DD-WRT :: View topic - [SOLVED]WRT54G with PrivadoVPN

[SOLVED]WRT54G with PrivadoVPN

DD-WRT Forum Index -> Advanced Networking

Goto page Previous 1, 2

View previous topic :: View next topic

Author

Message

dale_gribble39
DD-WRT Guru

Joined: 11 Jun 2022
Posts: 1638

Posted: Tue Sep 12, 2023 5:36 Post subject:

Yes, "Remote Management" on the Administration tab is for WAN access, not LAN access. If you do enable SSH WAN access, then set up key-based authentication and disable password authentication. Then you can also set up and SSH tunnel in PuTTY to access the WebUI if you wish. Otherwise, leave everything there disabled as suggested.
_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.
--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5

Sponsor

bkenobi69
DD-WRT Novice

Joined: 03 Feb 2015
Posts: 45

Posted: Tue Sep 12, 2023 5:56 Post subject:

After quite a bit of tweaking (with VPN disabled) I got the router to correctly pass through access to the internet. When I turn on OVPN I start to get errors again.

Code:

root@DD-WRT:~# grep -i openvpn /var/log/messages
Dec 31 16:00:32 DD-WRT daemon.warn openvpn[1625]: Consider setting groups/curves preference with tls-groups instead of forcing a specific curve with ecdh-curve.
Dec 31 16:00:32 DD-WRT daemon.warn openvpn[1625]: WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure
Dec 31 16:00:32 DD-WRT daemon.err openvpn[1625]: Options error: You must define CA file (--ca) or CA path (--capath) and/or peer fingerprint verification (--peer-fingerprint)
Dec 31 16:00:32 DD-WRT daemon.warn openvpn[1625]: Use --help for more information.
Dec 31 16:00:32 DD-WRT user.info : [openvpn] : Error on startup, returncode 1
Sep 11 22:53:03 DD-WRT user.info : [openvpn] : OpenVPN daemon (Client) starting/restarting...
Sep 11 22:53:03 DD-WRT daemon.err openvpn[3052]: Options error: Unrecognized option or missing or extra parameter(s) in /tmp/openvpncl/openvpn.conf:26: keysize (2.6.6)
Sep 11 22:53:03 DD-WRT daemon.warn openvpn[3052]: Use --help for more information.
Sep 11 22:53:03 DD-WRT user.info : [openvpn] : Error on startup, returncode 1

egc
DD-WRT Guru

Joined: 18 Mar 2014
Posts: 12499
Location: Netherlands

Posted: Tue Sep 12, 2023 7:08 Post subject:

Please also post a screenshot of the basic setup page.

Some snippets from the OpenVPN Client SEtup Guide (recommended reading):

Quote:

Before we are going to deal with VPN settings first some remarks about DNS.
• On Setup/Basic Setup page make sure to tick/enable "Ignore WAN DNS"
• Gateway and local DNS should be kept at their default 0.0.0.0 (assuming the router is in default gateway mode)
• Static DNS 1 and 2 should be set to a publicly available working DNS server to your liking e.g. 1.1.1.1, 9.9.9.9, 8.8.8.8 etc.
Note: Do not use DNS servers from VPN providers!

Also:

Quote:

As a general warning all settings can be done in the GUI or are already done by DDWRT so to start:
Do not add anything in the Additional Config, (only exception is: verb 5 )
Do not add any firewall rules
Do not add any (startup) scripts

Carefully check your settings with the settings from the guide e.g.:
Tunnel protocol should be UDP4
Data ciphers should be set as AES-256-CBC, AES-256-GCM, AES-128-GCM
Inbound Firewall on TUN should be Enabled
Verify server certificate should be Enabled

You are not using a TLS key so set TLS/Static Key Choice to None
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

bkenobi69
DD-WRT Novice

Joined: 03 Feb 2015
Posts: 45

Posted: Tue Sep 12, 2023 15:10 Post subject:

Basic settings page after making suggested changes. Whenever I turned on "Ignore WAN DNS" I lose internet connectivity in the past so I had it turned off. I suspect it was because my static DNS wasn't set correctly. Seems to be working now.

