[SOLVED] Asus RT-N66U, VPN UP, No internet access

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Advanced Networking
Author Message
badatz
DD-WRT Novice


Joined: 28 Jan 2023
Posts: 6

PostPosted: Sun Feb 05, 2023 0:55    Post subject: [SOLVED] Asus RT-N66U, VPN UP, No internet access Reply with quote
DD-WRT V3.0-r44715 big(11/03/20)
Kernel 4.4.241 #4749
Asus RT-N66U
Issue: When VPN is connected I am unable to access the internet or even ping from router.

Router's external address - 192.168.3.22
Router's lan address: 192.168.1.1
Clients subnet (assigned by the dd-wrt router): 192.168.1.x

FW settings:
iptables -I FORWARD -i br0 -o tun1 -j ACCEPT
iptables -I FORWARD -i tun1 -o br0 -j ACCEPT
iptables -I INPUT -i tun1 -j REJECT
iptables -t nat -A POSTROUTING -o tun1 -j MASQUERADE

Advanced settings
----------------------------------
resolv-retry infinite
redirect-gateway def1
persist-key
persist-tun
nobind
cipher AES-256-CBC
ncp-disable
authvSHA256
ping 5
ping-exit 60
ping-timer-rem
script-security 2
remote-cert-tls server
route-delay 5
verb 4
pull-filter ignore "ifconfig-ipv6"
pull-filter ignore "route-ipv6"
----------------------------------------
VPN is tun1
IP6 is disabled
nvram get wan_iface = vlan2
nvram get wan_ifname = vlan2
get_wanface = vlan2

Attached are outputs of
iptables -vnL
iptables -vnL -t nat

I tried the following with no success:
-Removing all the advanced settings
-Disabling the firewall
-connecting directly to the modem in order to make sure nothing blocks the traffic.
-connecting to a few other VPN servers, I can connect but still no access..

Any help would be appreciated, thank you
Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6410
Location: UK, London, just across the river..

PostPosted: Sun Feb 05, 2023 1:08    Post subject: Reply with quote
Hi and welcome to the forum, not bad to start with:
-reading the forum rules, where you can find lots of useful information...
-update your firmware, as the build you run its old and full of bugs and lacks on updates and security fixes...(u didn't read the rules : )
-have a look at the new builds threads Broadcom section
-as your post is network related, it should be in the Advanced Network section, where up on the top sickies, you can find guides and docs about OpenVPN client or server (but first update)
-dont post another post, as some of the mods will move it to the correct place...
-its too late for me to start digging on your issue, but its very likely misconfiguration...
-read the doc and guides and try to set it up again..so far, i can see some wrong bits, but its too late...give a try on reading and update to the last build which is 51576...
good luck !

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55179 WAP
TP-Link WR1043NDv2 -DD-WRT 55303 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55460 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55460 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55363 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913


Last edited by Alozaros on Sun Feb 05, 2023 9:13; edited 1 time in total
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1899

PostPosted: Sun Feb 05, 2023 1:47    Post subject: Reply with quote
There is no Broadcom K3X folder in current release, so will have to run 51530 until next release.

https://ftp.dd-wrt.com/dd-wrtv2/downloads/betas/2023/01-29-2023-r51530/broadcom_K3X/dd-wrt.v24-51530_NEWD-2_K3.x-big-RT-N66U.trx

OpenVPN guides and documentation

New Build - 01/29/2023 - r51530

_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.

--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12837
Location: Netherlands

PostPosted: Sun Feb 05, 2023 7:07    Post subject: Reply with quote
Moved this thread to the more appropriate Advanced Networking forum.

Former speakers already pointed you the way. Smile

Upgrade first, *after* upgrade reset to defaults and put settings in manually.

You do not need any firewall rules, most providers have outdated and sometimes even wrong instructions (in your config are deprecated settings) see the OpenVPN Client setup guide.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
badatz
DD-WRT Novice


Joined: 28 Jan 2023
Posts: 6

PostPosted: Sun Feb 05, 2023 14:36    Post subject: Update Reply with quote
Thank you all.

I upgraded firmware to v3.0-r51576 giga
Reset all settings
Removed firewall rules
Reviewed the guides (a few times already), tried a few things

Yet problem still persists, VPN up and running but something still blocking network Rolling Eyes
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12837
Location: Netherlands

PostPosted: Sun Feb 05, 2023 15:08    Post subject: Reply with quote
Post a screenshot of the openvpn setup page and the openvpn status page (whole page)

Which provider are you using?

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
badatz
DD-WRT Novice


Joined: 28 Jan 2023
Posts: 6

PostPosted: Sun Feb 05, 2023 21:04    Post subject: Reply with quote
Please see screenshots below. Provider: cyberghostvpn
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12837
Location: Netherlands

PostPosted: Sun Feb 05, 2023 21:58    Post subject: Reply with quote
The OpenVPN Client setup guide: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398 has a paragraph about cyberghost, check your settings with that.

Please post a screenshot of the OpenVPN status page (whole page) so that we can see the log and connection status

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
badatz
DD-WRT Novice


Joined: 28 Jan 2023
Posts: 6

PostPosted: Sun Feb 05, 2023 22:44    Post subject: Problem solved - thank you! Reply with quote
I ended up doing the 30-30-30 reset and got everything back to default settings
(Which I've already done before via the NVRAM - Restore to factory defaults) before.

After reset, I entered the same info again but now everything is up and running. Shocked

However, I'm not impressed with their speed.. I'm getting 5mb dl and 7mb up using their UK server (97-1-GB.cg-dialup.net) ... Confused

Once again, thank you all!
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6410
Location: UK, London, just across the river..

PostPosted: Sun Feb 05, 2023 23:11    Post subject: Reply with quote
-your router is slow that's why you get slow speed...somewhere in the guides its mentioned you'd need a powerful router for good VPN performance...
_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55179 WAP
TP-Link WR1043NDv2 -DD-WRT 55303 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55460 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55460 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55363 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12837
Location: Netherlands

PostPosted: Mon Feb 06, 2023 7:18    Post subject: Reply with quote
Research WireGuard which is on average three times faster than OpenVPN.

Documentation is also a sticky in this forum.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
badatz
DD-WRT Novice


Joined: 28 Jan 2023
Posts: 6

PostPosted: Mon Feb 06, 2023 14:39    Post subject: Thank you and one more short question Reply with quote
Was wondering if there is a way to block clients from accessing to internet unless VPN is running? I mean, setting up on the router a rule that if VPN is down, no access for anyone?

I already selected "Source routing - all sources via VPN" and it's great when VPN is up and running, but when VPN is down, clients can still access the net, I would like to block it somehow?

I've got the guides but not sure how to look for this type of info?


Last edited by badatz on Mon Feb 06, 2023 15:26; edited 1 time in total
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12837
Location: Netherlands

PostPosted: Mon Feb 06, 2023 14:42    Post subject: Reply with quote
Killswitch
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
badatz
DD-WRT Novice


Joined: 28 Jan 2023
Posts: 6

PostPosted: Mon Feb 06, 2023 15:31    Post subject: Thank you Reply with quote
I figured I am not the first one who is looking for this function... Cool

Thanks
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12837
Location: Netherlands

PostPosted: Mon Feb 06, 2023 15:37    Post subject: Re: Thank you Reply with quote
badatz wrote:
I figured I am not the first one who is looking for this function... Cool

Thanks


Indeed, a killswitch is something you need with OpenVPN so it is an option in the GUI.

Just like a watchdog, OpenVPN is something which easily stops working, the watchdog takes care of that

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Display posts from previous:    Page 1 of 1
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum