open vpn not work Linksys wrt320n

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Thu Oct 24, 2019 10:40    Post subject: open vpn not work Linksys wrt320n Reply with quote
Hi there

I have linksys WRT320n and I did test some DD-WRT firmware and I find DD-WRT v3.0-r37305 big stable on my device, I put true setting for NORDvpn openvpn but it not woeks

please help and advise me
Regards

log:

Oct 24 13:37:35 DD-WRT daemon.info ntpclient[1065]: Time set from 212.18.3.19 [212.18.3.19].
Oct 24 13:37:35 DD-WRT daemon.info process_monitor[1044]: cyclic NTP Update success (servers 2.pool.ntp.org 212.18.3.19 88.99.174.22)
Oct 24 13:37:36 DD-WRT daemon.warn openvpn[1042]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Oct 24 13:37:36 DD-WRT daemon.notice openvpn[1042]: TCP/UDP: Preserving recently used remote address: [AF_INET]66.115.169.76:443
Oct 24 13:37:36 DD-WRT daemon.notice openvpn[1042]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Oct 24 13:37:36 DD-WRT daemon.notice openvpn[1042]: Attempting to establish TCP connection with [AF_INET]66.115.169.76:443 [nonblock]
Oct 24 13:37:36 DD-WRT daemon.debug process_monitor[1044]: Restarting cron (time sync change)
Oct 24 13:37:36 DD-WRT user.info syslog: cron : daemon successfully stopped
Oct 24 13:37:36 DD-WRT cron.info cron[1135]: (CRON) STARTUP (fork ok)
Oct 24 13:37:36 DD-WRT user.info syslog: cron : daemon successfully started
Oct 24 13:37:36 DD-WRT cron.info cron[1135]: (crontabs) ORPHAN (no passwd entry)
Oct 24 13:37:36 DD-WRT user.info syslog: process_monitor : daemon successfully stopped
Oct 24 13:37:36 DD-WRT user.info syslog: process_monitor : successfully started
Oct 24 13:37:36 DD-WRT daemon.debug process_monitor[1136]: We need to re-update after 3600 seconds
Oct 24 13:37:36 DD-WRT daemon.info process_monitor[1136]: process_monitor : set timer: 3600 seconds, callback: ntp_main()
Oct 24 13:37:37 DD-WRT daemon.notice openvpn[1042]: TCP connection established with [AF_INET]66.115.169.76:443
Oct 24 13:37:37 DD-WRT daemon.notice openvpn[1042]: TCPv4_CLIENT link local: (not bound)
Oct 24 13:37:37 DD-WRT daemon.notice openvpn[1042]: TCPv4_CLIENT link remote: [AF_INET]66.115.169.76:443
Oct 24 13:37:37 DD-WRT daemon.notice openvpn[1042]: TLS: Initial packet from [AF_INET]66.115.169.76:443, sid=9e6c2c02 6680fecc
Oct 24 13:37:38 DD-WRT daemon.notice openvpn[1042]: VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
Oct 24 13:37:38 DD-WRT daemon.notice openvpn[1042]: VERIFY OK: depth=1, C=PA, O=NordVPN, CN=NordVPN CA3
Oct 24 13:37:38 DD-WRT daemon.notice openvpn[1042]: NOTE: --mute triggered...
Oct 24 13:37:39 DD-WRT daemon.notice openvpn[1042]: 6 variation(s) on previous 3 message(s) suppressed by --mute
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: SENT CONTROL [us4503.nordvpn.com]: 'PUSH_REQUEST' (status=1)
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.7.3.1,topology s
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: OPTIONS IMPORT: timers and/or timeouts modified
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: NOTE: --mute triggered...
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: 3 variation(s) on previous 3 message(s) suppressed by --mute
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: Socket Buffers: R=[87380->229376] S=[16384->229376]
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: OPTIONS IMPORT: --ifconfig/up options modified
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: OPTIONS IMPORT: route options modified
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: OPTIONS IMPORT: route-related options modified
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: NOTE: --mute triggered...
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: 4 variation(s) on previous 3 message(s) suppressed by --mute
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: Data Channel: using negotiated cipher 'AES-256-GCM'
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: TUN/TAP device tun1 opened
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: TUN/TAP TX queue length set to 100
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: /sbin/ifconfig tun1 10.7.3.2 netmask 255.255.255.0 mtu 1500 broadcast 10.7.3.255
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: /sbin/route add -net 66.115.169.76 netmask 255.255.255.255 gw 192.168.2.1
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.7.3.1
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.7.3.1
Oct 24 13:37:40 DD-WRT daemon.warn openvpn[1042]: WARNING: Failed running command (--route-up): external program exited with error status: 2
Oct 24 13:37:40 DD-WRT daemon.notice openvpn[1042]: Initialization Sequence Completed
Oct 24 13:37:41 DD-WRT user.debug syslog: ttraff: data collection started
Oct 24 13:40:56 DD-WRT user.warn igmpproxy[1043]: The origin for route 239.255.255.250 changed from 192.168.1.109 to 192.168.2.51
Sponsor
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Thu Oct 24, 2019 10:45    Post subject: and Reply with quote
Chrome did not open any page too till I disable openvpn or change openvpn IP to domain address, But when I change ip to domain, openvpvn does not work because nordvpn.com blocked in our area. IP ping truly!
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12881
Location: Netherlands