I'm able to access google so the internet connection is now working with these settings. OVPN still not happy.

Code:

root@R6850:~# grep -i openvpn /var/log/messages
Dec 31 16:00:32 R6850 daemon.err openvpn[1623]: Options error: Unrecognized option or missing or extra parameter(s) in /tmp/openvpncl/openvpn.conf:28: keysize (2.6.6)
Dec 31 16:00:32 R6850 daemon.warn openvpn[1623]: Use --help for more information.
Dec 31 16:00:32 R6850 user.info : [openvpn] : Error on startup, returncode 1
Dec 31 16:00:39 R6850 user.info : [openvpn] : OpenVPN daemon (Client) starting/restarting...
Dec 31 16:00:39 R6850 daemon.err openvpn[2058]: Options error: Unrecognized option or missing or extra parameter(s) in /tmp/openvpncl/openvpn.conf:28: keysize (2.6.6)
Dec 31 16:00:39 R6850 daemon.warn openvpn[2058]: Use --help for more information.
Dec 31 16:00:39 R6850 user.info : [openvpn] : Error on startup, returncode 1

I checked in the /tmp/openvpncl/openvpn.conf and it appears keysize is set to 256.

Code:

ca /tmp/openvpncl/ca.crt
management 127.0.0.1 16
management-log-cache 100
verb 3
mute 3
syslog
writepid /var/run/openvpncl.pid
resolv-retry infinite
script-security 2
nobind
client
dev tun1
proto udp4
cipher AES-256-CBC
auth sha256
data-ciphers AES-256-CBC:AES-256-GCM:AES-128-GCM
auth-user-pass /tmp/openvpncl/credentials
remote lax-001.vpn.privado.io 1194
tun-mtu 1400
mtu-disc yes
remote-cert-tls server
fast-io
route-up /tmp/openvpncl/route-up.sh
route-pre-down /tmp/openvpncl/route-down.sh
persist-key
persist-tun
persist-remote-ip
keysize 256
remote-cert-tls server

That line was provided by the Privado guide so perhaps I should update it to something else? Here's what they recommended adding to the "Additional Configuration" section:

Code:

persist-key
persist-tun
persist-remote-ip
keysize 256
remote-cert-tls server

egc
DD-WRT Guru

Joined: 18 Mar 2014
Posts: 12499
Location: Netherlands

Posted: Tue Sep 12, 2023 15:35 Post subject:

First about your NTP settings:
Leave the box for Server IP/Name empty!

Second about OpenVPN:
What about this is not clear:
Do not add anything in the Additional Config, (only exception is: verb 5 )
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

bkenobi69
DD-WRT Novice

Joined: 03 Feb 2015
Posts: 45

Posted: Wed Sep 13, 2023 5:14 Post subject:

I removed the "Server IP / Name" from the NTP section as suggested. After reboot it appears that the time is set so I guess it's not required.

I deleted all of the Additional Configuration items. I wasn't sure that's what was being suggested initially since "verb 5" didn't appear anywhere.

After reboot, OVPN still does not work and the following errors display in the log:

Code:

