OpenVPN Support Forum

Hi guys,

so I am in a little bit over my head here, I can't get the VPN connection to work.
We have google fiber and they only seem to have IPv6 - I finally found the address and it is static.

Connected to the google box is an Asus router to create a separate subnet. IP of the router is 192.168.1.233 on the google box.
Port forwarding is enabled on the google-box (just like the ASUS help-file states). I downloaded the VPN configuration file from the ASUS router but it has the IP4 address in it so I obviously cannot connect.

Can somebody please change this configuration file that I downloaded to make it work or tell me how to fix it?

remote 192.168.1.233 1025
float
nobind
proto udp
dev tun
sndbuf 0
rcvbuf 0
keepalive 10 30

# for OpenVPN 2.4 or older
comp-lzo yes
# for OpenVPN 2.4 or newer
;compress lzo

auth-user-pass
client
auth SHA1
cipher AES-128-CBC
remote-cert-tls server
<ca>
-----BEGIN CERTIFICATE----- (modified by me)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-----END CERTIFICATE-----

</ca>

<cert>
-----BEGIN CERTIFICATE----- (modified by me)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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY----- (modified by me)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-----END PRIVATE KEY-----

</key>



Thanks!!!

Hi Matce,

I am going to assume the 'modified by me' means these private keys and certificates are not the actual keys and certificates you're really using. If not then you will probably want to replace those now that they've been leaked on the Internet.

Regarding the issue at hand, I see that the line starting with 'remote' is telling the OpenVPN client to connect to IP 192.168.1.233 which is first of all an IPv4 address and it is a private address which cannot be addressed on the Internet. Therefore I suggest you change that to the actual IPv6 IP of your Internet connection.

Kind regards,
Johan

openvpn_inc wrote: ↑

Wed Sep 22, 2021 5:53 am

Hi Matce,

I am going to assume the 'modified by me' means these private keys and certificates are not the actual keys and certificates you're really using. If not then you will probably want to replace those now that they've been leaked on the Internet.

Regarding the issue at hand, I see that the line starting with 'remote' is telling the OpenVPN client to connect to IP 192.168.1.233 which is first of all an IPv4 address and it is a private address which cannot be addressed on the Internet. Therefore I suggest you change that to the actual IPv6 IP of your Internet connection.

Kind regards,
Johan

Hi, thanks for the reply!
Yes, the keys are modified.

I tried replacing the IP with the IPv6 IP but no luck, It wont connect.
I'm thinking I have the wrong IPv6? Mine starts with fe80:: ... google search says thats something internal?
Where do I find my IPv6? Gotta call Google Fiber?

thanks

Hi Matce,

I'm afraid I don't know your ipv6 address, but you can usually find it by examining the network interfaces of your devices or querying it from some site like 'what is my ip address' or such.

Kidn regards,
Johan

openvpn_inc wrote: ↑

Thu Sep 23, 2021 11:15 am

Hi Matce,

I'm afraid I don't know your ipv6 address, but you can usually find it by examining the network interfaces of your devices or querying it from some site like 'what is my ip address' or such.

Kidn regards,
Johan

Ok, so update ... Google fiber was actually able to find the IP4 address and I can ping it!

The problem is that OpenVPN still wont connect.

On the Google Fiber box I set port forwarding 1194 to the Asus Router's IP (192.168.1.233).
The Asus router has the OpenVPN server open

Did I forget anything?

thanks