PostPosted: Thu Oct 24, 2019 11:03    Post subject: Reply with quote
If this a k2.6 build then it won't work (busybox problem therefore the external route up failed)
Use a k3X build.

Maybe recent k2.6 builds will work, there is a ticket about this I think from @kp69 he maybe will chime in and correct and or supplement me Smile

Take care recents builds had problems for your router so research build threads

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Thu Oct 24, 2019 11:50    Post subject: Reply with quote
egc wrote:
If this a k2.6 build then it won't work (busybox problem therefore the external route up failed)
Use a k3X build.

Maybe recent k2.6 builds will work, there is a ticket about this I think from @kp69 he maybe will chime in and correct and or supplement me Smile

Take care recents builds had problems for your router so research build threads


Thank you so much.
My firmware is dd-wrt.v24-37305_NEWD-2_K2.6_big.bin

I don't have much technical information
Can you tell me where to find the right version?(you told about it)
Crying or Very sad

My modem is Linksys WRT320n
My account is Nordvpn
My location is Hell Forbidden Area(ME)
I'm Photographer and journalist

We're really out of the world without VPN

Thank you again!
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12881
Location: Netherlands

PostPosted: Thu Oct 24, 2019 12:31    Post subject: Reply with quote
I uploaded build 41328 see: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321699&highlight=egc+e2000

That went well but I did not test VPN on it, so I can not guarantee anything (my E2000 is basically the same as an wrt320N)

Build can be found at:
https://dd-wrt.com/support/other-downloads/?path=betas%2F2019%2F10-15-2019-r41328%2Fbroadcom_K3X%2F

Of course use the build with the name of your router in it.

Because you are coming from a K2.6 build I suggest to reset the router:
1. Before uploading reset to defaults via the GUI
2. Upload the build via the GUI, be patient Chrome does not always work reliable, use Firefox or Internet Explorer
3. After uploading telnet to the router and do:
Code:
nvram erase && reboot

4. Put settings in manually do not restore from a backup file.

Good luck, I hope you will succeed, remember all builds are beta, always be prepared to unbrick

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
tli
DD-WRT User


Joined: 06 Mar 2019
Posts: 65

PostPosted: Thu Oct 24, 2019 13:25    Post subject: Reply with quote
Not sure if the MEGA builds for the WRT320N include the required OpenVPN, so might not be able to set up for NordVPN?
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Thu Oct 24, 2019 14:19    Post subject: Reply with quote
egc wrote:
I uploaded build 41328 see: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321699&highlight=egc+e2000

That went well but I did not test VPN on it, so I can not guarantee anything (my E2000 is basically the same as an wrt320N)

Build can be found at:
https://dd-wrt.com/support/other-downloads/?path=betas%2F2019%2F10-15-2019-r41328%2Fbroadcom_K3X%2F

Of course use the build with the name of your router in it.