root@R6850:~# grep -i openvpn /var/log/messages
Dec 31 16:00:32 R6850 user.info : [openvpn] : OpenVPN daemon (Client) starting/restarting...
Dec 31 16:00:32 R6850 daemon.warn openvpn[1630]: WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure
Dec 31 16:00:32 R6850 daemon.warn openvpn[1630]: WARNING: file '/tmp/openvpncl/credentials' is group or others accessible
Dec 31 16:00:32 R6850 daemon.notice openvpn[1630]: OpenVPN 2.6.6 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH/PKTINFO] [AEAD]
Dec 31 16:00:32 R6850 daemon.notice openvpn[1630]: library versions: OpenSSL 1.1.1v 1 Aug 2023, LZO 2.10
Dec 31 16:00:32 R6850 user.info : [openvpn] : successfully started
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
Dec 31 16:00:32 R6850 daemon.warn openvpn[1653]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: UDPv4 link local: (not bound)
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:32 R6850 daemon.err openvpn[1653]: write UDPv4 []: Network unreachable (fd=9,code=128)
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: Network unreachable, restarting
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: SIGUSR1[soft,network-unreachable] received, process restarting
Dec 31 16:00:32 R6850 daemon.notice openvpn[1653]: Restart pause, 1 second(s)
Dec 31 16:00:33 R6850 daemon.warn openvpn[1653]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:33 R6850 daemon.notice openvpn[1653]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:33 R6850 daemon.notice openvpn[1653]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:33 R6850 daemon.notice openvpn[1653]: UDPv4 link local: (not bound)
Dec 31 16:00:33 R6850 daemon.notice openvpn[1653]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:33 R6850 daemon.err openvpn[1653]: write UDPv4 []: Network unreachable (fd=9,code=128)
Dec 31 16:00:33 R6850 daemon.notice openvpn[1653]: Network unreachable, restarting
Dec 31 16:00:33 R6850 daemon.notice openvpn[1653]: SIGUSR1[soft,network-unreachable] received, process restarting
Dec 31 16:00:33 R6850 daemon.notice openvpn[1653]: Restart pause, 1 second(s)
Dec 31 16:00:34 R6850 daemon.warn openvpn[1653]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:34 R6850 daemon.notice openvpn[1653]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:34 R6850 daemon.notice openvpn[1653]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:34 R6850 daemon.notice openvpn[1653]: UDPv4 link local: (not bound)
Dec 31 16:00:34 R6850 daemon.notice openvpn[1653]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:34 R6850 daemon.err openvpn[1653]: write UDPv4 []: Network unreachable (fd=9,code=128)
Dec 31 16:00:34 R6850 daemon.notice openvpn[1653]: Network unreachable, restarting
Dec 31 16:00:34 R6850 daemon.notice openvpn[1653]: SIGUSR1[soft,network-unreachable] received, process restarting
Dec 31 16:00:34 R6850 daemon.notice openvpn[1653]: Restart pause, 1 second(s)
Dec 31 16:00:35 R6850 daemon.warn openvpn[1653]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:35 R6850 daemon.notice openvpn[1653]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:35 R6850 daemon.notice openvpn[1653]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:35 R6850 daemon.notice openvpn[1653]: UDPv4 link local: (not bound)
Dec 31 16:00:35 R6850 daemon.notice openvpn[1653]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:35 R6850 daemon.err openvpn[1653]: write UDPv4 []: Network unreachable (fd=9,code=128)
Dec 31 16:00:35 R6850 daemon.notice openvpn[1653]: Network unreachable, restarting
Dec 31 16:00:35 R6850 daemon.notice openvpn[1653]: SIGUSR1[soft,network-unreachable] received, process restarting
Dec 31 16:00:35 R6850 daemon.notice openvpn[1653]: Restart pause, 1 second(s)
Dec 31 16:00:36 R6850 daemon.warn openvpn[1653]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:36 R6850 daemon.notice openvpn[1653]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:36 R6850 daemon.notice openvpn[1653]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:36 R6850 daemon.notice openvpn[1653]: UDPv4 link local: (not bound)
Dec 31 16:00:36 R6850 daemon.notice openvpn[1653]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:36 R6850 daemon.err openvpn[1653]: write UDPv4 []: Network unreachable (fd=9,code=128)
Dec 31 16:00:36 R6850 daemon.notice openvpn[1653]: Network unreachable, restarting
Dec 31 16:00:36 R6850 daemon.notice openvpn[1653]: SIGUSR1[soft,network-unreachable] received, process restarting
Dec 31 16:00:36 R6850 daemon.notice openvpn[1653]: Restart pause, 2 second(s)
Dec 31 16:00:38 R6850 daemon.warn openvpn[1653]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:38 R6850 daemon.notice openvpn[1653]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:38 R6850 daemon.notice openvpn[1653]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:38 R6850 daemon.notice openvpn[1653]: UDPv4 link local: (not bound)
Dec 31 16:00:38 R6850 daemon.notice openvpn[1653]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:38 R6850 daemon.err openvpn[1653]: write UDPv4 []: Network unreachable (fd=9,code=128)
Dec 31 16:00:38 R6850 daemon.notice openvpn[1653]: Network unreachable, restarting
