[Chris71swiss]

Hallo zusammen,

ich habe einen Netgear 6700v3 und darauf das DD Wrt installiert.
Der Router ist direkt als Modem am Glasfaser anschluss des ISP.

Nun versuche ich OpenVPN mit ExpressVPN ein zu richten.

Jetzt habe ich jedoch das Problem, dass alles funktioniert, aber sobald ich das VPN aktiviere, komme ich nicht mehr ins Internet.
Beim VPN Status zeigt es mir "Client: Connected Success" aber ich kann keine Internet Seite mehr aufrufen.

Wenn ich "Forced DNS Redirection" aktiviere, geht nicht mehr. Kein Internet, mit oder ohne VPN.

Ich habe keine Ahnung was ich noch versuchen kann.

In der Beilage ein paar Fotos meiner Konfiguration.

Vielen Dank für Eure Hilfe.

Grüsse
Chris

[Chris71swiss]

noch 2 Fotos

[Chris71swiss]

Hier noch die Log vom VPN Status:

State
Client: CONNECTED SUCCESS Local Address: 10.34.4.122
Remote Address: 10.34.4.121

Status
VPN Client Stats
TUN/TAP read bytes 604
TUN/TAP write bytes 0
TCP/UDP read bytes 3477
TCP/UDP write bytes 4578
Auth read bytes 0
pre-compress bytes 0
post-compress bytes 0
pre-decompress bytes 0
post-decompress bytes 0

Log
Client Log:
20230513 19:55:36 W WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
20230513 19:55:36 W WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure
20230513 19:55:36 W WARNING: file '/tmp/openvpncl/credentials' is group or others accessible
20230513 19:55:36 I OpenVPN 2.6.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH/PKTINFO] [AEAD]
20230513 19:55:36 I library versions: OpenSSL 1.1.1s 1 Nov 2022 LZO 2.10
20230513 19:55:36 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20230513 19:55:36 W WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
20230513 19:55:36 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20230513 19:55:36 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
20230513 19:55:36 NOTE: --mute triggered...
20230513 19:55:36 1 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:36 W WARNING: if you use --mssfix and --fragment you should set --fragment (1300) larger or equal than --mssfix (1450)
20230513 19:55:36 I TCP/UDP: Preserving recently used remote address: [AF_INET]45.132.226.145:1195
20230513 19:55:36 Socket Buffers: R=[262144->262144] S=[262144->262144]
20230513 19:55:36 I UDPv4 link local: (not bound)
20230513 19:55:36 I UDPv4 link remote: [AF_INET]45.132.226.145:1195
20230513 19:55:36 TLS: Initial packet from [AF_INET]45.132.226.145:1195 sid=1c4111e7 0708b3fd
20230513 19:55:36 W WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
20230513 19:55:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:44584
20230513 19:55:36 D MANAGEMENT: CMD 'log 500'
20230513 19:55:36 MANAGEMENT: Client disconnected
20230513 19:55:36 VERIFY OK: depth=1 C=VG ST=BVI O=ExpressVPN OU=ExpressVPN CN=ExpressVPN CA emailAddress=support@expressvpn.com
20230513 19:55:36 NOTE: --mute triggered...
20230513 19:55:36 2 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:36 I [Server-10836-0a] Peer Connection Initiated with [AF_INET]45.132.226.145:1195
20230513 19:55:36 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
20230513 19:55:36 NOTE: --mute triggered...
20230513 19:55:37 1 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:37 SENT CONTROL [Server-10836-0a]: 'PUSH_REQUEST' (status=1)
20230513 19:55:38 NOTE: --mute triggered...
20230513 19:55:38 7 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:38 Using peer cipher 'AES-256-CBC'
20230513 19:55:38 net_route_v4_best_gw query: dst 0.0.0.0
20230513 19:55:38 net_route_v4_best_gw result: via 92.188.171.254 dev vlan2
20230513 19:55:38 I TUN/TAP device tun1 opened
20230513 19:55:38 I net_iface_mtu_set: mtu 1500 for tun1
20230513 19:55:38 I net_iface_up: set tun1 up
20230513 19:55:38 I net_addr_ptp_v4_add: 10.34.4.122 peer 10.34.4.121 dev tun1
20230513 19:55:38 net_route_v4_add: 45.132.226.145/32 via 92.188.171.254 dev [NULL] table 0 metric -1
20230513 19:55:38 net_route_v4_add: 0.0.0.0/1 via 10.34.4.121 dev [NULL] table 0 metric -1
20230513 19:55:38 net_route_v4_add: 128.0.0.0/1 via 10.34.4.121 dev [NULL] table 0 metric -1
20230513 19:55:38 net_route_v4_add: 10.34.0.1/32 via 10.34.4.121 dev [NULL] table 0 metric -1
20230513 19:55:38 Data Channel: using negotiated cipher 'AES-256-CBC'
20230513 19:55:38 NOTE: --mute triggered...
20230513 19:55:38 4 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:38 I Initialization Sequence Completed
20230513 19:55:38 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:44588
20230513 19:55:38 D MANAGEMENT: CMD 'state'
20230513 19:55:38 MANAGEMENT: Client disconnected
20230513 19:55:39 NOTE: --mute triggered...
20230513 19:55:39 1 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:39 D MANAGEMENT: CMD 'state'
20230513 19:55:39 MANAGEMENT: Client disconnected
20230513 19:55:39 NOTE: --mute triggered...
20230513 19:55:39 1 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:39 D MANAGEMENT: CMD 'state'
20230513 19:55:39 MANAGEMENT: Client disconnected
20230513 19:55:39 NOTE: --mute triggered...
20230513 19:55:39 1 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:39 D MANAGEMENT: CMD 'status 2'
20230513 19:55:39 MANAGEMENT: Client disconnected
20230513 19:55:39 NOTE: --mute triggered...
20230513 19:55:39 1 variation(s) on previous 3 message(s) suppressed by --mute
20230513 19:55:39 D MANAGEMENT: CMD 'log 500'
19700101 01:00:00

[kernel-panic69]

https://download1.dd-wrt.com/dd-wrtv2/downloads/betas/2023/05-13-2023-r52509/netgear-r6700v3/

Sticky: OpenVPN guides and documentation

DD-WRT Forum Index -> Advanced Networking

[Chris71swiss]

Hi

Thanks for the links and info.

I looked at it before my post here. Unfortunately I have too little experience and knowledge to solve my problem with it.

I am too inexperienced.

And my english are to bad for this

Greetings
Chris

[Chris71swiss]

Hallo zusammen

Ich konnte das Problem lösen.

Mit diesen Einstellungen hat es funktioniert:

Tunnel Protocol: UDP4
First Data Cipher: AES-256-GCM
Second Data Cipher: AES-128-GCM
Third Data Cipher: AES-256-CBC
Additional Config: alles löschen (leer lassen)

Grüsse
Chris