Because you are coming from a K2.6 build I suggest to reset the router:
1. Before uploading reset to defaults via the GUI
2. Upload the build via the GUI, be patient Chrome does not always work reliable, use Firefox or Internet Explorer
3. After uploading telnet to the router and do:
Code:
nvram erase && reboot

4. Put settings in manually do not restore from a backup file.

Good luck, I hope you will succeed, remember all builds are beta, always be prepared to unbrick


Thank you in Advance
I find firmware for WRT320N in link you sent me, "mega firmware" and I reset my router to factory firmware and go for update to DD-WRT mega (version you told me) with wire and with IE, Update fails!!

any mega update fails during these days!

May you Help me?
Sorry
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Thu Oct 24, 2019 14:25    Post subject: Reply with quote
tli wrote:
Not sure if the MEGA builds for the WRT320N include the required OpenVPN, so might not be able to set up for NordVPN?


Hi

I can not install Mega at all!
I check these versions:
dd-wrt.v24-36247_NEWD-2_K2.6_big
36330
36410
37305
40527
40559
all in v2.6

No one connected to openvpn Nordvpn.
Crying or Very sad

I did set all of setting truly
but openvpn didn't connect.
tli
DD-WRT User


Joined: 06 Mar 2019
Posts: 65

PostPosted: Thu Oct 24, 2019 15:00    Post subject: Reply with quote
daurbino wrote:
...

I did set all of setting truly
but openvpn didn't connect.


I assumed that you'd followed the steps in this tutorial:

https://nordvpn.com/tutorials/dd-wrt/openvpn-gui/

Sorry couldn't be of more help... good luck.
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Thu Oct 24, 2019 15:30    Post subject: Reply with quote
tli wrote:
daurbino wrote:
...

I did set all of setting truly
but openvpn didn't connect.


I assumed that you'd followed the steps in this tutorial:

https://nordvpn.com/tutorials/dd-wrt/openvpn-gui/

Sorry couldn't be of more help... good luck.


There is problem with DD-WRT firmware, I read Nordvpn site more and more and setup openvpn truly.

firmware has prolem

Thank you so much
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12881
Location: Netherlands

PostPosted: Thu Oct 24, 2019 16:58    Post subject: Reply with quote
OK I tracked down KP69's thread: https://svn.dd-wrt.com/ticket/5784

It might be fixed after build 40711

Regarding upgrading to K3X, in the old days we used this procedure necessarily because builds are somewhat larger and could refuse to upgrade.
I think you first used K2.6 21676, reset to defaults from the GUI, then K3X 21676, reset to defaults from the GUI and then to the latest K3X build, but I am not sure about this

Alternatively convert your 320 to an E2000 just like I did:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=471183#471183

Your best bet, IMHO, upgrade to a K2.6 build after 40711, but research the build threads, in the long run convert to an E2000

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Fri Oct 25, 2019 15:04    Post subject: Reply with quote
egc wrote:
OK I tracked down KP69's thread: https://svn.dd-wrt.com/ticket/5784

It might be fixed after build 40711

Regarding upgrading to K3X, in the old days we used this procedure necessarily because builds are somewhat larger and could refuse to upgrade.
I think you first used K2.6 21676, reset to defaults from the GUI, then K3X 21676, reset to defaults from the GUI and then to the latest K3X build, but I am not sure about this

Alternatively convert your 320 to an E2000 just like I did:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=471183#471183

Your best bet, IMHO, upgrade to a K2.6 build after 40711, but research the build threads, in the long run convert to an E2000


Thank you so much
I change my firmware from original(linksys) to big 40559_NEWD-2_K2.6 first, then reset to default and then update to v3.0-r41328 mega
after that reset to default and then set openvpn!
Nordvpn connect and openvpn works.

but I have a big problem
I have 2 router, one of them Have TDLTE internet and the other is router linksys WRT320n, main ip(tdlte) is 192.168.2.1 and linksys is 192.168.1.1(openvpn is on this one)
when I go to browse web, I have been receive error time out during 20 sec
(This site can’t be reachedforum.dd-wrt.com took too long to respond.
Try:

Checking the connection
Checking the proxy and the firewall
Running Windows Network Diagnostics
ERR_TIMED_OUT)

then I must hit refresh and site load slowly!

all firewall is off(SPI and NAT)

I have normal internet speed on mine router(one that have TDLTE) but web is very slow on linksys.

I'm very thankful your advise and help!