Dec 31 16:00:38 R6850 daemon.notice openvpn[1653]: SIGUSR1[soft,network-unreachable] received, process restarting
Dec 31 16:00:38 R6850 daemon.notice openvpn[1653]: Restart pause, 4 second(s)
Dec 31 16:00:40 R6850 daemon.notice openvpn[1653]: SIGTERM[hard,init_instance] received, process exiting
Dec 31 16:00:40 R6850 user.info : [openvpn] : OpenVPN daemon (Client) successfully stopped
Dec 31 16:00:40 R6850 user.info root: openvpn watchdog control /usr/bin/controlovpnwdog.sh started
Dec 31 16:00:40 R6850 user.info : [openvpn] : OpenVPN daemon (Client) starting/restarting...
Dec 31 16:00:40 R6850 daemon.warn openvpn[2088]: WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure
Dec 31 16:00:40 R6850 daemon.warn openvpn[2088]: WARNING: file '/tmp/openvpncl/credentials' is group or others accessible
Dec 31 16:00:40 R6850 daemon.notice openvpn[2088]: OpenVPN 2.6.6 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH/PKTINFO] [AEAD]
Dec 31 16:00:40 R6850 daemon.notice openvpn[2088]: library versions: OpenSSL 1.1.1v 1 Aug 2023, LZO 2.10
Dec 31 16:00:40 R6850 user.info : [openvpn] : successfully started
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
Dec 31 16:00:40 R6850 daemon.warn openvpn[2090]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: UDPv4 link local: (not bound)
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: TLS: Initial packet from [AF_INET]45.152.182.227:1194, sid=53b0d6ac 3d4d3b71
Dec 31 16:00:40 R6850 daemon.warn openvpn[2090]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Dec 31 16:00:40 R6850 daemon.err openvpn[2090]: VERIFY ERROR: depth=1, error=certificate is not yet valid: CN=Privado, serial=14657979451860672462
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: NOTE: --mute triggered...
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: 4 variation(s) on previous 3 message(s) suppressed by --mute
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: SIGUSR1[soft,tls-error] received, process restarting
Dec 31 16:00:40 R6850 daemon.notice openvpn[2090]: Restart pause, 1 second(s)
Dec 31 16:00:41 R6850 daemon.warn openvpn[2090]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: UDPv4 link local: (not bound)
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: TLS: Initial packet from [AF_INET]45.152.182.227:1194, sid=c98e1d3f 63786f1f
Dec 31 16:00:41 R6850 daemon.err openvpn[2090]: VERIFY ERROR: depth=1, error=certificate is not yet valid: CN=Privado, serial=14657979451860672462
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: NOTE: --mute triggered...
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: 4 variation(s) on previous 3 message(s) suppressed by --mute
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: SIGUSR1[soft,tls-error] received, process restarting
Dec 31 16:00:41 R6850 daemon.notice openvpn[2090]: Restart pause, 1 second(s)
Dec 31 16:00:42 R6850 daemon.warn openvpn[2090]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: UDPv4 link local: (not bound)
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: TLS: Initial packet from [AF_INET]45.152.182.227:1194, sid=28e948b4 b649f062
Dec 31 16:00:42 R6850 daemon.err openvpn[2090]: VERIFY ERROR: depth=1, error=certificate is not yet valid: CN=Privado, serial=14657979451860672462
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: NOTE: --mute triggered...
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: 4 variation(s) on previous 3 message(s) suppressed by --mute
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: SIGUSR1[soft,tls-error] received, process restarting
Dec 31 16:00:42 R6850 daemon.notice openvpn[2090]: Restart pause, 1 second(s)
Sep 12 21:51:31 R6850 daemon.warn openvpn[2090]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 12 21:51:31 R6850 daemon.notice openvpn[2090]: TCP/UDP: Preserving recently used remote address: [AF_INET]45.152.182.227:1194
Sep 12 21:51:31 R6850 daemon.notice openvpn[2090]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Sep 12 21:51:31 R6850 daemon.notice openvpn[2090]: UDPv4 link local: (not bound)
Sep 12 21:51:31 R6850 daemon.notice openvpn[2090]: UDPv4 link remote: [AF_INET]45.152.182.227:1194
Sep 12 21:51:31 R6850 daemon.notice openvpn[2090]: TLS: Initial packet from [AF_INET]45.152.182.227:1194, sid=6aacff94 dad32af5
Sep 12 21:51:31 R6850 daemon.notice openvpn[2090]: NOTE: --mute triggered...
Sep 12 21:51:33 R6850 daemon.notice openvpn[2090]: 7 variation(s) on previous 3 message(s) suppressed by --mute
Sep 12 21:51:33 R6850 daemon.notice openvpn[2090]: [lax-009.vpn.privado.io] Peer Connection Initiated with [AF_INET]45.152.182.227:1194
Sep 12 21:51:33 R6850 daemon.notice openvpn[2090]: TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
Sep 12 21:51:33 R6850 daemon.notice openvpn[2090]: NOTE: --mute triggered...
Sep 12 21:51:34 R6850 daemon.notice openvpn[2090]: 1 variation(s) on previous 3 message(s) suppressed by --mute
Sep 12 21:51:34 R6850 daemon.notice openvpn[2090]: SENT CONTROL [lax-009.vpn.privado.io]: 'PUSH_REQUEST' (status=1)
Sep 12 21:51:34 R6850 daemon.notice openvpn[2090]: AUTH: Received control message: AUTH_FAILED
Sep 12 21:51:34 R6850 daemon.notice openvpn[2090]: SIGTERM[soft,auth-failure] received, process exiting

