BEGIN CERTIFICATE----- MIIBtTC -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIBx -----END CERTIFICATE----- -----BEGIN ENCRYPTED PRIVATE KEY----- MIH -----END ENCRYPTED PRIVATE KEY----- # # 2048 bit OpenVPN static key # -----BEGIN OpenVPN Static key V1----- 0b3 -----END OpenVPN Static key V1----- [/code] The passeword : [img]https://zupimages.net/up/20/19/avgs.png[/img] But I want to put the client on a DDWRT router. I put the followed configuration in my router : [img]https://zupimages.net/up/20/19/yvcz.jpg[/img] [img]https://zupimages.net/up/20/19/ooqf.jpg[/img] But it's not working. I try with a paying VPN like HideMyAss and it's working. So the problem is not my network... Anyone have already configure this ? Thank you !

Connect with DD WRT Client

Quenting1

Hi,

First, sorry for my bad english...

I have a little problem with my config.

I have a pivpn server on one network. This pivpn generate a file : client.ovpn, and I have a password.

The file :

client
dev tun
proto udp
remote xxxxxx..ddns.net 59***
resolv-retry infinite
nobind
remote-cert-tls server
tls-version-min 1.2
verify-x509-name raspberrypi_84a4614d-1b39-489f-a52c-691c5f1347e1 name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIBtTC
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIBx
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIH
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
0b3
-----END OpenVPN Static key V1-----
</tls-crypt>

The passeword :

But I want to put the client on a DDWRT router.

I put the followed configuration in my router :

But it's not working. I try with a paying VPN like HideMyAss and it's working. So the problem is not my network...

Anyone have already configure this ?

Thank you !

TinCanTech

Don't use a password ..

300000

please add this line to addition config so it send log to the syslog tab so we will find out why it not connect.click connect and wait after that go to status and openvpn tab you will see full of log over there and post it on here.

management localhost 5001

if you cant make connection because it need password so you can try connec it from terminal windows as

sudo openvpn --config /etc/openvpn/ovpn.conf --daemon

it will ask password and enter your password try connect to your server.

Quenting1

Thanks for your reply,

I try to make a ovpn with no password.

I have an error in my log file of DD-WRT :

Clientlog: 
20200505 14:48:24 W WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure 
20200505 14:48:24 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible 
20200505 14:48:24 W WARNING: file '/tmp/openvpncl/ta.key' is group or others accessible 
20200505 14:48:24 I OpenVPN 2.4.6 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug 9 2018 
20200505 14:48:24 I library versions: OpenSSL 1.1.0h 27 Mar 2018 LZO 2.09 
20200505 14:48:24 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16 
20200505 14:48:24 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 
20200505 14:48:24 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication 
20200505 14:48:24 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication 
20200505 14:48:24 I TCP/UDP: Preserving recently used remote address: [AF_INET]81.***.***.***:59***
20200505 14:48:24 Socket Buffers: R=[32767->32767] S=[32767->32767] 
20200505 14:48:24 I UDPv4 link local: (not bound) 
20200505 14:48:24 I UDPv4 link remote: [AF_INET]81.***.***.***:59*** 
20200505 14:48:30 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20200505 14:48:31 D MANAGEMENT: CMD 'state' 
20200505 14:48:31 MANAGEMENT: Client disconnected 
20200505 14:48:31 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20200505 14:48:31 D MANAGEMENT: CMD 'state' 
20200505 14:48:31 MANAGEMENT: Client disconnected 
20200505 14:48:31 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20200505 14:48:31 D MANAGEMENT: CMD 'state' 
20200505 14:48:31 MANAGEMENT: Client disconnected 
20200505 14:48:31 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20200505 14:48:31 D MANAGEMENT: CMD 'status 2' 
20200505 14:48:31 MANAGEMENT: Client disconnected 
20200505 14:48:31 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20200505 14:48:31 D MANAGEMENT: CMD 'log 500' 
20200505 14:48:31 MANAGEMENT: Client disconnected 
20200505 14:49:23 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20200505 14:49:23 D MANAGEMENT: CMD 'state' 
20200505 14:49:23 MANAGEMENT: Client disconnected 
20200505 14:49:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20200505 14:49:24 N TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

300000

20200505 14:49:24 N TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

dd wrt cant connect to your server dont know why but it cant find server address , check that network and try again .

300000

openvpn need time setting correct on both client and server , it cant make a connection if server and client 5 minutes diffence .if you dont setting NTP time setting on dd wrt maybe the day is 01.10.1970 so you need correct time setting on that ,

pleas going to setting tab , chosee basic setting scrolling down to NTP and chosee time zore correct and go to internet chosee NTP server on your time zore .

you can try time zore london is 82.219.4.30

Quenting1

That's strange, I have an internet access by the router. So I think it's not my network connectivity.

I check the time of my Raspberry pi and my DDWRT router with the command date. It's the same time...

300000

where is your server . it is inside your network or some where internet ? can you connect to it from difference client ? your phone for example. make sure your server . you said you got pivpn server on one network but are you sure it is working? at the moment dd wrt cant find address to your server . why ? ask that quest and try to answer yourshelf