Help with Asus RT-AC68U

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
Snerk13
OpenVpn Newbie
Posts: 3
Joined: Tue May 19, 2015 5:59 pm

Help with Asus RT-AC68U

Post by Snerk13 » Tue May 19, 2015 10:21 pm

Hello,
I am new to trying to use OpenVPN, I would like to use it with my desktop with Win 8.1, a laptop with Win 7, two android tablets and two android phones. My router is an Asus RT-AC68U, stock firmware 3.0.0.4.378_4585. The only progress I have made after reading for what seems like days is that if I turn off the private profile of the Windows firewall I can open the client on my desktop but when I do I cant access the Internet in any way including going between the pages of the router configuration. Any help would be appreciated, I have very little experience in this area and everything I read seems to be a different fix. If I can get the desktop to work maybe that will be a start for the others that this is really focused on. Logs below, I hope that is what is needed:

Client:
Tue May 19 14:24:44 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Tue May 19 14:24:44 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Enter Management Password:
Tue May 19 14:24:58 2015 UDPv4 link local: [undef]
Tue May 19 14:24:58 2015 UDPv4 link remote: [AF_INET] xxx.xxx.x.x:1194
Tue May 19 14:24:58 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 19 14:24:59 2015 [RT-AC68U] Peer Connection Initiated with [AF_INET]xxx.xxx.x.x:1194
Tue May 19 14:25:01 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue May 19 14:25:01 2015 open_tun, tt->ipv6=0
Tue May 19 14:25:01 2015 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{C3D32855-63F6-4E97-9DB6-695BDF44AAAA}.tap
Tue May 19 14:25:01 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {C3D32855-63F6-4E97-9DB6-695BDF44AAAA} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Tue May 19 14:25:01 2015 Successful ARP Flush on interface [46] {C3D32855-63F6-4E97-9DB6-695BDF44AAAA}
Tue May 19 14:25:06 2015 Initialization Sequence Completed


Server:

May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXTLS: Initial packet from [AF_INET]192.168.1.161:58521, sid=7ed79c8e e3d9630d
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXVERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC68U, emailAddress=me@myhost.mydomain
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXVERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=client, emailAddress=me@myhost.mydomain
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXPLUGIN_CALL: POST /usr/lib/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXTLS: Username/Password authentication succeeded for username 'Mech'
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXData Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXData Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXData Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXData Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXXControl Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
May 19 14:52:44 openvpn[18503]: xxx.xxx.x.xxx:XXXXX[client] Peer Connection Initiated with [AF_INET]192.168.1.161:58521
May 19 14:52:44 openvpn[18503]: client/xxx.xxx.x.xxx:XXXXXMULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
May 19 14:52:44 openvpn[18503]: client/xxx.xxx.x.xxx:XXXXXMULTI: Learn: 10.8.0.6 -> client/192.168.1.161:58521
May 19 14:52:44 openvpn[18503]: client/xxx.xxx.x.xxx:XXXXXMULTI: primary virtual IP for client/192.168.1.161:58521: 10.8.0.6
May 19 14:52:46 openvpn[18503]: client/xxx.xxx.x.xxx:XXXXXPUSH: Received control message: 'PUSH_REQUEST'
May 19 14:52:46 openvpn[18503]: client/xxx.xxx.x.xxx:XXXXXsend_push_reply(): safe_cap=940
May 19 14:52:46 openvpn[18503]: client/xxx.xxx.x.xxx:XXXXXSENT CONTROL [client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 15,ping-restart 60,ifconfig 10.8.0.6 10.8.0.5' (status=1)

Thank you.

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: Help with Asus RT-AC68U

Post by Traffic » Wed May 20, 2015 10:36 am

Please post your server and client config files.

FYI: Your current logs show a working vpn connection.

This comment:
Snerk13 wrote:if I turn off the private profile of the Windows firewall I can open the client on my desktop
is a problem ..

Windows firewall is fairly complicated and unfortunately this forum does not provide free support for Microsoft. You are going to have to read a lot more M$ flannel and learn about windows firewall.

Oddly, the manual for your router says the router has a PPTP VPN not openvpn but your server log does show openvpn .. :?

Snerk13
OpenVpn Newbie
Posts: 3
Joined: Tue May 19, 2015 5:59 pm

Re: Help with Asus RT-AC68U

Post by Snerk13 » Wed May 20, 2015 2:56 pm

Thank you for the reply & time Traffic. I am sorry, I thought I did post the server and client logs, unless you mean for all my devices. I thought I would try to fix them one at a time. My Asus router does have an OpenVPN tab next to the PPTP tab. Even though I got it to work, it was only partially since I cannot connect to the internet or even open my router to view what is going on while the VPN is operating, I am hoping that is something that can be fixed. As for the firewall, I can keep reading as necessary and turn it off if there is not an easy fix.

Snerk13
OpenVpn Newbie
Posts: 3
Joined: Tue May 19, 2015 5:59 pm

Re: Help with Asus RT-AC68U

Post by Snerk13 » Fri May 22, 2015 3:31 pm

Thank you for your help, for some reason my reply from Wednesday never was approved, if it shows up sorry to double reply. I had thought I did include the logs needed, I was starting with my desktop before working on the next device. I can post all of them though if that would be more beneficial. If I posted the incorrect logs please let me know, I am not fluent in this area. As for the firewall I can disable that if necessary and work on that separately. My main concern is getting internet access when the OpenVPN client is active.

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: Help with Asus RT-AC68U

Post by Traffic » Sun Aug 23, 2015 12:44 pm

Snerk13 wrote:My main concern is getting internet access when the OpenVPN client is active
I presume you mean this:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

Post Reply