I appreciate all of the suggestions. It feels like I'm getting closer and certainly closer than I would have without the help!

egc
DD-WRT Guru

Joined: 18 Mar 2014
Posts: 12499
Location: Netherlands

Posted: Wed Sep 13, 2023 6:01 Post subject:

You have got an auth failed.
Usually that indicaties your username and/or password are wrong.

Note you are paying provado for support.
Did you at any stage contacted their helpdesk?
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

egc
DD-WRT Guru

Joined: 18 Mar 2014
Posts: 12499
Location: Netherlands

Posted: Wed Sep 13, 2023 6:01 Post subject:

You have got an auth failed.
Usually that indicaties your username and/or password are wrong.

Note you are paying privado for support.
Did you at any stage contacted their helpdesk?
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

bkenobi69
DD-WRT Novice

Joined: 03 Feb 2015
Posts: 45

Posted: Wed Sep 13, 2023 16:33 Post subject:
I can contact Privado about that. I can connect with my PC so assumed it was the configuration. If this is now an issue with the VPN, I can definitely work on that end. I saw the auth issue but wasn't sure if it was premature to assume it was the server authentication or perhaps something in my setup still submitting the wrong info. Thanks!

bkenobi69
DD-WRT Novice

Joined: 03 Feb 2015
Posts: 45

Posted: Wed Sep 13, 2023 16:49 Post subject:

Looks like the city I selected was either full or not allowed. I'm using the free 10GB option for testing which is limited to 12 cities and possibly not all servers. I switched to another one and it seems to have connected. I checked my externally visible IP and it's now what I'd expect from the VPN. Looks like it's currently working and should be good enough to test if this is a viable fix.

Appreciate all the help!

bkenobi69
DD-WRT Novice

Joined: 03 Feb 2015
Posts: 45

Posted: Wed Sep 13, 2023 19:53 Post subject:

So after a few minutes of this working, the VPN disconnected. I contacted support and they said that router based VPN is not supported on the free license. I don't know how they would know the system connecting is a router vs any other linux machine, but it appears they may be bumping me. I'll try a few more servers but I wanted to mention that now that the settings are correct, I'm seeing the VPN connection details on the status OVPN page most of the time.

I noticed it's possible to have multiple servers so I'm hoping I can add a few in there from the free cities and hopefully I can get enough testing to confirm if this fixes my issue and get a premium subscription for full support.

Goto page Previous 1, 2

Display posts from previous:

Page 2 of 2

DD-WRT Forum Index -> Advanced Networking

All times are GMT

Navigation

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Log in

[SOLVED]WRT54G with PrivadoVPN

Quick Links

Log in