Let me know if you have any solution.

Regards
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12881
Location: Netherlands

PostPosted: Fri Oct 25, 2019 15:28    Post subject: Reply with quote
Firewall can be off but everything else should be on (like gateway mode that must be on)

ddwrt website is always slow so do not test with that and your router is also not capable of more than 4-5 Mb/s so it will be slow

It could be a DNS problem, instead of the advised DNS servers by NordVPN set for Static DNS 1: 8.8.8.8 see if that helps

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
daurbino
DD-WRT Novice


Joined: 24 Oct 2019
Posts: 9

PostPosted: Fri Oct 25, 2019 16:11    Post subject: Reply with quote
egc wrote:
Firewall can be off but everything else should be on (like gateway mode that must be on)

ddwrt website is always slow so do not test with that and your router is also not capable of more than 4-5 Mb/s so it will be slow

It could be a DNS problem, instead of the advised DNS servers by NordVPN set for Static DNS 1: 8.8.8.8 see if that helps


Not for DD-WRT
It's happened by yahoo gmail bbc ...

20191025 19:36:43 OPTIONS IMPORT: timers and/or timeouts modified
20191025 19:36:43 NOTE: --mute triggered...
20191025 19:36:43 3 variation(s) on previous 3 message(s) suppressed by --mute
20191025 19:36:43 Socket Buffers: R=[163840->327680] S=[163840->327680]
20191025 19:36:43 OPTIONS IMPORT: --ifconfig/up options modified
20191025 19:36:43 OPTIONS IMPORT: route options modified
20191025 19:36:43 OPTIONS IMPORT: route-related options modified
20191025 19:36:43 NOTE: --mute triggered...
20191025 19:36:43 4 variation(s) on previous 3 message(s) suppressed by --mute
20191025 19:36:43 Data Channel: using negotiated cipher 'AES-256-GCM'
20191025 19:36:43 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
20191025 19:36:43 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
20191025 19:36:43 I TUN/TAP device tun1 opened
20191025 19:36:43 TUN/TAP TX queue length set to 100
20191025 19:36:43 I /sbin/ifconfig tun1 10.8.0.49 netmask 255.255.255.0 mtu 1500 broadcast 10.8.0.255
20191025 19:36:43 /sbin/route add -net 176.113.72.45 netmask 255.255.255.255 gw 192.168.2.1
20191025 19:36:43 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.1
20191025 19:36:43 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.1
20191025 19:36:43 I Initialization Sequence Completed
20191025 19:39:20 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:39:20 D MANAGEMENT: CMD 'state'
20191025 19:39:20 MANAGEMENT: Client disconnected
20191025 19:39:20 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:39:20 D MANAGEMENT: CMD 'state'
20191025 19:39:20 MANAGEMENT: Client disconnected
20191025 19:39:20 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:39:20 D MANAGEMENT: CMD 'state'
20191025 19:39:20 MANAGEMENT: Client disconnected
20191025 19:39:20 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:39:20 D MANAGEMENT: CMD 'status 2'
20191025 19:39:20 MANAGEMENT: Client disconnected
20191025 19:39:20 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:39:20 D MANAGEMENT: CMD 'log 500'
20191025 19:39:20 MANAGEMENT: Client disconnected
20191025 19:40:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:40:17 D MANAGEMENT: CMD 'state'
20191025 19:40:17 MANAGEMENT: Client disconnected
20191025 19:40:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:40:17 D MANAGEMENT: CMD 'state'
20191025 19:40:17 MANAGEMENT: Client disconnected
20191025 19:40:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:40:17 D MANAGEMENT: CMD 'state'
20191025 19:40:17 MANAGEMENT: Client disconnected
20191025 19:40:18 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:40:18 D MANAGEMENT: CMD 'status 2'
20191025 19:40:18 MANAGEMENT: Client disconnected
20191025 19:40:18 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20191025 19:40:18 D MANAGEMENT: CMD 'log 500'
19700101 03:30:00
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12881
Location: Netherlands

PostPosted: Fri Oct 25, 2019 16:25    Post subject: Reply with quote
That looks OK.

The Connect/Disconnect is from the management interface meaning you looking at the status page.

It is like quantum physics if you look you alter the state Smile

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum